[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 44.249983][ T26] audit: type=1800 audit(1572121757.111:25): pid=7890 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 44.270512][ T26] audit: type=1800 audit(1572121757.111:26): pid=7890 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 44.313075][ T26] audit: type=1800 audit(1572121757.111:27): pid=7890 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.15.206' (ECDSA) to the list of known hosts. 2019/10/26 20:29:25 fuzzer started 2019/10/26 20:29:27 dialing manager at 10.128.0.26:45225 2019/10/26 20:29:27 syscalls: 2534 2019/10/26 20:29:27 code coverage: enabled 2019/10/26 20:29:27 comparison tracing: enabled 2019/10/26 20:29:27 extra coverage: extra coverage is not supported by the kernel 2019/10/26 20:29:27 setuid sandbox: enabled 2019/10/26 20:29:27 namespace sandbox: enabled 2019/10/26 20:29:27 Android sandbox: /sys/fs/selinux/policy does not exist 2019/10/26 20:29:27 fault injection: enabled 2019/10/26 20:29:27 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/10/26 20:29:27 net packet injection: enabled 2019/10/26 20:29:27 net device setup: enabled 2019/10/26 20:29:27 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 20:31:02 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) io_setup(0x80000043, &(0x7f0000002c80)=0x0) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f}]) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x7fff, 0x40000) ioctl$TIOCPKT(r2, 0x5420, &(0x7f0000000400)=0x9) ioctl$KDGKBMETA(0xffffffffffffffff, 0x4b62, &(0x7f0000000140)) open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1, 0x8, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32], &(0x7f0000000080)='\x00\x00\x00\x00\x00\x00\x00\xeb\xff\xff(1\x18\xc7\xc1\xde\xdc(,J\\\xc4hM=\xf4\x04\xd0\xe9\'rT\x8dm\x1a?\x1a\b\x93\x82\xbf\xfe\x83\xcb4tX{$\x9f\xbfHY\x1e;\xd0\xcf\xdb&\x12G\xfd\xd7\xe71\xd8K\x9b\xc9\x04C\xf5$\xd0\x93k\x12u\x9eMM\x03\x00\x00\x00\xc8\x83\x16\x9c2)\xaa\x9fh\xa4\xd2\x0f\x98.\x06t^\xc0\xcd\x95\x81*\xece1\x9e*3\xfa\xb5=\xd2\x1e-\xd3]}\xa7\xbfDZn\xd4\x82\x19\xfb\x1bjE\xc3D\xd8\xd56G\xd9\xc3\x90\xf5\xb9\xdc\x98\xb8\x8f=\xdf\xf0,e\x1dl\xe0\xc5\x80\a\xb1\xad\xbf\xc5\x88!j\xce\x00\x00\x00\x00\x00\x00', 0x7, 0x90, &(0x7f0000000200)=""/144, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) listen(0xffffffffffffffff, 0x3) clone(0x1000000210007fb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setreuid(0x0, 0xee00) r3 = geteuid() setreuid(r3, 0x0) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000080)={'sy\xe0'}, &(0x7f00000000c0)='sT\x01', 0xfffffffffffffffc) 20:31:02 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x2, &(0x7f0000000740)=0x0) close(r0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) io_submit(r1, 0x1, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) syzkaller login: [ 149.351389][ T8055] IPVS: ftp: loaded support on port[0] = 21 [ 149.484250][ T8055] chnl_net:caif_netlink_parms(): no params data found [ 149.493471][ T8058] IPVS: ftp: loaded support on port[0] = 21 [ 149.538978][ T8055] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.548444][ T8055] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.557394][ T8055] device bridge_slave_0 entered promiscuous mode [ 149.575752][ T8055] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.582875][ T8055] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.591457][ T8055] device bridge_slave_1 entered promiscuous mode [ 149.616786][ T8055] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 149.628074][ T8055] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link 20:31:02 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6(0x10, 0x8000000100000003, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r3) creat(&(0x7f0000000300)='./bus\x00', 0x0) r4 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ftruncate(r4, 0x2081fc) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f00000001c0), 0xfffffef3) r7 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r7, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) read(r5, &(0x7f0000000000)=""/250, 0xedf1d44) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r8, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0xfb) bind$inet(r8, &(0x7f00000002c0)={0x2, 0x4e21, @local}, 0x10) connect$inet(r8, &(0x7f0000000240)={0x2, 0x4e21}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r8, 0x6, 0x1d, &(0x7f0000000700)={0x0, 0x40000007fff, 0x80400001}, 0x14) shutdown(r8, 0x1) [ 149.655029][ T8055] team0: Port device team_slave_0 added [ 149.662344][ T8055] team0: Port device team_slave_1 added 20:31:02 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0xfb) getsockopt$inet_tcp_int(r0, 0x6, 0x2, 0x0, &(0x7f0000000180)) [ 149.855613][ T8055] device hsr_slave_0 entered promiscuous mode [ 149.923527][ T8055] device hsr_slave_1 entered promiscuous mode 20:31:02 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x1000f0, 0x0) [ 150.058862][ T8058] chnl_net:caif_netlink_parms(): no params data found [ 150.120651][ T8061] IPVS: ftp: loaded support on port[0] = 21 [ 150.145551][ T8063] IPVS: ftp: loaded support on port[0] = 21 [ 150.263425][ T8055] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.271624][ T8055] bridge0: port 2(bridge_slave_1) entered forwarding state [ 150.279569][ T8055] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.287044][ T8055] bridge0: port 1(bridge_slave_0) entered forwarding state [ 150.380987][ T8058] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.423353][ T8058] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.464016][ T8058] device bridge_slave_0 entered promiscuous mode [ 150.521097][ T8084] IPVS: ftp: loaded support on port[0] = 21 [ 150.529664][ T5] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.574098][ T5] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.601382][ T8058] bridge0: port 2(bridge_slave_1) entered blocking state 20:31:03 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvmmsg(r0, &(0x7f0000002b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000060, 0x0) [ 150.625468][ T8058] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.653439][ T8058] device bridge_slave_1 entered promiscuous mode [ 150.824792][ T8058] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 150.899850][ T8058] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 151.007839][ T8061] chnl_net:caif_netlink_parms(): no params data found [ 151.035830][ T8055] 8021q: adding VLAN 0 to HW filter on device bond0 [ 151.072298][ T8093] IPVS: ftp: loaded support on port[0] = 21 [ 151.101693][ T8058] team0: Port device team_slave_0 added [ 151.126237][ T8063] chnl_net:caif_netlink_parms(): no params data found [ 151.138401][ T8058] team0: Port device team_slave_1 added [ 151.145213][ T8061] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.152263][ T8061] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.162020][ T8061] device bridge_slave_0 entered promiscuous mode [ 151.171249][ T8061] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.179981][ T8061] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.187893][ T8061] device bridge_slave_1 entered promiscuous mode [ 151.198699][ T8084] chnl_net:caif_netlink_parms(): no params data found [ 151.231947][ T8061] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 151.251779][ T3512] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 151.260258][ T3512] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 151.325636][ T8058] device hsr_slave_0 entered promiscuous mode [ 151.363872][ T8058] device hsr_slave_1 entered promiscuous mode [ 151.403366][ T8058] debugfs: Directory 'hsr0' with parent '/' already present! [ 151.414467][ T8061] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 151.446639][ T8084] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.453900][ T8084] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.461753][ T8084] device bridge_slave_0 entered promiscuous mode [ 151.469398][ T8084] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.476713][ T8084] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.484614][ T8084] device bridge_slave_1 entered promiscuous mode [ 151.493090][ T8061] team0: Port device team_slave_0 added [ 151.501660][ T8061] team0: Port device team_slave_1 added [ 151.521019][ T8055] 8021q: adding VLAN 0 to HW filter on device team0 [ 151.532479][ T8084] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 151.576607][ T8084] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 151.602930][ T8063] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.617941][ T8063] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.629732][ T8063] device bridge_slave_0 entered promiscuous mode [ 151.778744][ T8063] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.793532][ T8063] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.827483][ T8063] device bridge_slave_1 entered promiscuous mode [ 151.834694][ T3512] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 151.853727][ T3512] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 151.862159][ T3512] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.869299][ T3512] bridge0: port 1(bridge_slave_0) entered forwarding state [ 151.923468][ T3512] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 151.932159][ T3512] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 151.973618][ T3512] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.980701][ T3512] bridge0: port 2(bridge_slave_1) entered forwarding state [ 152.003450][ T3512] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 152.012110][ T3512] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 152.099527][ T8061] device hsr_slave_0 entered promiscuous mode [ 152.138361][ T8061] device hsr_slave_1 entered promiscuous mode [ 152.213423][ T8061] debugfs: Directory 'hsr0' with parent '/' already present! [ 152.233307][ T3512] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 152.247968][ T3512] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 152.257218][ T3512] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 152.270993][ T3512] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 152.282061][ T3512] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 152.295210][ T3512] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 152.306720][ T3512] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 152.317298][ T3512] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 152.331950][ T8055] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 152.360013][ T8093] chnl_net:caif_netlink_parms(): no params data found [ 152.371544][ T8084] team0: Port device team_slave_0 added [ 152.387569][ T3512] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 152.421465][ T8063] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 152.437448][ T8084] team0: Port device team_slave_1 added [ 152.481534][ T8055] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 152.547938][ T8063] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 152.694256][ T8084] device hsr_slave_0 entered promiscuous mode [ 152.714322][ T8084] device hsr_slave_1 entered promiscuous mode [ 152.768663][ T8084] debugfs: Directory 'hsr0' with parent '/' already present! [ 152.811159][ T8058] 8021q: adding VLAN 0 to HW filter on device bond0 [ 152.875040][ T8063] team0: Port device team_slave_0 added [ 152.881010][ T8093] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.894501][ T8093] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.916201][ T8093] device bridge_slave_0 entered promiscuous mode [ 152.974381][ T3018] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 152.982133][ T3018] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 153.030530][ T8063] team0: Port device team_slave_1 added [ 153.043557][ T8093] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.050647][ T8093] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.105229][ T8093] device bridge_slave_1 entered promiscuous mode [ 153.151568][ T8058] 8021q: adding VLAN 0 to HW filter on device team0 [ 153.180222][ T8061] 8021q: adding VLAN 0 to HW filter on device bond0 [ 153.254747][ T3018] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 153.293369][ T3018] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 153.301788][ T3018] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.308941][ T3018] bridge0: port 1(bridge_slave_0) entered forwarding state [ 153.334810][ T3018] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 153.349005][ T3018] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 153.370583][ T3018] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.377754][ T3018] bridge0: port 2(bridge_slave_1) entered forwarding state [ 153.416901][ T8093] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 153.487348][ T8063] device hsr_slave_0 entered promiscuous mode [ 153.558099][ T8063] device hsr_slave_1 entered promiscuous mode 20:31:06 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) io_setup(0x80000043, &(0x7f0000002c80)=0x0) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f}]) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x7fff, 0x40000) ioctl$TIOCPKT(r2, 0x5420, &(0x7f0000000400)=0x9) ioctl$KDGKBMETA(0xffffffffffffffff, 0x4b62, &(0x7f0000000140)) open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1, 0x8, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32], &(0x7f0000000080)='\x00\x00\x00\x00\x00\x00\x00\xeb\xff\xff(1\x18\xc7\xc1\xde\xdc(,J\\\xc4hM=\xf4\x04\xd0\xe9\'rT\x8dm\x1a?\x1a\b\x93\x82\xbf\xfe\x83\xcb4tX{$\x9f\xbfHY\x1e;\xd0\xcf\xdb&\x12G\xfd\xd7\xe71\xd8K\x9b\xc9\x04C\xf5$\xd0\x93k\x12u\x9eMM\x03\x00\x00\x00\xc8\x83\x16\x9c2)\xaa\x9fh\xa4\xd2\x0f\x98.\x06t^\xc0\xcd\x95\x81*\xece1\x9e*3\xfa\xb5=\xd2\x1e-\xd3]}\xa7\xbfDZn\xd4\x82\x19\xfb\x1bjE\xc3D\xd8\xd56G\xd9\xc3\x90\xf5\xb9\xdc\x98\xb8\x8f=\xdf\xf0,e\x1dl\xe0\xc5\x80\a\xb1\xad\xbf\xc5\x88!j\xce\x00\x00\x00\x00\x00\x00', 0x7, 0x90, &(0x7f0000000200)=""/144, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) listen(0xffffffffffffffff, 0x3) clone(0x1000000210007fb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setreuid(0x0, 0xee00) r3 = geteuid() setreuid(r3, 0x0) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000080)={'sy\xe0'}, &(0x7f00000000c0)='sT\x01', 0xfffffffffffffffc) [ 153.624132][ T8063] debugfs: Directory 'hsr0' with parent '/' already present! [ 153.691804][ T8058] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 153.742842][ T8058] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 153.786287][ T3018] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 153.819252][ T3018] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready 20:31:06 executing program 0: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) accept4(r3, 0x0, 0x0, 0x0) r4 = fcntl$getown(r3, 0x9) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x0) r7 = dup(r6) write$P9_RLOPEN(r7, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0xff, 0xff, 0x5, 0x7, 0x0, 0x5, 0x10000, 0xc, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xc}, 0x1, 0x7, 0xc9, 0x7, 0x8, 0x39b7bda1, 0x400}, r4, 0xb, r7, 0xa) close(r2) write$binfmt_elf32(r1, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x1) r8 = socket$inet(0x2, 0x3, 0x7f) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) write$tun(r1, &(0x7f00000001c0)={@val, @void, @mpls={[], @generic="1895d5cd578d31502c28c3b3edc5a4cadb93874fefe8c11b41c9314446c54c230d"}}, 0xff72) setsockopt$inet_int(r8, 0x0, 0x3, &(0x7f00000000c0)=0x7ff, 0x4) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 153.845426][ T3018] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 153.859702][ T3018] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 153.884604][ T3018] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 153.894888][ T3018] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 153.909653][ T3018] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 153.929575][ T3018] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready 20:31:06 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x1, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x400454d0, 0x1c) fcntl$setlease(r0, 0x400, 0x0) r2 = socket$kcm(0x2, 0x2, 0x0) r3 = socket$kcm(0x10, 0x40000000002, 0x10) fsetxattr$trusted_overlay_upper(r2, &(0x7f0000000140)='trusted.overlay.upper\x00', &(0x7f0000000200)={0x0, 0xfb, 0xa2, 0x2, 0x80, "0645c45580fe52d5da4cbbc5d4ed60ee", "daee76894a00d12ee3504cb56bb71daface68b9a4dda5461d3f6be8a69b15263ac65a28770deea3a2dca2cfa096f2b1c8147df594b394c089ed162b4a96c23142cd064af6ba80e808afaf1e9397ce5a5902c0d851e255088547d0b568094e44e209183bf4f6c49c53c2a2ff01f6b420f66d96999f206492489af05731b96cf657b1ad620b5a97ef1dc3cdbb370"}, 0xa2, 0x6) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f20531d200050011404b48000001000080000000000300f88003f01700d0bd", 0x2e}], 0x1}, 0x0) connect$llc(0xffffffffffffffff, &(0x7f0000000100)={0x1a, 0x5, 0x2, 0x7, 0x15, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x10) [ 153.950853][ T3018] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 153.965170][ T3018] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 153.984271][ T3018] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 153.998612][ T8207] QAT: Invalid ioctl [ 154.005461][ T8093] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 154.050930][ T8061] 8021q: adding VLAN 0 to HW filter on device team0 [ 154.091980][ T8058] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 154.113769][ T8110] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 154.121676][ T8110] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 154.137077][ T8110] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 154.148178][ T8110] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 154.163232][ C1] hrtimer: interrupt took 68480 ns [ 154.172555][ T8093] team0: Port device team_slave_0 added 20:31:07 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x1, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x400454d0, 0x1c) fcntl$setlease(r0, 0x400, 0x0) r2 = socket$kcm(0x2, 0x2, 0x0) r3 = socket$kcm(0x10, 0x40000000002, 0x10) fsetxattr$trusted_overlay_upper(r2, &(0x7f0000000140)='trusted.overlay.upper\x00', &(0x7f0000000200)={0x0, 0xfb, 0xa2, 0x2, 0x80, "0645c45580fe52d5da4cbbc5d4ed60ee", "daee76894a00d12ee3504cb56bb71daface68b9a4dda5461d3f6be8a69b15263ac65a28770deea3a2dca2cfa096f2b1c8147df594b394c089ed162b4a96c23142cd064af6ba80e808afaf1e9397ce5a5902c0d851e255088547d0b568094e44e209183bf4f6c49c53c2a2ff01f6b420f66d96999f206492489af05731b96cf657b1ad620b5a97ef1dc3cdbb370"}, 0xa2, 0x6) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f20531d200050011404b48000001000080000000000300f88003f01700d0bd", 0x2e}], 0x1}, 0x0) connect$llc(0xffffffffffffffff, &(0x7f0000000100)={0x1a, 0x5, 0x2, 0x7, 0x15, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x10) [ 154.245733][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 154.287899][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 154.322705][ T22] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.329899][ T22] bridge0: port 1(bridge_slave_0) entered forwarding state [ 154.336049][ T8229] QAT: Invalid ioctl [ 154.361834][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 154.379997][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 154.401835][ T22] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.409105][ T22] bridge0: port 2(bridge_slave_1) entered forwarding state [ 154.432455][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 154.450198][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 154.473505][ T8093] team0: Port device team_slave_1 added 20:31:07 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x1, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x400454d0, 0x1c) fcntl$setlease(r0, 0x400, 0x0) r2 = socket$kcm(0x2, 0x2, 0x0) r3 = socket$kcm(0x10, 0x40000000002, 0x10) fsetxattr$trusted_overlay_upper(r2, &(0x7f0000000140)='trusted.overlay.upper\x00', &(0x7f0000000200)={0x0, 0xfb, 0xa2, 0x2, 0x80, "0645c45580fe52d5da4cbbc5d4ed60ee", "daee76894a00d12ee3504cb56bb71daface68b9a4dda5461d3f6be8a69b15263ac65a28770deea3a2dca2cfa096f2b1c8147df594b394c089ed162b4a96c23142cd064af6ba80e808afaf1e9397ce5a5902c0d851e255088547d0b568094e44e209183bf4f6c49c53c2a2ff01f6b420f66d96999f206492489af05731b96cf657b1ad620b5a97ef1dc3cdbb370"}, 0xa2, 0x6) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f20531d200050011404b48000001000080000000000300f88003f01700d0bd", 0x2e}], 0x1}, 0x0) connect$llc(0xffffffffffffffff, &(0x7f0000000100)={0x1a, 0x5, 0x2, 0x7, 0x15, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x10) [ 154.538388][ T8093] device hsr_slave_0 entered promiscuous mode [ 154.601843][ T8240] QAT: Invalid ioctl [ 154.625066][ T8093] device hsr_slave_1 entered promiscuous mode [ 154.668719][ T8093] debugfs: Directory 'hsr0' with parent '/' already present! [ 154.676699][ T8110] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 154.691177][ T8110] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 154.702355][ T8110] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 154.719831][ T8110] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 154.742336][ T8110] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 154.766820][ T8110] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 154.798615][ T8084] 8021q: adding VLAN 0 to HW filter on device bond0 [ 154.820520][ T8061] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 154.845115][ T8061] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 154.925097][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 154.936286][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready 20:31:07 executing program 0: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = dup(r2) write$P9_RLOPEN(r3, 0x0, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = dup(r5) write$P9_RLOPEN(r6, 0x0, 0x0) r7 = fcntl$dupfd(r3, 0x406, r6) ioctl$sock_netrom_SIOCDELRT(r7, 0x890c, &(0x7f0000000000)={0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={'nr', 0x0}, 0x1, 'syz1\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x6, 0x5, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @default, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, 0x0) [ 154.972321][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 155.001223][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 155.029619][ T8084] 8021q: adding VLAN 0 to HW filter on device team0 [ 155.068794][ T3512] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready 20:31:08 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r3, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) setsockopt$inet_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000040)=@gcm_256={{}, "0de91a1c2fc9ed43", "02a839a6c7986edc3f8a6200c88e37de79b97525cedefaa0bded32e7d887ec99", "612a56d3", "7b23285ee4861a88"}, 0x280) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) writev(r3, &(0x7f0000000440)=[{&(0x7f00000002c0)="0a99b3e3930870dcd4c6d68e6abe088af4ccdbe6dc85ed63bcee4834cd53f8a19cfad53574230c17377bd7b3eb23d90c8f0c69b08db538753bcf550f05d219f8c6ca03228dd8d293261ba071190f47d70c95a97fe5d4cb7511e180f73e8ef5e2f7ee4f47c1a036e37e87414e615396eeb918828e", 0x74}, {&(0x7f00000003c0)="b1252522629f34a16eef84ce1b0063a44d2793e337dc2c6bb2d81b53e3fce25735962003d59c73b5c7e008a287d2a1d4", 0x30}, {&(0x7f0000000700)="c2e03ca050ae6e9864a1798b5cc6822a6179ef8da5cd850e45cd71cd4dfe222335695c1aa3", 0x25}], 0x3) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3) write$binfmt_script(r3, &(0x7f00000009c0)=ANY=[@ANYBLOB="23ff1f0a8117fb62d5eb1b3c750c75c5533f018823a1699743876915922a9b66379e3db9e86db57e45fe1ca610659f5ef9134937af481f2b44e023b3c35f0b8810707ed5dacca01048b2c20b884e0efb76d2659a715f3b513e33fd96c9d3c9afed9390b335d0744ddc020aedf819000000040000000832ff0769dea9ed32487d2bf1acafcf98d817857774004608d609000000701f793b97fdcccc62273deb40c4e69857745a810000000000009755979c72f645e9898fb9d61b0ec3a6696b09ebf775dd19f4222aa661516ce1a0a21f00"], 0xd1) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x400}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f00000004c0)={0xfff, 0x4, 0x200, 'queue0\x00', 0xffff}) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000600)=0xda9, 0x4) sendto$inet(r3, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) [ 155.086377][ T3512] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 155.115188][ T3512] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 20:31:08 executing program 0: r0 = socket$inet(0x2, 0x2, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) r1 = syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0xfffffffffffffff7, 0x100) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r1, 0xc1205531, &(0x7f00000001c0)={0x1, 0x0, 0xdeb70000, 0x4, [], [], [], 0xfffffffc, 0x3, 0x0, 0x2fd, "8f4955168623ed3d47f1d874c709e95b"}) sendmsg$inet_sctp(r0, &(0x7f0000000180)={&(0x7f0000000000)=@in={0x2, 0x0, @remote}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000040)="e6", 0x1}], 0x1, &(0x7f0000000100)=[@dstaddrv4={0x18, 0x84, 0x7, @remote}], 0x18}, 0x44) r2 = syz_open_dev$sndpcmc(&(0x7f0000000300)='/dev/snd/pcmC#D#c\x00', 0x4, 0x84) ioctl$DRM_IOCTL_SET_MASTER(r2, 0x641e) [ 155.177119][ T3512] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 155.190918][ T3512] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 155.212732][ T3512] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.219899][ T3512] bridge0: port 1(bridge_slave_0) entered forwarding state [ 155.268766][ T3512] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 155.286148][ T3512] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 155.323933][ T3512] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.331171][ T3512] bridge0: port 2(bridge_slave_1) entered forwarding state [ 155.364157][ T3512] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 155.392634][ T8061] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 155.444407][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 155.469572][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 155.521862][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 155.553452][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 155.576542][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 155.597861][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 155.662278][ T8085] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 155.679540][ T8085] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 155.707406][ T8085] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 155.735405][ T8085] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 155.762023][ T8085] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 155.791577][ T8084] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 155.853769][ T8063] 8021q: adding VLAN 0 to HW filter on device bond0 [ 155.893512][ T8063] 8021q: adding VLAN 0 to HW filter on device team0 [ 155.955773][ T3018] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 155.979275][ T3018] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 156.021514][ T8084] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 156.042055][ T8110] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 156.076496][ T8110] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 156.128452][ T8110] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.135608][ T8110] bridge0: port 1(bridge_slave_0) entered forwarding state [ 156.201471][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 156.265016][ T8093] 8021q: adding VLAN 0 to HW filter on device bond0 [ 156.281712][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 156.293077][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 156.306807][ T22] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.314060][ T22] bridge0: port 2(bridge_slave_1) entered forwarding state [ 156.328735][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 156.337578][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 156.346268][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 156.355388][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 156.364938][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 156.382085][ T8063] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 156.392821][ T8063] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 156.409582][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 156.420118][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 156.428673][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 156.437572][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 156.446719][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 156.456099][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 156.464678][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 156.488817][ T8085] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 156.500274][ T8085] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 156.514940][ T8063] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 156.524028][ T8093] 8021q: adding VLAN 0 to HW filter on device team0 [ 156.536880][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 156.546262][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready 20:31:09 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$gfs2(&(0x7f0000000040)='gfs2\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={[{@statfs_percent={'statfs_percent', 0x3d, 0x100000001}}, {@locktable={'locktable', 0x3d, '/\xaf\xe9\xaf\xaa\xcf2\xd3\x98\x0f.\x1a\xa5\x00\x00\x00\x00el\xd3\x00'}}]}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r2, 0xc0096616, &(0x7f0000000000)={0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) [ 156.569612][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.576745][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 156.616780][ T3512] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 156.637017][ T3512] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 156.656561][ T3512] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 156.677766][ T3512] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.684959][ T3512] bridge0: port 2(bridge_slave_1) entered forwarding state [ 156.692985][ T3512] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 156.701681][ T3512] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 156.713951][ T3018] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 156.722420][ T3018] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 156.743657][ T3018] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 156.760081][ T8332] gfs2: Bad value for 'statfs_percent' [ 156.785537][ T8093] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 156.796637][ T8093] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 156.808904][ T3512] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 156.817903][ T3512] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 156.827515][ T3512] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 156.839678][ T8332] gfs2: Bad value for 'statfs_percent' [ 156.851551][ T3512] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 156.860124][ T3512] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 156.868859][ T3512] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 156.878011][ T3512] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 156.925437][ T8093] 8021q: adding VLAN 0 to HW filter on device batadv0 20:31:09 executing program 1: mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x5c}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='overlay\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='nfs_export=off']) 20:31:09 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x1f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0xfffffffffffffcf9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x88008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000100), 0xd}, 0x1000, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) writev(r0, &(0x7f0000000000), 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x1, 0x0) ioctl$BLKPG(r2, 0x1269, &(0x7f0000000400)={0x1, 0xa1a, 0xc2, &(0x7f0000000300)="f348dc18ff7072edefe73ae9009b2a445b4d5c42ea816821bb8f7e356bf71e97000d73cc9971fda7f93775949b97c8fd8f3b710fa5dcc02844d5863e07bd10715ccac9f729cc751b3da87cef8a4f3e67837a96ec35f153ccd6e1b3e0fc9052814cdc8a658d78836561f5dc5804c6dbb5833255141aaa1bb9e70ada84b6b3afcf2caf7f6eeeacf266dc357641777dd1cb6d9fee94dd7678fd2c0cbdaad843784ee52810a9e569169fe9790abdeb5d0f092c9cb74cc3dea924f4ae7c882e9457f0cb24"}) fgetxattr(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="f4eeffffff7f000041783d72084a"], &(0x7f0000000200)=""/102, 0x66) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='task\x00') getdents(r3, &(0x7f00000002c0)=""/47, 0x2f) getdents(r3, &(0x7f0000000000)=""/47, 0x2f) setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000440)=@gcm_256={{0x303}, "266f312e2ee8e5d9", "32fad388cbb272774b63071bc1b6698c2ab192aec3696d5b13f496100eabb015", "c2a185c7", "b6dda1f41799f219"}, 0x38) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_MON_GET(r3, 0x0, 0x0) [ 157.035395][ T8350] overlayfs: missing 'lowerdir' [ 157.063435][ T8352] overlayfs: missing 'lowerdir' 20:31:10 executing program 5: preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="30000000100001080000f7ffffffffffffff0000", @ANYRES32=0x0, @ANYBLOB="000000000000000008001b00000000000800040000000000"], 0x30}}, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000340)={0x5, {{0x2, 0x4e21, @multicast2}}}, 0x88) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') r1 = dup(0xffffffffffffffff) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000240), 0x0) socket$inet6(0xa, 0x2, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/capi/capi20ncci\x00', 0x2, 0x0) ioctl$KDGKBENT(r3, 0x4b46, &(0x7f0000000300)={0xff, 0x8, 0x3}) fsetxattr(r2, &(0x7f0000000180)=@known='trusted.overlay.upper\x00', &(0x7f0000000200)='\x00', 0x1, 0x2) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, 0x1c) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x100060, 0xa808) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, 0x0) ioctl$DRM_IOCTL_SWITCH_CTX(0xffffffffffffffff, 0x40086424, &(0x7f00000001c0)) lsetxattr$security_capability(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='security.capability\x00', 0x0, 0x0, 0x3) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) 20:31:10 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) r1 = syz_open_dev$cec(0x0, 0x0, 0x2) ioctl$TIOCLINUX7(r1, 0x541c, 0x0) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x25}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) r5 = gettid() r6 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffeff, 0x9}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={r7, r6, 0x0, 0x0, 0x0}, 0x30) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x9, &(0x7f00000000c0)=""/102400, 0x0) kcmp(r5, r7, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) openat$cgroup_procs(r2, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) r8 = accept4$tipc(r2, &(0x7f0000000000)=@id, &(0x7f0000000040)=0x10, 0x800) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r10 = accept4(r9, 0x0, 0x0, 0x0) r11 = dup(r10) write$P9_RLOPEN(r11, 0x0, 0x0) ioctl$KDGKBLED(r11, 0x4b64, &(0x7f00000190c0)) finit_module(r8, &(0x7f0000000080)='$\x00', 0xd3f49ed1fadde5b5) 20:31:10 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$gfs2(&(0x7f0000000040)='gfs2\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={[{@statfs_percent={'statfs_percent', 0x3d, 0x100000001}}, {@locktable={'locktable', 0x3d, '/\xaf\xe9\xaf\xaa\xcf2\xd3\x98\x0f.\x1a\xa5\x00\x00\x00\x00el\xd3\x00'}}]}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r2, 0xc0096616, &(0x7f0000000000)={0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 20:31:10 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000100)='/dev/snd/pcmC#D#c\x00', 0x7fff, 0x206000) ioctl$DRM_IOCTL_AGP_RELEASE(r0, 0x6431) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x20000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r2 = add_key(&(0x7f0000000200)='.request_key_auth\x00', &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffff8) r3 = add_key$user(&(0x7f0000000380)='user\x00', &(0x7f00000003c0)={'syz', 0x1}, &(0x7f0000000400)="df57ce73b86a577a66f36ffcc42a2ef0d76014", 0x13, 0xfffffffffffffffe) keyctl$instantiate_iov(0x14, r2, &(0x7f0000000340)=[{&(0x7f00000002c0)="554d161b1222444e4f7b9a866d9f3db9113f00aa26a2e35d971bc76b6edace2d0b2a68146f32450354709649a5c46845389887804621a60d46634984b8ac1628656d2f8a5efd52e86ec985c69110eac3ab376e813a96d3c26ab01d2256dbd65da2ea12820a9fb999f1d457af95bf04decf7078a124", 0x75}], 0x1, r3) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = dup(r5) write$P9_RLOPEN(r6, 0x0, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r8 = accept4(r7, 0x0, 0x0, 0x0) dup(r8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)) r9 = socket$kcm(0x10, 0x2, 0x10) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r11 = accept4(r10, 0x0, 0x0, 0x0) dup(r11) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r12) r13 = socket(0x40000000015, 0x5, 0x0) close(r13) r14 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r14, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r14, &(0x7f0000d83fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r14, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r13, 0x84, 0x66, &(0x7f0000000000)={r15}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_RTOINFO(r12, 0x84, 0x0, &(0x7f0000000140)={r15}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r11, 0x84, 0x73, &(0x7f0000000080)={r15, 0x7ff, 0x30, 0x100000000, 0x7}, &(0x7f00000000c0)=0x18) setsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000440)=@assoc_value={r16, 0x9}, 0x8) sendmsg$kcm(r9, &(0x7f0000000280)={0x0, 0x2000, &(0x7f0000000000)=[{&(0x7f0000000140)="2e0000003100050ad25a80648c6394fb0124fc7fff000b400c000200053582c137153e370900018025641700d1bd", 0x2e}], 0x1}, 0x0) 20:31:10 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x10000000012, 0x4, &(0x7f00000000c0)=@framed={{}, [@jmp={0x5, 0x1, 0x0, 0x8, 0xa, 0xffffffffffffff60, 0x4}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, [], 0x0, 0xb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 20:31:10 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x1f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0xfffffffffffffcf9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x88008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000100), 0xd}, 0x1000, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) writev(r0, &(0x7f0000000000), 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x1, 0x0) ioctl$BLKPG(r2, 0x1269, &(0x7f0000000400)={0x1, 0xa1a, 0xc2, &(0x7f0000000300)="f348dc18ff7072edefe73ae9009b2a445b4d5c42ea816821bb8f7e356bf71e97000d73cc9971fda7f93775949b97c8fd8f3b710fa5dcc02844d5863e07bd10715ccac9f729cc751b3da87cef8a4f3e67837a96ec35f153ccd6e1b3e0fc9052814cdc8a658d78836561f5dc5804c6dbb5833255141aaa1bb9e70ada84b6b3afcf2caf7f6eeeacf266dc357641777dd1cb6d9fee94dd7678fd2c0cbdaad843784ee52810a9e569169fe9790abdeb5d0f092c9cb74cc3dea924f4ae7c882e9457f0cb24"}) fgetxattr(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="f4eeffffff7f000041783d72084a"], &(0x7f0000000200)=""/102, 0x66) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='task\x00') getdents(r3, &(0x7f00000002c0)=""/47, 0x2f) getdents(r3, &(0x7f0000000000)=""/47, 0x2f) setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000440)=@gcm_256={{0x303}, "266f312e2ee8e5d9", "32fad388cbb272774b63071bc1b6698c2ab192aec3696d5b13f496100eabb015", "c2a185c7", "b6dda1f41799f219"}, 0x38) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_MON_GET(r3, 0x0, 0x0) [ 157.214226][ T8365] gfs2: Bad value for 'statfs_percent' 20:31:10 executing program 1: r0 = gettid() r1 = creat(&(0x7f0000001980)='./file0\x00', 0x1) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="2321202e2f66696c65300a50528993ab41859867b36367f9e445a1a29d04d33a0700745acbc25a92530c4b46f1d824ed164057372731e5bc6864c2e14cf6ca47b517b6d86500"/85], 0xb) prctl$PR_SET_PTRACER(0x59616d61, r0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0x4020565a, &(0x7f00000002c0)={0x3, 0xf0f000, {0x3f}}) ioctl$VIDIOC_DQEVENT(r2, 0x80885659, &(0x7f00000034c0)={0x0, @ctrl={0x0, 0x0, @value64}}) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r2, 0x80845663, &(0x7f0000000200)) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = getpgrp(0x0) waitid(0x0, r3, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8946, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb1Y\xa9\xc8J,`\xd2\x98\x00\x00\x00 ') close(r1) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000001840), 0x4) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) accept(0xffffffffffffffff, 0x0, 0x0) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) [ 157.261045][ T8360] netlink: 'syz-executor.3': attribute type 2 has an invalid length. 20:31:10 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$gfs2(&(0x7f0000000040)='gfs2\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={[{@statfs_percent={'statfs_percent', 0x3d, 0x100000001}}, {@locktable={'locktable', 0x3d, '/\xaf\xe9\xaf\xaa\xcf2\xd3\x98\x0f.\x1a\xa5\x00\x00\x00\x00el\xd3\x00'}}]}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r2, 0xc0096616, &(0x7f0000000000)={0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 20:31:10 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) r1 = syz_open_dev$cec(0x0, 0x0, 0x2) ioctl$TIOCLINUX7(r1, 0x541c, 0x0) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x25}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) r5 = gettid() r6 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffeff, 0x9}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={r7, r6, 0x0, 0x0, 0x0}, 0x30) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x9, &(0x7f00000000c0)=""/102400, 0x0) kcmp(r5, r7, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) openat$cgroup_procs(r2, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) r8 = accept4$tipc(r2, &(0x7f0000000000)=@id, &(0x7f0000000040)=0x10, 0x800) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r10 = accept4(r9, 0x0, 0x0, 0x0) r11 = dup(r10) write$P9_RLOPEN(r11, 0x0, 0x0) ioctl$KDGKBLED(r11, 0x4b64, &(0x7f00000190c0)) finit_module(r8, &(0x7f0000000080)='$\x00', 0xd3f49ed1fadde5b5) [ 157.467658][ T8371] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 157.515116][ T8390] gfs2: Bad value for 'statfs_percent' [ 157.609822][ T8360] device 0 entered promiscuous mode [ 157.649643][ T8377] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 157.662705][ T8398] netlink: 'syz-executor.3': attribute type 2 has an invalid length. 20:31:10 executing program 2: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = dup(r1) ioctl$VIDIOC_G_AUDOUT(r2, 0x80345631, &(0x7f0000000300)) write$P9_RLOPEN(r2, 0x0, 0x0) ioctl$UI_DEV_CREATE(r2, 0x5501) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(0xffffffffffffffff, 0x84, 0x15, &(0x7f00000002c0)={0x20}, 0x1) r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) getdents64(r3, &(0x7f0000000100)=""/230, 0xe6) [ 157.690106][ T8371] syz-executor.5 (8371) used greatest stack depth: 22216 bytes left [ 157.704814][ T8398] device 1 entered promiscuous mode 20:31:10 executing program 5: preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="30000000100001080000f7ffffffffffffff0000", @ANYRES32=0x0, @ANYBLOB="000000000000000008001b00000000000800040000000000"], 0x30}}, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000340)={0x5, {{0x2, 0x4e21, @multicast2}}}, 0x88) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') r1 = dup(0xffffffffffffffff) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000240), 0x0) socket$inet6(0xa, 0x2, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/capi/capi20ncci\x00', 0x2, 0x0) ioctl$KDGKBENT(r3, 0x4b46, &(0x7f0000000300)={0xff, 0x8, 0x3}) fsetxattr(r2, &(0x7f0000000180)=@known='trusted.overlay.upper\x00', &(0x7f0000000200)='\x00', 0x1, 0x2) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, 0x1c) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x100060, 0xa808) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, 0x0) ioctl$DRM_IOCTL_SWITCH_CTX(0xffffffffffffffff, 0x40086424, &(0x7f00000001c0)) lsetxattr$security_capability(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='security.capability\x00', 0x0, 0x0, 0x3) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) 20:31:10 executing program 3: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000002c0)) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x4, 0x4, 0x4000004, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0xfffffffffffffe75) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000280)={r0, 0x0, 0x0}, 0x20) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x4000) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f0000000140)=ANY=[@ANYBLOB="7b000300ffffff351469df212a600bc73beadfc03aa7eeff"]) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="2e0000002300817ee45de087185082cf0400b0eba06ec400002339e00586f9835b3f00009148790000f85acc7c45", 0x2e}], 0x1}, 0x0) 20:31:10 executing program 2: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = dup(r1) ioctl$VIDIOC_G_AUDOUT(r2, 0x80345631, &(0x7f0000000300)) write$P9_RLOPEN(r2, 0x0, 0x0) ioctl$UI_DEV_CREATE(r2, 0x5501) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(0xffffffffffffffff, 0x84, 0x15, &(0x7f00000002c0)={0x20}, 0x1) r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) getdents64(r3, &(0x7f0000000100)=""/230, 0xe6) [ 157.917097][ T8410] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.3'. 20:31:10 executing program 0: syz_read_part_table(0x0, 0x1, &(0x7f0000000540)=[{&(0x7f0000000280)="b2e61b633ef0f0e32d0cb484adb7ade4a6b33590838177d3c5169a4e1ef4f4a6d2010eef4897059f6ec3ea7b2020e4e6a487e39363c4add84fec3b0451d28ffb85ef95ec635edca67dcd7cc2c08c7e5de4ba4db0d3d7ff7fd1da9cb09721c575e34a2024801b70431e4ac98b765580b85703b4829c9bef03347b25aa799810d877d2fe5df83fa30c184737e7e86c30016d510971937c031504b133f6447eb98380f1d774a7796b24e2b89c9c6f114979f0eb9e5d2f6fbaa8fc1ec5577da2e630df8c82840519e856e0fd4b6258e4a5eb4153f9", 0xd3, 0x10f}]) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = dup(r1) write$P9_RLOPEN(r2, 0x0, 0x0) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000000)=0x0) r4 = semget$private(0x0, 0x2, 0x0) semop(r4, &(0x7f0000000080)=[{0x0, 0x0, 0x1800}], 0x1) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f00000001c0)) semctl$GETALL(r4, 0x0, 0xd, &(0x7f0000000140)=""/74) ptrace$setregset(0x4205, r3, 0x6, &(0x7f0000000100)={&(0x7f0000000040)="c1bd97d6f7b7fe44029fc4b1e73e0b28cf42ce0ed9f8b5f3c92410b0a738f74bec3a6d925cb6179bc1337cccd8fd1dd13c4985395a89bc60c25089f7d451c9cccb3f0016660f6b619f8c72a0dd857120606a56bfcdf66e94ca6dc8e12b9ef014f2dd613b2552941c5e4931adc60af9ac49e8bbe95d510128f9765f9737097dc5f75989bad1815e447c1ec0f7dadd7cb460bb51c1e1ea2f22cfbac8994ca30749c4840491101886", 0xa7}) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x0) dup(r6) ioctl$sock_inet_SIOCGIFADDR(r6, 0x8915, &(0x7f00000001c0)={'ip6gre0\x00', {0x2, 0x4e21, @local}}) [ 158.051765][ T8412] Dev loop0: unable to read RDB block 1 [ 158.058793][ T8412] loop0: AHDI p3 [ 158.062667][ T8412] loop0: partition table partially beyond EOD, truncated 20:31:11 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) r1 = syz_open_dev$cec(0x0, 0x0, 0x2) ioctl$TIOCLINUX7(r1, 0x541c, 0x0) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x25}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) r5 = gettid() r6 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffeff, 0x9}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={r7, r6, 0x0, 0x0, 0x0}, 0x30) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x9, &(0x7f00000000c0)=""/102400, 0x0) kcmp(r5, r7, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) openat$cgroup_procs(r2, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) r8 = accept4$tipc(r2, &(0x7f0000000000)=@id, &(0x7f0000000040)=0x10, 0x800) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r10 = accept4(r9, 0x0, 0x0, 0x0) r11 = dup(r10) write$P9_RLOPEN(r11, 0x0, 0x0) ioctl$KDGKBLED(r11, 0x4b64, &(0x7f00000190c0)) finit_module(r8, &(0x7f0000000080)='$\x00', 0xd3f49ed1fadde5b5) [ 158.160773][ T8418] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.3'. [ 158.204624][ T8412] Dev loop0: unable to read RDB block 1 [ 158.213312][ T8412] loop0: AHDI p3 [ 158.216988][ T8412] loop0: partition table partially beyond EOD, truncated 20:31:11 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) read$eventfd(0xffffffffffffffff, &(0x7f00000000c0), 0xfffffeba) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='cmdline\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_PRI(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x68, r2, 0x5, 0x0, 0x0, {{}, 0x0, 0x4109, 0x0, {0x4c, 0x18, {0xf00, @link='broadcast-link\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa0\xff\xcf\xa5\xb6\xc5&y\x00'}}}}, 0x68}}, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x80045500, &(0x7f0000000100)) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80004010}, 0xc, &(0x7f0000000580), 0x1, 0x0, 0x0, 0x8016}, 0x0) 20:31:11 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x18}, [@ldst={0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) 20:31:11 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) r1 = syz_open_dev$cec(0x0, 0x0, 0x2) ioctl$TIOCLINUX7(r1, 0x541c, 0x0) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x25}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) r5 = gettid() r6 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffeff, 0x9}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={r7, r6, 0x0, 0x0, 0x0}, 0x30) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x9, &(0x7f00000000c0)=""/102400, 0x0) kcmp(r5, r7, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) openat$cgroup_procs(r2, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) r8 = accept4$tipc(r2, &(0x7f0000000000)=@id, &(0x7f0000000040)=0x10, 0x800) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r10 = accept4(r9, 0x0, 0x0, 0x0) r11 = dup(r10) write$P9_RLOPEN(r11, 0x0, 0x0) ioctl$KDGKBLED(r11, 0x4b64, &(0x7f00000190c0)) finit_module(r8, &(0x7f0000000080)='$\x00', 0xd3f49ed1fadde5b5) [ 159.676583][ T113] device bridge_slave_1 left promiscuous mode [ 159.683495][ T113] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.725860][ T113] device bridge_slave_0 left promiscuous mode [ 159.732297][ T113] bridge0: port 1(bridge_slave_0) entered disabled state 20:31:13 executing program 1: r0 = gettid() r1 = creat(&(0x7f0000001980)='./file0\x00', 0x1) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="2321202e2f66696c65300a50528993ab41859867b36367f9e445a1a29d04d33a0700745acbc25a92530c4b46f1d824ed164057372731e5bc6864c2e14cf6ca47b517b6d86500"/85], 0xb) prctl$PR_SET_PTRACER(0x59616d61, r0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0x4020565a, &(0x7f00000002c0)={0x3, 0xf0f000, {0x3f}}) ioctl$VIDIOC_DQEVENT(r2, 0x80885659, &(0x7f00000034c0)={0x0, @ctrl={0x0, 0x0, @value64}}) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r2, 0x80845663, &(0x7f0000000200)) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = getpgrp(0x0) waitid(0x0, r3, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8946, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb1Y\xa9\xc8J,`\xd2\x98\x00\x00\x00 ') close(r1) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000001840), 0x4) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) accept(0xffffffffffffffff, 0x0, 0x0) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) 20:31:13 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sequencer2\x00', 0x400, 0x0) ioctl$VIDIOC_ENUMSTD(r2, 0xc0485619, &(0x7f0000000240)={0x7, 0x0, "d11547c9f479ceb26a0e843346767280279a16e9d64b1b45", {0x40}, 0x6}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000500)={'gre0\x00\x00\x00\x00\x00\x00\x00\b\x00', 0x0}) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$IPT_SO_GET_INFO(r4, 0x0, 0x40, &(0x7f0000000000)={'raw\x00'}, &(0x7f0000000080)=0x54) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, r3}, 0xc) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="0300ffff", 0x6}], 0x2) r5 = syz_open_dev$ndb(&(0x7f0000000140)='/dev/nbd#\x00', 0x0, 0x80000) ioctl$IOC_PR_RESERVE(r5, 0x401070c9, &(0x7f0000000180)={0x10001, 0xfff}) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) accept4(r6, 0x0, 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r6, 0xc0406619, &(0x7f0000000100)={{0x7, 0x0, @identifier="8146218cd0ce50d8ef965ccf8e275cbf"}}) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) 20:31:13 executing program 5: preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="30000000100001080000f7ffffffffffffff0000", @ANYRES32=0x0, @ANYBLOB="000000000000000008001b00000000000800040000000000"], 0x30}}, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000340)={0x5, {{0x2, 0x4e21, @multicast2}}}, 0x88) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') r1 = dup(0xffffffffffffffff) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000240), 0x0) socket$inet6(0xa, 0x2, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/capi/capi20ncci\x00', 0x2, 0x0) ioctl$KDGKBENT(r3, 0x4b46, &(0x7f0000000300)={0xff, 0x8, 0x3}) fsetxattr(r2, &(0x7f0000000180)=@known='trusted.overlay.upper\x00', &(0x7f0000000200)='\x00', 0x1, 0x2) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, 0x1c) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x100060, 0xa808) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, 0x0) ioctl$DRM_IOCTL_SWITCH_CTX(0xffffffffffffffff, 0x40086424, &(0x7f00000001c0)) lsetxattr$security_capability(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='security.capability\x00', 0x0, 0x0, 0x3) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) 20:31:13 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x19}}, @in={0x2, 0x0, @remote}], 0x20) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e22, @remote}], 0x10) listen(r0, 0x4) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x480001, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r2, &(0x7f0000000640)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @dev}, 0x14) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="440400002800070500"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000800010063627100180402000404060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000004000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a193ec32adcd00000000000000000000000000000000000000000000000000ffe800000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000204ea72b265cd683000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002e3c000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4ff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100005000500000000006198cc6884bdedaea3074cf77f"], 0x444}}, 0x0) connect$packet(r1, &(0x7f0000000080)={0x11, 0xf5, r4, 0x1, 0x0, 0x6, @random="070923e4b841"}, 0x14) 20:31:13 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000180)='/dev/snd/pcmC#D#c\x00', 0xed, 0x820180) ioctl$VFIO_IOMMU_MAP_DMA(r0, 0x3b71, &(0x7f00000001c0)={0x20, 0x3, 0x100, 0x5, 0x800}) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={0x0, 0x839}, 0x8) ftruncate(r3, 0x200004) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) dup(r5) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x80000000}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f00000000c0)={0x2, 0x1, 0x100, 0x8, 0x7befa5c, 0x6fc9, 0x3, 0x0, r6}, &(0x7f0000000100)=0x20) sendfile(r1, r3, 0x0, 0x80001d00c0d0) 20:31:13 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, &(0x7f0000000040)="660f382b1a0f01dfdde80f32d9e90f086665676426f7c5000000000f2245deef0b23f5", 0x23}], 0x1, 0x0, 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) r5 = dup(r4) write$P9_RLOPEN(r5, 0x0, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r7 = accept4(r6, 0x0, 0x0, 0x0) r8 = dup(r7) write$P9_RLOPEN(r8, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r9) r10 = socket(0x40000000015, 0x5, 0x0) close(r10) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r11, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r11, &(0x7f0000d83fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r11, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r10, 0x84, 0x66, &(0x7f0000000000)={r12}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_RTOINFO(r9, 0x84, 0x0, &(0x7f0000000140)={r12}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_RTOINFO(r8, 0x84, 0x0, &(0x7f0000000080)={r12, 0x7ff, 0x1, 0x7ff}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x66, &(0x7f00000001c0)={r13, 0x5}, &(0x7f0000000240)=0x8) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000c000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f0000000140)="b9000400000f326663430066eddc0f0f01c442c20100b905040000cf430f01c2c482198e5200c4e16d75572ab9800000c00f3235001000000f30", 0x3a}], 0x1, 0x0, 0x0, 0xffffff13) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, 0x0, 0x289}], 0x0, 0x0, 0x0, 0x208) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 160.416320][ T8452] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. 20:31:13 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x0, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000040), &(0x7f0000000180)=0x6) socket$inet(0x10, 0x2000000000000002, 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fallocate(r1, 0x20, 0x0, 0xfffffffffffffeff) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x505, 0x80400, 0xca14190e5f245b15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1b) sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) 20:31:13 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sequencer2\x00', 0x400, 0x0) ioctl$VIDIOC_ENUMSTD(r2, 0xc0485619, &(0x7f0000000240)={0x7, 0x0, "d11547c9f479ceb26a0e843346767280279a16e9d64b1b45", {0x40}, 0x6}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000500)={'gre0\x00\x00\x00\x00\x00\x00\x00\b\x00', 0x0}) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$IPT_SO_GET_INFO(r4, 0x0, 0x40, &(0x7f0000000000)={'raw\x00'}, &(0x7f0000000080)=0x54) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, r3}, 0xc) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="0300ffff", 0x6}], 0x2) r5 = syz_open_dev$ndb(&(0x7f0000000140)='/dev/nbd#\x00', 0x0, 0x80000) ioctl$IOC_PR_RESERVE(r5, 0x401070c9, &(0x7f0000000180)={0x10001, 0xfff}) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) accept4(r6, 0x0, 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r6, 0xc0406619, &(0x7f0000000100)={{0x7, 0x0, @identifier="8146218cd0ce50d8ef965ccf8e275cbf"}}) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) [ 160.643404][ T26] kauditd_printk_skb: 3 callbacks suppressed [ 160.643411][ T26] audit: type=1800 audit(1572121873.511:31): pid=8463 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz-executor.4" name="bus" dev="sda1" ino=16513 res=0 20:31:13 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x1fd) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x80000, 0x0) execveat(0xffffffffffffffff, 0x0, &(0x7f0000000140), 0x0, 0x1000) 20:31:13 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) r2 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x1a, 0x80801) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$netlink(0x10, 0x3, 0x800000000004) bind$netlink(r4, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfe, 0x29ffffff7}, 0xc) close(r3) 20:31:13 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x4030582a, &(0x7f0000000040)=0x20000) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000140)={{0x1000, 0x0, 0xfa74a776633ebe42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x8}, {0x0, 0xc000, 0xe, 0x1, 0x62, 0x0, 0x4, 0x0, 0x7, 0xb6, 0x40, 0x3f}, {0x4000, 0xf000, 0x8, 0x7f, 0x29, 0x6, 0x3, 0x1, 0x1f, 0xf8, 0x1, 0x8}, {0xd802, 0xb000, 0x8, 0x8, 0x7f, 0x4, 0x5, 0x86, 0x8, 0x3, 0x3}, {0x1, 0x6000, 0x10, 0x9, 0x60, 0x65, 0x81, 0x7f, 0x3, 0x0, 0x1, 0x3}, {0xa97ccb0fde04d1b3, 0x10000, 0x0, 0x0, 0xe, 0x6, 0x20, 0x1f, 0x0, 0x2, 0x3, 0x7}, {0x5000, 0x0, 0x11, 0xcb, 0x8, 0x5, 0x20, 0xee, 0x3, 0x0, 0x20, 0x40}, {0x208000, 0x4000, 0x10, 0x0, 0x6, 0xf4, 0x20, 0x0, 0x0, 0x4, 0x2, 0x3}, {0x6000, 0x4000}, {0x6000, 0x4}, 0x0, 0x0, 0x0, 0x220800, 0xa, 0x4000, 0x6000, [0x1, 0x5, 0x4, 0x100]}) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4030582a, &(0x7f0000000040)=0x20000) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = dup(r5) write$P9_RLOPEN(r6, 0x0, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r6, 0x29, 0x44, &(0x7f00000002c0)={'HL\x00'}, &(0x7f0000000300)=0x1e) r7 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0xb, 0x11, r8, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000100)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, 0x50) timer_create(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, @thr={&(0x7f0000000180)="4905ac2dcacc44e508dbc44abccff5594c41778113735b98fa74be8ebdd01384d9b00c7b0b139222df7deb2590048505eee3ceed311156967679105b6cf4a48c5e222ac185e3aadb8842237c221baca6330d06a7", 0x0}}, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000ac0)=@sack_info={0x0, 0x0, 0x22}, 0xc) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r9 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r11 = accept4(r10, 0x0, 0x0, 0x0) r12 = dup(r11) write$P9_RLOPEN(r12, 0x0, 0x0) ioctl$BLKGETSIZE64(r12, 0x80081272, &(0x7f0000000280)) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) ftruncate(r9, 0x200004) sendfile(r0, r9, 0x0, 0x80001d00c0d0) 20:31:13 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYRESDEC, @ANYRES32=0x0, @ANYBLOB="00000006000000000000000400000008009f0500e8f2241c7fef97f9cf9060abb96cba3681f8a70f2b3c5ad9272383b38536398b41f133f005fa1424a2f2be46667fae5ad5809fca61be35ac4a183e863e6505d98165681f4ad6a3ad2ef662b1b87cfefaa6a8adbf08654b4d2911497b848a13908f00255a9f64"], 0x3}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f00000001c0)=0x20dc14, 0x4) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000108000000000000000000000000e5a3557a8e43d5703c37bb720b4f91c97b2f7e1b1fdddc7c394f9b0defbd0be3cfca13997d40ed107b2af29ab9976d554076872771a32e703908476bd1bedc3c59fc74ea8a58163a53c4a786b0c2154fcce3b4412bd71ed0386d885fec49e2c06ea8d9a9da0ef8cf9d346859f87f1314f6fcc74d2b7142757431affab19c51af33ca44247fa21dc816095069cdbabeeb36f3a13e4a0b7b892f009280e311cee5cda0b33ee39c74f9acfdd56b4b13b0594f5f0892cc8c7d871e3bafc6cf25d47b22c20c00c7f3cef436b242afa0580dc988dbccc6f7e02b2d0fe936b60ff6cd3419b4725eb649f0b56b0b4235248e65aff5b808b397447f91cc778df70ba5d382f1824fe38850ae22", @ANYRES32=0x0, @ANYBLOB="000000000000000008001b0000ea00000800040000000000"], 0x30}}, 0x0) [ 161.287497][ T26] audit: type=1800 audit(1572121874.151:32): pid=8487 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz-executor.2" name="bus" dev="sda1" ino=16560 res=0 [ 162.503635][ T113] device hsr_slave_0 left promiscuous mode [ 162.543362][ T113] device hsr_slave_1 left promiscuous mode [ 162.616063][ T113] team0 (unregistering): Port device team_slave_1 removed [ 162.628877][ T113] team0 (unregistering): Port device team_slave_0 removed [ 162.641071][ T113] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 162.672499][ T113] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 162.760843][ T113] bond0 (unregistering): Released all slaves [ 162.867013][ T8492] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 163.012017][ T8505] IPVS: ftp: loaded support on port[0] = 21 [ 163.109340][ T8505] chnl_net:caif_netlink_parms(): no params data found [ 163.155516][ T8505] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.162725][ T8505] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.176459][ T8505] device bridge_slave_0 entered promiscuous mode [ 163.187567][ T8505] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.197892][ T8505] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.208757][ T8505] device bridge_slave_1 entered promiscuous mode [ 163.239023][ T8505] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 163.256129][ T8505] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 163.286672][ T8505] team0: Port device team_slave_0 added [ 163.298012][ T8505] team0: Port device team_slave_1 added [ 163.367034][ T8505] device hsr_slave_0 entered promiscuous mode 20:31:16 executing program 1: r0 = gettid() r1 = creat(&(0x7f0000001980)='./file0\x00', 0x1) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="2321202e2f66696c65300a50528993ab41859867b36367f9e445a1a29d04d33a0700745acbc25a92530c4b46f1d824ed164057372731e5bc6864c2e14cf6ca47b517b6d86500"/85], 0xb) prctl$PR_SET_PTRACER(0x59616d61, r0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0x4020565a, &(0x7f00000002c0)={0x3, 0xf0f000, {0x3f}}) ioctl$VIDIOC_DQEVENT(r2, 0x80885659, &(0x7f00000034c0)={0x0, @ctrl={0x0, 0x0, @value64}}) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r2, 0x80845663, &(0x7f0000000200)) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = getpgrp(0x0) waitid(0x0, r3, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8946, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb1Y\xa9\xc8J,`\xd2\x98\x00\x00\x00 ') close(r1) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000001840), 0x4) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) accept(0xffffffffffffffff, 0x0, 0x0) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) 20:31:16 executing program 3: restart_syscall() syz_mount_image$gfs2(&(0x7f0000000280)='gfs2\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB='discaYd,\x00']) syz_genetlink_get_family_id$nbd(&(0x7f0000000000)='nbd\x00') [ 163.423675][ T8505] device hsr_slave_1 entered promiscuous mode [ 163.473215][ T8505] debugfs: Directory 'hsr0' with parent '/' already present! [ 163.489204][ T8509] gfs2: Unknown parameter 'discaYd' [ 163.517785][ T8505] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.524926][ T8505] bridge0: port 2(bridge_slave_1) entered forwarding state [ 163.532310][ T8505] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.539439][ T8505] bridge0: port 1(bridge_slave_0) entered forwarding state [ 163.669207][ T8505] 8021q: adding VLAN 0 to HW filter on device bond0 [ 163.703737][ T3018] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 163.720423][ T3018] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.729233][ T3018] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.749010][ T8505] 8021q: adding VLAN 0 to HW filter on device team0 [ 163.766655][ T3018] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 163.778474][ T3018] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.786078][ T3018] bridge0: port 1(bridge_slave_0) entered forwarding state [ 163.801845][ T3512] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 163.811178][ T3512] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.818373][ T3512] bridge0: port 2(bridge_slave_1) entered forwarding state [ 163.844747][ T3512] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 163.855270][ T3512] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 163.870210][ T8505] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 163.881452][ T8505] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 163.895974][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 163.904241][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 163.912528][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 163.932647][ T8505] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 163.942507][ T8085] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 164.205348][ T8526] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready 20:31:17 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = eventfd2(0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$erofs(&(0x7f0000000040)='erofs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 20:31:17 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) r1 = creat(&(0x7f0000000140)='./file0\x00', 0x0) r2 = creat(&(0x7f0000000100)='./file0\x00', 0x0) write$binfmt_script(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="01"], 0x1) close(r2) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, 'stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00'}, {}, {0x20, 'hash\x00'}, {0x20, 'hash\x00'}, {0x20, 'security@nodev,ppp0keyring](wlan0systemvmnet0|'}], 0xa, "2b98738acd4c244aa2408c8200525ae67fbba987e5dc649d1b5ca27b31f13be2a53f9042af3d85c0209f3209db304baf9b3cbac3f76f87c86488898b8cd1657a4a73324694ab5c1a431c3de38cbe6e99919769359eda0fe4a66a293b34d65842353816201598de05919dbda45a3c9056a2155e76eef9b39be480c1bf93ce55486fbc05eca627d363138f251dc92ce0c99d5256dc7ebcccb018d54e82eae9f037d961ea0c1358fd18f90cff7107cd95bb678fe299f0a42841"}, 0x148) r5 = accept4(r4, 0x0, 0x0, 0x0) dup(r5) ioctl$int_in(r5, 0x5421, &(0x7f0000000000)=0x8) ioctl(r3, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") fallocate(r1, 0x0, 0x40000, 0x4) fallocate(r0, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0xd000000, r1}) 20:31:17 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) r2 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x1a, 0x80801) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$netlink(0x10, 0x3, 0x800000000004) bind$netlink(r4, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfe, 0x29ffffff7}, 0xc) close(r3) 20:31:17 executing program 0: socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) dup(r2) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e22, @multicast2}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='lo\x00\x00\x00\x00\xdf\xff\xff\xff\x00', 0x10) setsockopt$sock_int(r0, 0x1, 0x2000000012, &(0x7f0000000000)=0xfffffffc, 0x4) sendto$inet(r0, 0x0, 0xff1b, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/dev_snmp6\x00') getdents(r3, &(0x7f0000000180)=""/79, 0x22) getdents(r3, &(0x7f0000000000)=""/245, 0xf5) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = dup(r5) write$P9_RLOPEN(r6, 0x0, 0x0) bind$rxrpc(r6, &(0x7f0000000280)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e20, 0x5, @remote, 0x902}}, 0x24) r7 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000080)='pkcs7_test\x00', 0x0, &(0x7f0000000200)="3081a3", 0x1001, r7) r8 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, r7) r9 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000080)='pkcs7_test\x00', 0x0, &(0x7f0000000200)="3081a3", 0x1001, r9) ioctl$VFIO_IOMMU_GET_INFO(r0, 0x3b70, &(0x7f0000000300)={0x10}) keyctl$search(0xa, r8, 0x0, 0x0, 0x0) setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000240), 0x1192aca8268c9077, 0x3, 0x0, 0xffffffffffffff06) recvfrom$inet(r0, &(0x7f0000000040)=""/6, 0xffffffffffffff1e, 0x0, 0x0, 0xfffffffffffffe3d) 20:31:17 executing program 1: r0 = gettid() r1 = creat(&(0x7f0000001980)='./file0\x00', 0x1) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="2321202e2f66696c65300a50528993ab41859867b36367f9e445a1a29d04d33a0700745acbc25a92530c4b46f1d824ed164057372731e5bc6864c2e14cf6ca47b517b6d86500"/85], 0xb) prctl$PR_SET_PTRACER(0x59616d61, r0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0x4020565a, &(0x7f00000002c0)={0x3, 0xf0f000, {0x3f}}) ioctl$VIDIOC_DQEVENT(r2, 0x80885659, &(0x7f00000034c0)={0x0, @ctrl={0x0, 0x0, @value64}}) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r2, 0x80845663, &(0x7f0000000200)) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = getpgrp(0x0) waitid(0x0, r3, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8946, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb1Y\xa9\xc8J,`\xd2\x98\x00\x00\x00 ') close(r1) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000001840), 0x4) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) accept(0xffffffffffffffff, 0x0, 0x0) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) 20:31:17 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r1, &(0x7f0000000640)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="440400002800070500"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff000000000800010063627100180402000404060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000004000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a193ec32adcd00000000000000000000000000000000000000000000000000ffe800000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000204ea72b265cd683000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002e3c000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4ff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100005000500000000006198cc6884bdedaea3074cf77f"], 0x444}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', r3}) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r5, &(0x7f0000000640)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @dev}, 0x14) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="440400002800070500"/20, @ANYRES32=r7, @ANYBLOB="00000000ffffffff000000000800010063627100180402000404060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000004000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a193ec32adcd00000000000000000000000000000000000000000000000000ffe800000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000204ea72b265cd683000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002e3c000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4ff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100005000500000000006198cc6884bdedaea3074cf77f"], 0x444}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="040100001800040029000000fedbdf251c148f050001c80400090000080004001778d6ed88c8de34eaacb01c6b8a0e82015262903a4e32c4cd22cbb5c6f13791b75ae7eada68cebf689c0482fa42d683f5adfb9a5cc792182836734393a29f97d3a360b760536c332c7bcec9cc48ee4bbb3450ca86f2ebeb3eb7a81115664ab43595ebe19d82f8dc4c67307732b6ca66fa6a05956a8718b009a95c77c7e9a1531fb01e0b1bf181711b274d9cdc075ddb38bba5b2f06181134cea2e4fb5a7", @ANYRES32=r4, @ANYBLOB="840013000000000000000f00000000000000000000000f000000020000000000000000000000000000000000000000000000000000000000000004000000000000000000000f0f000000000000000000000000000000040000000000000000000000080000000f000000000000000000000000000000000000000000000000000000000008001a000300000008001a000700000008001a0007000000140012000000c70157b2a1d7f7b33f4202a1903108000100000f0f0008001a000400000014001200050075a42a56b6d83127c3a04abd4fc40c00090005000115", @ANYRES32=r7], 0x104}}, 0x0) [ 164.367567][ T8531] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 20:31:17 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = dup(r2) write$P9_RLOPEN(r3, 0x0, 0x0) write$9p(r3, &(0x7f0000000440), 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r4 = accept4(r0, 0x0, 0x0, 0x0) dup(r4) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x0) r7 = dup(r6) write$P9_RLOPEN(r7, 0x0, 0x0) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) openat$vsock(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vsock\x00', 0x0, 0x0) r9 = accept4(r8, 0x0, 0x0, 0x0) dup(r9) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) accept4(r10, 0x0, 0x0, 0x0) syz_mount_image$ntfs(&(0x7f00000000c0)='ntfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x20028, &(0x7f0000000440)=ANY=[@ANYRESDEC=r4, @ANYRESDEC, @ANYRES64, @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYPTR=&(0x7f0000000100)=ANY=[@ANYRES64=r4, @ANYRES16=r4, @ANYRESDEC=r7, @ANYPTR, @ANYBLOB="2a8d29dedd2616c3e974a5ac4541957ea3014e53f4f6266501d62e5a594eda09c3ba729811c0831ae95b9f30b498ced84a10ccc812a1728c411ca0d057197239d5a0e2e0f4be6ea870eb5b8212bea58f8cb9e3dd56a35bf27f18191120f1934f6202a67f82281520943820481a6e654269359fb869e47c4d29b4575f4e4979c345da19d0b1f1bedda6a6f26c052829c9373bcdc497c9062386a74dd6f966d189fbd20c0b9943168c580404bada144f7ead279a9cbaa7ae14cdf9218f769a94261a66f37069ea3181958570befe068119a5c370813026d4e1", @ANYRES16=r9, @ANYRES16], @ANYRESOCT=r4], @ANYRESHEX, @ANYPTR64=&(0x7f00000006c0)=ANY=[@ANYRESDEC, @ANYRES64=r10, @ANYBLOB="d294fe9e19b601b7acef12539745a63b362ed4e33301ea188c38fc3c6bc1b8221176f5cb4f665b6f4592fd45222159392764bdfbd99285444deb86f2521343fe9bc4a51645fd1cc6e67588ee9b9f683ffd87b56647cce085d2f9ca6c729d0c26353ee939a0bedaf90276219a484b4770a186feda62455b554224e1e09b0b867918ef65657fb2b9432063e2a63dd005a758f90b63bbfee39df5e05344985688e5f35cd4f44c993e07956502111c", @ANYPTR=&(0x7f0000000280)=ANY=[@ANYBLOB="d89d9fc0ce56e5393013c81fccfc073d72d7ddd4f1df211ae4fdbd448b9eb0389ac89c4ca6ab9b9c0b8639e0c0394ff13b809b72d4c231dde1563fbb5cff828bf9b53b484f5f1df2e526434d85200eb59c13eff0adecea0c3530a9e6721b409dbd26405ca41d16bdac8829dc86901dab66d90f437f0802e12601410da1f1485f870887348156f684c49c996d75643391a97eeeef8412b01291e7313ba687886561ebd5f54f40381dfb4d5c5175958b69a860a4bbc2062edaf0fb5e5e864d6f6a36d6bd3e6ddcfeb49b29e8d948d25813539e700c26f887b2a0ec20beb456c73aaa08e7824241918c5ed5a9d32a89d32efb51", @ANYPTR], @ANYBLOB="30901816273cf46190397d394433ce7a0b5a460ffcd7f5a813fa0ce14254b3d1df009f43a7bee55bc40f179810ffc4c9c05ac7258325ea0b29997ddf7d8185f76e6030c694dce841a1a315e996b52a7031b4e925ba660174fb9f46c70f1cd7ebc8ea7718951d10164ea104e750c86d5104d5d1152474ec8e387c4ff1c1a3657be1323a02ba3465e42ce1a5ccd1aa5d975ca21d38ae8afbc10ea3fc34c74e4cee9389e070f2"], @ANYBLOB="83b0c1c7076a60ad7c4b47f2548ca4557ca2d6a7c3f5e0b725b77551946f0175e1984f7eda94ef98e1e8d19727ba583a", @ANYRES64]) 20:31:17 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_pid(r1, &(0x7f0000000000), 0x10000000d) r2 = socket$kcm(0x2b, 0x1, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) r5 = dup(r4) write$P9_RLOPEN(r5, 0x0, 0x0) statx(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x100, 0x800, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$cgroup_int(r1, &(0x7f0000000040), 0x12) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r7 = accept4(r6, 0x0, 0x0, 0x0) dup(r7) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r8) r9 = socket(0x40000000015, 0x5, 0x0) close(r9) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r10, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r10, &(0x7f0000d83fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r10, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r9, 0x84, 0x66, &(0x7f0000000000)={r11}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_RTOINFO(r8, 0x84, 0x0, &(0x7f0000000140)={r11}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_RTOINFO(r7, 0x84, 0x0, &(0x7f0000000100)={r11, 0x93bf, 0x0, 0x3}, &(0x7f0000000280)=0x10) 20:31:17 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0xbb8) r1 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x3, 0x2) ioctl$RTC_VL_READ(r1, 0x80047013, &(0x7f0000000040)) 20:31:17 executing program 3: creat(0x0, 0x0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x2000000000000000, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x141}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect(r0, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80) sendmmsg(r0, &(0x7f0000001540), 0x553, 0x0) listen(0xffffffffffffffff, 0x0) 20:31:17 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f0000000180), &(0x7f00000001c0)=0x4) 20:31:17 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x200080, 0x0) ioctl$KVM_GET_FPU(r0, 0x81a0ae8c, &(0x7f00000002c0)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={0x0, 0xffffffffffffffff, 0x0, 0x8, &(0x7f00000001c0)='cgroup)\x00', 0xffffffffffffffff}, 0x30) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x8, 0x0, 0xe0, 0x0, 0x0, 0x82, 0x14020, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x2}, 0x0, 0x0, 0x8}, r1, 0xfffffdffffffffff, 0xffffffffffffffff, 0xa) prctl$PR_SET_KEEPCAPS(0x8, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') socket$kcm(0xa, 0x2, 0x73) fchdir(0xffffffffffffffff) socketpair$unix(0x1, 0x0, 0x0, 0x0) mount$9p_tcp(&(0x7f0000000200)='127.0.0.1\x00', &(0x7f0000000240)='./file0\x00', &(0x7f0000000480)='9p\x00', 0x2080012, &(0x7f00000004c0)=ANY=[@ANYBLOB="7472616e733d74636ea4706f72743d3078303030304a303030ba3030303465323384724e8a6d653d253a2c6f626a5f757365723d2c73756d643573756d2c00"]) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) [ 165.105599][ T8573] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.113054][ T8573] bridge0: port 1(bridge_slave_0) entered disabled state 20:31:18 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x005\n\xff\xd9\x15\xc1m\xd6\xcc\x05\xed\xac\xb3\xfe\x13\xadD\x1ai\xfck\x948\xcfT\xa4Q8\xcb\x9d\x80\x01V\xea\x8a\x112\xd8\xfe\x7f\x0f\"pX\xa4>\xf9\x00r\x14+\x1e\xdc\xb3]N\b\x00\x00\x00 +\xf4\xe1.\xb6\xde\xce\xe7`\xb2{\xeeu\x88b\xd7j`\xa8z\x89H\xcb\xfb\xc0\x06\xf8.\aA\xcf', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000180)='cpuset.memory_migrate\x00', 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) accept4(r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$swradio(&(0x7f0000000600)='/dev/swradio#\x00', 0x0, 0x2) ioctl$PPPIOCSMRU(r3, 0x40047452, &(0x7f0000000640)=0x9) sendfile(r1, r2, 0x0, 0x100003) 20:31:18 executing program 3: r0 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0xb4f, 0x8e7a772601aaf8af) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) r2 = socket(0x40000000015, 0x5, 0x0) close(r2) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r3, &(0x7f0000d83fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000000)={r4}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000140)={r4}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f00000000c0)={0x3ff, 0x3, 0x9, 0xfd61, r4}, &(0x7f0000000100)=0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r9 = accept4(r8, 0x0, 0x0, 0x0) dup(r9) ioctl$sock_inet_SIOCSIFNETMASK(r9, 0x891c, &(0x7f0000000000)={'eql\x00', {0x2, 0x4e22, @loopback}}) prctl$PR_GET_TIMERSLACK(0x1e) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r5, &(0x7f0000000240)={0x0, 0x1dc, &(0x7f0000000200)={&(0x7f00000001c0)={0xfffffffffffffefe, r10, 0x5, 0x0, 0x0, {{}, 0x0, 0x5, 0x0, {0x14, 0x19, {0xffffdffa}}}}, 0xfe7f}}, 0x0) 20:31:18 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x3ff, 0x4) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @remote}, 0x1c) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") 20:31:18 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000240)='team\x00') r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x1000000000001e, 0x4) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x0, 0x0, 0x1}, 0x20) r3 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') sendfile(r2, r3, &(0x7f0000000240)=0x202, 0x4000000000dc) sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="00000000a3180bebcdb612e2399933052f9d924db0ec966832861dad176ef5a1b3d274d48bc2413318ec8bb6b24c194a2918971f5ad24acf8fadffcca4324a982a6eecd1abb842f5fb002e13f3f3b27668446b8e3b60942cd7fc42a50632cbc0602bda73c82fa7982dddb958f604b6d1f30909719b5248f1386f48614dcc1f2b13907eaa2f132d997d824c5582c4e51984b1d343b0645e143fa37128fbb72e03d378b917d9a34ebd66d6a5e341bbb2ab", @ANYRES16, @ANYBLOB="050c27bd7000ffdbdf2503"], 0x3}, 0x1, 0x0, 0x0, 0x4}, 0x8040) ioctl$VT_RESIZE(0xffffffffffffffff, 0x5609, &(0x7f0000000380)={0x0, 0x8, 0x3}) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000280)={0x4, &(0x7f00000000c0)=[{}, {}, {}, {}]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000001c0)={0x0, 0x80000}) 20:31:18 executing program 1: mknod(&(0x7f0000000ffa)='./bus\x00', 0x1000, 0x0) r0 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x0, 0x2) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) futimesat(r0, &(0x7f0000000080)='./bus\x00', &(0x7f0000000100)={{r1, r2/1000+10000}}) open$dir(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) open(&(0x7f000054a000)='./bus\x00', 0xb00, 0x0) 20:31:18 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000140)="40c74adc77a4e27d876f441d952bf111375896d876c4ed0f2e703cd5f8b64ff3cd946b507d0419c09fc1fe6c"}, 0xa) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00', 0x4009}) r1 = socket$kcm(0x29, 0x2, 0x0) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000440)=0xa7) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f00000018c0)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\a\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83CZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x98\x86\"R\x06\x00\x00\x00\x00\x00\x00\x00\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x0e\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xfeu\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&\x014\x01\xf4\xb7\x83\x9a\xfa*\xa6\x06\xb7Pk7N\xc2\xd9\xee\xd0\xb0M\x00\xab\xc3\t\fc\xd8dx\xd5\x1dU*s)\x12[\x14\xb1\xc0\xd7\x1a\xa0\x16\xa2z\x9e\x93 \xddeF>29\v\x02\xa2b\x13R\xef\xffA,\xb9.$\xfa\x9f\xde[\x80\xd1=\xce\x1b\xeb\xf6\xf4\xe3z\x1f\x9dz\xa3\xc0\xe2\xa2\xb1\xeeq\xf5\xec0\x8e\xf4\xfb\xd9\x87\xf03\xdb\xae|\x10&V5c\xa6\xce\xcd\x8a\xdf\xe1\x89\"\xea\xde\xe7\xa3\xbe\xe7\xff\xf9 \x11\xfdY\xc6\xa1\xe8\xda\v\\?\xcb\x87\bn\x9b\x01\x1f\xf8\xe8\x1eV\xfaC\xdf\xc3Vv\x9b\x1a\xfc\x14.c\x94\xc9=\xb0\x0f!d\b\x18*@m\x7f\xaal\x17G\xd6?\x81\x16P\x03\x10e\xc3\xcd\xb1B\xeb\x01B\\\x91A\xa1\x8an\xb4#\xadr\x1e\x81v\xa2\x0e6x\xca\x8b\xa6\xd8\x81\x10:\x0e(\xdd\xfc\xc9\xc6\xb4\xf0\'f:\xbd\xfe\x11\xf8\xc8W\x81s^\xd9W\xf1\x94\xaf\xc5\x8a\xb4f\x1b\x17E\xb23\x12\xb0\xeb\xef\x8c\xb24h\xd7}\x7f\x92Hgej\x957\xe2A') ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, &(0x7f00000002c0)=0x8001) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000640)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f00000006c0)={&(0x7f0000000680)='./file0\x00', 0x0, 0x10}, 0x10) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001d00)={&(0x7f0000000300)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000001c80)=[{&(0x7f0000000480)=""/179, 0xb3}, {&(0x7f0000000700)=""/4096, 0x1000}, {&(0x7f0000000380)=""/109, 0x6d}, {&(0x7f0000001700)=""/183, 0xb7}, {&(0x7f00000017c0)=""/197, 0xc5}, {&(0x7f0000000000)=""/64, 0x40}, {&(0x7f0000000280)=""/8, 0x8}, {&(0x7f0000001b80)=""/226, 0xe2}], 0x8, &(0x7f0000000540)=""/52, 0x34}, 0x40000100) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r2, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000600)={0xffffffffffffffff, &(0x7f0000000580)="b2cc794af7bfb5f7ef3b0021f16af1e8dad8697954152758", &(0x7f00000005c0)=""/64}, 0x20) close(0xffffffffffffffff) write$cgroup_subtree(r0, &(0x7f00000000c0)={[{0x0, 'c\x86\xdd', 0x7}]}, 0x90ad) 20:31:18 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0xbb8) r1 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x3, 0x2) ioctl$RTC_VL_READ(r1, 0x80047013, &(0x7f0000000040)) 20:31:18 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0xbb8) r1 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x3, 0x2) ioctl$RTC_VL_READ(r1, 0x80047013, &(0x7f0000000040)) 20:31:19 executing program 4: pipe2(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) ioctl$MON_IOCX_MFETCH(0xffffffffffffffff, 0xc00c9207, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x800000003}, 0x10) write(r0, &(0x7f0000000040)="240000001a005f0214f9f407000904001100000000000001000200000800040003000000", 0x24) pipe(&(0x7f0000000080)={0xffffffffffffffff}) write$P9_RVERSION(r1, 0x0, 0xffffffae) 20:31:19 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000380)) socket$bt_bnep(0x1f, 0x3, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r1 = dup(r0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet(r0, 0x0, 0xfffffffffffffe35, 0x4000000, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x3ba) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) r4 = dup(r3) write$P9_RLOPEN(r4, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000040)={0x0, 0x80000000}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f00000000c0)={r5, 0x43c80c35}, 0x8) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000180)='lp\x00', 0x3) prctl$PR_GET_THP_DISABLE(0x2a) bind$inet6(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0x2bcf) shutdown(r0, 0x1) r6 = open(0x0, 0x0, 0x0) recvmsg(r0, 0x0, 0x100) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x50, r8, 0x101, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, [@IPVS_SVC_ATTR_FLAGS={0x9}, @IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, '\nblcr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8}, @IPVS_SVC_ATTR_AF={0x4}, @IPVS_SVC_ATTR_FWMARK={0x8}]}]}, 0x50}}, 0x0) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x70, r8, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x4c, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x2d}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x5c}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7a}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8001}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x29}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x41803b50}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}]}, 0x70}, 0x1, 0x0, 0x0, 0x1}, 0x89) 20:31:19 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r1, &(0x7f0000000200)=0x3c00, 0x43400) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f00000000c0)='./file0\x00', r3, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = dup(r5) write$P9_RLOPEN(r6, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000240)={{{@in=@empty, @in6=@ipv4={[], [], @loopback}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@initdev}}, &(0x7f0000000340)=0xe8) lstat(&(0x7f00000000c0)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r8) lstat(&(0x7f00000000c0)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r9) lstat(&(0x7f00000000c0)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r10) setxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="0200000001000f410000758061429975e15a0bd9b640becd0002000686", @ANYRES32=r3, @ANYBLOB="02000400", @ANYRES32=0xee00, @ANYBLOB="02000200", @ANYRES32=r7, @ANYBLOB="040007000000000008000100", @ANYRES32=r8, @ANYBLOB="080083ea", @ANYRES32=r9, @ANYBLOB="08000400", @ANYRES32=r10, @ANYBLOB="10000700000000002000020000000000"], 0x54, 0x2) r11 = socket$alg(0x26, 0x5, 0x0) bind$alg(r11, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r12 = accept4(r11, 0x0, 0x0, 0x0) dup(r12) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000400)={0xffffffffffffffff}) setsockopt$inet6_buf(r13, 0x29, 0x23, &(0x7f0000000440)="c33e0063925c43c6bc5b0a326ccb2480a2fecb5cc703573ba45d78650a1d6217e7df5f13bdd2fcc55787cc58d932c22f80039c24f110234afbd8291115c784a926baf10d441ce10c68ef07d38e137e358bde4f6c983fc8ec4a583f1b41a53f91bb07bc36958ffc9ddf4b25fa5f1202cce576d3deb1c18469729191b288dbe73eba36aa89569f", 0x86) 20:31:19 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000380)) socket$bt_bnep(0x1f, 0x3, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r1 = dup(r0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet(r0, 0x0, 0xfffffffffffffe35, 0x4000000, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x3ba) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) r4 = dup(r3) write$P9_RLOPEN(r4, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000040)={0x0, 0x80000000}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f00000000c0)={r5, 0x43c80c35}, 0x8) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000180)='lp\x00', 0x3) prctl$PR_GET_THP_DISABLE(0x2a) bind$inet6(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0x2bcf) shutdown(r0, 0x1) r6 = open(0x0, 0x0, 0x0) recvmsg(r0, 0x0, 0x100) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x50, r8, 0x101, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, [@IPVS_SVC_ATTR_FLAGS={0x9}, @IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, '\nblcr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8}, @IPVS_SVC_ATTR_AF={0x4}, @IPVS_SVC_ATTR_FWMARK={0x8}]}]}, 0x50}}, 0x0) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x70, r8, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x4c, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x2d}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x5c}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7a}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8001}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x29}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x41803b50}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}]}, 0x70}, 0x1, 0x0, 0x0, 0x1}, 0x89) 20:31:19 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r1, &(0x7f0000000200)=0x3c00, 0x43400) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f00000000c0)='./file0\x00', r3, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = dup(r5) write$P9_RLOPEN(r6, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000240)={{{@in=@empty, @in6=@ipv4={[], [], @loopback}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@initdev}}, &(0x7f0000000340)=0xe8) lstat(&(0x7f00000000c0)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r8) lstat(&(0x7f00000000c0)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r9) lstat(&(0x7f00000000c0)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r10) setxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="0200000001000f410000758061429975e15a0bd9b640becd0002000686", @ANYRES32=r3, @ANYBLOB="02000400", @ANYRES32=0xee00, @ANYBLOB="02000200", @ANYRES32=r7, @ANYBLOB="040007000000000008000100", @ANYRES32=r8, @ANYBLOB="080083ea", @ANYRES32=r9, @ANYBLOB="08000400", @ANYRES32=r10, @ANYBLOB="10000700000000002000020000000000"], 0x54, 0x2) r11 = socket$alg(0x26, 0x5, 0x0) bind$alg(r11, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r12 = accept4(r11, 0x0, 0x0, 0x0) dup(r12) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000400)={0xffffffffffffffff}) setsockopt$inet6_buf(r13, 0x29, 0x23, &(0x7f0000000440)="c33e0063925c43c6bc5b0a326ccb2480a2fecb5cc703573ba45d78650a1d6217e7df5f13bdd2fcc55787cc58d932c22f80039c24f110234afbd8291115c784a926baf10d441ce10c68ef07d38e137e358bde4f6c983fc8ec4a583f1b41a53f91bb07bc36958ffc9ddf4b25fa5f1202cce576d3deb1c18469729191b288dbe73eba36aa89569f", 0x86) 20:31:20 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) fsopen(&(0x7f00000000c0)='ocfs2\x00', 0x1) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) splice(r1, 0x0, r3, 0x0, 0x1420000a77, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x100, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}, @IFLA_NET_NS_FD={0xfffffffffffffd3c}]}, 0x50}}, 0x0) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[], 0xfffffd88) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = dup(r5) write$P9_RLOPEN(r6, 0x0, 0x0) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000100)) 20:31:20 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r1, &(0x7f0000000200)=0x3c00, 0x43400) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f00000000c0)='./file0\x00', r3, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = dup(r5) write$P9_RLOPEN(r6, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000240)={{{@in=@empty, @in6=@ipv4={[], [], @loopback}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@initdev}}, &(0x7f0000000340)=0xe8) lstat(&(0x7f00000000c0)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r8) lstat(&(0x7f00000000c0)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r9) lstat(&(0x7f00000000c0)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r10) setxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="0200000001000f410000758061429975e15a0bd9b640becd0002000686", @ANYRES32=r3, @ANYBLOB="02000400", @ANYRES32=0xee00, @ANYBLOB="02000200", @ANYRES32=r7, @ANYBLOB="040007000000000008000100", @ANYRES32=r8, @ANYBLOB="080083ea", @ANYRES32=r9, @ANYBLOB="08000400", @ANYRES32=r10, @ANYBLOB="10000700000000002000020000000000"], 0x54, 0x2) r11 = socket$alg(0x26, 0x5, 0x0) bind$alg(r11, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r12 = accept4(r11, 0x0, 0x0, 0x0) dup(r12) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000400)={0xffffffffffffffff}) setsockopt$inet6_buf(r13, 0x29, 0x23, &(0x7f0000000440)="c33e0063925c43c6bc5b0a326ccb2480a2fecb5cc703573ba45d78650a1d6217e7df5f13bdd2fcc55787cc58d932c22f80039c24f110234afbd8291115c784a926baf10d441ce10c68ef07d38e137e358bde4f6c983fc8ec4a583f1b41a53f91bb07bc36958ffc9ddf4b25fa5f1202cce576d3deb1c18469729191b288dbe73eba36aa89569f", 0x86) 20:31:20 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) accept4(r1, 0x0, 0x0, 0x0) connect(r1, &(0x7f0000000100)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x3, 0x1, 0x2}}, 0x80) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) dup(r3) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) dup(r5) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r7 = accept4(r6, 0x0, 0x0, 0x0) r8 = dup(r7) write$P9_RLOPEN(r8, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f00000001c0)={0x14, 0x8}, 0x10) write(r0, &(0x7f00000000c0)="240000001e005f0214fffffffffffff80d0000000000000000000000080040000d000000", 0x24) r9 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0xdda, 0x8180c0) ioctl$EVIOCREVOKE(r9, 0x40044591, &(0x7f0000000180)=0x1) 20:31:20 executing program 4: ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000140)) socket$tipc(0x1e, 0x2, 0x0) socket$kcm(0x10, 0x0, 0x0) getpid() r0 = gettid() sched_setscheduler(r0, 0x0, &(0x7f0000000000)=0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x200, 0x0, 0x3, 0x2, 0x4000000000000001, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000008000/0x18000)=nil, &(0x7f00000008c0)=[@text16={0x10, &(0x7f0000000080)="66b9800000c00f326635000800000f300f01c4e20eba4300ed660f128bcd000f01c4a9adb9ba6100b80930efba4200ec66660fc2d0ff", 0x36}], 0x1, 0x0, 0x0, 0x204) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x1080, 0x0) ioctl$KIOCSOUND(r4, 0x4b2f, 0x7) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000004cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 168.300172][ T8654] IPVS: ftp: loaded support on port[0] = 21 [ 168.415256][ T8654] chnl_net:caif_netlink_parms(): no params data found [ 168.439668][ T8654] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.446893][ T8654] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.454598][ T8654] device bridge_slave_0 entered promiscuous mode [ 168.462522][ T8654] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.469703][ T8654] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.477355][ T8654] device bridge_slave_1 entered promiscuous mode [ 168.550423][ T8654] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 168.561878][ T8654] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 168.578030][ T113] device bridge_slave_1 left promiscuous mode [ 168.586240][ T113] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.644265][ T113] device bridge_slave_0 left promiscuous mode [ 168.650645][ T113] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.244310][ T113] device hsr_slave_0 left promiscuous mode [ 170.293421][ T113] device hsr_slave_1 left promiscuous mode [ 170.342292][ T113] team0 (unregistering): Port device team_slave_1 removed [ 170.355226][ T113] team0 (unregistering): Port device team_slave_0 removed [ 170.366469][ T113] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 170.407206][ T113] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 170.521321][ T113] bond0 (unregistering): Released all slaves [ 170.616858][ T8654] team0: Port device team_slave_0 added [ 170.628030][ T8654] team0: Port device team_slave_1 added [ 170.685748][ T8654] device hsr_slave_0 entered promiscuous mode [ 170.743653][ T8654] device hsr_slave_1 entered promiscuous mode [ 170.783329][ T8654] debugfs: Directory 'hsr0' with parent '/' already present! [ 170.821777][ T8654] 8021q: adding VLAN 0 to HW filter on device bond0 [ 170.835744][ T3018] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 170.845982][ T3018] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 170.856701][ T8654] 8021q: adding VLAN 0 to HW filter on device team0 [ 170.866453][ T3018] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 170.874990][ T3018] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 170.883653][ T3018] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.890690][ T3018] bridge0: port 1(bridge_slave_0) entered forwarding state [ 170.898669][ T3018] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 170.937211][ T8110] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 170.946400][ T8110] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 170.955113][ T8110] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.962164][ T8110] bridge0: port 2(bridge_slave_1) entered forwarding state [ 170.991730][ T8576] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 171.008911][ T8576] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 171.019908][ T8576] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 171.035331][ T8576] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 171.044485][ T8576] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 171.053992][ T8576] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 171.062423][ T8576] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 171.071445][ T8576] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 171.082097][ T8654] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 171.091022][ T8110] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 171.116496][ T8654] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 171.270696][ T8663] device nr0 entered promiscuous mode [ 171.583074][ T8663] device nr0 entered promiscuous mode 20:31:24 executing program 5: open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) mount(&(0x7f0000000200)=@filename='./file0\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1001084, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x9c283a, &(0x7f0000000040)) 20:31:24 executing program 3: r0 = memfd_create(&(0x7f0000000080)='nR\xc3A\xf9\x13\xe8^)=o9\xe0\xd5\xe2o@\xc6\x15,\xcc\xf5\x81 Iwlabel\x00', 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x1f, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x25615e6a4ec5ffc5}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write(r0, &(0x7f00000000c0)='i', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) keyctl$session_to_parent(0x12) close(r2) r3 = socket(0x40000000015, 0x5, 0x0) close(r3) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r4, &(0x7f0000d83fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f0000000000)={r5}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000140)={r5}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={r5, 0xffff}, &(0x7f0000000100)=0x8) getsockopt$inet6_int(r1, 0x29, 0x48, 0x0, &(0x7f0000000200)=0x31) 20:31:24 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r1, &(0x7f0000000200)=0x3c00, 0x43400) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f00000000c0)='./file0\x00', r3, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = dup(r5) write$P9_RLOPEN(r6, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000240)={{{@in=@empty, @in6=@ipv4={[], [], @loopback}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@initdev}}, &(0x7f0000000340)=0xe8) lstat(&(0x7f00000000c0)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r8) lstat(&(0x7f00000000c0)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r9) lstat(&(0x7f00000000c0)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r10) setxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="0200000001000f410000758061429975e15a0bd9b640becd0002000686", @ANYRES32=r3, @ANYBLOB="02000400", @ANYRES32=0xee00, @ANYBLOB="02000200", @ANYRES32=r7, @ANYBLOB="040007000000000008000100", @ANYRES32=r8, @ANYBLOB="080083ea", @ANYRES32=r9, @ANYBLOB="08000400", @ANYRES32=r10, @ANYBLOB="10000700000000002000020000000000"], 0x54, 0x2) r11 = socket$alg(0x26, 0x5, 0x0) bind$alg(r11, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r12 = accept4(r11, 0x0, 0x0, 0x0) dup(r12) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000400)={0xffffffffffffffff}) setsockopt$inet6_buf(r13, 0x29, 0x23, &(0x7f0000000440)="c33e0063925c43c6bc5b0a326ccb2480a2fecb5cc703573ba45d78650a1d6217e7df5f13bdd2fcc55787cc58d932c22f80039c24f110234afbd8291115c784a926baf10d441ce10c68ef07d38e137e358bde4f6c983fc8ec4a583f1b41a53f91bb07bc36958ffc9ddf4b25fa5f1202cce576d3deb1c18469729191b288dbe73eba36aa89569f", 0x86) 20:31:24 executing program 4: r0 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x10003, 0x80011, r0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(0xffffffffffffffff, 0xc0a85320, &(0x7f00000001c0)={{}, 'port0\x00', 0x0, 0x0, 0x4}) syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = syz_open_dev$sndpcmc(0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x2000000, &(0x7f00000000c0)={[{@xino_auto='xino=auto'}, {@metacopy_on='metacopy=on'}], [{@defcontext={'defcontext', 0x3d, 'user_u'}}]}) ioctl(r1, 0xc2604110, &(0x7f0000000000)) 20:31:24 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x1f1, &(0x7f00000003c0)={0x0, 0x147}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0xfffffe4f) r5 = accept4(r3, 0x0, 0x0, 0x800) r6 = dup(r5) pipe2(&(0x7f0000000280)={0xffffffffffffffff}, 0x43000) ioctl$CAPI_SET_FLAGS(r7, 0x80044324, &(0x7f00000002c0)=0x1) write$P9_RLOPEN(r6, 0x0, 0x0) ioctl$SIOCRSACCEPT(r6, 0x89e3) syz_open_dev$sndpcmp(&(0x7f0000000240)='/dev/snd/pcmC#D#p\x00', 0x9, 0x40000) write$apparmor_exec(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="65786563206c6f76626f78026574315e73656c6600c53b4c21788d11a6ad9bc4716c30e426a1502df4b1e9d470860dad0263e852c4484d9b188e45c7c1bb5017c48b0e31bba9de400a4d593240e4de205c"], 0x15) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r9 = accept4(r8, 0x0, 0x0, 0x0) r10 = dup(r9) write$P9_RLOPEN(r10, 0x0, 0x0) r11 = socket$alg(0x26, 0x5, 0x0) bind$alg(r11, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r12 = accept4(r11, 0x0, 0x0, 0x0) r13 = dup(r12) write$P9_RLOPEN(r13, 0x0, 0x0) r14 = socket$alg(0x26, 0x5, 0x0) bind$alg(r14, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r15 = accept4(r14, 0x0, 0x0, 0x0) r16 = dup(r15) write$P9_RLOPEN(r16, 0x0, 0x0) r17 = socket$alg(0x26, 0x5, 0x0) bind$alg(r17, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r18 = accept4(r17, 0x0, 0x0, 0x0) dup(r18) r19 = socket$alg(0x26, 0x5, 0x0) bind$alg(r19, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r20 = accept4(r19, 0x0, 0x0, 0x0) dup(r20) r21 = socket$alg(0x26, 0x5, 0x0) bind$alg(r21, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) accept4(r21, 0x0, 0x0, 0x0) r22 = socket$alg(0x26, 0x5, 0x0) bind$alg(r22, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r23 = accept4(r22, 0x0, 0x0, 0x0) dup(r23) r24 = socket$alg(0x26, 0x5, 0x0) bind$alg(r24, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r25 = accept4(r24, 0x0, 0x0, 0x0) r26 = dup(r25) write$P9_RLOPEN(r26, 0x0, 0x0) r27 = socket$alg(0x26, 0x5, 0x0) bind$alg(r27, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r28 = accept4(r27, 0x0, 0x0, 0x0) dup(r28) r29 = socket$alg(0x26, 0x5, 0x0) bind$alg(r29, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r30 = accept4(r29, 0x0, 0x0, 0x0) dup(r30) r31 = socket$alg(0x26, 0x5, 0x0) bind$alg(r31, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) accept4(r31, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYPTR=&(0x7f0000002480)=ANY=[@ANYPTR64=&(0x7f0000000300)=ANY=[@ANYPTR64, @ANYPTR, @ANYRES64, @ANYRES16=r13, @ANYRES16=r5, @ANYRES16, @ANYPTR, @ANYPTR64], @ANYRES32=r16, @ANYRES32=0x0, @ANYPTR=&(0x7f0000000540)=ANY=[@ANYRES32, @ANYRESDEC=r6, @ANYRES16=r18, @ANYRES32=0x0, @ANYRES32=r6, @ANYRESDEC, @ANYBLOB="b920b4d281823557a68646381da60c2bf638c7f5108444d9ff129dae1131b8bb7ed788fcbf845244bd8e46dd4c3e8f2c3b78971698349abbf3861bf94e64ac70dd3bdb0caf126707ad7b09f46dc01c71986edc9b1538aac243692ea3ed5f080d17f267eb8daa16819a18e72991a532b1d1dbfae1db55b85cf9a93f4095c30fd1dab18c461a4f5fc6d81e349f2f8ca5d1cdcbf90cbe"], @ANYBLOB="c6103654a005876e27634d3de260d9f967bf9fdc37995bdf41250ffbf80ba14fa37bc5696a29e4e9d1df034afcec9392098af93d07e2a08efce02d19a106cf12ae66e35feb2c437ee28f389e5be2942b7ae37fe78c86be60f5ce84fcab937284110b318bfd1af015b4b80c12b51b3f69f75f94743476a6bf3fb3fe9d5fc139c320a14e74a695891a8e0a013638f3e7fba3fbf16d61ba0be89c818855f23535d03292bd1a2c751f0244d026a41ef9244284aabd2639b5a4", @ANYRESHEX=r20, @ANYPTR=&(0x7f0000000640)=ANY=[@ANYRES64=r16, @ANYRESDEC=r28, @ANYRES32=r30, @ANYPTR=&(0x7f0000000180)=ANY=[@ANYRES64=0x0], @ANYBLOB="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"], @ANYRES16=r19, @ANYPTR64=&(0x7f0000000840)=ANY=[@ANYRES64=r31, @ANYRES16=r4, @ANYRESDEC=r26, @ANYRES32=r23, @ANYRESDEC=r5, @ANYRESDEC, @ANYRES64, @ANYRESOCT=r7]], @ANYBLOB="0100000000000000280012000c00010076657468000000001800020814a79f7488f611d01cb85041b7f80900000000000046d0c0d147a59ef54aa456a5fad60d670000000000000000000000000062e8c5d6ee86e7f70280c3f5c57dfeadbd94474726e57ae13889ccbe40b7ae47fa934b5322f75428aba1d7d04f713f0650f83ad9f6930d870efea9cffd1521e5f6b0942eaa48898a4b0b76b0e1eec40924be37923e32f8286f9d62dcb90aeb5b57646354c9b8225fea4ae76b7f104a13450a86ba870d03b7a9cfc22e36c898fa36aedf9bad90e1ad43504afd3c3515b04785414b4ee059", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x5}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={@mcast1, @rand_addr="b8594fb7a2c0a5845a4833d9d3289ec6", @local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2}) 20:31:24 executing program 2: socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r0, &(0x7f0000002d00), 0x80000000000027a, 0x0) sendmmsg(r0, 0x0, 0x0, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x80) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0xfffffffffffffdc6, 0x20000004, &(0x7f0000000280)={0xa, 0x4e22}, 0x1c) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) recvfrom$inet6(r2, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880), 0x1c) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000000c0)) fstat(0xffffffffffffffff, &(0x7f0000000180)) socket(0x0, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) pipe(&(0x7f0000000100)) fstat(0xffffffffffffffff, &(0x7f0000000180)) socket(0x0, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) socket$inet6(0xa, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) pipe(0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) accept4(r3, 0x0, 0x0, 0x0) write(r3, &(0x7f00000002c0)="ed581650320b7808703e9ce6c623b876190fe15d23107bbe4cf897542581c7420c841934b5e705dd9c876ce359167c24c72dbdd7ba50e1db65f265fa929a6c34ec3cceb49442480172a0ccccebfceef5ecdf28e4e592b2d29b3000c43ee8b54f5075b9e0002edf9d9536e58d5d57b5fc536e52bc15f7fc467bd04734567e5f2acc45d3a6c856f4628d1888ad513b6613d794f85aafc1435ad1afb9903d7ce805b9446713f03ab139f0f18c63f2e6aa561b70419b51941ed5a57f1407109bd639159a1fa47c4d4321b1", 0x16e) fchdir(0xffffffffffffffff) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = dup(r5) write$P9_RLOPEN(r6, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r6, &(0x7f0000000080)={0x245ce2d4c5036c15}) fstat(0xffffffffffffffff, 0x0) socket(0x10, 0x0, 0x40) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) epoll_create1(0x0) epoll_create1(0x0) close(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) r7 = accept4(r1, 0x0, 0x0, 0x0) sendto$inet6(r7, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) [ 171.848255][ T26] audit: type=1800 audit(1572121884.691:33): pid=8677 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=16578 res=0 [ 171.925073][ T8677] EXT4-fs (sda1): re-mounted. Opts: 20:31:24 executing program 3: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000180)=@filename='./file0\x00', &(0x7f00000000c0)='.', 0x0, 0x23880, 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x80000, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) umount2(&(0x7f0000000040)='./file0\x00', 0x0) mount(&(0x7f0000000000), &(0x7f0000000140)='.', 0x0, 0x2003002480, 0x0) 20:31:24 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='memory.events\x00\xefG\xa3\x89\xeb3\xa9\n\f\x1fh\xf5\f\x01\x8b\x1e\x02\x847V\xaf\xa3\xf1\xc5E]\xfe!r\xf9\x95_\x02Gc\xa0\x05r5deU\xa6t\xafY\xef\xae_\x18\xa8\xfe2+>\xda\x872h: \xd7R[`\xad\"\xb8<\xfb\x1b\xb6n`\xb3\"\xa6\xb2\xebP\xbc]E\xb7\x045\xcc\xf4\xa4\xef\xfb\x04\xf2\"\x0e\x8a1|\xb6Y\xcfmN\xdd\xebR\xd7\xfc\xaf\x80\x83\x85t\xc1\xbf8\xd0\x1d\x87\xbf\bc\xdf4t\xf9J\\fj.\xf3\xc6u\xec1\x80\x92\a\xc9\xd61\fUtx\x0e\xa7\xe2\xb9)', 0x26e1, 0x0) [ 172.033427][ T8689] EXT4-fs (sda1): re-mounted. Opts: 20:31:25 executing program 0: r0 = gettid() prctl$PR_GET_FPEMU(0x9, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) capget(0x0, 0x0) open$dir(0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) socketpair$unix(0x1, 0x0, 0x0, 0x0) getsockopt$IP_VS_SO_GET_VERSION(0xffffffffffffffff, 0x0, 0x480, 0x0, 0x0) timer_create(0x0, &(0x7f00000001c0)={0x0, 0x12}, &(0x7f00000000c0)) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) capset(0x0, 0x0) tkill(r0, 0x1000000000016) 20:31:25 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x6, 0x0) write$binfmt_aout(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="0004060b0bb20550b787261240001607a80f3d6ed020515e82750786170073df5794c4a960004f3636219432fc0089cb223b2c040000710e13790531855797911fbf30beab2a37111cdaa018a27df340602b20d40f9db17b74e333810664d5600049c04787397305a11437af115050c3220b06cb4671d94bf87e02002107d68c1ef04aff0a6af771e242ad112ab6018a67836f63fb2061970ebede95b2d968d040f1dc1c44d9f9365f8a4e42fcf75f2fbcd16b7b8b5892ebd4b6d7b50000000000000000"], 0x3c) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000240)) r3 = syz_open_pts(r2, 0x0) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000040)={0x0, 0x81}) 20:31:25 executing program 5: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x300cce, &(0x7f0000000400)=ANY=[@ANYBLOB="aaaaaa0665faaaaaaa010004002c0781f6ff0086dd60b409000003000002baaa69c50080000000ffffe0000002ff27249ea300000000000000000000013c0090780207040060b680fa0000000000000000000000001d00ff0300000e1b00000000800000000000ffffac76db1a5874c4c3f3a3b782fb54b33eb4038b0ae66c377e40f0b567f27335d5dcb41145c803cfb2438eb6f5e0775873bda3180d1ed23a6125dea8d74632ec1d903ac8bf90d22d79eb60df4f11f313b6f3694d8decbfda53537917c03b4d8d53628bd7bf3d4776"], 0x0) 20:31:25 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) close(r0) 20:31:25 executing program 3: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000180)=@filename='./file0\x00', &(0x7f00000000c0)='.', 0x0, 0x23880, 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x80000, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) umount2(&(0x7f0000000040)='./file0\x00', 0x0) mount(&(0x7f0000000000), &(0x7f0000000140)='.', 0x0, 0x2003002480, 0x0) 20:31:25 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x6, 0x0) write$binfmt_aout(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="0004060b0bb20550b787261240001607a80f3d6ed020515e82750786170073df5794c4a960004f3636219432fc0089cb223b2c040000710e13790531855797911fbf30beab2a37111cdaa018a27df340602b20d40f9db17b74e333810664d5600049c04787397305a11437af115050c3220b06cb4671d94bf87e02002107d68c1ef04aff0a6af771e242ad112ab6018a67836f63fb2061970ebede95b2d968d040f1dc1c44d9f9365f8a4e42fcf75f2fbcd16b7b8b5892ebd4b6d7b50000000000000000"], 0x3c) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000240)) r3 = syz_open_pts(r2, 0x0) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000040)={0x0, 0x81}) 20:31:25 executing program 0: 20:31:25 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x6, 0x0) write$binfmt_aout(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="0004060b0bb20550b787261240001607a80f3d6ed020515e82750786170073df5794c4a960004f3636219432fc0089cb223b2c040000710e13790531855797911fbf30beab2a37111cdaa018a27df340602b20d40f9db17b74e333810664d5600049c04787397305a11437af115050c3220b06cb4671d94bf87e02002107d68c1ef04aff0a6af771e242ad112ab6018a67836f63fb2061970ebede95b2d968d040f1dc1c44d9f9365f8a4e42fcf75f2fbcd16b7b8b5892ebd4b6d7b50000000000000000"], 0x3c) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000240)) r3 = syz_open_pts(r2, 0x0) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000040)={0x0, 0x81}) [ 174.241421][ T8749] IPVS: ftp: loaded support on port[0] = 21 [ 174.274665][ T113] device bridge_slave_1 left promiscuous mode [ 174.281500][ T113] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.324021][ T113] device bridge_slave_0 left promiscuous mode [ 174.330551][ T113] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.893812][ T113] device hsr_slave_0 left promiscuous mode [ 175.933504][ T113] device hsr_slave_1 left promiscuous mode [ 175.986131][ T113] team0 (unregistering): Port device team_slave_1 removed [ 175.998980][ T113] team0 (unregistering): Port device team_slave_0 removed [ 176.011967][ T113] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 176.067507][ T113] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 176.153870][ T113] bond0 (unregistering): Released all slaves [ 176.286123][ T8749] chnl_net:caif_netlink_parms(): no params data found [ 176.317733][ T8749] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.325155][ T8749] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.332973][ T8749] device bridge_slave_0 entered promiscuous mode [ 176.341691][ T8749] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.348905][ T8749] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.356935][ T8749] device bridge_slave_1 entered promiscuous mode [ 176.405347][ T8749] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 176.418142][ T8749] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 176.445850][ T8749] team0: Port device team_slave_0 added [ 176.454551][ T8749] team0: Port device team_slave_1 added [ 176.525609][ T8749] device hsr_slave_0 entered promiscuous mode [ 176.563599][ T8749] device hsr_slave_1 entered promiscuous mode [ 176.633337][ T8749] debugfs: Directory 'hsr0' with parent '/' already present! [ 176.672860][ T8749] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.679996][ T8749] bridge0: port 2(bridge_slave_1) entered forwarding state [ 176.687377][ T8749] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.694467][ T8749] bridge0: port 1(bridge_slave_0) entered forwarding state [ 176.796708][ T8749] 8021q: adding VLAN 0 to HW filter on device bond0 [ 176.821365][ T3018] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 176.837495][ T3018] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.849493][ T3018] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.872121][ T8749] 8021q: adding VLAN 0 to HW filter on device team0 [ 176.893042][ T3018] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 176.909867][ T3018] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.917324][ T3018] bridge0: port 1(bridge_slave_0) entered forwarding state [ 176.952313][ T8576] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 176.961410][ T8576] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.968655][ T8576] bridge0: port 2(bridge_slave_1) entered forwarding state [ 176.984639][ T8576] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 177.010482][ T8749] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 177.036033][ T8749] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 177.054527][ T3018] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 177.062525][ T3018] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 177.077372][ T3018] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 177.087459][ T3018] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 177.096345][ T3018] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 177.110520][ T8749] 8021q: adding VLAN 0 to HW filter on device batadv0 20:31:30 executing program 1: 20:31:30 executing program 3: 20:31:30 executing program 0: 20:31:30 executing program 5: 20:31:30 executing program 2: 20:31:30 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000080)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000140)={'lo\x00\x00\xe7\xff\x03\x00\x00\x00\x00\x06\x00', 0xfd}) 20:31:30 executing program 0: 20:31:30 executing program 3: 20:31:30 executing program 2: 20:31:30 executing program 5: 20:31:30 executing program 0: 20:31:30 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000380)='net/protocols\x00') sendfile(r0, r1, &(0x7f0000000040)=0xffffc, 0xbb30) r2 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r2, 0x40104593, &(0x7f0000000100)={0x0, 0xff00, 0x0}) 20:31:30 executing program 2: pipe(&(0x7f0000000280)) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, &(0x7f0000000400)={0x3, 0x1}) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x1ee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x20) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000100)) ptrace(0x10, r1) ptrace$pokeuser(0x6, r1, 0x388, 0xfffffffffffffffe) 20:31:30 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000000)={0x0, 0xfffffe24, 0x0}) 20:31:30 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000140)={'veth0\x00', 0x201a}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0\x00', 0x0}) r5 = socket$inet6(0xa, 0x1000000000002, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x14, &(0x7f0000000080)={@mcast2, r4}, 0x14) close(r3) pipe(&(0x7f0000000380)={0xffffffffffffffff}) dup2(r6, r5) 20:31:30 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000005c0), 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x8) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f0000000100)) ptrace(0x10, r0) ptrace$pokeuser(0x6, r0, 0x388, 0xfffffffffffffffe) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) 20:31:30 executing program 2: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_tables_targets\x00') preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(r0, r1, 0x0, 0xa808) 20:31:30 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) 20:31:30 executing program 3: r0 = socket(0x2000000011, 0x4000000000080002, 0x0) sendmmsg(r0, &(0x7f0000000100)=[{{&(0x7f0000000040)=@l2, 0x80, 0x0}}, {{&(0x7f0000000040)=@nfc={0x27, 0x6}, 0x80, 0x0}}], 0x2, 0x0) 20:31:30 executing program 5: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000800)='/dev/ptmx\x00', 0x4001, 0x0) 20:31:30 executing program 0: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioprio_set$pid(0x2, 0x0, 0x0) clone(0xa02a6500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) 20:31:30 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000380)='net/protocols\x00') sendfile(r0, r1, &(0x7f0000000040)=0xffffc, 0xbb30) r2 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r2, 0x40104593, &(0x7f0000000100)={0x0, 0xff00, 0x0}) 20:31:31 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000380)='net/protocols\x00') sendfile(r0, r1, &(0x7f0000000040)=0xffffc, 0xbb30) r2 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r2, 0x40104593, &(0x7f0000000100)={0x0, 0xff00, 0x0}) 20:31:31 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000bc0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vat\x00\x00\x00\x00\x00\x00\x00\xa8\x03\x00', 0x43732e5398416f1a}) r2 = socket$nl_route(0x10, 0x3, 0x0) pread64(r1, &(0x7f0000000200)=""/39, 0x27, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0xfffffffffffffe5d, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0000000000"], 0x28}}, 0x0) dup2(r0, r1) [ 178.274216][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 178.280831][ C0] protocol 88fb is buggy, dev hsr_slave_1 20:31:31 executing program 0: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioprio_set$pid(0x2, 0x0, 0x0) clone(0xa02a6500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) 20:31:31 executing program 2: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000440)='cgroup2\x00', 0x0, 0x0) mkdir(&(0x7f0000000180)='./file0//ile0\x00', 0x0) r0 = socket$unix(0x1, 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) rmdir(&(0x7f0000000340)='./file0//ile0\x00') [ 178.319983][ T8836] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 178.339196][ T8836] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 20:31:31 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000380)='net/protocols\x00') sendfile(r0, r1, &(0x7f0000000040)=0xffffc, 0xbb30) r2 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r2, 0x40104593, &(0x7f0000000100)={0x0, 0xff00, 0x0}) 20:31:31 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000380)='net/protocols\x00') sendfile(r0, r1, &(0x7f0000000040)=0xffffc, 0xbb30) r2 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r2, 0x40104593, &(0x7f0000000100)={0x0, 0xff00, 0x0}) [ 178.418974][ T8836] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. 20:31:31 executing program 0: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioprio_set$pid(0x2, 0x0, 0x0) clone(0xa02a6500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) 20:31:31 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='oom_score_adj\x00') lseek(r0, 0x4, 0x1) 20:31:31 executing program 0: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioprio_set$pid(0x2, 0x0, 0x0) clone(0xa02a6500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) 20:31:31 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/netfilter\x00') symlinkat(&(0x7f00000011c0)='./bus\x00', r0, &(0x7f0000001200)='./bus\x00') 20:31:31 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00'], 0x1) 20:31:31 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000380)='net/protocols\x00') sendfile(r0, r1, &(0x7f0000000040)=0xffffc, 0xbb30) r2 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r2, 0x40104593, &(0x7f0000000100)={0x0, 0xff00, 0x0}) 20:31:31 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f0000000000)) ptrace(0x10, r0) r1 = getpid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup3(r2, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) waitid(0x2, r1, 0x0, 0x2, 0x0) [ 179.087139][ T8840] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 179.143274][ T8840] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. 20:31:32 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x1ee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100810, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) ioctl$BLKGETSIZE(0xffffffffffffffff, 0x1260, 0x0) ioctl$BLKIOMIN(0xffffffffffffffff, 0x1278, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') bind$inet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x0, 0x0}, 0x10) lseek(0xffffffffffffffff, 0x0, 0x0) write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000480)={0x18}, 0x18) 20:31:32 executing program 4: write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) pipe2(&(0x7f0000000780)={0xffffffffffffffff}, 0xc4800) readahead(r0, 0x7, 0xfffffffffffff801) perf_event_open(&(0x7f0000000180)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/\x02roup.stap\x00', 0x2761, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000000)={r1, &(0x7f0000000140)}, 0xfffffffffffffc5d) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000200)=ANY=[@ANYBLOB="006e56ffff8fdc4ab3007405020e2a559c434fa2c582df9b5302f91b3256816568719fe16a52918ebaf9316118f2329f9ea7ce4657531c3e9d47ba82f491bd1b8b"]) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0xc0c0583b, 0x20000001) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[], 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, 0x0) getpid() openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='gid_map\x00') r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000100)) r4 = syz_open_pts(r3, 0x0) dup3(r4, r2, 0x0) write$binfmt_aout(r2, &(0x7f00000007c0)={{0x107, 0x1f, 0x4, 0xc5, 0x370, 0x17c00, 0x2f3, 0x4}, "ec9b24c9086849f84f7809d4ee2303687879b8ecf1354bc21c75a7010772655fd93406c5f3002cfc", [[], [], [], [], []]}, 0x548) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0xc020660b, 0x20000001) write$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0), 0x1802a140) syz_genetlink_get_family_id$fou(&(0x7f0000000640)='fou\x00') r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) ioctl$sock_inet6_SIOCADDRT(r8, 0x890b, &(0x7f0000000000)={@ipv4={[], [], @local}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6}) getsockname$inet(r8, &(0x7f0000000680)={0x2, 0x0, @multicast1}, &(0x7f00000006c0)=0x10) r9 = syz_open_dev$char_usb(0xc, 0xb4, 0x1ff) fallocate(r9, 0x3, 0xffffffffffffe3e7, 0x2) fallocate(0xffffffffffffffff, 0x0, 0x7fffffff, 0x8000) 20:31:32 executing program 0: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioprio_set$pid(0x2, 0x0, 0x0) clone(0xa02a6500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 20:31:32 executing program 2: syz_read_part_table(0x0, 0x0, &(0x7f0000000200)) creat(&(0x7f0000000000)='./file0\x00', 0x0) 20:31:32 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/\x00\x00\x00\x00\x00\x00') getdents(r0, 0x0, 0x0) 20:31:32 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000380)='net/protocols\x00') sendfile(r0, r1, &(0x7f0000000040)=0xffffc, 0xbb30) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000100)={0x0, 0xff00, 0x0}) 20:31:32 executing program 0: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioprio_set$pid(0x2, 0x0, 0x0) clone(0xa02a6500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 20:31:32 executing program 5: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00'], 0x1) fallocate(r0, 0x3, 0x0, 0x8020003) 20:31:32 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000380)='net/protocols\x00') sendfile(r0, r1, &(0x7f0000000040)=0xffffc, 0xbb30) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000100)={0x0, 0xff00, 0x0}) 20:31:32 executing program 0: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0xa02a6500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 20:31:32 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f00000001c0)={0x0, 0x40000000000006, 0x0, 0x0, 0x1, [{}]}) 20:31:32 executing program 3: mkdir(0x0, 0x0) poll(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x20886100, 0x0, 0x0, 0x0, &(0x7f00000002c0)="d353ff072d68b2e4dc05000000b3d94c22") socket$inet6_tcp(0xa, 0x1, 0x0) 20:31:32 executing program 5: mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x8004002, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r0, 0x0, 0x8800000) 20:31:32 executing program 4: write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) pipe2(&(0x7f0000000780)={0xffffffffffffffff}, 0xc4800) readahead(r0, 0x7, 0xfffffffffffff801) perf_event_open(&(0x7f0000000180)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/\x02roup.stap\x00', 0x2761, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000000)={r1, &(0x7f0000000140)}, 0xfffffffffffffc5d) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000200)=ANY=[@ANYBLOB="006e56ffff8fdc4ab3007405020e2a559c434fa2c582df9b5302f91b3256816568719fe16a52918ebaf9316118f2329f9ea7ce4657531c3e9d47ba82f491bd1b8b"]) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0xc0c0583b, 0x20000001) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[], 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, 0x0) getpid() openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='gid_map\x00') r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000100)) r4 = syz_open_pts(r3, 0x0) dup3(r4, r2, 0x0) write$binfmt_aout(r2, &(0x7f00000007c0)={{0x107, 0x1f, 0x4, 0xc5, 0x370, 0x17c00, 0x2f3, 0x4}, "ec9b24c9086849f84f7809d4ee2303687879b8ecf1354bc21c75a7010772655fd93406c5f3002cfc", [[], [], [], [], []]}, 0x548) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0xc020660b, 0x20000001) write$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0), 0x1802a140) syz_genetlink_get_family_id$fou(&(0x7f0000000640)='fou\x00') r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) ioctl$sock_inet6_SIOCADDRT(r8, 0x890b, &(0x7f0000000000)={@ipv4={[], [], @local}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6}) getsockname$inet(r8, &(0x7f0000000680)={0x2, 0x0, @multicast1}, &(0x7f00000006c0)=0x10) r9 = syz_open_dev$char_usb(0xc, 0xb4, 0x1ff) fallocate(r9, 0x3, 0xffffffffffffe3e7, 0x2) fallocate(0xffffffffffffffff, 0x0, 0x7fffffff, 0x8000) 20:31:32 executing program 0: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0xa02a6500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 20:31:32 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000380)='net/protocols\x00') sendfile(r0, r1, &(0x7f0000000040)=0xffffc, 0xbb30) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000100)={0x0, 0xff00, 0x0}) 20:31:32 executing program 2: write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) pipe2(&(0x7f0000000780)={0xffffffffffffffff}, 0xc4800) readahead(r0, 0x7, 0xfffffffffffff801) perf_event_open(&(0x7f0000000180)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/\x02roup.stap\x00', 0x2761, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000000)={r1, &(0x7f0000000140)}, 0xfffffffffffffc5d) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000200)=ANY=[@ANYBLOB="006e56ffff8fdc4ab3007405020e2a559c434fa2c582df9b5302f91b3256816568719fe16a52918ebaf9316118f2329f9ea7ce4657531c3e9d47ba82f491bd1b8b"]) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0xc0c0583b, 0x20000001) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[], 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, 0x0) getpid() openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='gid_map\x00') r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000100)) r4 = syz_open_pts(r3, 0x0) dup3(r4, r2, 0x0) write$binfmt_aout(r2, &(0x7f00000007c0)={{0x107, 0x1f, 0x4, 0xc5, 0x370, 0x17c00, 0x2f3, 0x4}, "ec9b24c9086849f84f7809d4ee2303687879b8ecf1354bc21c75a7010772655fd93406c5f3002cfc", [[], [], [], [], []]}, 0x548) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0xc020660b, 0x20000001) write$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0), 0x1802a140) syz_genetlink_get_family_id$fou(&(0x7f0000000640)='fou\x00') r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) ioctl$sock_inet6_SIOCADDRT(r8, 0x890b, &(0x7f0000000000)={@ipv4={[], [], @local}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6}) getsockname$inet(r8, &(0x7f0000000680)={0x2, 0x0, @multicast1}, &(0x7f00000006c0)=0x10) r9 = syz_open_dev$char_usb(0xc, 0xb4, 0x1ff) fallocate(r9, 0x3, 0xffffffffffffe3e7, 0x2) fallocate(0xffffffffffffffff, 0x0, 0x7fffffff, 0x8000) [ 179.769525][ T26] audit: type=1800 audit(1572121892.631:34): pid=8946 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=16638 res=0 20:31:32 executing program 0: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0xa02a6500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 179.854647][ T26] audit: type=1800 audit(1572121892.711:35): pid=8946 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=16638 res=0 20:31:32 executing program 5: r0 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r0, 0xffeffffefffffffb) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @random="192bce5e2dfb", [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @local, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_emit_ethernet(0x56, &(0x7f0000000200)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "c600", 0x20, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @local, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xfffffe8d}]}}}}}}}}, 0x0) 20:31:32 executing program 0: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) clone(0xa02a6500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 20:31:32 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000380)='net/protocols\x00') r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000100)={0x0, 0xff00, 0x0}) 20:31:32 executing program 0: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) clone(0xa02a6500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 20:31:33 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000100)={0x0, 0xff00, 0x0}) 20:31:33 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ftruncate(r0, 0x2081fc) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) r3 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x800002, 0x11, r3, 0x0) read(r1, &(0x7f0000000000)=""/250, 0x128b9372) 20:31:33 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ftruncate(r2, 0x208204) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x14102e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x180000f, 0x11, r3, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f000001a000)) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f00000001c0)={0x0, 0x40000000000006, 0x0, 0x0, 0x2, [{}, {}]}) 20:31:33 executing program 0: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) clone(0xa02a6500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 180.295660][ T8741] device 0 left promiscuous mode 20:31:33 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_MODE={0x8, 0x4}]}}}]}, 0x3c}}, 0x0) 20:31:33 executing program 2: r0 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r0, 0xffeffffefffffffb) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @random="192bce5e2dfb", [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @local, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_emit_ethernet(0x4a, &(0x7f0000000200)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "c600", 0x14, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @local, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) [ 180.388684][ T8741] device 1 left promiscuous mode 20:31:33 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000100)={0x0, 0xff00, 0x0}) 20:31:33 executing program 3: open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x1ee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000200)=@filename='./file0\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1001084, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x9c283a, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, 0x0) socket$inet6(0xa, 0x0, 0x6) socket$inet6(0xa, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) [ 180.524501][ T8987] (unnamed net_device) (uninitialized): Unable to set up delay as MII monitoring is disabled 20:31:33 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioprio_set$pid(0x2, 0x0, 0x0) clone(0xa02a6500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 20:31:33 executing program 2: r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0xc) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0x40046104, &(0x7f0000000240)) 20:31:33 executing program 4: seccomp(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0xfffffffffffffffe}]}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 20:31:33 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$unix(0x1, 0x10004000000002, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$random(0xffffffffffffff9c, &(0x7f0000000140)='/dev/urandom\x00', 0x8000000000000085, 0x0) r4 = dup(r3) r5 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r5, 0xee72) sendfile(r4, r5, 0x0, 0x8000fffffffe) 20:31:33 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000100)={0x0, 0xff00, 0x0}) 20:31:33 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioprio_set$pid(0x2, 0x0, 0x0) clone(0xa02a6500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 180.770166][ T26] audit: type=1326 audit(1572121893.631:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9003 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45cd7a code=0xffff0000 20:31:33 executing program 2: connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000240)='.\x00', 0x0) sendmsg$nl_generic(r0, 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) dup2(0xffffffffffffffff, r1) pwritev(0xffffffffffffffff, &(0x7f0000000340), 0x0, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, &(0x7f0000000200)={'gretap0\x00', {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1c}}}) syz_open_dev$amidi(&(0x7f0000000100)='/dev/\x02\xedidi#\x00', 0x400000000040, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000040)=0x2000000000000074, 0x4) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3) sendto$inet(r2, &(0x7f0000000180)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba5c0fe3ac47b61db6b4c41bd1a5259e62506cda287b857aac", 0x8293, 0x4000002, 0x0, 0x27) 20:31:33 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioprio_set$pid(0x2, 0x0, 0x0) clone(0xa02a6500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 20:31:33 executing program 1: r0 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000100)={0x0, 0xff00, 0x0}) 20:31:34 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioprio_set$pid(0x2, 0x0, 0x0) clone(0xa02a6500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 20:31:34 executing program 1: r0 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000100)={0x0, 0xff00, 0x0}) [ 181.551168][ T26] audit: type=1326 audit(1572121894.411:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9003 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45cd7a code=0xffff0000 [ 182.895273][ T8741] device bridge_slave_1 left promiscuous mode [ 182.901492][ T8741] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.954340][ T8741] device bridge_slave_0 left promiscuous mode [ 182.960672][ T8741] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.554661][ T8741] device hsr_slave_0 left promiscuous mode [ 184.613319][ T8741] device hsr_slave_1 left promiscuous mode [ 184.692577][ T8741] team0 (unregistering): Port device team_slave_1 removed [ 184.705240][ T8741] team0 (unregistering): Port device team_slave_0 removed [ 184.716250][ T8741] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 184.788079][ T8741] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 184.885497][ T8741] bond0 (unregistering): Released all slaves [ 185.009961][ T9046] IPVS: ftp: loaded support on port[0] = 21 [ 185.076737][ T9046] chnl_net:caif_netlink_parms(): no params data found [ 185.144157][ T9046] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.151626][ T9046] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.160479][ T9046] device bridge_slave_0 entered promiscuous mode [ 185.169862][ T9046] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.177419][ T9046] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.185923][ T9046] device bridge_slave_1 entered promiscuous mode [ 185.214084][ T9046] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 185.226007][ T9046] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 185.248369][ T9046] team0: Port device team_slave_0 added [ 185.261143][ T9046] team0: Port device team_slave_1 added [ 185.355606][ T9046] device hsr_slave_0 entered promiscuous mode [ 185.433518][ T9046] device hsr_slave_1 entered promiscuous mode [ 185.483333][ T9046] debugfs: Directory 'hsr0' with parent '/' already present! [ 185.518483][ T9046] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.525617][ T9046] bridge0: port 2(bridge_slave_1) entered forwarding state [ 185.533052][ T9046] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.540161][ T9046] bridge0: port 1(bridge_slave_0) entered forwarding state [ 185.628733][ T9046] 8021q: adding VLAN 0 to HW filter on device bond0 [ 185.669888][ T3512] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 185.678931][ T3512] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.696221][ T3512] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.715503][ T9046] 8021q: adding VLAN 0 to HW filter on device team0 [ 185.728920][ T8085] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 185.738635][ T8085] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.745801][ T8085] bridge0: port 1(bridge_slave_0) entered forwarding state [ 185.766738][ T3512] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 185.775832][ T3512] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.782895][ T3512] bridge0: port 2(bridge_slave_1) entered forwarding state [ 185.800677][ T3512] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 185.820682][ T9046] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 185.832227][ T9046] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 185.846374][ T8085] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 185.856057][ T8085] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 185.864939][ T8085] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 185.875055][ T8085] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 185.884240][ T8085] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 185.905766][ T9046] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 186.077729][ T26] audit: type=1800 audit(1572121898.941:38): pid=9054 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=16659 res=0 [ 186.080224][ T9054] EXT4-fs (sda1): re-mounted. Opts: [ 186.236849][ T9057] EXT4-fs (sda1): re-mounted. Opts: 20:31:39 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0800b5055e0bcfe87b0071") open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 20:31:39 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioprio_set$pid(0x2, 0x0, 0x0) clone(0xa02a6500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 20:31:39 executing program 2: syz_open_dev$loop(&(0x7f0000000500)='/dev/loop#\x00', 0x0, 0x100082) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000240)='.\x00', 0x0) sendmsg$nl_generic(r0, 0x0, 0x0) syz_open_dev$admmidi(&(0x7f0000000740)='/dev/admmidi#\x00', 0x8000, 0x151801) r1 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, r1) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{0x0}], 0x1, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, &(0x7f0000000200)={'gretap0\x00', {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1c}}}) syz_open_dev$amidi(&(0x7f0000000100)='/dev/\x02\xedidi#\x00', 0x400000000040, 0x444040) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000040)=0x2000000000000074, 0x4) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, 0x0, 0x0) sendto$inet(r2, &(0x7f0000000180)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba5c0fe3ac47b61db6b4c41bd1a5259e62506cda287b857aac", 0x8293, 0x4000002, 0x0, 0x27) 20:31:39 executing program 1: r0 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000100)={0x0, 0xff00, 0x0}) 20:31:39 executing program 5: syz_open_dev$loop(&(0x7f0000000240)='/dev/loop#\x00', 0x4, 0x0) 20:31:39 executing program 4: prlimit64(0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000001c0)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x0, &(0x7f0000000000)) 20:31:39 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioprio_set$pid(0x2, 0x0, 0x0) clone(0xa02a6500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 20:31:39 executing program 1: syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000100)={0x0, 0xff00, 0x0}) 20:31:39 executing program 5: r0 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x1000014, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r3 = open$dir(&(0x7f00000000c0)='./file0\x00', 0xca00, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) inotify_init() mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, 0xffffffffffffffff, 0x0) write(r2, &(0x7f0000000600)="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", 0x200) sendfile(r2, r3, 0x0, 0x7fffffa7) socket(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) getsockopt$packet_buf(r6, 0x107, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$USBDEVFS_CONNECTINFO(0xffffffffffffffff, 0x40085511, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40046602, 0x0) io_submit(0x0, 0x0, &(0x7f0000000540)) sendfile(0xffffffffffffffff, r0, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40046602, 0x0) 20:31:39 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x2, @empty}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x900000020000000, &(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10) sendto(r0, &(0x7f0000000100)="16", 0xffffff67, 0x8055, 0x0, 0xfea1) 20:31:39 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0800b5055e0bcfe87b0071") open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 20:31:39 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioprio_set$pid(0x2, 0x0, 0x0) clone(0xa02a6500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 186.654563][ T26] audit: type=1800 audit(1572121899.521:39): pid=9096 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="loop5" ino=22 res=0 20:31:39 executing program 1: syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000100)={0x0, 0xff00, 0x0}) 20:31:39 executing program 2: syz_open_dev$loop(&(0x7f0000000500)='/dev/loop#\x00', 0x0, 0x100082) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000240)='.\x00', 0x0) sendmsg$nl_generic(r0, 0x0, 0x0) syz_open_dev$admmidi(&(0x7f0000000740)='/dev/admmidi#\x00', 0x8000, 0x151801) r1 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, r1) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{0x0}], 0x1, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, &(0x7f0000000200)={'gretap0\x00', {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1c}}}) syz_open_dev$amidi(&(0x7f0000000100)='/dev/\x02\xedidi#\x00', 0x400000000040, 0x444040) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000040)=0x2000000000000074, 0x4) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, 0x0, 0x0) sendto$inet(r2, &(0x7f0000000180)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba5c0fe3ac47b61db6b4c41bd1a5259e62506cda287b857aac", 0x8293, 0x4000002, 0x0, 0x27) [ 186.783414][ T26] audit: type=1804 audit(1572121899.541:40): pid=9110 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir974176816/syzkaller.zwtP8h/16/file0/file0" dev="loop5" ino=22 res=1 [ 186.850143][ T9096] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 17) 20:31:39 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='memory.events\x00\xefG\xa3\x89\xeb3\xa9\n\f\x1fh\xf5\f\x01\x8b\x1e\x02\x847V\xaf\xa3\xf1\xc5E]\xfe!r\xf9\x95_\x02Gc\xa0\x05r5deU\xa6t\xafY\xef\xae_\x18\xa8\xfe2+>\xda\x872h: \xd7R[`\xad\"\xb8<\xfb\x1b\xb6n`\xb3\"\xa6\xb2\xebP\xbc]E\xb7\x045\xcc\xf4\xa4\xef\xfb\x04\xf2\"\x0e\x8a1|\xb6Y\xcfmN\xdd\xebR\xd7\xfc\xaf\x80\x83\x85t\xc1\xbf8\xd0\x1d\x87\xbf\bc\xdf4t\xf9J\\fj.\xf3\xc6u\xec1\x80\x92\a\xc9\xd61\fUtx\x0e\xa7\xe2\xb9)', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x7a05, 0x1700) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x7}) 20:31:39 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0800b5055e0bcfe87b0071") open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 20:31:39 executing program 1: syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000100)={0x0, 0xff00, 0x0}) [ 186.906873][ T9096] FAT-fs (loop5): Filesystem has been set read-only [ 186.920657][ T26] audit: type=1800 audit(1572121899.551:41): pid=9110 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="loop5" ino=22 res=0 20:31:39 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioprio_set$pid(0x2, 0x0, 0x0) clone(0xa02a6500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 187.001477][ T9096] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 17) 20:31:40 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet6_dccp(0xa, 0x6, 0x0) openat$vimc1(0xffffffffffffff9c, 0x0, 0x2, 0x0) poll(&(0x7f00000000c0)=[{r4}, {r0}, {r0}], 0x3, 0x3) 20:31:40 executing program 2: 20:31:40 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, 0x0) 20:31:40 executing program 5: 20:31:40 executing program 4: 20:31:40 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioprio_set$pid(0x2, 0x0, 0x0) clone(0xa02a6500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 20:31:40 executing program 2: 20:31:40 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0800b5055e0bcfe87b0071") open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 20:31:40 executing program 5: 20:31:40 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, 0x0) 20:31:40 executing program 4: 20:31:40 executing program 2: 20:31:40 executing program 5: 20:31:40 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioprio_set$pid(0x0, 0x0, 0x0) clone(0xa02a6500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 20:31:40 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0800b5055e0bcfe87b0071") perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 20:31:40 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, 0x0) 20:31:40 executing program 4: 20:31:40 executing program 2: 20:31:40 executing program 5: 20:31:40 executing program 4: 20:31:40 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioprio_set$pid(0x0, 0x0, 0x0) clone(0xa02a6500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 20:31:40 executing program 2: 20:31:40 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0800b5055e0bcfe87b0071") perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 20:31:40 executing program 1: 20:31:40 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioprio_set$pid(0x0, 0x0, 0x0) clone(0xa02a6500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 20:31:40 executing program 5: 20:31:40 executing program 4: 20:31:40 executing program 1: 20:31:40 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioprio_set$pid(0x2, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 20:31:40 executing program 2: 20:31:40 executing program 5: 20:31:40 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0800b5055e0bcfe87b0071") perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 20:31:41 executing program 1: 20:31:41 executing program 4: 20:31:41 executing program 5: 20:31:41 executing program 2: 20:31:41 executing program 1: 20:31:41 executing program 4: 20:31:41 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioprio_set$pid(0x2, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 20:31:41 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 20:31:41 executing program 5: 20:31:41 executing program 2: 20:31:41 executing program 1: 20:31:41 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 20:31:41 executing program 2: r0 = gettid() prctl$PR_GET_FPEMU(0x9, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) capget(&(0x7f0000000140), 0x0) open$dir(0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) socketpair$unix(0x1, 0x0, 0x0, 0x0) getsockopt$IP_VS_SO_GET_VERSION(0xffffffffffffffff, 0x0, 0x480, 0x0, 0x0) timer_create(0x0, &(0x7f00000001c0)={0x0, 0x12}, &(0x7f00000000c0)) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) capset(0x0, 0x0) tkill(r0, 0x1000000000016) 20:31:41 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioprio_set$pid(0x2, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 20:31:41 executing program 5: clone(0x8000100000203, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f0000f80000)='./file0\x00', 0x0, 0x0) r0 = creat(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x200010a) close(r0) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) clone(0x3103101ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000240)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0) setxattr$trusted_overlay_nlink(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000140)='trusted.overlay.nlink\x00', 0x0, 0x0, 0x0) write$P9_ROPEN(r0, 0x0, 0x0) 20:31:41 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 20:31:41 executing program 1: setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x8447, 0x0) preadv(r0, &(0x7f0000000800)=[{&(0x7f0000000000)=""/31, 0x70800}, {0x0}], 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1) 20:31:41 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) mknod$loop(&(0x7f0000000040)='./bus/file0\x00', 0x0, 0x1) [ 188.721667][ T9268] vhci_hcd: default hub control req: 8001 v0000 i0000 l0 20:31:41 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000100)={0x0, 0xff00, 0x0}) 20:31:41 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000380)='net/protocols\x00') r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000100)={0x0, 0xff00, 0x0}) 20:31:41 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000380)='net/protocols\x00') sendfile(r0, r1, &(0x7f0000000040)=0xffffc, 0xbb30) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000100)={0x0, 0xff00, 0x0}) 20:31:41 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 20:31:41 executing program 1: setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x8447, 0x0) preadv(r0, &(0x7f0000000800)=[{&(0x7f0000000000)=""/31, 0x70800}, {0x0}], 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1) [ 188.950985][ T9280] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 20:31:41 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000100)={0x0, 0xff00, 0x0}) 20:31:41 executing program 3: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000140)="0800b5055e0bcfe87b0071") open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 20:31:41 executing program 0: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0xa02a6500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 20:31:42 executing program 1: setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x8447, 0x0) preadv(r0, &(0x7f0000000800)=[{&(0x7f0000000000)=""/31, 0x70800}, {0x0}], 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1) 20:31:42 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000380)='net/protocols\x00') sendfile(r0, r1, &(0x7f0000000040)=0xffffc, 0xbb30) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000100)={0x0, 0xff00, 0x0}) 20:31:42 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000380)='net/protocols\x00') r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000100)={0x0, 0xff00, 0x0}) 20:31:42 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000100)={0x0, 0xff00, 0x0}) 20:31:42 executing program 0: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0xa02a6500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 20:31:42 executing program 3: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000140)="0800b5055e0bcfe87b0071") open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 20:31:42 executing program 1: setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x8447, 0x0) preadv(r0, &(0x7f0000000800)=[{&(0x7f0000000000)=""/31, 0x70800}, {0x0}], 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1) 20:31:42 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000380)='net/protocols\x00') r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000100)={0x0, 0xff00, 0x0}) 20:31:42 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000380)='net/protocols\x00') sendfile(r0, r1, &(0x7f0000000040)=0xffffc, 0xbb30) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000100)={0x0, 0xff00, 0x0}) 20:31:42 executing program 3: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000140)="0800b5055e0bcfe87b0071") open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 20:31:42 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000140)="40c74adc77a4e27d876f441d952bf111375896d876c4ed0f2e703cd5f8b64ff3cd946b507d0419c09fc1fe6c"}, 0xa) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00', 0x4009}) r1 = socket$kcm(0x29, 0x2, 0x0) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000440)=0xa7) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f00000018c0)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\a\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83CZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x98\x86\"R\x06\x00\x00\x00\x00\x00\x00\x00\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x0e\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xfeu\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&\x014\x01\xf4\xb7\x83\x9a\xfa*\xa6\x06\xb7Pk7N\xc2\xd9\xee\xd0\xb0M\x00\xab\xc3\t\fc\xd8dx\xd5\x1dU*s)\x12[\x14\xb1\xc0\xd7\x1a\xa0\x16\xa2z\x9e\x93 \xddeF>29\v\x02\xa2b\x13R\xef\xffA,\xb9.$\xfa\x9f\xde[\x80\xd1=\xce\x1b\xeb\xf6\xf4\xe3z\x1f\x9dz\xa3\xc0\xe2\xa2\xb1\xeeq\xf5\xec0\x8e\xf4\xfb\xd9\x87\xf03\xdb\xae|\x10&V5c\xa6\xce\xcd\x8a\xdf\xe1\x89\"\xea\xde\xe7\xa3\xbe\xe7\xff\xf9 \x11\xfdY\xc6\xa1\xe8\xda\v\\?\xcb\x87\bn\x9b\x01\x1f\xf8\xe8\x1eV\xfaC\xdf\xc3Vv\x9b\x1a\xfc\x14.c\x94\xc9=\xb0\x0f!d\b\x18*@m\x7f\xaal\x17G\xd6?\x81\x16P\x03\x10e\xc3\xcd\xb1B\xeb\x01B\\\x91A\xa1\x8an\xb4#\xadr\x1e\x81v\xa2\x0e6x\xca\x8b\xa6\xd8\x81\x10:\x0e(\xdd\xfc\xc9\xc6\xb4\xf0\'f:\xbd\xfe\x11\xf8\xc8W\x81s^\xd9W\xf1\x94\xaf\xc5\x8a\xb4f\x1b\x17E\xb23\x12\xb0\xeb\xef\x8c\xb24h\xd7}\x7f\x92Hgej\x957\xe2A') ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, &(0x7f00000002c0)=0x8001) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000640)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f00000006c0)={&(0x7f0000000680)='./file0\x00', 0x0, 0x10}, 0x10) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001d00)={&(0x7f0000000300)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000001c80)=[{&(0x7f0000000480)=""/179, 0xb3}, {&(0x7f0000000700)=""/4096, 0x1000}, {&(0x7f0000000380)=""/109, 0x6d}, {&(0x7f0000001700)=""/183, 0xb7}, {&(0x7f00000017c0)=""/197, 0xc5}, {&(0x7f0000000000)=""/64, 0x40}, {&(0x7f0000000280)=""/8, 0x8}, {&(0x7f0000001b80)=""/226, 0xe2}], 0x8, &(0x7f0000000540)=""/52, 0x34}, 0x40000100) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r2, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000600)={0xffffffffffffffff, &(0x7f0000000580)="b2cc794af7bfb5f7ef3b0021f16af1e8dad8697954152758", &(0x7f00000005c0)=""/64}, 0x20) close(0xffffffffffffffff) write$cgroup_subtree(r0, &(0x7f00000000c0)={[{0x0, 'c\x86\xdd', 0x7}]}, 0x90ad) 20:31:42 executing program 0: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0xa02a6500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 20:31:42 executing program 1: setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x8447, 0x0) preadv(r0, &(0x7f0000000800)=[{&(0x7f0000000000)=""/31, 0x70800}, {0x0}], 0x2, 0x0) 20:31:42 executing program 4 (fault-call:3 fault-nth:0): perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioprio_set$pid(0x2, 0x0, 0x0) clone(0xa02a6500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 20:31:42 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000380)='net/protocols\x00') ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000100)={0x0, 0xff00, 0x0}) 20:31:42 executing program 0: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0xa02a6500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 20:31:42 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000140)="0800b5055e0bcfe87b0071") open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 189.797851][ T9365] FAULT_INJECTION: forcing a failure. [ 189.797851][ T9365] name failslab, interval 1, probability 0, space 0, times 1 [ 189.824911][ T9365] CPU: 1 PID: 9365 Comm: syz-executor.4 Not tainted 5.4.0-rc4+ #0 [ 189.832765][ T9365] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 189.844128][ T9365] Call Trace: [ 189.847429][ T9365] dump_stack+0x1d8/0x2f8 [ 189.851765][ T9365] should_fail+0x555/0x770 [ 189.854536][ T9351] device nr0 entered promiscuous mode [ 189.856277][ T9365] __should_failslab+0x11a/0x160 [ 189.856292][ T9365] should_failslab+0x9/0x20 [ 189.871447][ T9365] kmem_cache_alloc_node+0x65/0x280 [ 189.876655][ T9365] ? copy_process+0x501/0x5970 [ 189.881491][ T9365] copy_process+0x501/0x5970 [ 189.886088][ T9365] ? refcount_sub_and_test_checked+0x179/0x230 [ 189.892257][ T9365] ? vfs_write+0x4a2/0x590 20:31:42 executing program 1: setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000800)=[{&(0x7f0000000000)=""/31, 0x70800}, {0x0}], 0x2, 0x0) [ 189.896674][ T9365] ? __f_unlock_pos+0x19/0x20 [ 189.902300][ T9365] _do_fork+0x13f/0x5b0 [ 189.907765][ T9365] ? debug_smp_processor_id+0x1c/0x20 [ 189.913241][ T9365] ? fpregs_assert_state_consistent+0xb7/0xe0 [ 189.919410][ T9365] __x64_sys_clone+0x1ec/0x230 [ 189.924381][ T9365] do_syscall_64+0xf7/0x1c0 [ 189.928994][ T9365] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 189.934863][ T9365] RIP: 0033:0x459f39 [ 189.938737][ T9365] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 189.962939][ T9365] RSP: 002b:00007f977a4f1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 189.971335][ T9365] RAX: ffffffffffffffda RBX: 00007f977a4f1c90 RCX: 0000000000459f39 [ 189.979315][ T9365] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 00000000a02a6500 [ 189.987366][ T9365] RBP: 000000000075bf20 R08: ffffffffffffffff R09: 0000000000000000 20:31:42 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000380)='net/protocols\x00') ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000100)={0x0, 0xff00, 0x0}) [ 189.995513][ T9365] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f977a4f26d4 [ 190.003492][ T9365] R13: 00000000004c05bf R14: 00000000004d2ab0 R15: 0000000000000003 20:31:42 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioprio_set$pid(0x2, 0x0, 0x0) clone(0xa02a6500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 20:31:42 executing program 0: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0xa02a6500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 20:31:43 executing program 1: setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000800)=[{&(0x7f0000000000)=""/31, 0x70800}, {0x0}], 0x2, 0x0) 20:31:43 executing program 2 (fault-call:1 fault-nth:0): r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000100)={0x0, 0xff00, 0x0}) 20:31:43 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000380)='net/protocols\x00') ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000100)={0x0, 0xff00, 0x0}) 20:31:43 executing program 1: setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000800)=[{&(0x7f0000000000)=""/31, 0x70800}, {0x0}], 0x2, 0x0) 20:31:43 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioprio_set$pid(0x2, 0x0, 0x0) clone(0xa02a6502, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 20:31:43 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000140)="0800b5055e0bcfe87b0071") open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 20:31:43 executing program 0: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0xa02a6500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 20:31:43 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioprio_set$pid(0x2, 0x0, 0x0) clone(0xa02a6567, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 20:31:43 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x8447, 0x0) preadv(r0, &(0x7f0000000800)=[{&(0x7f0000000000)=""/31, 0x70800}, {0x0}], 0x2, 0x0) [ 190.509151][ T9412] FAULT_INJECTION: forcing a failure. [ 190.509151][ T9412] name failslab, interval 1, probability 0, space 0, times 0 [ 190.529736][ T9412] CPU: 0 PID: 9412 Comm: syz-executor.2 Not tainted 5.4.0-rc4+ #0 [ 190.537744][ T9412] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 190.547815][ T9412] Call Trace: [ 190.551119][ T9412] dump_stack+0x1d8/0x2f8 [ 190.555723][ T9412] should_fail+0x555/0x770 20:31:43 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000100)={0x0, 0xff00, 0x0}) [ 190.560162][ T9412] __should_failslab+0x11a/0x160 [ 190.565223][ T9412] ? tomoyo_realpath_from_path+0xdc/0x7c0 [ 190.571211][ T9412] should_failslab+0x9/0x20 [ 190.575800][ T9412] __kmalloc+0x7a/0x340 [ 190.575817][ T9412] ? tomoyo_realpath_from_path+0xca/0x7c0 [ 190.575893][ T9412] tomoyo_realpath_from_path+0xdc/0x7c0 [ 190.575911][ T9412] tomoyo_path_number_perm+0x166/0x640 [ 190.575939][ T9412] ? smack_file_ioctl+0x226/0x2e0 [ 190.585949][ T9412] ? __fget+0x411/0x510 [ 190.585969][ T9412] tomoyo_file_ioctl+0x23/0x30 [ 190.585980][ T9412] security_file_ioctl+0x6d/0xd0 [ 190.585995][ T9412] __x64_sys_ioctl+0xa3/0x120 [ 190.586010][ T9412] do_syscall_64+0xf7/0x1c0 [ 190.586023][ T9412] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 190.586032][ T9412] RIP: 0033:0x459f39 [ 190.586041][ T9412] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 20:31:43 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0xa02a6500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 20:31:43 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000140)="0800b5055e0bcfe87b0071") open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 20:31:43 executing program 1: r0 = syz_open_dev$video(0x0, 0x8447, 0x0) preadv(r0, &(0x7f0000000800)=[{&(0x7f0000000000)=""/31, 0x70800}, {0x0}], 0x2, 0x0) [ 190.586046][ T9412] RSP: 002b:00007f942df49c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 190.586054][ T9412] RAX: ffffffffffffffda RBX: 00007f942df49c90 RCX: 0000000000459f39 [ 190.586059][ T9412] RDX: 0000000020000100 RSI: 0000000040104593 RDI: 0000000000000003 [ 190.586063][ T9412] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 190.586068][ T9412] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f942df4a6d4 [ 190.586073][ T9412] R13: 00000000004c246c R14: 00000000004d5f78 R15: 0000000000000004 [ 190.615999][ T9412] ERROR: Out of memory at tomoyo_realpath_from_path. 20:31:43 executing program 2 (fault-call:1 fault-nth:1): r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000100)={0x0, 0xff00, 0x0}) 20:31:43 executing program 4: perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f00000000c0)='./file0\x00', r1, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x7, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000080)="28c99bf2b837928cea1dfdfb59a787db1545626b07dff365c47fe716704fcc305e844f", 0x23, 0x7}], 0x1001808, &(0x7f0000000100)={[{@nonumtail='nnonumtail=1'}, {@shortname_win95='shortname=win95'}, {@rodir='rodir'}], [{@fsname={'fsname'}}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@fowner_gt={'fowner>', r1}}, {@dont_measure='dont_measure'}]}) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioprio_set$pid(0x2, 0x0, 0x0) chown(&(0x7f0000000180)='./file0\x00', r1, r2) clone(0xa02a6500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 20:31:43 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000100)={0x0, 0xff00, 0x0}) 20:31:43 executing program 0: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0xa02a6500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 20:31:43 executing program 1: r0 = syz_open_dev$video(0x0, 0x8447, 0x0) preadv(r0, &(0x7f0000000800)=[{&(0x7f0000000000)=""/31, 0x70800}, {0x0}], 0x2, 0x0) [ 190.921807][ T9446] FAULT_INJECTION: forcing a failure. [ 190.921807][ T9446] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 190.935053][ T9446] CPU: 1 PID: 9446 Comm: syz-executor.2 Not tainted 5.4.0-rc4+ #0 [ 190.942963][ T9446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 190.953173][ T9446] Call Trace: [ 190.956462][ T9446] dump_stack+0x1d8/0x2f8 [ 190.960777][ T9446] should_fail+0x555/0x770 [ 190.965194][ T9446] should_fail_alloc_page+0x55/0x60 [ 190.970395][ T9446] prepare_alloc_pages+0x283/0x460 [ 190.975516][ T9446] __alloc_pages_nodemask+0xb2/0x5d0 [ 190.980801][ T9446] kmem_getpages+0x4d/0xa00 [ 190.985301][ T9446] cache_grow_begin+0x7e/0x2c0 [ 190.990060][ T9446] cache_alloc_refill+0x311/0x3f0 [ 190.995081][ T9446] ? check_preemption_disabled+0xb7/0x2a0 [ 191.000970][ T9446] __kmalloc+0x318/0x340 [ 191.005201][ T9446] ? tomoyo_realpath_from_path+0xdc/0x7c0 [ 191.010928][ T9446] tomoyo_realpath_from_path+0xdc/0x7c0 [ 191.016467][ T9446] tomoyo_path_number_perm+0x166/0x640 [ 191.022041][ T9446] ? smack_file_ioctl+0x226/0x2e0 [ 191.027051][ T9446] ? __fget+0x411/0x510 [ 191.031190][ T9446] tomoyo_file_ioctl+0x23/0x30 [ 191.035945][ T9446] security_file_ioctl+0x6d/0xd0 [ 191.040992][ T9446] __x64_sys_ioctl+0xa3/0x120 [ 191.045663][ T9446] do_syscall_64+0xf7/0x1c0 [ 191.050283][ T9446] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 191.056160][ T9446] RIP: 0033:0x459f39 [ 191.060151][ T9446] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 191.079886][ T9446] RSP: 002b:00007f942df49c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 191.088572][ T9446] RAX: ffffffffffffffda RBX: 00007f942df49c90 RCX: 0000000000459f39 [ 191.096533][ T9446] RDX: 0000000020000100 RSI: 0000000040104593 RDI: 0000000000000003 [ 191.104499][ T9446] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 191.112585][ T9446] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f942df4a6d4 [ 191.120803][ T9446] R13: 00000000004c246c R14: 00000000004d5f78 R15: 0000000000000004 20:31:44 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000140)="0800b5055e0bcfe87b0071") open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 20:31:44 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000100)={0x0, 0xff00, 0x0}) 20:31:44 executing program 0: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0xa02a6500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 20:31:44 executing program 1: r0 = syz_open_dev$video(0x0, 0x8447, 0x0) preadv(r0, &(0x7f0000000800)=[{&(0x7f0000000000)=""/31, 0x70800}, {0x0}], 0x2, 0x0) 20:31:44 executing program 2 (fault-call:1 fault-nth:2): r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000100)={0x0, 0xff00, 0x0}) 20:31:44 executing program 4: syz_extract_tcp_res$synack(&(0x7f0000000000), 0x1, 0x0) perf_event_open(0x0, 0x0, 0x9, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioprio_set$pid(0x2, 0x0, 0x0) clone(0xa02a6500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 20:31:44 executing program 5: r0 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000100)={0x0, 0xff00, 0x0}) 20:31:44 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000800)=[{&(0x7f0000000000)=""/31, 0x70800}, {0x0}], 0x2, 0x0) [ 191.379138][ T9472] FAULT_INJECTION: forcing a failure. [ 191.379138][ T9472] name failslab, interval 1, probability 0, space 0, times 0 20:31:44 executing program 0: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0xa02a6500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 191.456917][ T9472] CPU: 0 PID: 9472 Comm: syz-executor.2 Not tainted 5.4.0-rc4+ #0 [ 191.465069][ T9472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 191.475158][ T9472] Call Trace: [ 191.478481][ T9472] dump_stack+0x1d8/0x2f8 [ 191.482926][ T9472] should_fail+0x555/0x770 [ 191.487362][ T9472] __should_failslab+0x11a/0x160 [ 191.492312][ T9472] ? tomoyo_encode2+0x273/0x5a0 [ 191.497164][ T9472] should_failslab+0x9/0x20 [ 191.501670][ T9472] __kmalloc+0x7a/0x340 20:31:44 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000140)="0800b5055e0bcfe87b0071") open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 191.505843][ T9472] tomoyo_encode2+0x273/0x5a0 [ 191.510542][ T9472] tomoyo_realpath_from_path+0x769/0x7c0 [ 191.516166][ T9472] tomoyo_path_number_perm+0x166/0x640 [ 191.516196][ T9472] ? smack_file_ioctl+0x226/0x2e0 [ 191.516206][ T9472] ? __fget+0x411/0x510 [ 191.516220][ T9472] tomoyo_file_ioctl+0x23/0x30 [ 191.516229][ T9472] security_file_ioctl+0x6d/0xd0 [ 191.516242][ T9472] __x64_sys_ioctl+0xa3/0x120 [ 191.516256][ T9472] do_syscall_64+0xf7/0x1c0 [ 191.516270][ T9472] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 191.516279][ T9472] RIP: 0033:0x459f39 [ 191.516290][ T9472] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 191.516296][ T9472] RSP: 002b:00007f942df49c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 191.516306][ T9472] RAX: ffffffffffffffda RBX: 00007f942df49c90 RCX: 0000000000459f39 [ 191.516312][ T9472] RDX: 0000000020000100 RSI: 0000000040104593 RDI: 0000000000000003 20:31:44 executing program 5: r0 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000100)={0x0, 0xff00, 0x0}) 20:31:44 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000800)=[{&(0x7f0000000000)=""/31, 0x70800}, {0x0}], 0x2, 0x0) [ 191.516318][ T9472] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 191.516324][ T9472] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f942df4a6d4 [ 191.516329][ T9472] R13: 00000000004c246c R14: 00000000004d5f78 R15: 0000000000000004 [ 191.525154][ T9472] ERROR: Out of memory at tomoyo_realpath_from_path. 20:31:44 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 20:31:44 executing program 2 (fault-call:1 fault-nth:3): r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000100)={0x0, 0xff00, 0x0}) 20:31:44 executing program 4: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = gettid() kcmp(r1, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) r2 = gettid() kcmp(r2, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) dup(r4) kcmp(r1, r2, 0x3, r0, r4) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioprio_set$pid(0x2, 0x0, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x0) r7 = dup(r6) write$P9_RLOPEN(r7, 0x0, 0x0) ioctl$KVM_REINJECT_CONTROL(r7, 0xae71, &(0x7f0000000000)={0x4}) clone(0xa02a6500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 20:31:44 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000140)="0800b5055e0bcfe87b0071") open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 20:31:44 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x8000200, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioprio_set$pid(0x2, 0x0, 0x0) clone(0xa02a6500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 20:31:44 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000800)=[{&(0x7f0000000000)=""/31, 0x70800}, {0x0}], 0x2, 0x0) 20:31:44 executing program 5: r0 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000100)={0x0, 0xff00, 0x0}) 20:31:44 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 191.882330][ T9512] FAULT_INJECTION: forcing a failure. [ 191.882330][ T9512] name failslab, interval 1, probability 0, space 0, times 0 [ 191.968113][ T9512] CPU: 0 PID: 9512 Comm: syz-executor.2 Not tainted 5.4.0-rc4+ #0 [ 191.976032][ T9512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 191.976047][ T9512] Call Trace: [ 191.976067][ T9512] dump_stack+0x1d8/0x2f8 [ 191.976083][ T9512] should_fail+0x555/0x770 [ 191.976100][ T9512] __should_failslab+0x11a/0x160 [ 191.976111][ T9512] ? bitmap_alloc+0x2e/0x50 [ 191.976120][ T9512] should_failslab+0x9/0x20 [ 191.976135][ T9512] __kmalloc+0x7a/0x340 [ 192.003119][ T9512] bitmap_alloc+0x2e/0x50 [ 192.003131][ T9512] bitmap_zalloc+0x21/0x30 [ 192.003144][ T9512] evdev_ioctl_handler+0xca0/0x2430 [ 192.003168][ T9512] evdev_ioctl+0x27/0x30 [ 192.003175][ T9512] ? evdev_poll+0x1f0/0x1f0 [ 192.003187][ T9512] do_vfs_ioctl+0x744/0x1730 [ 192.003195][ T9512] ? __fget+0x411/0x510 [ 192.003210][ T9512] ? tomoyo_file_ioctl+0x23/0x30 [ 192.003223][ T9512] ? security_file_ioctl+0xa1/0xd0 [ 192.047711][ T9512] __x64_sys_ioctl+0xe3/0x120 [ 192.057717][ T9512] do_syscall_64+0xf7/0x1c0 20:31:44 executing program 1: syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x8447, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000800)=[{&(0x7f0000000000)=""/31, 0x70800}, {0x0}], 0x2, 0x0) 20:31:44 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 20:31:44 executing program 5: syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000100)={0x0, 0xff00, 0x0}) [ 192.057729][ T9512] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 192.057737][ T9512] RIP: 0033:0x459f39 [ 192.057746][ T9512] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 192.057755][ T9512] RSP: 002b:00007f942df49c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 192.104721][ T9512] RAX: ffffffffffffffda RBX: 00007f942df49c90 RCX: 0000000000459f39 20:31:45 executing program 0: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = gettid() kcmp(r1, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) r2 = gettid() kcmp(r2, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) dup(r4) kcmp(r1, r2, 0x3, r0, r4) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioprio_set$pid(0x2, 0x0, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x0) r7 = dup(r6) write$P9_RLOPEN(r7, 0x0, 0x0) ioctl$KVM_REINJECT_CONTROL(r7, 0xae71, &(0x7f0000000000)={0x4}) clone(0xa02a6500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 192.112713][ T9512] RDX: 0000000020000100 RSI: 0000000040104593 RDI: 0000000000000003 [ 192.112720][ T9512] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 192.112725][ T9512] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f942df4a6d4 [ 192.112731][ T9512] R13: 00000000004c246c R14: 00000000004d5f78 R15: 0000000000000004 20:31:45 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 20:31:45 executing program 2 (fault-call:1 fault-nth:4): r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000100)={0x0, 0xff00, 0x0}) 20:31:45 executing program 1: syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x8447, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000800)=[{&(0x7f0000000000)=""/31, 0x70800}, {0x0}], 0x2, 0x0) 20:31:45 executing program 0: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = gettid() kcmp(r1, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) r2 = gettid() kcmp(r2, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) dup(r4) kcmp(r1, r2, 0x3, r0, r4) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioprio_set$pid(0x2, 0x0, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x0) r7 = dup(r6) write$P9_RLOPEN(r7, 0x0, 0x0) ioctl$KVM_REINJECT_CONTROL(r7, 0xae71, &(0x7f0000000000)={0x4}) clone(0xa02a6500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 20:31:45 executing program 5: syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000100)={0x0, 0xff00, 0x0}) 20:31:45 executing program 1: syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x8447, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000800)=[{&(0x7f0000000000)=""/31, 0x70800}, {0x0}], 0x2, 0x0) 20:31:45 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 20:31:45 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000100)={0x0, 0xff00, 0x0}) 20:31:45 executing program 4: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioprio_set$pid(0x2, 0x0, 0x0) clone(0xa02a6500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) r4 = dup(r3) write$P9_RLOPEN(r4, 0x0, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000000)='cgroup.threads\x00', 0x2, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r7 = accept4(r6, 0x0, 0x0, 0x0) dup(r7) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r10 = accept4(r9, 0x0, 0x0, 0x0) r11 = dup(r10) r12 = socket$alg(0x26, 0x5, 0x0) bind$alg(r12, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r13 = accept4(r12, 0x0, 0x0, 0x0) r14 = dup(r13) write$P9_RLOPEN(r14, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(r14, 0xc040564b, &(0x7f0000000180)={0x9, 0x0, 0x5001, 0xfffffd36, 0x8, {0x10001, 0x8001}, 0x1}) write$P9_RLOPEN(r11, 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r11, 0x4, &(0x7f0000000100)='hash\x00', &(0x7f0000000140)='./file0\x00', r7) accept4(r8, 0x0, 0x0, 0x0) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000000380)=ANY=[@ANYBLOB="0700e700190acc525c56fa0ef656c407000000000000040000000000000000000000005b98ea98c19816f9752268254423b38cec279ed0246f477b5d6617c1d12c5920199d019eb5085f1287913dbdcd6ad84a8ef9858c4170f4a7c5", @ANYRES32=r5, @ANYBLOB='\x00'/28, @ANYRES32=r7, @ANYBLOB="000000000200"/28, @ANYRES32=r0, @ANYBLOB="000000000000000001000000000000006300000000000000000000000be4a4f9cd28f219e287d8a9a7010938bd832c00c1b17069929c823beaef0f5e02ca4fef9779ecab13d7fa5072822a66e3fd8286e0dfbbe1791f824112622dd14a7f04fe5e4622a2bbcd9d1c642379a49be1a61f332f3ab857fbaad3571b27c282e69a1d382c9f798e915bff1632bb6105cd395cdae985bffdc641c06306981ddd841e8da1b33dbac4be8fb082666f476be52902d63564c2c997d4185fcf2a10a0c7bc8612584fb280c7ef35f41299aaeab02e4ddf33bb225223ae165918e4", @ANYRES32=r8, @ANYBLOB="00000000ff7f00"/28]) 20:31:45 executing program 5: syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000100)={0x0, 0xff00, 0x0}) 20:31:45 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x8447, 0x0) preadv(r0, 0x0, 0x0, 0x0) 20:31:45 executing program 0: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = gettid() kcmp(r1, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) r2 = gettid() kcmp(r2, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) dup(r4) kcmp(r1, r2, 0x3, r0, r4) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioprio_set$pid(0x2, 0x0, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x0) r7 = dup(r6) write$P9_RLOPEN(r7, 0x0, 0x0) ioctl$KVM_REINJECT_CONTROL(r7, 0xae71, &(0x7f0000000000)={0x4}) clone(0xa02a6500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 20:31:45 executing program 4: perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x2) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioprio_set$pid(0x2, 0x0, 0x0) clone(0xa02a6500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 20:31:45 executing program 0 (fault-call:1 fault-nth:0): clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0xa02a6500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 20:31:45 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 20:31:45 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x2, &(0x7f0000000100)={0x0, 0xff00, 0x0}) 20:31:45 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x8447, 0x0) preadv(r0, 0x0, 0x0, 0x0) 20:31:45 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, 0x0) 20:31:45 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = dup(r2) write$P9_RLOPEN(r3, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000000c0)={0xffffffffffffffff}, 0xe45fd057ba979173, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f0000000140)={0xf, 0x8, 0xfa00, {r4, 0x4}}, 0x10) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioprio_set$pid(0x2, 0x0, 0x0) clone(0xa02a6500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x10000, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(r5, 0x0, 0x1, &(0x7f0000000040)=0x1, 0x4) 20:31:45 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x8447, 0x0) preadv(r0, 0x0, 0x0, 0x0) [ 192.816548][ T9603] FAULT_INJECTION: forcing a failure. [ 192.816548][ T9603] name failslab, interval 1, probability 0, space 0, times 0 [ 192.862754][ T9603] CPU: 0 PID: 9603 Comm: syz-executor.0 Not tainted 5.4.0-rc4+ #0 [ 192.870604][ T9603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 192.880654][ T9603] Call Trace: [ 192.880675][ T9603] dump_stack+0x1d8/0x2f8 [ 192.880693][ T9603] should_fail+0x555/0x770 [ 192.888323][ T9603] __should_failslab+0x11a/0x160 [ 192.888340][ T9603] should_failslab+0x9/0x20 [ 192.888355][ T9603] kmem_cache_alloc_node+0x65/0x280 [ 192.907475][ T9603] ? copy_process+0x501/0x5970 [ 192.907492][ T9603] copy_process+0x501/0x5970 [ 192.907510][ T9603] ? refcount_sub_and_test_checked+0x179/0x230 [ 192.907527][ T9603] ? vfs_write+0x4a2/0x590 [ 192.907537][ T9603] ? __f_unlock_pos+0x19/0x20 [ 192.907557][ T9603] _do_fork+0x13f/0x5b0 [ 192.916883][ T9603] ? debug_smp_processor_id+0x1c/0x20 [ 192.916896][ T9603] ? fpregs_assert_state_consistent+0xb7/0xe0 [ 192.916914][ T9603] __x64_sys_clone+0x1ec/0x230 [ 192.916934][ T9603] do_syscall_64+0xf7/0x1c0 [ 192.916947][ T9603] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 192.963416][ T9603] RIP: 0033:0x459f39 [ 192.967300][ T9603] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 192.986936][ T9603] RSP: 002b:00007f9e8eb79c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 192.995356][ T9603] RAX: ffffffffffffffda RBX: 00007f9e8eb79c90 RCX: 0000000000459f39 [ 193.003525][ T9603] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 00000000a02a6500 20:31:45 executing program 4: ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000000)=0x0) perf_event_open(0x0, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x85a3956f39da7989) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0x4e20, @local}, {0x2, 0x4e20, @empty}, {0x2, 0x4e21, @rand_addr=0x64}, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000040)='bcsh0\x00', 0x8, 0x1, 0x754}) ioprio_set$pid(0x2, 0x0, 0x0) clone(0xa02a6500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 20:31:45 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x8447, 0x0) preadv(r0, &(0x7f0000000800)=[{&(0x7f0000000000)=""/31, 0x1f}], 0x1, 0x0) [ 193.011536][ T9603] RBP: 000000000075bf20 R08: ffffffffffffffff R09: 0000000000000000 [ 193.019522][ T9603] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9e8eb7a6d4 [ 193.027505][ T9603] R13: 00000000004c05bf R14: 00000000004d2ab0 R15: 0000000000000003 20:31:45 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 20:31:45 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x10, &(0x7f0000000100)={0x0, 0xff00, 0x0}) 20:31:45 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0xa02a6500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 20:31:46 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, 0x0) 20:31:46 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = dup(r1) write$P9_RLOPEN(r2, 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r2, 0xc0205647, &(0x7f0000000040)={0x9f0000, 0x0, 0xdde, [], &(0x7f0000000000)={0x1341729, 0x6, [], @ptr=0x7ff}}) prctl$PR_SET_ENDIAN(0x14, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioprio_set$pid(0x2, 0x0, 0x0) clone(0xa02a6500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 20:31:46 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0xa02a6502, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 20:31:46 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 20:31:46 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0xa02a6567, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 20:31:46 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x4c00, &(0x7f0000000100)={0x0, 0xff00, 0x0}) 20:31:46 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, 0x0) 20:31:46 executing program 4: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)=0x0) perf_event_open(0x0, r0, 0x0, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioprio_set$pid(0x2, 0x0, 0x0) clone(0xa02a6500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 20:31:46 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x8447, 0x0) preadv(r0, &(0x7f0000000800)=[{&(0x7f0000000000)=""/31, 0x1f}], 0x1, 0x0) 20:31:46 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0xa02a659e, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 20:31:46 executing program 5 (fault-call:1 fault-nth:0): r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000100)={0x0, 0xff00, 0x0}) 20:31:46 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 20:31:46 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0xa02a65a2, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 20:31:46 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioprio_set$pid(0x2, 0x0, 0x0) clone(0xa02a6500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) io_setup(0x2, &(0x7f0000000000)) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000040), &(0x7f0000000080)=0xc) 20:31:46 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x4c01, &(0x7f0000000100)={0x0, 0xff00, 0x0}) 20:31:46 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0xa02a65a4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 193.691419][ T9689] FAULT_INJECTION: forcing a failure. [ 193.691419][ T9689] name failslab, interval 1, probability 0, space 0, times 0 [ 193.715439][ T9689] CPU: 0 PID: 9689 Comm: syz-executor.5 Not tainted 5.4.0-rc4+ #0 [ 193.723291][ T9689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 193.733440][ T9689] Call Trace: [ 193.736777][ T9689] dump_stack+0x1d8/0x2f8 [ 193.741141][ T9689] should_fail+0x555/0x770 [ 193.745578][ T9689] __should_failslab+0x11a/0x160 [ 193.750521][ T9689] ? tomoyo_realpath_from_path+0xdc/0x7c0 [ 193.756236][ T9689] should_failslab+0x9/0x20 [ 193.756248][ T9689] __kmalloc+0x7a/0x340 [ 193.756259][ T9689] ? tomoyo_realpath_from_path+0xca/0x7c0 [ 193.756271][ T9689] tomoyo_realpath_from_path+0xdc/0x7c0 [ 193.756288][ T9689] tomoyo_path_number_perm+0x166/0x640 [ 193.776240][ T9689] ? smack_file_ioctl+0x226/0x2e0 [ 193.776252][ T9689] ? __fget+0x411/0x510 20:31:46 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x8447, 0x0) preadv(r0, &(0x7f0000000800)=[{&(0x7f0000000000)=""/31, 0x1f}], 0x1, 0x0) 20:31:46 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x22820000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x25}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={r2, r0, 0x0, 0x0, 0x0}, 0x30) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) r5 = dup(r4) write$P9_RLOPEN(r5, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r2, r5, 0x0, 0x1, &(0x7f0000000000)='\x00', 0xffffffffffffffff}, 0x30) r6 = gettid() kcmp(r6, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) ioprio_set$pid(0x2, r6, 0x0) clone(0xa02a6500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 193.776268][ T9689] tomoyo_file_ioctl+0x23/0x30 [ 193.776279][ T9689] security_file_ioctl+0x6d/0xd0 [ 193.776294][ T9689] __x64_sys_ioctl+0xa3/0x120 [ 193.776314][ T9689] do_syscall_64+0xf7/0x1c0 [ 193.786797][ T9689] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 193.786808][ T9689] RIP: 0033:0x459f39 [ 193.786818][ T9689] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 193.786823][ T9689] RSP: 002b:00007f5c57331c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 193.786833][ T9689] RAX: ffffffffffffffda RBX: 00007f5c57331c90 RCX: 0000000000459f39 [ 193.786839][ T9689] RDX: 0000000020000100 RSI: 0000000040104593 RDI: 0000000000000003 [ 193.786845][ T9689] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 193.786851][ T9689] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5c573326d4 [ 193.786857][ T9689] R13: 00000000004c246c R14: 00000000004d5f78 R15: 0000000000000004 20:31:46 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0xa02a65a6, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 193.839054][ T9689] ERROR: Out of memory at tomoyo_realpath_from_path. 20:31:46 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0800b5055e0b") open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 20:31:46 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x4c04, &(0x7f0000000100)={0x0, 0xff00, 0x0}) 20:31:46 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0xa02a65a8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 20:31:46 executing program 5 (fault-call:1 fault-nth:1): r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000100)={0x0, 0xff00, 0x0}) [ 194.080389][ T9722] cgroup: fork rejected by pids controller in /syz0 [ 194.125474][ T9743] FAULT_INJECTION: forcing a failure. [ 194.125474][ T9743] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 194.138723][ T9743] CPU: 1 PID: 9743 Comm: syz-executor.5 Not tainted 5.4.0-rc4+ #0 [ 194.146562][ T9743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 194.156712][ T9743] Call Trace: [ 194.160013][ T9743] dump_stack+0x1d8/0x2f8 [ 194.164353][ T9743] should_fail+0x555/0x770 [ 194.168784][ T9743] should_fail_alloc_page+0x55/0x60 20:31:47 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0xa02a65aa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 20:31:47 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x8447, 0x0) preadv(r0, &(0x7f0000000800)=[{0x0}], 0x1, 0x0) 20:31:47 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0800b5055e0b") open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 194.173987][ T9743] prepare_alloc_pages+0x283/0x460 [ 194.179111][ T9743] __alloc_pages_nodemask+0xb2/0x5d0 [ 194.184420][ T9743] kmem_getpages+0x4d/0xa00 [ 194.188944][ T9743] cache_grow_begin+0x7e/0x2c0 [ 194.193723][ T9743] cache_alloc_refill+0x311/0x3f0 [ 194.198870][ T9743] ? check_preemption_disabled+0xb7/0x2a0 [ 194.204587][ T9743] __kmalloc+0x318/0x340 [ 194.208810][ T9743] ? tomoyo_realpath_from_path+0xdc/0x7c0 [ 194.214516][ T9743] tomoyo_realpath_from_path+0xdc/0x7c0 [ 194.220159][ T9743] tomoyo_path_number_perm+0x166/0x640 [ 194.225672][ T9743] ? smack_file_ioctl+0x226/0x2e0 [ 194.230677][ T9743] ? __fget+0x411/0x510 [ 194.234828][ T9743] tomoyo_file_ioctl+0x23/0x30 [ 194.239603][ T9743] security_file_ioctl+0x6d/0xd0 [ 194.244685][ T9743] __x64_sys_ioctl+0xa3/0x120 [ 194.249359][ T9743] do_syscall_64+0xf7/0x1c0 [ 194.253970][ T9743] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 194.260223][ T9743] RIP: 0033:0x459f39 [ 194.264178][ T9743] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 194.284962][ T9743] RSP: 002b:00007f5c57331c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 194.293371][ T9743] RAX: ffffffffffffffda RBX: 00007f5c57331c90 RCX: 0000000000459f39 [ 194.301344][ T9743] RDX: 0000000020000100 RSI: 0000000040104593 RDI: 0000000000000003 [ 194.309314][ T9743] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 194.317276][ T9743] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5c573326d4 [ 194.325282][ T9743] R13: 00000000004c246c R14: 00000000004d5f78 R15: 0000000000000004 20:31:47 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x4c05, &(0x7f0000000100)={0x0, 0xff00, 0x0}) 20:31:47 executing program 5 (fault-call:1 fault-nth:2): r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000100)={0x0, 0xff00, 0x0}) 20:31:47 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioprio_set$pid(0x5, 0x0, 0x0) clone(0xa02a6500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 20:31:47 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x8447, 0x0) preadv(r0, &(0x7f0000000800)=[{0x0}], 0x1, 0x0) 20:31:47 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0xa02a65ac, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 20:31:47 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0800b5055e0b") open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 194.575063][ T9946] FAULT_INJECTION: forcing a failure. [ 194.575063][ T9946] name failslab, interval 1, probability 0, space 0, times 0 [ 194.606903][ T9946] CPU: 0 PID: 9946 Comm: syz-executor.5 Not tainted 5.4.0-rc4+ #0 [ 194.615210][ T9946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 194.625396][ T9946] Call Trace: [ 194.628701][ T9946] dump_stack+0x1d8/0x2f8 [ 194.633055][ T9946] should_fail+0x555/0x770 [ 194.637489][ T9946] __should_failslab+0x11a/0x160 [ 194.642433][ T9946] ? tomoyo_encode2+0x273/0x5a0 [ 194.647379][ T9946] should_failslab+0x9/0x20 [ 194.651887][ T9946] __kmalloc+0x7a/0x340 [ 194.656052][ T9946] tomoyo_encode2+0x273/0x5a0 [ 194.660742][ T9946] tomoyo_realpath_from_path+0x769/0x7c0 [ 194.667781][ T9946] tomoyo_path_number_perm+0x166/0x640 [ 194.673284][ T9946] ? smack_file_ioctl+0x226/0x2e0 [ 194.678307][ T9946] ? __fget+0x411/0x510 [ 194.682474][ T9946] tomoyo_file_ioctl+0x23/0x30 [ 194.687581][ T9946] security_file_ioctl+0x6d/0xd0 [ 194.692521][ T9946] __x64_sys_ioctl+0xa3/0x120 [ 194.697203][ T9946] do_syscall_64+0xf7/0x1c0 [ 194.701722][ T9946] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 194.707770][ T9946] RIP: 0033:0x459f39 20:31:47 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0xa02a65ae, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 20:31:47 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x5421, &(0x7f0000000100)={0x0, 0xff00, 0x0}) 20:31:47 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x8447, 0x0) preadv(r0, &(0x7f0000000800)=[{0x0}], 0x1, 0x0) [ 194.711668][ T9946] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 194.711674][ T9946] RSP: 002b:00007f5c57331c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 194.711683][ T9946] RAX: ffffffffffffffda RBX: 00007f5c57331c90 RCX: 0000000000459f39 [ 194.711693][ T9946] RDX: 0000000020000100 RSI: 0000000040104593 RDI: 0000000000000003 [ 194.756201][ T9946] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 194.764394][ T9946] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5c573326d4 20:31:47 executing program 4: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = pkey_alloc(0x0, 0x1) pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, r1) ioprio_set$pid(0x2, 0x0, 0x0) clone(0xa0222500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) r4 = dup(r3) write$P9_RLOPEN(r4, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r4) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x480001, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r5, 0x40042409, 0x1) [ 194.772726][ T9946] R13: 00000000004c246c R14: 00000000004d5f78 R15: 0000000000000004 [ 194.791729][ T9946] ERROR: Out of memory at tomoyo_realpath_from_path. 20:31:47 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x8447, 0x0) preadv(r0, &(0x7f0000000800)=[{0x0}, {0x0}], 0x2, 0x0) 20:31:47 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x5450, &(0x7f0000000100)={0x0, 0xff00, 0x0}) 20:31:47 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0800b5055e0bcfe87b") open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 20:31:47 executing program 5 (fault-call:1 fault-nth:3): r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000100)={0x0, 0xff00, 0x0}) 20:31:47 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0xa02a65b0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 20:31:47 executing program 4: fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000)={0x0, 0x0}) rt_sigqueueinfo(r0, 0x2e, &(0x7f0000000040)={0x38, 0x5a, 0x3}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.net/syz1\x00', 0x1ff) ioprio_set$pid(0x2, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = dup(r2) write$P9_RLOPEN(r3, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000100)={{{@in, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@initdev}}, &(0x7f0000000200)=0xe8) quotactl(0xe5b, &(0x7f00000000c0)='./file0\x00', r4, &(0x7f0000000240)="43acd9faf8855dcf9f0ff0c88d5aa12df2e70eab7490c6334dd170a00f0940c782b3f29ea1c96f580932357b8bfd990837078084fe6aa3b7179f0192305830a221324527d4f0423a6a856f709fbca27731b0b46b27a4af3d9be6f5ad47b18fc1cce2a9b8459a9837e237d7901b98b2f88a53c6dc3e74d3b4dc9a8b9aad16") clone(0xa02a6500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 20:31:47 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x8447, 0x0) preadv(r0, &(0x7f0000000800)=[{0x0}, {0x0}], 0x2, 0x0) [ 195.077859][T10202] FAULT_INJECTION: forcing a failure. [ 195.077859][T10202] name failslab, interval 1, probability 0, space 0, times 0 [ 195.140545][T10202] CPU: 0 PID: 10202 Comm: syz-executor.5 Not tainted 5.4.0-rc4+ #0 [ 195.148823][T10202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 195.158879][T10202] Call Trace: [ 195.162181][T10202] dump_stack+0x1d8/0x2f8 [ 195.166527][T10202] should_fail+0x555/0x770 [ 195.171229][T10202] __should_failslab+0x11a/0x160 [ 195.176183][T10202] ? bitmap_alloc+0x2e/0x50 [ 195.180700][T10202] should_failslab+0x9/0x20 [ 195.185346][T10202] __kmalloc+0x7a/0x340 20:31:48 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0800b5055e0bcfe87b") open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 195.189508][T10202] bitmap_alloc+0x2e/0x50 [ 195.193847][T10202] bitmap_zalloc+0x21/0x30 [ 195.198266][T10202] evdev_ioctl_handler+0xca0/0x2430 [ 195.203480][T10202] evdev_ioctl+0x27/0x30 [ 195.207725][T10202] ? evdev_poll+0x1f0/0x1f0 [ 195.212227][T10202] do_vfs_ioctl+0x744/0x1730 [ 195.216809][T10202] ? __fget+0x411/0x510 [ 195.220965][T10202] ? tomoyo_file_ioctl+0x23/0x30 [ 195.225909][T10202] ? security_file_ioctl+0xa1/0xd0 [ 195.231055][T10202] __x64_sys_ioctl+0xe3/0x120 [ 195.235745][T10202] do_syscall_64+0xf7/0x1c0 20:31:48 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x8447, 0x0) preadv(r0, &(0x7f0000000800)=[{0x0}, {0x0}], 0x2, 0x0) 20:31:48 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0xa02a65b2, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 195.240255][T10202] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 195.246144][T10202] RIP: 0033:0x459f39 [ 195.246155][T10202] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 195.246160][T10202] RSP: 002b:00007f5c57331c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 195.246170][T10202] RAX: ffffffffffffffda RBX: 00007f5c57331c90 RCX: 0000000000459f39 20:31:48 executing program 4: perf_event_open(0x0, 0x0, 0x41, 0xffffffffffffffff, 0x9) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioprio_set$pid(0x2, 0x0, 0x0) r0 = gettid() kcmp(r0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$netrom_NETROM_IDLE(r2, 0x103, 0x7, &(0x7f0000000080)=0x2, 0x4) r3 = dup(r2) write$P9_RLOPEN(r3, 0x0, 0x0) ioctl$KVM_TRANSLATE(r3, 0xc018ae85, &(0x7f0000000000)={0x0, 0x1e000, 0x3f, 0x9, 0x7f}) r4 = getpgid(r0) ptrace(0x4207, r4) clone(0xa02a6500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 195.246176][T10202] RDX: 0000000020000100 RSI: 0000000040104593 RDI: 0000000000000003 [ 195.246181][T10202] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 195.246186][T10202] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5c573326d4 [ 195.246191][T10202] R13: 00000000004c246c R14: 00000000004d5f78 R15: 0000000000000004 20:31:48 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x5451, &(0x7f0000000100)={0x0, 0xff00, 0x0}) 20:31:48 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0800b5055e0bcfe87b") open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 20:31:48 executing program 5 (fault-call:1 fault-nth:4): r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000100)={0x0, 0xff00, 0x0}) 20:31:48 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioprio_set$pid(0x2, 0x0, 0x0) clone(0x2100000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 20:31:48 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit(0x4b) clone(0xa02a6500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 20:31:48 executing program 1 (fault-call:1 fault-nth:0): r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x8447, 0x0) preadv(r0, &(0x7f0000000800)=[{&(0x7f0000000000)=""/31, 0x70800}, {0x0}], 0x2, 0x0) 20:31:48 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000100)={0x0, 0xff00, 0x0}) [ 195.621282][T10432] FAULT_INJECTION: forcing a failure. [ 195.621282][T10432] name failslab, interval 1, probability 0, space 0, times 0 [ 195.653277][T10432] CPU: 1 PID: 10432 Comm: syz-executor.1 Not tainted 5.4.0-rc4+ #0 [ 195.661209][T10432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 195.671269][T10432] Call Trace: [ 195.674566][T10432] dump_stack+0x1d8/0x2f8 [ 195.678909][T10432] should_fail+0x555/0x770 [ 195.683344][T10432] __should_failslab+0x11a/0x160 [ 195.688300][T10432] should_failslab+0x9/0x20 [ 195.692897][T10432] kmem_cache_alloc_trace+0x5d/0x2f0 [ 195.698183][T10432] ? __vb2_init_fileio+0x19d/0xb80 [ 195.703302][T10432] __vb2_init_fileio+0x19d/0xb80 [ 195.708256][T10432] __vb2_perform_fileio+0x353/0x15e0 [ 195.713564][T10432] vb2_read+0x3b/0x50 [ 195.717548][T10432] vb2_fop_read+0x21e/0x310 20:31:48 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getrusage(0x0, &(0x7f0000000140)) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) dup(r1) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x8000) [ 195.722053][T10432] v4l2_read+0x173/0x270 [ 195.726299][T10432] do_iter_read+0x4b1/0x5b0 [ 195.730812][T10432] do_preadv+0x178/0x290 [ 195.735053][T10432] ? check_preemption_disabled+0xb7/0x2a0 [ 195.740772][T10432] ? prepare_exit_to_usermode+0x1f7/0x580 [ 195.746688][T10432] ? trace_irq_disable_rcuidle+0x23/0x1e0 [ 195.752533][T10432] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 195.758045][T10432] ? trace_irq_disable_rcuidle+0x23/0x1e0 [ 195.763763][T10432] __x64_sys_preadv+0x9e/0xb0 [ 195.768431][T10432] do_syscall_64+0xf7/0x1c0 [ 195.773031][T10432] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 195.778928][T10432] RIP: 0033:0x459f39 [ 195.782803][T10432] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 195.802393][T10432] RSP: 002b:00007ffbcc864c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 195.810792][T10432] RAX: ffffffffffffffda RBX: 00007ffbcc864c90 RCX: 0000000000459f39 20:31:48 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0800b5055e0bcfe87b00") open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 20:31:48 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x5452, &(0x7f0000000100)={0x0, 0xff00, 0x0}) 20:31:48 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioprio_set$pid(0x2, 0x0, 0x0) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x1e300, 0x0) ioctl$VIDIOC_G_FBUF(r0, 0x8030560a, &(0x7f0000000080)={0x80, 0x8, &(0x7f0000000040)="a924714ca44b541bb58845d2d6f9b99a3de2a2b549ec00b2d81638dfe5b760519a2f", {0x7ff, 0x4, 0x0, 0xa, 0x7, 0x200, 0xa, 0x6}}) clone(0xa02a6500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 195.818758][T10432] RDX: 0000000000000002 RSI: 0000000020000800 RDI: 0000000000000003 [ 195.826713][T10432] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 195.834677][T10432] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffbcc8656d4 [ 195.842648][T10432] R13: 00000000004c7683 R14: 00000000004dd118 R15: 0000000000000004 20:31:48 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x2, &(0x7f0000000100)={0x0, 0xff00, 0x0}) 20:31:48 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = dup(r1) write$P9_RLOPEN(r2, 0x0, 0x0) ioctl$KDSIGACCEPT(r2, 0x4b4e, 0x15) ioprio_set$pid(0x2, 0x0, 0x0) clone(0xa02a6500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 20:31:48 executing program 1 (fault-call:1 fault-nth:1): r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x8447, 0x0) preadv(r0, &(0x7f0000000800)=[{&(0x7f0000000000)=""/31, 0x70800}, {0x0}], 0x2, 0x0) 20:31:48 executing program 0: syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0)='SEG6\x00') clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0xa02a6500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) prctl$PR_GET_NAME(0x10, &(0x7f0000000000)=""/149) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) dup(r1) ioctl$sock_inet_SIOCGIFNETMASK(r1, 0x891b, &(0x7f0000000100)={'ip6tnl0\x00', {0x2, 0x4e23, @remote}}) [ 196.079689][T10656] FAULT_INJECTION: forcing a failure. [ 196.079689][T10656] name failslab, interval 1, probability 0, space 0, times 0 [ 196.114962][T10656] CPU: 0 PID: 10656 Comm: syz-executor.1 Not tainted 5.4.0-rc4+ #0 [ 196.122913][T10656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 196.133019][T10656] Call Trace: [ 196.136321][T10656] dump_stack+0x1d8/0x2f8 [ 196.136348][T10656] should_fail+0x555/0x770 [ 196.145063][T10656] __should_failslab+0x11a/0x160 [ 196.145076][T10656] ? kzalloc+0x1f/0x40 [ 196.145087][T10656] should_failslab+0x9/0x20 [ 196.145097][T10656] __kmalloc+0x7a/0x340 [ 196.145107][T10656] ? do_syscall_64+0xf7/0x1c0 [ 196.145120][T10656] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 196.174223][T10656] kzalloc+0x1f/0x40 20:31:49 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0800b5055e0bcfe87b00") open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 196.178124][T10656] __vb2_queue_alloc+0x148/0x15a0 [ 196.183162][T10656] ? __kasan_check_read+0x11/0x20 [ 196.188209][T10656] vb2_core_reqbufs+0x7e3/0xdb0 [ 196.193056][T10656] __vb2_init_fileio+0x2c5/0xb80 [ 196.197980][T10656] __vb2_perform_fileio+0x353/0x15e0 [ 196.203276][T10656] vb2_read+0x3b/0x50 [ 196.207255][T10656] vb2_fop_read+0x21e/0x310 [ 196.211835][T10656] v4l2_read+0x173/0x270 [ 196.216068][T10656] do_iter_read+0x4b1/0x5b0 [ 196.220566][T10656] do_preadv+0x178/0x290 [ 196.224799][T10656] ? check_preemption_disabled+0xb7/0x2a0 [ 196.230524][T10656] ? prepare_exit_to_usermode+0x1f7/0x580 [ 196.236252][T10656] ? trace_irq_disable_rcuidle+0x23/0x1e0 [ 196.241973][T10656] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 196.241985][T10656] ? trace_irq_disable_rcuidle+0x23/0x1e0 [ 196.242003][T10656] __x64_sys_preadv+0x9e/0xb0 [ 196.242017][T10656] do_syscall_64+0xf7/0x1c0 [ 196.242030][T10656] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 196.242043][T10656] RIP: 0033:0x459f39 20:31:49 executing program 1 (fault-call:1 fault-nth:2): r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x8447, 0x0) preadv(r0, &(0x7f0000000800)=[{&(0x7f0000000000)=""/31, 0x70800}, {0x0}], 0x2, 0x0) 20:31:49 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x5460, &(0x7f0000000100)={0x0, 0xff00, 0x0}) [ 196.262345][T10656] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 196.262352][T10656] RSP: 002b:00007ffbcc864c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 196.262362][T10656] RAX: ffffffffffffffda RBX: 00007ffbcc864c90 RCX: 0000000000459f39 [ 196.262368][T10656] RDX: 0000000000000002 RSI: 0000000020000800 RDI: 0000000000000003 [ 196.262373][T10656] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 196.262379][T10656] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffbcc8656d4 [ 196.262385][T10656] R13: 00000000004c7683 R14: 00000000004dd118 R15: 0000000000000004 20:31:49 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioprio_set$pid(0x1, 0x0, 0x800) clone(0xa02a6500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_dev$admmidi(&(0x7f0000000080)='/dev/admmidi#\x00', 0x8, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) r5 = dup(r4) write$P9_RLOPEN(r5, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, r5, 0x0, 0xe, &(0x7f00000000c0)='poly1305-simd\x00', 0xffffffffffffffff}, 0x30) write$FUSE_LK(r2, &(0x7f0000000140)={0x28, 0x0, 0x1, {{0x7, 0x2, 0x0, r6}}}, 0x28) dup(r1) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000000)=0x5, 0x4) 20:31:49 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0800b5055e0bcfe87b00") open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 196.425322][T10736] FAULT_INJECTION: forcing a failure. [ 196.425322][T10736] name failslab, interval 1, probability 0, space 0, times 0 20:31:49 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x10, &(0x7f0000000100)={0x0, 0xff00, 0x0}) 20:31:49 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioprio_set$pid(0x2, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) dup(r1) connect$x25(r1, &(0x7f0000000000)={0x9, @null=' \x00'}, 0x12) clone(0xa02a6500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = getpid() ptrace$setsig(0x4203, r2, 0x8, &(0x7f0000000080)={0x3b, 0x4, 0x3f}) 20:31:49 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x8000, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140)='devlink\x00') r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x484800, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) r5 = dup(r4) write$P9_RLOPEN(r5, 0x0, 0x0) r6 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x25}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) r8 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={r8, r6, 0x0, 0x0, 0x0}, 0x30) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) accept4(r9, 0x0, 0x0, 0x0) fcntl$F_SET_FILE_RW_HINT(r9, 0x40e, &(0x7f0000000340)=0x3) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0xdc, r1, 0x0, 0x70bd2d, 0x25dfdbfe, {}, [{{{0x10, 0x1, 'netdevsim\x00'}, {0x10, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x89, r2}}, {{{0x10, 0x1, 'netdevsim\x00'}, {0x10, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8b, 0x2}}, {{{0x10, 0x1, 'netdevsim\x00'}, {0x10, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x89, r5}}, {{{0x10, 0x1, 'netdevsim\x00'}, {0x10, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8a, r8}}, {{{0x10, 0x1, 'netdevsim\x00'}, {0x10, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8b, 0x4}}]}, 0xdc}, 0x1, 0x0, 0x0, 0x8000}, 0x80) clone(0xa02a6500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 196.497998][T10736] CPU: 1 PID: 10736 Comm: syz-executor.1 Not tainted 5.4.0-rc4+ #0 [ 196.505929][T10736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 196.515991][T10736] Call Trace: [ 196.519296][T10736] dump_stack+0x1d8/0x2f8 [ 196.523774][T10736] should_fail+0x555/0x770 [ 196.528197][T10736] __should_failslab+0x11a/0x160 [ 196.533218][T10736] should_failslab+0x9/0x20 [ 196.537717][T10736] kmem_cache_alloc_trace+0x5d/0x2f0 [ 196.542990][T10736] ? vb2_vmalloc_alloc+0x86/0x210 [ 196.548004][T10736] ? kzalloc+0x1f/0x40 [ 196.552144][T10736] vb2_vmalloc_alloc+0x86/0x210 [ 196.556980][T10736] ? vb2_common_vm_close+0x80/0x80 [ 196.562269][T10736] __vb2_queue_alloc+0x876/0x15a0 [ 196.567328][T10736] vb2_core_reqbufs+0x7e3/0xdb0 [ 196.572183][T10736] __vb2_init_fileio+0x2c5/0xb80 [ 196.577107][T10736] __vb2_perform_fileio+0x353/0x15e0 [ 196.582390][T10736] vb2_read+0x3b/0x50 [ 196.586371][T10736] vb2_fop_read+0x21e/0x310 [ 196.590859][T10736] v4l2_read+0x173/0x270 [ 196.595095][T10736] do_iter_read+0x4b1/0x5b0 [ 196.599603][T10736] do_preadv+0x178/0x290 [ 196.603832][T10736] ? check_preemption_disabled+0xb7/0x2a0 [ 196.609560][T10736] ? prepare_exit_to_usermode+0x1f7/0x580 [ 196.615263][T10736] ? trace_irq_disable_rcuidle+0x23/0x1e0 [ 196.620971][T10736] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 196.626424][T10736] ? trace_irq_disable_rcuidle+0x23/0x1e0 [ 196.632142][T10736] __x64_sys_preadv+0x9e/0xb0 [ 196.636821][T10736] do_syscall_64+0xf7/0x1c0 [ 196.641326][T10736] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 196.647196][T10736] RIP: 0033:0x459f39 [ 196.651066][T10736] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 196.670660][T10736] RSP: 002b:00007ffbcc864c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 196.679065][T10736] RAX: ffffffffffffffda RBX: 00007ffbcc864c90 RCX: 0000000000459f39 [ 196.687035][T10736] RDX: 0000000000000002 RSI: 0000000020000800 RDI: 0000000000000003 [ 196.694988][T10736] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 196.703044][T10736] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffbcc8656d4 [ 196.710996][T10736] R13: 00000000004c7683 R14: 00000000004dd118 R15: 0000000000000004 20:31:49 executing program 1 (fault-call:1 fault-nth:3): r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x8447, 0x0) preadv(r0, &(0x7f0000000800)=[{&(0x7f0000000000)=""/31, 0x70800}, {0x0}], 0x2, 0x0) 20:31:49 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x5501, &(0x7f0000000100)={0x0, 0xff00, 0x0}) [ 196.886949][T10865] FAULT_INJECTION: forcing a failure. [ 196.886949][T10865] name failslab, interval 1, probability 0, space 0, times 0 [ 196.902374][T10865] CPU: 1 PID: 10865 Comm: syz-executor.1 Not tainted 5.4.0-rc4+ #0 [ 196.910289][T10865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 196.920345][T10865] Call Trace: [ 196.923639][T10865] dump_stack+0x1d8/0x2f8 [ 196.927984][T10865] should_fail+0x555/0x770 [ 196.932422][T10865] __should_failslab+0x11a/0x160 20:31:49 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0800b5055e0bcfe87b0071") open(0x0, 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 196.937394][T10865] should_failslab+0x9/0x20 [ 196.941915][T10865] kmem_cache_alloc_node_trace+0x6e/0x2d0 [ 196.947639][T10865] ? __get_vm_area_node+0x142/0x320 [ 196.952841][T10865] __get_vm_area_node+0x142/0x320 [ 196.958493][T10865] __vmalloc_node_range+0xea/0x860 [ 196.963628][T10865] ? vb2_vmalloc_alloc+0xc7/0x210 [ 196.968656][T10865] ? rcu_read_lock_sched_held+0x10b/0x170 [ 196.974385][T10865] ? trace_kmalloc+0xcd/0x130 [ 196.979059][T10865] vmalloc_user+0x73/0x80 [ 196.983382][T10865] ? vb2_vmalloc_alloc+0xc7/0x210 [ 196.988397][T10865] vb2_vmalloc_alloc+0xc7/0x210 [ 196.993269][T10865] ? vb2_common_vm_close+0x80/0x80 [ 196.998506][T10865] __vb2_queue_alloc+0x876/0x15a0 [ 197.003831][T10865] vb2_core_reqbufs+0x7e3/0xdb0 [ 197.008762][T10865] __vb2_init_fileio+0x2c5/0xb80 [ 197.013732][T10865] __vb2_perform_fileio+0x353/0x15e0 [ 197.019028][T10865] vb2_read+0x3b/0x50 [ 197.023008][T10865] vb2_fop_read+0x21e/0x310 [ 197.027514][T10865] v4l2_read+0x173/0x270 [ 197.031758][T10865] do_iter_read+0x4b1/0x5b0 [ 197.036265][T10865] do_preadv+0x178/0x290 [ 197.040498][T10865] ? check_preemption_disabled+0xb7/0x2a0 [ 197.046204][T10865] ? prepare_exit_to_usermode+0x1f7/0x580 [ 197.051905][T10865] ? trace_irq_disable_rcuidle+0x23/0x1e0 [ 197.057618][T10865] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 197.063053][T10865] ? trace_irq_disable_rcuidle+0x23/0x1e0 [ 197.068758][T10865] __x64_sys_preadv+0x9e/0xb0 [ 197.073434][T10865] do_syscall_64+0xf7/0x1c0 [ 197.077931][T10865] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 197.083813][T10865] RIP: 0033:0x459f39 [ 197.087695][T10865] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 197.107286][T10865] RSP: 002b:00007ffbcc864c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 197.115702][T10865] RAX: ffffffffffffffda RBX: 00007ffbcc864c90 RCX: 0000000000459f39 [ 197.123696][T10865] RDX: 0000000000000002 RSI: 0000000020000800 RDI: 0000000000000003 20:31:50 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioprio_set$pid(0x2, 0x0, 0x0) clone(0xa02a6500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = dup(r1) write$P9_RLOPEN(r2, 0x0, 0x0) ioctl$TIOCOUTQ(r2, 0x5411, &(0x7f0000000000)) [ 197.131751][T10865] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 197.139760][T10865] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffbcc8656d4 [ 197.147753][T10865] R13: 00000000004c7683 R14: 00000000004dd118 R15: 0000000000000004 20:31:50 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x4c00, &(0x7f0000000100)={0x0, 0xff00, 0x0}) 20:31:50 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 197.183861][T10865] syz-executor.1: vmalloc: allocation failure: 462848 bytes, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 197.253456][T10865] CPU: 0 PID: 10865 Comm: syz-executor.1 Not tainted 5.4.0-rc4+ #0 [ 197.261425][T10865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 197.271485][T10865] Call Trace: [ 197.274789][T10865] dump_stack+0x1d8/0x2f8 [ 197.279135][T10865] warn_alloc+0x17d/0x2e0 [ 197.283478][T10865] ? __get_vm_area_node+0x155/0x320 [ 197.288725][T10865] __vmalloc_node_range+0x29b/0x860 [ 197.293959][T10865] ? rcu_read_lock_sched_held+0x10b/0x170 [ 197.299690][T10865] ? trace_kmalloc+0xcd/0x130 [ 197.304385][T10865] vmalloc_user+0x73/0x80 [ 197.308727][T10865] ? vb2_vmalloc_alloc+0xc7/0x210 [ 197.313756][T10865] vb2_vmalloc_alloc+0xc7/0x210 [ 197.318661][T10865] ? vb2_common_vm_close+0x80/0x80 [ 197.323796][T10865] __vb2_queue_alloc+0x876/0x15a0 [ 197.328923][T10865] vb2_core_reqbufs+0x7e3/0xdb0 [ 197.333800][T10865] __vb2_init_fileio+0x2c5/0xb80 [ 197.338764][T10865] __vb2_perform_fileio+0x353/0x15e0 [ 197.344078][T10865] vb2_read+0x3b/0x50 [ 197.348075][T10865] vb2_fop_read+0x21e/0x310 [ 197.352618][T10865] v4l2_read+0x173/0x270 [ 197.356865][T10865] do_iter_read+0x4b1/0x5b0 [ 197.361382][T10865] do_preadv+0x178/0x290 [ 197.365630][T10865] ? check_preemption_disabled+0xb7/0x2a0 [ 197.371368][T10865] ? prepare_exit_to_usermode+0x1f7/0x580 [ 197.377114][T10865] ? trace_irq_disable_rcuidle+0x23/0x1e0 [ 197.382965][T10865] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 197.389737][T10865] ? trace_irq_disable_rcuidle+0x23/0x1e0 [ 197.397121][T10865] __x64_sys_preadv+0x9e/0xb0 20:31:50 executing program 4: perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0xd) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioprio_set$pid(0x3, 0x0, 0xfffffffffffffffd) clone(0xa02a6500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 20:31:50 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0xa02a6500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigprocmask(0x0, &(0x7f0000000000)={0xbf}, &(0x7f0000000040), 0x8) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x40000, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) dup(r2) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x7c, r3, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8000}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x80000000}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, [@IPVS_SVC_ATTR_PORT={0xffffffffffffffb9, 0x4, 0x4e23}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x10001}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = dup(r5) write$P9_RLOPEN(r6, 0x0, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r8 = accept4(r7, 0x0, 0x0, 0x0) dup(r8) write$P9_RLOPEN(r0, 0x0, 0xffffffffffffff96) ioctl$SG_GET_ACCESS_COUNT(r0, 0x2289, &(0x7f00000000c0)) [ 197.401798][T10865] do_syscall_64+0xf7/0x1c0 [ 197.401813][T10865] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 197.401822][T10865] RIP: 0033:0x459f39 [ 197.401832][T10865] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 197.401838][T10865] RSP: 002b:00007ffbcc864c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 197.401846][T10865] RAX: ffffffffffffffda RBX: 00007ffbcc864c90 RCX: 0000000000459f39 20:31:50 executing program 4: perf_event_open(0x0, 0x0, 0xe, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioprio_set$pid(0x2, 0x0, 0x0) clone(0xa02a6500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 20:31:50 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0800b5055e0bcfe87b0071") open(0x0, 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 197.401856][T10865] RDX: 0000000000000002 RSI: 0000000020000800 RDI: 0000000000000003 [ 197.412227][T10865] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 197.412234][T10865] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffbcc8656d4 [ 197.412240][T10865] R13: 00000000004c7683 R14: 00000000004dd118 R15: 0000000000000004 [ 197.420067][T10865] Mem-Info: [ 197.496264][T10865] active_anon:111428 inactive_anon:220 isolated_anon:0 20:31:50 executing program 4: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) accept4(r2, 0x0, 0x0, 0x0) fcntl$notify(r2, 0x402, 0x10) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r3 = accept4(r1, 0x0, 0x0, 0x0) r4 = dup(r3) write$P9_RLOPEN(r4, 0x0, 0x0) r5 = dup3(r0, r4, 0x0) fchmodat(r5, &(0x7f0000000000)='./file0\x00', 0x2) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioprio_set$pid(0x2, 0x0, 0x0) clone(0xa02a6500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 20:31:50 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x6364, &(0x7f0000000100)={0x0, 0xff00, 0x0}) [ 197.496264][T10865] active_file:7693 inactive_file:38313 isolated_file:0 [ 197.496264][T10865] unevictable:0 dirty:115 writeback:0 unstable:0 [ 197.496264][T10865] slab_reclaimable:12099 slab_unreclaimable:99418 [ 197.496264][T10865] mapped:58964 shmem:269 pagetables:2143 bounce:0 [ 197.496264][T10865] free:1267324 free_pcp:421 free_cma:0 [ 197.671279][T10865] Node 0 active_anon:450052kB inactive_anon:872kB active_file:30636kB inactive_file:153300kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:235916kB dirty:460kB writeback:0kB shmem:1076kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 73728kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 197.771583][T10865] Node 1 active_anon:0kB inactive_anon:0kB active_file:144kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 197.813242][T10865] Node 0 DMA free:15904kB min:216kB low:268kB high:320kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15904kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 197.840200][T10865] lowmem_reserve[]: 0 2567 2568 2568 [ 197.846279][T10865] Node 0 DMA32 free:1271480kB min:36352kB low:45440kB high:54528kB active_anon:449980kB inactive_anon:868kB active_file:29368kB inactive_file:153208kB unevictable:0kB writepending:456kB present:3129332kB managed:2632152kB mlocked:0kB kernel_stack:8864kB pagetables:8512kB bounce:0kB free_pcp:1880kB local_pcp:452kB free_cma:0kB [ 197.877962][T10865] lowmem_reserve[]: 0 0 1 1 [ 197.882554][T10865] Node 0 Normal free:4kB min:16kB low:20kB high:24kB active_anon:60kB inactive_anon:4kB active_file:1268kB inactive_file:92kB unevictable:0kB writepending:4kB present:786432kB managed:1428kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 197.910022][T10865] lowmem_reserve[]: 0 0 0 0 [ 197.914814][T10865] Node 1 Normal free:3778136kB min:53516kB low:66892kB high:80268kB active_anon:0kB inactive_anon:0kB active_file:144kB inactive_file:0kB unevictable:0kB writepending:4kB present:3932160kB managed:3870244kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 197.943379][T10865] lowmem_reserve[]: 0 0 0 0 [ 197.948066][T10865] Node 0 DMA: 0*4kB 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15904kB [ 197.962384][T10865] Node 0 DMA32: 3732*4kB (UME) 2783*8kB (UM) 1010*16kB (ME) 406*32kB (UM) 140*64kB (UME) 16*128kB (UME) 6*256kB (ME) 3*512kB (UM) 3*1024kB (UME) 2*2048kB (ME) 289*4096kB (M) = 1271336kB [ 197.981015][T10865] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 197.992896][T10865] Node 1 Normal: 4*4kB (UE) 87*8kB (UME) 175*16kB (UME) 87*32kB (UE) 29*64kB (UE) 15*128kB (UM) 5*256kB (UME) 5*512kB (UE) 2*1024kB (UM) 1*2048kB (M) 918*4096kB (M) = 3778136kB [ 198.010615][T10865] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 198.020296][T10865] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 198.029787][T10865] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 198.039636][T10865] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 198.049069][T10865] 46288 total pagecache pages [ 198.053865][T10865] 0 pages in swap cache [ 198.058170][T10865] Swap cache stats: add 0, delete 0, find 0/0 [ 198.064433][T10865] Free swap = 0kB [ 198.068248][T10865] Total swap = 0kB 20:31:50 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x8447, 0x0) preadv(r0, &(0x7f0000000800)=[{&(0x7f0000000000)=""/31, 0x70800}, {0x0}], 0x2, 0x0) 20:31:50 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0800b5055e0bcfe87b0071") open(0x0, 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 20:31:50 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0xa02a6500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = dup(r1) write$P9_RLOPEN(r2, 0x0, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000000)='memory.current\x00', 0x0, 0x0) sendto$inet(r3, &(0x7f0000000040)="1a151a6bd174601e4a9114c2f68edcbfaca997cdf490c3179dc7e398752b2e1d7cd9a7c40bf6180e7ca62bb47872fdfaba8a9163bf8bece1d092d6ecf2db32ea1a6dcabe18d7856e5676baf10a7af9662360310f9c4b1e23cf70e131155393f6241d57ec195aeb35d661", 0x6a, 0x1000d006, &(0x7f00000000c0)={0x2, 0x4e22, @broadcast}, 0x10) 20:31:50 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8) ioprio_set$pid(0x2, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000200)='/dev/null\x00', 0x100, 0x0) getsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000240)=0x8, &(0x7f0000000280)=0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x25}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) r3 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={r3, r0, 0x0, 0x0, 0x0}, 0x30) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) dup(r5) getsockopt$inet_sctp_SCTP_INITMSG(r5, 0x84, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x8) ptrace$setregs(0xffffffffffffffff, r3, 0x2, &(0x7f0000000000)="73eae6877965e2236bdc8625db18f6ef65e07186f6155c0a44e92f6950dc563f4e9abb7ef6c4d197ca38276227750a8bbfb738c61781494fb9c1662ec883ad885f9e34b2783bb9d841b15b9b095c5f50231061713983599fbae9c1136bfd833d9d83a4164b2e9bcc230813667e89ed3045f50785447fe59bf3e6b0ed60ba0ce39fdc6d9117e369c4ea5337205b601aeaa1870f24ac5e419fbdd749ed72ece4734e3dac50856e671d90ae4a7681ddcba0472fac5fd87c29a3ed4e716c90f61b001685c41e3a8e538a33c703e37d2123c5d182ce590f21dcffce83a4be576de5d0391b2aee5c61f133b40c2987f5d5e132") clone(0xa02a6500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 20:31:50 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x4c01, &(0x7f0000000100)={0x0, 0xff00, 0x0}) 20:31:50 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x8903, &(0x7f0000000100)={0x0, 0xff00, 0x0}) [ 198.072333][T10865] 1965979 pages RAM [ 198.076314][T10865] 0 pages HighMem/MovableOnly [ 198.081378][T10865] 336047 pages reserved [ 198.085769][T10865] 0 pages cma reserved 20:31:51 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0800b5055e0bcfe87b0071") open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 20:31:51 executing program 4: r0 = syz_open_dev$adsp(&(0x7f00000000c0)='/dev/adsp#\x00', 0x7ff, 0x303101) ioctl$PPPIOCATTACH(r0, 0x4004743d, &(0x7f0000000100)=0x1) r1 = gettid() r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) r5 = dup(r4) write$P9_RLOPEN(r5, 0x0, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r7 = accept4(r6, 0x0, 0x0, 0x0) r8 = dup(r7) write$P9_RLOPEN(r8, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000180)={0xffffffffffffffff}, 0x111}}, 0x20) r10 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40000, 0x30) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000280)={0x0, r10, 0x7, 0x40, 0x43, 0x40}) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r5, &(0x7f0000000200)={0x10, 0x30, 0xfa00, {&(0x7f0000000140), 0x0, {0xa, 0x4e23, 0x3, @mcast2, 0x40}, r9}}, 0x38) r11 = accept4(r2, 0x0, 0x0, 0x0) r12 = dup(r11) write$P9_RLOPEN(r12, 0x0, 0x10) r13 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x100, 0x203) perf_event_open(0x0, r1, 0x80b, r13, 0xc) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioprio_set$pid(0x2, 0x0, 0x0) remap_file_pages(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x85ab94f177939c1f, 0x2b2, 0xa9f32eb2320fba3) clone(0xa02a6500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 20:31:51 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x5421, &(0x7f0000000100)={0x0, 0xff00, 0x0}) 20:31:51 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0800b5055e0bcfe87b0071") open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 20:31:51 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20\x00', 0x10000, 0x0) ioctl$TIOCLINUX7(r1, 0x541c, &(0x7f00000000c0)={0x7, 0x3f}) bind$alg(r0, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0xfffffffffffffc5d) r2 = accept4(r0, 0x0, 0x0, 0x0) dup(r2) accept4$vsock_stream(r2, &(0x7f0000000000)={0x28, 0x0, 0x2710, @host}, 0x10, 0x800) clone(0xa02a6500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 20:31:51 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x890b, &(0x7f0000000100)={0x0, 0xff00, 0x0}) [ 198.288496][T11265] mmap: syz-executor.4 (11265) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. 20:31:51 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x8447, 0x0) preadv(r0, &(0x7f0000000800)=[{&(0x7f0000000000)=""/31, 0x70700}, {0x0}], 0x2, 0x0) 20:31:51 executing program 4: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0xc01, 0x0) r1 = getpgrp(0x0) perf_event_open(0x0, r1, 0x0, r0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) clone(0xa02a6500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f00000000c0)={0x0, 0x0, [], @raw_data=[0x18, 0x8001, 0x5, 0x3, 0xb5, 0x7fffffff, 0x1ff, 0x5, 0xffffff0f, 0x6, 0x2, 0x80000001, 0x1, 0x56, 0x3, 0x81, 0x4, 0x9, 0x4, 0x100, 0xd09e, 0x0, 0x40, 0x7, 0x40, 0x1, 0x9, 0x58ce529c, 0x7, 0x5, 0x6f4bf50e, 0x2]}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0) 20:31:51 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x5450, &(0x7f0000000100)={0x0, 0xff00, 0x0}) 20:31:51 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0800b5055e0bcfe87b0071") open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 20:31:51 executing program 4: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioprio_set$pid(0x2, 0x0, 0x0) clone(0xa02a6500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() inotify_init() ioctl$FIBMAP(r0, 0x1, &(0x7f0000000080)=0xfb0e) rmdir(&(0x7f00000000c0)='./file0\x00') kcmp(r1, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) ptrace$setregs(0x7, r1, 0x1, &(0x7f0000000000)="a10f1f5769fea2abcf36aa7fda9c6036f7ff20426652dc92a326095fdd66314e4dda56f086e84767c58d2891c14f4ebbea8a42501f3d729af4e16a7c45a0211b4905662c699463afc5b125b6479bcbe0e5fc9de38c6c07fe") 20:31:51 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_dev$char_usb(0xc, 0xb4, 0x400) clone(0x6840000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 20:31:51 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x8912, &(0x7f0000000100)={0x0, 0xff00, 0x0}) 20:31:51 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x8447, 0x0) preadv(r0, &(0x7f0000000800)=[{&(0x7f0000000000)=""/31, 0x70802}, {0x0}], 0x2, 0x0) 20:31:51 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0800b5055e0bcfe87b0071") open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 20:31:51 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x5451, &(0x7f0000000100)={0x0, 0xff00, 0x0}) 20:31:51 executing program 0: clone(0x40820100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x80, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) dup(r4) getsockopt$packet_buf(r4, 0x107, 0xd, &(0x7f0000000140), &(0x7f0000000180)) r5 = dup(r2) write$P9_RLOPEN(r5, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x2, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000040)=0x1, r6, 0x0, 0x1, 0x4}}, 0x20) clone(0x69eea279941871a0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 20:31:51 executing program 4: perf_event_open(0x0, 0x0, 0x8, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioprio_set$pid(0x2, 0x0, 0x0) clone(0xa02a6500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 20:31:51 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x8447, 0x0) preadv(r0, &(0x7f0000000800)=[{&(0x7f0000000000)=""/31, 0x70803}, {0x0}], 0x2, 0x0) 20:31:51 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0800b5055e0bcfe87b0071") open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 20:31:51 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x8933, &(0x7f0000000100)={0x0, 0xff00, 0x0}) 20:31:51 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x5452, &(0x7f0000000100)={0x0, 0xff00, 0x0}) 20:31:51 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = dup(r1) write$P9_RLOPEN(r2, 0x0, 0x0) ioctl$NS_GET_OWNER_UID(r2, 0xb704, &(0x7f0000000000)) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0xa02a6500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 20:31:51 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x8447, 0x0) preadv(r0, &(0x7f0000000800)=[{&(0x7f0000000000)=""/31, 0x70804}, {0x0}], 0x2, 0x0) 20:31:51 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0800b5055e0bcfe87b0071") open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 20:31:52 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0xae01, &(0x7f0000000100)={0x0, 0xff00, 0x0}) 20:31:52 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x8447, 0x0) preadv(r0, &(0x7f0000000800)=[{&(0x7f0000000000)=""/31, 0x70805}, {0x0}], 0x2, 0x0) 20:31:52 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x800, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f0000000040)=0x81, 0x4) clone(0xa02a6500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 20:31:52 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0800b5055e0bcfe87b0071") open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 20:31:52 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x5460, &(0x7f0000000100)={0x0, 0xff00, 0x0}) 20:31:52 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0800b5055e0bcfe87b0071") open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 20:31:52 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0xa02a6500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000340), 0x4) setxattr$security_selinux(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.selinux\x00', &(0x7f0000000080)='system_u:object_r:scanner_device_t:s0\x00', 0x26, 0x2) 20:31:52 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40044581, &(0x7f0000000100)={0x0, 0xff00, 0x0}) 20:31:52 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x6364, &(0x7f0000000100)={0x0, 0xff00, 0x0}) 20:31:52 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x8447, 0x0) preadv(r0, &(0x7f0000000800)=[{&(0x7f0000000000)=""/31, 0x70806}, {0x0}], 0x2, 0x0) 20:31:52 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0800b5055e0bcfe87b0071") open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 20:31:52 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x1, 0x0) clone(0xa02a6500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 20:31:52 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0800b5055e0bcfe87b0071") open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 20:31:52 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40044590, &(0x7f0000000100)={0x0, 0xff00, 0x0}) 20:31:52 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0xa02a6500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = dup(r1) write$P9_RLOPEN(r2, 0x0, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r2, 0x894b, &(0x7f0000000000)) 20:31:52 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0800b5055e0bcfe87b0071") open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 20:31:52 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x8914, &(0x7f0000000100)={0x0, 0xff00, 0x0}) 20:31:52 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x8447, 0x0) preadv(r0, &(0x7f0000000800)=[{&(0x7f0000000000)=""/31, 0x70807}, {0x0}], 0x2, 0x0) 20:31:52 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40044591, &(0x7f0000000100)={0x0, 0xff00, 0x0}) 20:31:52 executing program 0: clone(0x10500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0xa02a6500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpgid(0xffffffffffffffff) ioprio_set$pid(0x2, r0, 0xfffffffffffffb08) process_vm_readv(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/24, 0x18}, {&(0x7f0000000040)=""/165, 0xa5}], 0x2, &(0x7f0000000140), 0x0, 0x0) 20:31:53 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0800b5055e0bcfe87b0071") open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 20:31:53 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x8933, &(0x7f0000000100)={0x0, 0xff00, 0x0}) 20:31:53 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = dup(r1) write$P9_RLOPEN(r2, 0x0, 0x0) ioctl$KVM_SET_TSC_KHZ(r2, 0xaea2, 0x0) clone(0x6080500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) dup(r4) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x50, r5, 0xf3d2da8c83d1556b, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x3c, 0x2, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x9b3}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x7ff}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xfffffe00}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x3f}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x8004}, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VIDIOC_DBG_G_REGISTER(r6, 0xc0385650, &(0x7f00000002c0)={{0xf, @addr=0x7}, 0x8, 0x800, 0x2}) clone(0xa02a6500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000200)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000240)=0x18) 20:31:53 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x8447, 0x0) preadv(r0, &(0x7f0000000800)=[{&(0x7f0000000000)=""/31, 0x70808}, {0x0}], 0x2, 0x0) 20:31:53 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x400445a0, &(0x7f0000000100)={0x0, 0xff00, 0x0}) 20:31:53 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0800b5055e0bcfe87b0071") open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 20:31:53 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket(0x40000000015, 0x5, 0x0) close(r1) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r2, &(0x7f0000d83fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000000)={r3}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000140)={r3}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000000)={r3}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000080)={r4, 0x1000}, &(0x7f00000000c0)=0xc) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x8000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 20:31:53 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40044581, &(0x7f0000000100)={0x0, 0xff00, 0x0}) 20:31:53 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x8447, 0x0) preadv(r0, &(0x7f0000000800)=[{&(0x7f0000000000)=""/31, 0x70809}, {0x0}], 0x2, 0x0) 20:31:53 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x400454ca, &(0x7f0000000100)={0x0, 0xff00, 0x0}) 20:31:53 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0800b5055e0bcfe87b0071") open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 20:31:53 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0xa02a6500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x9, 0xc0) connect$x25(r0, &(0x7f0000000040)={0x9, @null=' \x00'}, 0x12) 20:31:53 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x8447, 0x0) preadv(r0, &(0x7f0000000800)=[{&(0x7f0000000000)=""/31, 0x7080a}, {0x0}], 0x2, 0x0) 20:31:53 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0800b5055e0bcfe87b0071") open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 20:31:53 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40044590, &(0x7f0000000100)={0x0, 0xff00, 0x0}) 20:31:53 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000000)=0xffffffffffffff32) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r1, &(0x7f0000000640)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) r4 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x200000, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vga_arbiter\x00', 0x20002, 0x0) r7 = dup(r6) write$P9_RLOPEN(r7, 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r7, 0xc020aa04, &(0x7f0000000200)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}}) r8 = dup(0xffffffffffffffff) ioctl$DRM_IOCTL_ADD_CTX(r8, 0xc0086420, &(0x7f0000000180)={0x0}) ioctl$DRM_IOCTL_SWITCH_CTX(0xffffffffffffffff, 0x40086424, &(0x7f00000001c0)={r9, 0x1}) ioctl$DRM_IOCTL_UNLOCK(r4, 0x4008642b, &(0x7f0000000140)={r9, 0x4}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="440400002800070500"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff000000000800010063627100180402000404060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000004000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a193ec32adcd00000000000000000000000000000000000000000000000000ffe800000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000204ea72b265cd683000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002e3c000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4ff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100005000500000000006198cc6884bdedaea3074cf77f"], 0x444}}, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={@mcast1, @mcast1, @rand_addr="aeeb6ea8c2ff74b429862405a387870d", 0x1, 0x0, 0x6, 0x280, 0x7, 0xc0, r3}) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioprio_set$pid(0x2, 0x0, 0x0) clone(0xa02a6500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 20:31:53 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x100000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 20:31:53 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40046104, &(0x7f0000000100)={0x0, 0xff00, 0x0}) 20:31:53 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x8447, 0x0) preadv(r0, &(0x7f0000000800)=[{&(0x7f0000000000)=""/31, 0x70802}, {0x0}], 0x2, 0x0) 20:31:53 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x8447, 0x0) preadv(r0, &(0x7f0000000800)=[{&(0x7f0000000000)=""/31, 0x7080b}, {0x0}], 0x2, 0x0) 20:31:53 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x0) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000000)='trusted.overlay.opaque\x00', &(0x7f0000000040)='y\x00', 0x2, 0x5) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0xa02a6500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 20:31:53 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x8447, 0x0) preadv(r0, &(0x7f0000000800)=[{&(0x7f0000000000)=""/31, 0x70802}, {0x0}], 0x2, 0x0) 20:31:53 executing program 4: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)=0x2) gettid() clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioprio_set$pid(0x2, 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x400801, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000240)={r1, &(0x7f0000000180)="27d0cb7096ac6ca833be53577e3144c8cbf81f256a85045092b5efe986402c131394558c3378da1a436ffc1938f3ddb4925c784828ca3b8c53723ed2986c64cab334585c69ea77b95291a9e9add0386d05153f6163ce54d0bfd72328493012fbdb79d0605fd7339626d405c91e0d9436a7c7556d223838978d526f4ec78ed3b74445bf3fb0b094c3828d1ca447870946497931e4082405cca82dbffb81f758768b1d6e"}, 0x20) clone(0xa02a6500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$alg(0x26, 0x5, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000080)={'ipvs\x00'}, &(0x7f00000000c0)=0x1e) bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) r4 = dup(r3) ioctl$INOTIFY_IOC_SETNEXTWD(r4, 0x40044900, 0x1) write$P9_RLOPEN(r4, 0x0, 0x0) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @rand_addr="89a6ff029cc7b381411718b0730600d1", 0x3}, 0x1c) 20:31:53 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40049409, &(0x7f0000000100)={0x0, 0xff00, 0x0}) 20:31:53 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x8447, 0x0) preadv(r0, &(0x7f0000000800)=[{&(0x7f0000000000)=""/31, 0x7080c}, {0x0}], 0x2, 0x0) 20:31:53 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40044591, &(0x7f0000000100)={0x0, 0xff00, 0x0}) 20:31:54 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x25}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x4b00, 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000140)={0x3, 0x319, 0x4, 0xc2c}, 0x8) r3 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={r3, r0, 0x0, 0x0, 0x0}, 0x30) perf_event_open(0x0, r3, 0x1, 0xffffffffffffffff, 0x2) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0xa02a6500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 20:31:54 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x8447, 0x0) preadv(r0, &(0x7f0000000800)=[{&(0x7f0000000000)=""/31, 0x70802}, {0x0}], 0x2, 0x0) 20:31:54 executing program 0: clone(0x28021300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 20:31:54 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40084503, &(0x7f0000000100)={0x0, 0xff00, 0x0}) 20:31:54 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000000800)=[{&(0x7f0000000000)=""/31, 0x70802}, {0x0}], 0x2, 0x0) 20:31:54 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x8447, 0x0) preadv(r0, &(0x7f0000000800)=[{&(0x7f0000000000)=""/31, 0x7080d}, {0x0}], 0x2, 0x0) 20:31:54 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000000800)=[{&(0x7f0000000000)=""/31, 0x70802}, {0x0}], 0x2, 0x0) 20:31:54 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x400445a0, &(0x7f0000000100)={0x0, 0xff00, 0x0}) 20:31:54 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000000800)=[{&(0x7f0000000000)=""/31, 0x70802}, {0x0}], 0x2, 0x0) 20:31:54 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x8447, 0x0) preadv(r0, &(0x7f0000000800)=[{&(0x7f0000000000)=""/31, 0x7080e}, {0x0}], 0x2, 0x0) 20:31:54 executing program 4: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r1, &(0x7f0000000640)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) openat$autofs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/autofs\x00', 0x0, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = dup(r5) write$P9_RLOPEN(r6, 0x0, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r8 = accept4(r7, 0x0, 0x0, 0x0) r9 = dup(r8) write$P9_RLOPEN(r9, 0x0, 0x0) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r11 = accept4(r10, 0x0, 0x0, 0x0) r12 = dup(r11) write$P9_RLOPEN(r12, 0x0, 0x0) r13 = socket$alg(0x26, 0x5, 0x0) bind$alg(r13, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sm3-ce\x00'}, 0x9) r14 = accept4(r13, 0x0, 0x0, 0x0) dup(r14) socketpair(0x9, 0x4, 0xfd, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(r15, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[]}, 0x1, 0x0, 0x0, 0x4000000}, 0x404204d) connect$can_bcm(r0, &(0x7f0000000000)={0x1d, r3}, 0x10) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r16 = gettid() kcmp(r16, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) r17 = syz_open_procfs(r16, &(0x7f00000000c0)='net/route\x00') ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r17, 0x4010ae74, &(0x7f0000000140)={0x9196, 0x3, 0x27}) ioprio_set$pid(0x2, 0x0, 0x0) clone(0xa02a6500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 20:31:54 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x996153b154a18ecc, 0x0) ioctl$SIOCX25SENDCALLACCPT(r0, 0x89e9) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) dup(r2) ioctl$FIGETBSZ(r2, 0x2, &(0x7f0000000040)) clone(0xa02a6500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 20:31:54 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40084504, &(0x7f0000000100)={0x0, 0xff00, 0x0}) 20:31:54 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = dup(r1) write$P9_RLOPEN(r2, 0x0, 0x0) ioctl$USBDEVFS_REAPURB(r2, 0x4008550c, &(0x7f0000000000)) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioprio_set$pid(0x1, 0x0, 0x0) clone(0xa02a6500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 20:31:54 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x400454ca, &(0x7f0000000100)={0x0, 0xff00, 0x0}) 20:31:54 executing program 3: r0 = syz_open_dev$video(0x0, 0x8447, 0x0) preadv(r0, &(0x7f0000000800)=[{&(0x7f0000000000)=""/31, 0x70802}, {0x0}], 0x2, 0x0) 20:31:54 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x8447, 0x0) preadv(r0, &(0x7f0000000800)=[{&(0x7f0000000000)=""/31, 0x70810}, {0x0}], 0x2, 0x0) 20:31:54 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioprio_set$pid(0x2, 0x0, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_hci(r0, 0x0, 0x0, &(0x7f0000000000)=""/142, &(0x7f00000000c0)=0x8e) clone(0xa02a6500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 20:31:54 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0xa02a6500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) dup(r1) fcntl$setpipe(r1, 0x407, 0x80) 20:31:54 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x401070c9, &(0x7f0000000100)={0x0, 0xff00, 0x0}) 20:31:54 executing program 3: r0 = syz_open_dev$video(0x0, 0x8447, 0x0) preadv(r0, &(0x7f0000000800)=[{&(0x7f0000000000)=""/31, 0x70802}, {0x0}], 0x2, 0x0) 20:31:54 executing program 3: r0 = syz_open_dev$video(0x0, 0x8447, 0x0) preadv(r0, &(0x7f0000000800)=[{&(0x7f0000000000)=""/31, 0x70802}, {0x0}], 0x2, 0x0) 20:31:54 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x400454d8, &(0x7f0000000100)={0x0, 0xff00, 0x0}) [ 201.953208][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 201.959096][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 201.993026][T13161] cgroup: fork rejected by pids controller in /syz4 20:31:54 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0xa02a6500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = dup(r1) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) r5 = dup(r4) write$P9_RLOPEN(r5, 0x0, 0x0) fsconfig$FSCONFIG_SET_FLAG(r5, 0x0, &(0x7f0000000080)='dirsync\x00', 0x0, 0x0) write$P9_RLOPEN(r2, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0x2, &(0x7f0000000000)=0x11, 0x4) 20:31:54 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x8447, 0x0) preadv(r0, &(0x7f0000000800)=[{&(0x7f0000000000)=""/31, 0x70811}, {0x0}], 0x2, 0x0) 20:31:55 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpu.stat\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000040)={0x0, 0x7, 0x30, 0xffffffff00000001, 0x6}, &(0x7f0000000080)=0x18) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f00000000c0)={r1, 0xfffffffe, 0x67, 0xfff}, &(0x7f0000000100)=0x10) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioprio_set$pid(0x2, 0x0, 0x0) clone(0xa01a4700, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) 20:31:55 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000800)=[{&(0x7f0000000000)=""/31, 0x70802}, {0x0}], 0x2, 0x0) 20:31:55 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x4020940d, &(0x7f0000000100)={0x0, 0xff00, 0x0}) 20:31:55 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x8447, 0x0) preadv(r0, &(0x7f0000000800)=[{&(0x7f0000000000)=""/31, 0x70812}, {0x0}], 0x2, 0x0) 20:31:55 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40049409, &(0x7f0000000100)={0x0, 0xff00, 0x0}) 20:31:55 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000800)=[{&(0x7f0000000000)=""/31, 0x70802}, {0x0}], 0x2, 0x0) 20:31:55 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioprio_set$pid(0x2, 0x0, 0x0) prctl$PR_SET_ENDIAN(0x14, 0x0) clone(0xa02a6500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket(0x9, 0x8080a, 0x7) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') r2 = openat$vcs(0xffffffffffffff9c, &(0x7f00000013c0)='/dev/vcs\x00', 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, 'veth0_to_bond\x00'}, {0x20, '@'}, {0x20, 'veth0_to_bond\x00'}, {0x20, '/dev/vcs\x00'}, {0x20, '\xc4bdevtrusted^'}, {0x20, 'wlan0*posix_acl_accesstrusted'}, {0x20, '/dev/vcs\x00'}], 0xa, "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"}, 0x106b) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) dup(r5) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) r7 = socket(0x40000000015, 0x5, 0x0) close(r7) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r8, &(0x7f0000d83fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x2400, 0xd3a) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="c4301675", @ANYRES32=0x0], &(0x7f0000000180)=0x8) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000001380)) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r7, 0x84, 0x66, &(0x7f0000000000)={r9}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_RTOINFO(r6, 0x84, 0x0, &(0x7f0000000140)={r9}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000001200)={r9, @in={{0x2, 0x4e23, @broadcast}}, [0x7, 0x193f, 0x7, 0x139, 0x0, 0x100, 0x4b4, 0x1, 0xff, 0x401, 0x9, 0x2, 0xfff, 0x4, 0x1]}, &(0x7f0000001300)=0x100) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r4, 0x84, 0x23, &(0x7f0000001340)={r10, 0x9}, 0x8) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f0000001400)=0x4e8, 0x4) sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x74, r1, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_bond\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_TUN_PORT={0x8, 0xe, 0x4e24}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x263f4307cf027d29}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xc81}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}]}, 0x74}, 0x1, 0x0, 0x0, 0x400c0}, 0x4000) 20:31:55 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f00000000c0)='./file0\x00', r1, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) r4 = dup(r3) write$P9_RLOPEN(r4, 0x0, 0x0) ioctl$NS_GET_OWNER_UID(r4, 0xb704, &(0x7f0000000140)=0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000180)=0x0) r7 = getegid() lstat(&(0x7f00000000c0)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r8) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r10 = accept4(r9, 0x0, 0x0, 0x0) dup(r10) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0, 0x0}, &(0x7f0000000200)=0xc) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000000c0)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r13) lstat(&(0x7f00000000c0)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r14) getgroups(0x5, &(0x7f0000000300)=[0xee00, 0xee00, 0xee01, r13, r14]) r16 = socket$alg(0x26, 0x5, 0x0) bind$alg(r16, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r17 = accept4(r16, 0x0, 0x0, 0x0) dup(r17) fstat(r17, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r19 = getgid() lstat(&(0x7f00000000c0)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r20) lsetxattr$system_posix_acl(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000010008000000000002000400", @ANYRES32=r1, @ANYBLOB="02000800", @ANYRES32=r5, @ANYBLOB="02000700", @ANYRES32=r6, @ANYBLOB="040003000000000008000200", @ANYRES32=r7, @ANYBLOB="08000400", @ANYRES32=r8, @ANYBLOB="08000600", @ANYRES32=r11, @ANYBLOB="08000200", @ANYRES32=r12, @ANYBLOB="0800050000b458f6d4798af8c8e06493d39bd194ff6dfe5320c7aafd000000002ab7bbe1b72c23c737ebb26a3dd0a0840417e706c37104dcec92475b013d6247adce345dfb13813897394b6f66bc898d1034e99766a99eee38de3ebf1db7fa85b063d62fa40fbf", @ANYRES32=r15, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=r18, @ANYBLOB="08000100", @ANYRES32=r19, @ANYBLOB="08000200", @ANYRES32=r20, @ANYBLOB="10000c000000000020002a7d00000000"], 0x84, 0x2) clone(0xa02a6500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r21 = syz_open_procfs(0x0, &(0x7f0000000000)='net/connector\x00') ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r21, 0x4008240b, &(0x7f0000000040)={0x3, 0x70, 0x0, 0x5, 0xf2, 0x2, 0x0, 0x9, 0x2, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x7f, 0x4, @perf_config_ext={0x2, 0x8001}, 0x0, 0x100000000, 0x3, 0x3, 0x3ef, 0x80000000, 0xf6b}) 20:31:55 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40284504, &(0x7f0000000100)={0x0, 0xff00, 0x0}) 20:31:55 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x8447, 0x0) preadv(r0, &(0x7f0000000800)=[{&(0x7f0000000000)=""/31, 0x70825}, {0x0}], 0x2, 0x0) 20:31:55 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$KVM_SET_PIT(r0, 0x8048ae66, &(0x7f00000005c0)={[{0xea, 0x0, 0x74, 0x1, 0x1f, 0x8, 0x4, 0x0, 0x6, 0x8, 0xff, 0x2, 0x2}, {0x1f, 0x3, 0x0, 0x7, 0x0, 0x9, 0x8, 0x8, 0x80, 0x20, 0x81, 0xc9, 0x401}, {0x200, 0x7, 0x5, 0x5, 0x5, 0x4, 0x0, 0x1f, 0x7, 0x1f, 0x4, 0xfc, 0x39}], 0x6}) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioprio_set$pid(0x2, 0x0, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r1, 0xc4c85512, &(0x7f0000000040)={{0x0, 0x4, 0xbc, 0x7ff, 'syz0\x00', 0x5517}, 0x1, [0x8d, 0x1ff, 0x400, 0x3, 0xffffffff, 0x1, 0x6, 0xfffffffffffffff8, 0x2, 0x1ff, 0x7, 0x0, 0x7ff, 0xfffffffffffffffb, 0x5, 0x0, 0x7f, 0x6, 0x100000000, 0x5, 0x5, 0x0, 0x6, 0x100, 0x1f, 0x8, 0x7, 0x200, 0x0, 0x1f, 0xa19c, 0x149b, 0x3, 0x10000, 0xffff, 0x7fffffff, 0x1, 0x7, 0x6, 0x7, 0x0, 0x4, 0x0, 0x7f, 0x8, 0x100000001, 0x8, 0x1, 0x80000001, 0x10, 0x80000001, 0x7, 0x400, 0x7fff, 0x9, 0x4, 0x6ccb, 0x8000, 0x7, 0x1, 0x401, 0x2, 0x7fff, 0x6, 0x7fffffff, 0x3, 0x7, 0x5, 0x100, 0x7fffffff, 0x5, 0x3ff, 0x2, 0x101, 0x7ff, 0x7, 0x5, 0x0, 0x7, 0x1, 0xffffffff, 0x5, 0x8001, 0x4f, 0x0, 0x6, 0x0, 0x1, 0x100, 0x7, 0x3ff, 0x800, 0x5, 0x5, 0x3, 0x8, 0x101, 0x80000001, 0x8, 0x0, 0x9, 0x6, 0x1000, 0xfffffffffffffffe, 0x0, 0x1, 0xe5c, 0x8, 0x5a, 0xeddc, 0x5747, 0x4, 0x1, 0x0, 0x7ff, 0x0, 0xb6, 0xfffffffffffffffe, 0xfffffffffffffffa, 0x9, 0x9, 0x40, 0x8, 0x800, 0x3, 0x98, 0x0, 0x1], {0x0, 0x1c9c380}}) ioctl$VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000540)=0xf45) clone(0xa02a6500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 20:31:55 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000800)=[{&(0x7f0000000000)=""/31, 0x70802}, {0x0}], 0x2, 0x0) 20:31:55 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0xa03a6500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x7, 0x400000) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f00000000c0)={'lo\x00', {0x2, 0x4e24, @empty}}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = dup(r2) write$P9_RLOPEN(r3, 0x0, 0x0) ioctl$PPPIOCSDEBUG(r3, 0x40047440, &(0x7f0000000000)=0x60a) [ 202.593207][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 202.599040][ C1] protocol 88fb is buggy, dev hsr_slave_1 20:31:55 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40084503, &(0x7f0000000100)={0x0, 0xff00, 0x0}) [ 202.673236][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 202.673239][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 202.679119][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 202.684879][ C1] protocol 88fb is buggy, dev hsr_slave_1 20:31:55 executing program 3: syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x8447, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000800)=[{&(0x7f0000000000)=""/31, 0x70802}, {0x0}], 0x2, 0x0) 20:31:55 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x4030582a, &(0x7f0000000100)={0x0, 0xff00, 0x0}) 20:31:55 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0xa02a6500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = dup(r1) write$P9_RLOPEN(r2, 0x0, 0x0) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r2, 0x10f, 0x84, &(0x7f0000000000), &(0x7f0000000040)=0x4) 20:31:55 executing program 3: syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x8447, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000800)=[{&(0x7f0000000000)=""/31, 0x70802}, {0x0}], 0x2, 0x0) 20:31:55 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) dup(r1) setsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000001300), 0x4) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioprio_set$pid(0x2, 0x0, 0x0) syz_open_dev$amidi(&(0x7f00000012c0)='/dev/amidi#\x00', 0xb01, 0x80000) syz_mount_image$nfs4(&(0x7f0000000000)='nfs4\x00', &(0x7f0000000040)='./file0\x00', 0x4, 0x3, &(0x7f0000001200), 0xa1a009, &(0x7f0000001280)='cpuset\',vboxnet1!vboxnet0ppp0bdevppp0') clone(0xa02a6500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 20:31:55 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x8447, 0x0) preadv(r0, &(0x7f0000000800)=[{&(0x7f0000000000)=""/31, 0x71000}, {0x0}], 0x2, 0x0) 20:31:55 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40084504, &(0x7f0000000100)={0x0, 0xff00, 0x0}) [ 202.913236][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 202.919053][ C0] protocol 88fb is buggy, dev hsr_slave_1 20:31:55 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x80044501, &(0x7f0000000100)={0x0, 0xff00, 0x0}) 20:31:55 executing program 3: syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x8447, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000800)=[{&(0x7f0000000000)=""/31, 0x70802}, {0x0}], 0x2, 0x0) 20:31:55 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0xa02a6500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = dup(r1) write$P9_RLOPEN(r2, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f0000000000)=0x7, 0x4) 20:31:55 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x8447, 0x0) preadv(r0, &(0x7f0000000800)=[{&(0x7f0000000000)=""/31, 0x74000}, {0x0}], 0x2, 0x0) 20:31:56 executing program 4: r0 = gettid() kcmp(r0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(0x0, r0, 0x0, 0xffffffffffffffff, 0x0) clone(0x40000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x10000, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) clone(0xa02a6500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 20:31:56 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x8447, 0x0) preadv(r0, 0x0, 0x0, 0x0) 20:31:56 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x4020940d, &(0x7f0000000100)={0x0, 0xff00, 0x0}) 20:31:56 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x80044584, &(0x7f0000000100)={0x0, 0xff00, 0x0}) [ 203.323826][T14027] IPVS: ftp: loaded support on port[0] = 21 20:31:56 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x8447, 0x0) preadv(r0, &(0x7f0000000800)=[{&(0x7f0000000000)=""/31, 0x20070800}, {0x0}], 0x2, 0x0) 20:31:56 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x8447, 0x0) preadv(r0, 0x0, 0x0, 0x0) 20:31:56 executing program 0: clone(0x100c1f00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0xa02a6500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x1d) fsetxattr$security_capability(r0, &(0x7f0000000000)='security.capability\x00', &(0x7f0000000040)=@v2={0x2000000, [{0x87, 0xef8}, {0x3f, 0x2a8d}]}, 0x14, 0x1) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) dup(r2) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) r5 = dup(r4) write$P9_RLOPEN(r5, 0x0, 0x0) getpeername$packet(r5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=@getstats={0x1c, 0x5e, 0x100, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, 0x4}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x94}, 0x8000) 20:31:56 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40284504, &(0x7f0000000100)={0x0, 0xff00, 0x0}) 20:31:56 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x8447, 0x0) preadv(r0, 0x0, 0x0, 0x0) 20:31:56 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x800454d2, &(0x7f0000000100)={0x0, 0xff00, 0x0}) [ 203.574648][T14054] IPVS: ftp: loaded support on port[0] = 21 20:31:56 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0xa02a6500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) utime(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x4, 0xc3d2}) 20:31:56 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x8447, 0x0) preadv(r0, &(0x7f0000000800)=[{&(0x7f0000000000)=""/31, 0x1f}], 0x1, 0x0) 20:31:56 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioprio_set$pid(0x2, 0x0, 0x0) clone(0xa02a6500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, &(0x7f0000000100)={0x5, @sliced={0x0, [0x5, 0x5, 0x1, 0x1, 0x3, 0x1000, 0x6, 0x99, 0xff, 0x4, 0x1, 0x1, 0x3976, 0x3f, 0x7f, 0x7, 0x200, 0xfc01, 0x5, 0x200, 0x659, 0x0, 0x20, 0x6, 0x101, 0xff, 0x100, 0x4, 0x200, 0x4156, 0xfffd, 0x1, 0x800, 0x100, 0x2, 0x7, 0x400, 0x6, 0x401, 0x800, 0x1, 0x3000, 0xd1f9, 0x7, 0x781, 0x5, 0xffff, 0x65a6], 0x1}}) 20:31:56 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x8447, 0x0) preadv(r0, &(0x7f0000000800)=[{&(0x7f0000000000)=""/31, 0x7ffff000}, {0x0}], 0x2, 0x0) 20:31:56 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x80044501, &(0x7f0000000100)={0x0, 0xff00, 0x0}) 20:31:56 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x80081272, &(0x7f0000000100)={0x0, 0xff00, 0x0}) 20:31:56 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x8447, 0x0) preadv(r0, &(0x7f0000000800)=[{&(0x7f0000000000)=""/31, 0x1f}], 0x1, 0x0) 20:31:56 executing program 0: clone(0x20000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0xa02a6500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000000), &(0x7f0000000040)=0x4) getuid() 20:31:56 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x80044584, &(0x7f0000000100)={0x0, 0xff00, 0x0}) 20:31:56 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) clone(0xa02a6500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 20:31:56 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x80084502, &(0x7f0000000100)={0x0, 0xff00, 0x0}) 20:31:57 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x8447, 0x0) preadv(r0, &(0x7f0000000800)=[{&(0x7f0000000000)=""/31, 0xffffffffffffffff}, {0x0}], 0x2, 0x0) 20:31:57 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x8447, 0x0) preadv(r0, &(0x7f0000000800)=[{&(0x7f0000000000)=""/31, 0x1f}], 0x1, 0x0) 20:31:57 executing program 4: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x208900, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x80000000, r0, 0xa) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = getuid() lsetxattr$security_capability(&(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='security.capability\x00', &(0x7f00000000c0)=@v3={0x3000000, [{0x7, 0x2}, {0x8fd, 0x2}], r1}, 0x18, 0x2) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = dup(r5) write$P9_RLOPEN(r6, 0x0, 0x0) write$ppp(r6, &(0x7f0000000180)="493049b7d7106710be01aef7aa6b2245aed463990372c7d28aa3fb2db33aa99d9530f8f4ea74c0c3d8199f451b53996b54f88d760f40216c431c0f891a31ff955fc35204bbdac3b96f7dcf36121e436ee7aca37f4cc4aae53336909e63c2c3d60576", 0x62) r7 = dup(r3) write$P9_RLOPEN(r7, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f0000000100)={0x2b, @empty, 0x4e22, 0x2, 'dh\x00', 0x15, 0x8, 0x41}, 0x2c) ioprio_set$pid(0x2, 0x0, 0x0) clone(0xa02a6500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 20:31:57 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x800454d2, &(0x7f0000000100)={0x0, 0xff00, 0x0}) 20:31:57 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x8447, 0x0) preadv(r0, &(0x7f0000000800)=[{&(0x7f0000000000)=""/31, 0x70800}, {0x0, 0x2}], 0x2, 0x0) 20:31:57 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = dup(r2) write$P9_RLOPEN(r3, 0x0, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x1000) r5 = dup(r4) write$P9_RLOPEN(r5, 0x0, 0x0) r6 = openat(r5, &(0x7f0000000000)='./file0\x00', 0x1, 0x0) perf_event_open(0x0, 0x0, 0x0, r6, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioprio_set$pid(0x2, 0x0, 0x0) clone(0xa02a6500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 20:31:57 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x80084503, &(0x7f0000000100)={0x0, 0xff00, 0x0}) 20:31:57 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x8447, 0x0) preadv(r0, &(0x7f0000000800)=[{0x0}], 0x1, 0x0) 20:31:57 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x80084502, &(0x7f0000000100)={0x0, 0xff00, 0x0}) 20:31:57 executing program 4: clone3(&(0x7f00000001c0)={0x2000000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), 0x31, 0x0, &(0x7f00000000c0)=""/18, 0x12, &(0x7f0000000100)=""/192}, 0x40) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = dup(r1) write$P9_RLOPEN(r2, 0x0, 0xb4dd167c80da8cb6) r3 = syz_open_dev$vcsa(&(0x7f0000000200)='/dev/vcsa#\x00', 0x0, 0x321001) perf_event_open(0x0, 0x0, 0x10, r3, 0x2) clone(0x85ae5cecc7caf816, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioprio_set$pid(0x2, 0x0, 0x0) clone(0x2480a700, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 20:31:57 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x80084504, &(0x7f0000000100)={0x0, 0xff00, 0x0}) 20:31:57 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x8447, 0x0) preadv(r0, &(0x7f0000000800)=[{&(0x7f0000000000)=""/31, 0x70800}, {0x0, 0x3}], 0x2, 0x0) 20:31:57 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x8447, 0x0) preadv(r0, &(0x7f0000000800)=[{0x0}], 0x1, 0x0) 20:31:57 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0xa02a6500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = dup(r1) write$P9_RLOPEN(r2, 0x0, 0x0) ioctl$TIOCSCTTY(r2, 0x540e, 0xc6c0) r3 = msgget$private(0x0, 0x0) msgsnd(r3, &(0x7f00000001c0)=ANY=[@ANYRESHEX=0x0], 0x1, 0x0) msgsnd(r3, &(0x7f0000000480)=ANY=[@ANYRESHEX=0x0], 0x1, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x6000, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r4, 0xc058534f, &(0x7f0000000200)={{0x8, 0x4}, 0x0, 0x5, 0x6, {0x7, 0x7f}, 0x1c, 0x80000000}) msgrcv(r3, &(0x7f00000000c0)={0x0, ""/147}, 0x9b, 0x0, 0x0) msgrcv(r3, &(0x7f0000000080)={0x0, ""/74}, 0x52, 0x0, 0x1c00) msgrcv(r3, &(0x7f0000000080)={0x0, ""/184}, 0xc0, 0x0, 0x4800) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) accept4(r5, 0x0, 0x0, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r7 = accept4(r6, 0x0, 0x0, 0x0) r8 = dup(r7) write$P9_RLOPEN(r8, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000280)={0x0, r8, 0x2}, 0x10) fsetxattr$security_smack_transmute(r5, &(0x7f0000000000)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000040)='TRUE', 0x4, 0x0) 20:31:57 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x80084503, &(0x7f0000000100)={0x0, 0xff00, 0x0}) 20:31:57 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x8447, 0x0) preadv(r0, &(0x7f0000000800)=[{&(0x7f0000000000)=""/31, 0x70800}, {0x0, 0x4}], 0x2, 0x0) 20:31:57 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioprio_set$pid(0x2, 0x0, 0x0) clone(0xa02a6500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() kcmp(r0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) r1 = getpgrp(r0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000000)={0x2, r1}) 20:31:57 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x8447, 0x0) preadv(r0, &(0x7f0000000800)=[{0x0}], 0x1, 0x0) 20:31:57 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x80086301, &(0x7f0000000100)={0x0, 0xff00, 0x0}) 20:31:57 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x8447, 0x0) preadv(r0, &(0x7f0000000800)=[{0x0}, {0x0}], 0x2, 0x0) 20:31:57 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x8447, 0x0) preadv(r0, &(0x7f0000000800)=[{&(0x7f0000000000)=""/31, 0x70800}, {0x0, 0x5}], 0x2, 0x0) 20:31:58 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x80084504, &(0x7f0000000100)={0x0, 0xff00, 0x0}) 20:31:58 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0xa02a6500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = dup(r1) write$P9_RLOPEN(r2, 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) getsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000100)=""/95, &(0x7f0000000180)=0x5f) dup(r4) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x0) r7 = dup(r6) write$P9_RLOPEN(r7, 0x0, 0x0) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r9 = accept4(r8, 0x0, 0x0, 0x0) dup(r9) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) accept4(r10, 0x0, 0x0, 0x0) r11 = socket$alg(0x26, 0x5, 0x0) bind$alg(r11, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r12 = accept4(r11, 0x0, 0x0, 0x0) dup(r12) r13 = dup2(r12, 0xffffffffffffffff) ioctl$EVIOCGID(r13, 0x80084502, &(0x7f0000000000)=""/228) 20:31:58 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x820200, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioprio_set$pid(0x2, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x0) fadvise64(r0, 0x0, 0x1, 0x5) clone(0xa02a6500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 20:31:58 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x8447, 0x0) preadv(r0, &(0x7f0000000800)=[{0x0}, {0x0}], 0x2, 0x0) 20:31:58 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x8447, 0x0) preadv(r0, &(0x7f0000000800)=[{&(0x7f0000000000)=""/31, 0x70800}, {0x0, 0x6}], 0x2, 0x0) 20:31:58 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0xa02a6500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpgid(0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x4000, 0x80) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x5, 0x9, 0x1, 0x98, 0x0, 0x7, 0x1080, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x2, @perf_bp={&(0x7f0000000140), 0x1}, 0x0, 0x6, 0x0, 0x1, 0x6, 0x2, 0x7}, r0, 0x9, r1, 0x1) r2 = syz_open_dev$sndpcmp(&(0x7f0000000100)='/dev/snd/pcmC#D#p\x00', 0x4, 0xb3a881a99369912b) ioctl$VIDIOC_LOG_STATUS(r2, 0x5646, 0x0) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$EVIOCGABS0(r3, 0x80184540, &(0x7f0000000000)=""/247) 20:31:58 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x80104592, &(0x7f0000000100)={0x0, 0xff00, 0x0}) 20:31:58 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x8447, 0x0) preadv(r0, &(0x7f0000000800)=[{0x0}, {0x0}], 0x2, 0x0) 20:31:58 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x80086301, &(0x7f0000000100)={0x0, 0xff00, 0x0}) 20:31:58 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x8447, 0x0) preadv(r0, &(0x7f0000000800)=[{&(0x7f0000000000)=""/31, 0x70800}, {0x0, 0x7}], 0x2, 0x0) 20:31:58 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioprio_set$pid(0x2, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20ncci\x00', 0x202480, 0x0) write$P9_RREADDIR(r0, &(0x7f00000000c0)={0x87, 0x29, 0x2, {0x9, [{{0x11, 0x2, 0x5}, 0x5fa3, 0xff, 0x7, './file0'}, {{0x10, 0x4, 0x1}, 0x100000000, 0x7, 0x7, './file0'}, {{0x2, 0x0, 0x3}, 0x401, 0x2, 0x7, './file0'}, {{0x8, 0x4, 0x8}, 0x92, 0x4, 0x7, './file0'}]}}, 0x87) clone(0xa02a6500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) accept4(r1, 0x0, 0x0, 0x800) connect$l2tp(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e20, @broadcast}, 0x4, 0x0, 0x1, 0x4}}, 0x26) 20:31:58 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioprio_set$pid(0x2, 0x0, 0x0) prctl$PR_SET_ENDIAN(0x14, 0x0) clone(0xa02a6500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket(0x9, 0x8080a, 0x7) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') r2 = openat$vcs(0xffffffffffffff9c, &(0x7f00000013c0)='/dev/vcs\x00', 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, 'veth0_to_bond\x00'}, {0x20, '@'}, {0x20, 'veth0_to_bond\x00'}, {0x20, '/dev/vcs\x00'}, {0x20, '\xc4bdevtrusted^'}, {0x20, 'wlan0*posix_acl_accesstrusted'}, {0x20, '/dev/vcs\x00'}], 0xa, "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"}, 0x106b) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) dup(r5) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) r7 = socket(0x40000000015, 0x5, 0x0) close(r7) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r8, &(0x7f0000d83fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x2400, 0xd3a) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="c4301675", @ANYRES32=0x0], &(0x7f0000000180)=0x8) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000001380)) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r7, 0x84, 0x66, &(0x7f0000000000)={r9}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_RTOINFO(r6, 0x84, 0x0, &(0x7f0000000140)={r9}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000001200)={r9, @in={{0x2, 0x4e23, @broadcast}}, [0x7, 0x193f, 0x7, 0x139, 0x0, 0x100, 0x4b4, 0x1, 0xff, 0x401, 0x9, 0x2, 0xfff, 0x4, 0x1]}, &(0x7f0000001300)=0x100) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r4, 0x84, 0x23, &(0x7f0000001340)={r10, 0x9}, 0x8) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f0000001400)=0x4e8, 0x4) sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x74, r1, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_bond\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_TUN_PORT={0x8, 0xe, 0x4e24}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x263f4307cf027d29}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xc81}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}]}, 0x74}, 0x1, 0x0, 0x0, 0x400c0}, 0x4000) 20:31:58 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x80284504, &(0x7f0000000100)={0x0, 0xff00, 0x0}) 20:31:58 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0xa02a6500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x24002, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_STATS(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r2, 0x1, 0x0, 0x0, {{}, 0x0, 0x400b}}, 0x1c}}, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xfffffffffffffd58, &(0x7f0000000180)={&(0x7f0000000080)={0xfffffc8f, r2, 0x400, 0x70bd28, 0x25dfdbfb, {{}, 0x0, 0x4109, 0x0, {0x4c, 0x18, {0x7, @media='udp\x00'}}}, ["", "", "", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x4000}, 0x10) 20:31:58 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioprio_set$pid(0x2, 0x0, 0x0) prctl$PR_SET_ENDIAN(0x14, 0x0) clone(0xa02a6500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket(0x9, 0x8080a, 0x7) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') r2 = openat$vcs(0xffffffffffffff9c, &(0x7f00000013c0)='/dev/vcs\x00', 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, 'veth0_to_bond\x00'}, {0x20, '@'}, {0x20, 'veth0_to_bond\x00'}, {0x20, '/dev/vcs\x00'}, {0x20, '\xc4bdevtrusted^'}, {0x20, 'wlan0*posix_acl_accesstrusted'}, {0x20, '/dev/vcs\x00'}], 0xa, "4b2f1dc84937fa09b8a5a1f5cdeb9cd6eaf2ce5a859a8e2908836dcaf579b48c4f77896a839d567e2b65400bf6b641a9bff38549636705764055b205d80c6e65adbce2caa8bd1e94320647d0eaf54b685364fbea9a75498d94c0440217e13c6f5ed72e1d6cd27feefac87ab9b3263b7ddad6690f8c21873250d94545c8b34388ee2d27b064af69ecea006c3a4b1597865844b10ff4415724f654f2749b69b0e2bd108e668f75fe9d87d1e46e168afeadec02e38f2b5cca025e6d3d414613aea675973f958e7c91305cfef0b15b39b4b7d6a078522f752cd04159d2830a257bc370c650ebb0eaa18a0c06e9656f47b0cd701d29fa78c4e03172d8a1fcda4b63c5452ba22945782e592e008941e8e8e60c375421d1102f53240860e47b1896306b297aa58e2ca3a1b8fcc109a0f5e0b0e0e94c2e7d588f804ed006ba61e014d41ba9d9b4e207794bf9bfb18eef3f2c002f1739519697a8e27e5c3a4207508c39c168bec5089c5d8ebff1dee41f683e6a311610c43db485709f5b7cbf81074210a80323acf2e9f3eac3a63db8f7efea6c48761758dd3582e0f233f086cce375355bcbe11ce3050af03c3ce4b27dcd7d8d0d49b4e96d2b72432f0fa0f737cedad39c5de87228d807141710865d0d4198b05ddbca72203e6825a7dce9cd5e3fc79ea820fa0f0b38d32af83f3dcd6e6e3e644ec75b5b2f0bb08eb9d9a5711c6492ace3237dd9de666ad2b9f04204ce835c12421b4d6fbfd1f05585e039f1ef1e624094eb82e56cf0983ce31fb6799861faeaac38170378e959653a0668d33fd842a51842db564c00dae44cac68c4ab161495f9fea1a196274ddc387bbe83eaccf2764b5f34029acd92b29b23fd2f0ff2ec6324b336194aa22b8696435fa9d9981ccbbaa8a07a48db0b039c059c87b53848ecd09b896c1059ee6a2a19594291045d4f190558e1019b541612f97ac070c12ede89c0c6ccb7584f9884fc81e6c95f0aecebe577d1553fab613ef78a59ab5e0a57ae73c7f7fe4a5f3964f156cb25c084219e8a027ad6d0a7540fa748241973d64df6ecd209044d8ff8214c32b268d71f20215e56c1eaa5094e168abe1387a7634098e6060c043a316d30272e844be1310288da5ae3fe3b6320b184d1eb4d28d219173463d515e11d697d3df23984beddbe5a738902b3638be37241f0cd4287881016366bd6cf11e10b57244d659ef779dadb24a0cbe60e56a60a3805006bd2b2ffaea0800513c921b7bafc087948a623588c9e59c446ed44e383584cff9eba49fdb406d71ed3d75b59d4a3c0fd67ca0d6495aa4f6c7489a5e829dca74882bd048d665356ef79aa7ed2734d3b8110fdfbf0474885cf6814e60f8962e1a04e08c93b03fcaab585dab04bbcbab60c61ee6fb25ad120b9e0f23523dfa1a94dbb0f2dcd97b5e2e0af59b09a88ff2d14078ea93219d809b60f0e3dcc3505ffb07fe6652d69d547c3ed5ce8385eb682f6e2627a009d80592fe40b4e487db7853bc5e4928ede524d7a2266600afc9a522f2a14c77a3a11436f0de90c15a8bb0a60a7c2222b85b5ceb90d64f145bd17b20c32d5336c3493104a3d39e39bfb99291ce8fb09bcf52994609cd763db874429f41ecd1346ea3185ecf6ab0604d77175a1db4390cf91a4a2d1ae9f537feaeb2c8cd7e1606240905d241fadbca7063c676c147c600662374be594c266dd64e85f9215743450ec9b55f1bd0b5c1af6717d4b74fd601fa47e62d072939b7d52e80cbb396bd383e4a376f29091de4d5158416c45a9da3f4ee43d3013cf5d5f3d38e33b52185f46d3f097e47b046fc39403c09ed6356d32f2e0a4c00e5fa6c2c8b7ecc90f8ad25012e1a79c0398bd262fe80f2d55edb928746577577a4444b33ad482aafc4a053018e0cd244acabb70b145be6ba30162be670c1b47bd9de12d62da6e7338c6e24489dc77b85e17b207cf7c2a3ab39615cc523aa015856ea714c32a1e74fd19fe92974f0c939c00f71560582f761df0e72a7b4e069ace13148342c9aaf95fb801eb421ba656353a83c5c0dab86e135ff27799ac662d3500b813cc54a206638d563b2b030232f4ea69701569e8cb64c774e3f06ca068badec21716ffeac5f29756edbefd43a8bdb6771fd69fe7ab758368888abbc14acaebebb3f01156a936530d6fe99d50b2bab8b7863ce58166f956a6c69a29e0108efad7e211d084d19cd126b47b78af0dd5f56e3025a9573bd1d9c6d54dbc962d77b4e47ae0e6f5711bc49f14f9941f584aaf682454e4213dba29189de6fbc07d7dfb654370df5ac5f94c337b9671c22b56fb691733618aed5a9df34c1ad19f6515474f10bd51730d9c2e96b24dab6a8520d4b724cb4866e4588fa7dce5e4ca2ef9fc0af4afb2885a8ae46b213bbebe1484da29bd3f4d2951bb82e387a110d5b4ba267f41dc73e7eb4346cb260ba9f6a467199cb4adf5708a026d4a4b65c0649f0957c6f0b43f5e0799780e5f1476599714c0e399888ca0c5088367e89161cff1471035610a022bbf8cd6e6a818e8dfe0f78693f1f0587d6a25965970a63483e47420951b6e9b7796db2ea69261f01a9d1beb14cd538e1bf9cffcf1cb32dd4821a07173c118316491a6a55daa79c3af26be560135d321533b1bf503edf937c43228a80fa65d381f74561970eb8e7ddf3c81ecbef946317e30fb667f265c3b32d18afcbd32ce202b9a782dee062dc16ea3fed26d7ff9cd7fc8fa56560b18c403e4ca6587f1f84ef3622e5ec0c0bdb20815f8b46dbc3a6e1d2b5beda2d22e57067bb165088b98adc161189ec76d6319c933cc6d2e4fbd07ad9b8158131e61abbe7b120e2d60dfcb6a6ea300ffe19a7153009f016c2649e4b57cf780a289ae1a1127ab294425623385007d0a6eaa0438b7052ccbd6f63cc3713e1e7f4d7f547f1515e1af9a6045925ee0f87bd28574a96777cedd90aa855766dc5e4f1197ff0258d57bde022bcd3d540e9126eab0c9758506d81790496000dcda150e2ee8653a0d7912a909f14629ca8a8e2965ed8b49ea7feadf2e4b8bde9f19cafce00a156e8d6d3758cecfc9cb021a02221bfb9e0c4808c7f92ce2dc265cfd743e033bc3c4eee657e24d4d66ef3e9a8c9a6b509f371d4e93338adcd51a8bad8c47fba6bb7e3086105ef7de9b943417788f683944f1825c761b7c3ced239b1bff0cebe13f037ede7b1b7eeca130154ac9180b60cacb31df4fca33f9a945afc3fd4bdde4c565a04cfda9f51cd9d13e406063a1de486c2f9502d4e784738c85418361910fbbd9ed722cab0db36924aeb485eaa558284a247c2e7e644756b61c604d42c63745d84870cf95ce45e9e45eff546cae250d59996d965f778bb76e035d91f80e7c119867cd170d799b4b8bbf69b1fbb747d0451b0500a69af949c394f021e8990b220e2e5e9f80fb9ce603757a47718e41fa300ca9584c26225ee5c4d117f4ed4ed8e72ee8793abb451441b802a2d2e87cff72eaac3c5817206fb92a599090886487646a45f6a2d9e715f58ee2c7fc3289239bbbb172cf573e0f1ac5307ef8b5c57476c20d59344e4b5c18bd1348ed1319a3ada67cb1e89b78b920f90fa11f232425cdb0fb45d6bb2b479ca7de22be0b9b97ce7a99016a65308bf6fd9a2d0336d0354ee8e1fa0a607f3134ee9edf4acff529840dbadf5afbcaba17bf2f0d98080604e7c6368b5cde4313c124c0614c2461a998d8e8713bbb17299f60567ff7f65d401e814597da85dabf3d6f8067ffa312b5c89e9398ed03b65ebccadee8fe7a0cc7e65afcb59b06e08ba8a48d6bf36d0db58986fd3c302b81f34de0d3c958098e44530588875b77f35fb2f356f802a4b6c35dee06000a831b45f11ccd11d1ba4eb70decfd56454a5d4a3a43b983f57e13ad71e3552524ee65c6b40e59dea80747f8b108f20a419f20091234c7529af354d1bc7e890785172a71b91532524b28d6dd9193fe5eff360168f8bb85aa0c6fc35c421c432ed0b39046d34a34251d64c719c7548bf7f94901c4c00e7529963c7ac1b8aa5ffc77474ea2cc4fedaaca2c0ef8a76388d55e469cfbcf61884719f9d2d235c71500be558788c384220b3f31e9c649e5d591675894e968e0c1b921d53ec96fb483197e5ef867447ef2e2f90f5eeba33aca3fa5a06dda0c714fc98e57a357eb63897a19e35d97a809f2d0322bb3e5fdfa55920b751465524c3540787e17e7dec09be7ffe72f61620f844f067eb64f2b2a05147aa6cfa7055acdc8c9188b93d212eda3f13f9421df2a64a11c00a022dcd082d521c1d4683b2e55cb6de90178045a613f3063fd05cde44cbb40e8cb3bffa4f8c4c2ca2b6b29bbb8043ac72748c83ecf56751fa5bb93524b163271f727c68812e608b7c886d4b5123058a78862d578c75a4e37581c8af08d6ede5bb0f183c604934ac2a46660e098dbbde4cfbb9f23157070d600bcf4df02a86b3d1ea082310decbcea9d2430a2a7e017dac8b841e3e740f797e48be6020ec5eff10b8db250af8e7afd902d55e25e3db1ee38e3f85d1a243a705b84993c7fe8d1955b8b1d22eee5595df61ebb686b3ff493d54cbee56b914d239fb4c6a8cc2c36d5be36682357766cdaa66cd1e37683f219347fedbec3f31731048c72e443cb43d5df71eecfc788aad2ca3cc56d96580f2ab52aa8d90db300a2b521480ff7add4fb2e557d8ce1bdb624c3aff924dc4e60f7ab292905a50348de101c87f7cd8abf897e3434c69415a1d36ae0fe4cd54094461e690b1bad37d56d7e7c942e93ba38a0a0396bc88308f96f416a5051432762332d6d6f0dce89ab75345d7c9232e30393c1604f9d8214a6723ef8787a890f172e9961bcc660dd9f4d30706f64c8c545def48f0dccdae089f95ca49a5c2ba4016ab3c338114d26d5c89f5d7c438d2969bfe6df468133786bd76c2be5228498e1a46791533222ac3be1e5baa3dd73aa70de5a1f319377d3e9e20c07948761ee01759f2eeaec3dd5d56541ebeac3c56f935005d7b9b7fe6994850b11fec1add123e72ccbd47849e16b07697246b73dc884c210b324fd6b18281508076e7d50702bebe30c151973e1a4e58626be7d73e3cc1646d6542f1a20a91786167755bf96a24a1d51472169865435f54a0a63eef2413568fb398ef1cff9aad6baaae9f900a43918a493cd07b36cf7750f4e9c0d830f2d6e2d1268d29054d6e05d1935976dab2bdc8a9f1ff4f8344c2dd14bc391bc800e565fe9cfad689567d305258195206ccd41c908d4262918e115e69427ca0a00b25b378a3ca597e9792fff3e151e4b0d397b86035cf1a44f6b94610be8caefd50045eac3601fdf97d806165d4abe8a8538969b0219d46f6bce6ef30aa34c51e00d02517f997ab8d3669297cd4801775ecb34fe35d4dc39daf009a54d7daa7e667f7249edc35ea33e622524dab1f6325b590ece99908eb93cc8c9ceaf3baa8646ea224c306d90e0bb4b525709350165fc0195349517233151aea4f8faba21036c82bb0b200faa14581f72bbb7a1bcfd1df75f11d44641f171afcb1ec9a297cefcd28e9631758abed82fa76e332aeb6d7abb579832b76c1a6f65f36854e6bf56f62a601150343495cb9e2c2c1e200325029f78627b970782d613e36733b83ccdc00d06ac918bdd2098594c6638d74f2c3e2e1fcb4458c5500c1ed7ac9270f822decf9aca23857098168e640cdc94f7e11e6e6101b1233ebe2cc748757b250f036979c8a367dcfa5d69c872094f36474ebb93d03a63ccc0508072c30eda5a716b3644ab7a7f684d4710461befc7d2158c23ce11c6"}, 0x106b) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) dup(r5) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) r7 = socket(0x40000000015, 0x5, 0x0) close(r7) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r8, &(0x7f0000d83fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x2400, 0xd3a) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="c4301675", @ANYRES32=0x0], &(0x7f0000000180)=0x8) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000001380)) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r7, 0x84, 0x66, &(0x7f0000000000)={r9}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_RTOINFO(r6, 0x84, 0x0, &(0x7f0000000140)={r9}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000001200)={r9, @in={{0x2, 0x4e23, @broadcast}}, [0x7, 0x193f, 0x7, 0x139, 0x0, 0x100, 0x4b4, 0x1, 0xff, 0x401, 0x9, 0x2, 0xfff, 0x4, 0x1]}, &(0x7f0000001300)=0x100) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r4, 0x84, 0x23, &(0x7f0000001340)={r10, 0x9}, 0x8) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f0000001400)=0x4e8, 0x4) sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x74, r1, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_bond\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_TUN_PORT={0x8, 0xe, 0x4e24}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x263f4307cf027d29}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xc81}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}]}, 0x74}, 0x1, 0x0, 0x0, 0x400c0}, 0x4000) 20:31:58 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x8447, 0x0) preadv(r0, &(0x7f0000000800)=[{&(0x7f0000000000)=""/31, 0x70800}, {0x0, 0x8}], 0x2, 0x0) 20:31:58 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x80104592, &(0x7f0000000100)={0x0, 0xff00, 0x0}) 20:31:58 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioprio_set$pid(0x2, 0x0, 0x0) clone(0xa02a6500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = dup(r1) write$P9_RLOPEN(r2, 0x0, 0x0) mq_timedsend(r2, &(0x7f00000001c0)="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", 0xff, 0x7, 0x0) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f0000000000)={0x0, 0x0, 0x4, 0x0, [], [{0x5, 0x4, 0x0, 0x3, 0x5, 0x100000000}, {0x1f, 0xff, 0x3, 0xe223, 0x3, 0xffff}], [[], [], [], []]}) 20:31:58 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioprio_set$pid(0x2, 0x0, 0x0) prctl$PR_SET_ENDIAN(0x14, 0x0) clone(0xa02a6500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket(0x9, 0x8080a, 0x7) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') r2 = openat$vcs(0xffffffffffffff9c, &(0x7f00000013c0)='/dev/vcs\x00', 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, 'veth0_to_bond\x00'}, {0x20, '@'}, {0x20, 'veth0_to_bond\x00'}, {0x20, '/dev/vcs\x00'}, {0x20, '\xc4bdevtrusted^'}, {0x20, 'wlan0*posix_acl_accesstrusted'}, {0x20, '/dev/vcs\x00'}], 0xa, "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"}, 0x106b) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) dup(r5) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) r7 = socket(0x40000000015, 0x5, 0x0) close(r7) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r8, &(0x7f0000d83fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x2400, 0xd3a) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="c4301675", @ANYRES32=0x0], &(0x7f0000000180)=0x8) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000001380)) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r7, 0x84, 0x66, &(0x7f0000000000)={r9}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_RTOINFO(r6, 0x84, 0x0, &(0x7f0000000140)={r9}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000001200)={r9, @in={{0x2, 0x4e23, @broadcast}}, [0x7, 0x193f, 0x7, 0x139, 0x0, 0x100, 0x4b4, 0x1, 0xff, 0x401, 0x9, 0x2, 0xfff, 0x4, 0x1]}, &(0x7f0000001300)=0x100) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r4, 0x84, 0x23, &(0x7f0000001340)={r10, 0x9}, 0x8) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f0000001400)=0x4e8, 0x4) sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x74, r1, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_bond\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_TUN_PORT={0x8, 0xe, 0x4e24}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x263f4307cf027d29}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xc81}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}]}, 0x74}, 0x1, 0x0, 0x0, 0x400c0}, 0x4000) 20:31:58 executing program 0: r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x8, 0x40) ioctl$TIOCNOTTY(r0, 0x5422) clone(0x2000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x1000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000040)) 20:31:58 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x80345631, &(0x7f0000000100)={0x0, 0xff00, 0x0}) 20:31:58 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x8447, 0x0) preadv(r0, &(0x7f0000000800)=[{&(0x7f0000000000)=""/31, 0x70800}, {0x0, 0x9}], 0x2, 0x0) 20:31:58 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x80284504, &(0x7f0000000100)={0x0, 0xff00, 0x0}) 20:31:59 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x80104592, &(0x7f0000000100)={0x0, 0xff00, 0x0}) 20:31:59 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0xa02a6500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x2, 0x2) mknodat(r0, &(0x7f0000000080)='./file0\x00', 0x0, 0x62f) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000100)=0xfffffffffffffd30) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = dup(r2) write$P9_RLOPEN(r3, 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x67, 0x200) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vsock\x00', 0x80000, 0x0) ioctl$RNDCLEARPOOL(r4, 0x5206, &(0x7f0000000000)=0xfffffc00) [ 206.148823][T15916] vivid-000: kernel_thread() failed 20:31:59 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0xc0045878, &(0x7f0000000100)={0x0, 0xff00, 0x0}) 20:31:59 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x8447, 0x0) preadv(r0, &(0x7f0000000800)=[{&(0x7f0000000000)=""/31, 0x70800}, {0x0, 0xa}], 0x2, 0x0) 20:31:59 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x80104592, &(0x7f0000000100)={0x0, 0xff00, 0x0}) 20:31:59 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = dup(r1) r3 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) r5 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f00000000c0)='./file0\x00', r6, 0x0) syz_mount_image$vfat(&(0x7f00000006c0)='vfat\x00', &(0x7f0000000700)='./file0\x00', 0x4800000000, 0x4, &(0x7f00000028c0)=[{&(0x7f0000000740)="25c0cf881b6584183b4103837b8d0c9075cba6b206b8926ecbb69fa131098e2436a3ac1af0a4bec6234d1dd68fbd8a8eca9da592a694a430055e9dacc2cab5766fbc5a63eb2f94f3720ab4b4284a1947edf34b84577e67e091694dbcb692362319f8295e9e419871bf89d6e617e9d51b5c461df9aff6393893cb8ed340be7af358f87dcfa12edc913ec4cf", 0x8b, 0x2}, {&(0x7f0000000800)="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", 0x1000, 0xfffffffffffffff8}, {&(0x7f0000001800)="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", 0x1000, 0x60}, {&(0x7f0000002800)="0127e2df09b8492d92738c201431b59978b786dba82aa04a406e80c1bddc4cb165497d38d055c7a3954d52ba413a06a89228e608ab1b441318e641af1225a2a92fb7b8d19353e2a2fe726ffad25f0e3f49b285bf10981391751417179244c37fa7e416ae8181c66c6885200b04a5a772ef3dfba84f2520640903446b96f247193b859bbc4f31ea1ed6e4b83d3ba9d5d1b920e50ff21ec2f97e8dff0ce189779db8bc68513f7213424340e8e9fd4d71b38f882895deb5145eca5835e8261652", 0xbf, 0x6}], 0x1000, &(0x7f0000002940)={[{@shortname_win95='shortname=win95'}, {@utf8='utf8=1'}, {@iocharset={'iocharset', 0x3d, 'cp850'}}, {@utf8='utf8=1'}, {@shortname_mixed='shortname=mixed'}], [{@obj_role={'obj_role', 0x3d, 'poly1305-simd\x00'}}, {@uid_eq={'uid', 0x3d, 0xffffffffffffffff}}, {@fsname={'fsname', 0x3d, 'poly1305-simd\x00'}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'poly1305-simd\x00'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '*.!posix_acl_accessuservboxnet1'}}, {@rootcontext={'rootcontext', 0x3d, 'root'}}, {@fowner_gt={'fowner>', r6}}, {@subj_role={'subj_role', 0x3d, '.]'}}]}) chown(&(0x7f00000000c0)='./file0\x00', r4, 0x0) lstat(&(0x7f00000000c0)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r7) lchown(&(0x7f0000000680)='./file0\x00', r4, r7) write$P9_RLOPEN(r2, 0x0, 0x0) preadv(r2, &(0x7f0000000600)=[{&(0x7f0000000000)=""/228, 0xe4}, {&(0x7f0000000100)=""/151, 0x97}, {&(0x7f00000001c0)=""/191, 0xbf}, {&(0x7f0000000280)=""/33, 0x21}, {&(0x7f00000002c0)=""/138, 0x8a}, {&(0x7f0000000380)=""/174, 0xae}, {&(0x7f0000000440)=""/184, 0xb8}, {&(0x7f0000000500)=""/252, 0xfc}], 0x8, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) clone(0xa02a6500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pivot_root(&(0x7f0000002a80)='./file0\x00', &(0x7f0000002ac0)='./file0\x00') 20:31:59 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0xc0045878, &(0x7f0000000100)={0x0, 0xff00, 0x0}) 20:31:59 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f00000000c0)={'filt\x00'}, &(0x7f0000000080)=0x44) clone(0x4800000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 20:31:59 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x8447, 0x0) preadv(r0, &(0x7f0000000800)=[{&(0x7f0000000000)=""/31, 0x70800}, {0x0, 0xb}], 0x2, 0x0) 20:31:59 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0xc0045878, &(0x7f0000000100)={0x0, 0xff00, 0x0}) 20:31:59 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x80104592, &(0x7f0000000100)={0x0, 0xff00, 0x0}) 20:31:59 executing program 4: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000680)='/dev/autofs\x00', 0x100, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000006c0)={@dev={0xac, 0x14, 0x14, 0x2a}, @remote, 0x1, 0x1, [@loopback]}, 0x14) r1 = socket$inet(0x2, 0x1, 0x4) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000000)={0x0, 0x3, 0x7ff}, 0x8) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioprio_set$pid(0x2, 0x0, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x3e87f2c907143ab9, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) dup(r4) setsockopt$bt_l2cap_L2CAP_CONNINFO(r4, 0x6, 0x2, &(0x7f0000000280)={0x5, 0xed, 0x6, 0x7}, 0x6) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f0000000200)={0xc, 0x8, 0xfa00, {&(0x7f0000000080)}}, 0x10) clone(0xa02a6500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x0) r7 = dup(r6) write$P9_RLOPEN(r7, 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r7, 0xc0086420, &(0x7f0000000240)) 20:31:59 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0xc0045878, &(0x7f0000000100)={0x0, 0xff00, 0x0}) 20:31:59 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000000c0)=0x0) wait4(r1, 0x0, 0xe0000001, 0x0) clone(0x8300800, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x200000, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) r5 = dup(r4) write$P9_RLOPEN(r5, 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r5, 0x2201, &(0x7f0000000100)=0x615) fsetxattr$security_smack_transmute(r2, &(0x7f0000000040)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000080)='TRUE', 0x4, 0x2) r6 = socket(0x2, 0x6, 0xff) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r6, 0x84, 0x1a, &(0x7f0000000140)={0x0, 0x8f, "76a8b12e11184b0fbce466148c27f4a14aac87b505c533a6d8c5dc088940abf9123fc968e6fc3033b16e5e25d1ce8b8265fe39db9f08a601349c2d7e68d50b86f3395777ce476502b08f10dbacc8b880b4f648a633aa9a44e889459e87a0feb7229360a36c0dbba32b2c7c0b409aec3968964151a579ca5d6022fd9c0b4ec0784124d80680f520509677a2a4d494ba"}, &(0x7f0000000200)=0x97) 20:31:59 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x8447, 0x0) preadv(r0, &(0x7f0000000800)=[{&(0x7f0000000000)=""/31, 0x70800}, {0x0, 0xc}], 0x2, 0x0) 20:31:59 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0xc0189436, &(0x7f0000000100)={0x0, 0xff00, 0x0}) 20:31:59 executing program 3: ioctl$EVIOCSMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000100)={0x0, 0xff00, 0x0}) 20:31:59 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x8447, 0x0) preadv(r0, &(0x7f0000000800)=[{&(0x7f0000000000)=""/31, 0x70800}, {0x0, 0xd}], 0x2, 0x0) 20:31:59 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, &(0x7f0000000040)=@req={0x28, &(0x7f0000000000)={'nlmon0\x00', @ifru_flags=0x200}}) clone(0xa02a6500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 20:31:59 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0xc0189436, &(0x7f0000000100)={0x0, 0xff00, 0x0}) 20:31:59 executing program 3: ioctl$EVIOCSMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000100)={0x0, 0xff00, 0x0}) 20:31:59 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0xc020660b, &(0x7f0000000100)={0x0, 0xff00, 0x0}) [ 207.073247][ C0] net_ratelimit: 22 callbacks suppressed [ 207.073254][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 207.084741][ C0] protocol 88fb is buggy, dev hsr_slave_1 20:32:00 executing program 3: ioctl$EVIOCSMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000100)={0x0, 0xff00, 0x0}) 20:32:00 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x4000200, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 20:32:00 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0xc020660b, &(0x7f0000000100)={0x0, 0xff00, 0x0}) 20:32:00 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x8447, 0x0) preadv(r0, &(0x7f0000000800)=[{&(0x7f0000000000)=""/31, 0x70800}, {0x0, 0xe}], 0x2, 0x0) 20:32:00 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0xc028660f, &(0x7f0000000100)={0x0, 0xff00, 0x0}) 20:32:00 executing program 3: r0 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x80104592, &(0x7f0000000100)={0x0, 0xff00, 0x0}) 20:32:00 executing program 0: clone(0x4320000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0xa02a6500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$radio(&(0x7f00000000c0)='/dev/radio#\x00', 0x3, 0x2) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r0, 0x110, 0x3) r1 = open(&(0x7f0000000000)='./file0\x00', 0x200, 0x3c8) ioctl$TUNGETDEVNETNS(r1, 0x54e3, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x72c7721613aa85e9) r3 = accept4(r2, 0x0, 0x0, 0x0) dup(r3) getsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000040), &(0x7f0000000080)=0x4) 20:32:00 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000100)={0x0, 0xff00, 0x0}) [ 207.393268][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 207.399129][ C0] protocol 88fb is buggy, dev hsr_slave_1 20:32:00 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0xc0406619, &(0x7f0000000100)={0x0, 0xff00, 0x0}) 20:32:00 executing program 3: r0 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x80104592, &(0x7f0000000100)={0x0, 0xff00, 0x0}) 20:32:00 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x8447, 0x0) preadv(r0, &(0x7f0000000800)=[{&(0x7f0000000000)=""/31, 0x70800}, {0x0, 0x10}], 0x2, 0x0) 20:32:00 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000100)={0x2, 0xff00, 0x0}) 20:32:00 executing program 3: r0 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x80104592, &(0x7f0000000100)={0x0, 0xff00, 0x0}) 20:32:00 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x8447, 0x0) preadv(r0, &(0x7f0000000800)=[{&(0x7f0000000000)=""/31, 0x70800}, {0x0, 0x11}], 0x2, 0x0) 20:32:00 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0xc0485619, &(0x7f0000000100)={0x0, 0xff00, 0x0}) 20:32:00 executing program 3: syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000100)={0x0, 0xff00, 0x0}) 20:32:00 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000000)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10) clone(0xa8225500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = dup(r2) write$P9_RLOPEN(r3, 0x0, 0x0) r4 = dup(r3) write$P9_RLOPEN(r4, 0x0, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(r4, 0x8917, &(0x7f0000000040)={'veth0\x00', {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x11}}}) 20:32:00 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000100)={0x3, 0xff00, 0x0}) 20:32:00 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x8447, 0x0) preadv(r0, &(0x7f0000000800)=[{&(0x7f0000000000)=""/31, 0x70800}, {0x0, 0x12}], 0x2, 0x0) 20:32:00 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0xc0c0583b, &(0x7f0000000100)={0x0, 0xff00, 0x0}) 20:32:00 executing program 0: clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0xa02a6500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 20:32:01 executing program 3: syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000100)={0x0, 0xff00, 0x0}) [ 208.193210][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 208.199030][ C0] protocol 88fb is buggy, dev hsr_slave_1 20:32:01 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000100)={0x4, 0xff00, 0x0}) 20:32:01 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x8447, 0x0) preadv(r0, &(0x7f0000000800)=[{&(0x7f0000000000)=""/31, 0x70800}, {0x0, 0x25}], 0x2, 0x0) 20:32:01 executing program 3: syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000100)={0x0, 0xff00, 0x0}) 20:32:01 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x8447, 0x0) preadv(r0, &(0x7f0000000800)=[{&(0x7f0000000000)=""/31, 0x70800}, {0x0, 0x30}], 0x2, 0x0) 20:32:01 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000100)={0x0, 0xff00, 0x0}) 20:32:01 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x80104592, 0x0) 20:32:01 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000100)={0x5, 0xff00, 0x0}) 20:32:01 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000100)={0x2, 0xff00, 0x0}) 20:32:01 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x80104592, 0x0) 20:32:01 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000100)={0x6, 0xff00, 0x0}) 20:32:01 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x8447, 0x0) preadv(r0, &(0x7f0000000800)=[{&(0x7f0000000000)=""/31, 0x70800}, {0x0, 0x1a0}], 0x2, 0x0) [ 208.843204][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 208.849081][ C1] protocol 88fb is buggy, dev hsr_slave_1 20:32:01 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000100)={0x3, 0xff00, 0x0}) [ 208.913233][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 208.913236][ C0] protocol 88fb is buggy, dev hsr_slave_0 20:32:01 executing program 0: clone(0x40040400, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0xa02a6500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x8, 0x280) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) dup(r2) pipe2$9p(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = dup(r5) write$P9_RLOPEN(r6, 0x0, 0x0) r7 = syz_init_net_socket$ax25(0x3, 0x0, 0x7) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) accept4(r8, 0x0, 0x0, 0x0) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) accept4(r9, 0x0, 0x0, 0x0) poll(&(0x7f0000000300)=[{r2, 0x2000}, {r0, 0x3}, {r3, 0x20}, {r6, 0x280972bb01e76d57}, {r7, 0x400}, {r0, 0x1000}, {r0, 0x2}, {r8, 0x8080}, {r9, 0x80}, {r0, 0x200}], 0xa, 0x80000001) 20:32:01 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x80104592, 0x0) 20:32:01 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000100)={0x7, 0xff00, 0x0}) 20:32:02 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000100)={0x4, 0xff00, 0x0}) 20:32:02 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x8447, 0x0) preadv(r0, &(0x7f0000000800)=[{&(0x7f0000000000)=""/31, 0x70800}, {0x0, 0x300}], 0x2, 0x0) 20:32:02 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0xc0c0583b, &(0x7f0000000100)={0x0, 0xff00, 0x0}) 20:32:02 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = dup(r1) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) dup(r4) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000080)=@assoc_value, &(0x7f00000000c0)=0x8) write$P9_RLOPEN(r2, 0x0, 0x0) getsockopt$bt_BT_VOICE(r2, 0x112, 0xb, &(0x7f0000000000)=0x9, &(0x7f0000000040)=0x2) clone(0xa02a6500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) listen(r5, 0x4) 20:32:02 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000100)={0x8, 0xff00, 0x0}) 20:32:02 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000100)={0x5, 0xff00, 0x0}) 20:32:02 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x80000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 20:32:02 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x8447, 0x0) preadv(r0, &(0x7f0000000800)=[{&(0x7f0000000000)=""/31, 0x70800}, {0x0, 0x12}], 0x2, 0x0) 20:32:02 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x8447, 0x0) preadv(r0, &(0x7f0000000800)=[{&(0x7f0000000000)=""/31, 0x70800}, {0x0, 0x500}], 0x2, 0x0) 20:32:02 executing program 4: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat(r0, &(0x7f00000004c0)='./file0\x00', 0x14003, 0xb2) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) r4 = dup(r3) write$P9_RLOPEN(r4, 0x0, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x0) r7 = dup(r6) write$P9_RLOPEN(r7, 0x0, 0x0) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r9 = accept4(r8, 0x0, 0x0, 0x0) dup(r9) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r11 = accept4(r10, 0x0, 0x0, 0x0) dup(r11) r12 = socket$alg(0x26, 0x5, 0x0) bind$alg(r12, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r13 = accept4(r12, 0x0, 0x0, 0x0) dup(r13) r14 = socket$alg(0x26, 0x5, 0x0) bind$alg(r14, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) accept4(r14, 0x0, 0x0, 0x0) r15 = getpgid(0xffffffffffffffff) r16 = socket$alg(0x26, 0x5, 0x0) bind$alg(r16, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r17 = accept4(r16, 0x0, 0x0, 0x0) dup(r17) getsockopt$inet6_IPV6_XFRM_POLICY(r17, 0x29, 0x23, &(0x7f0000000500)={{{@in, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@empty}}, &(0x7f0000000600)=0xe8) lstat(&(0x7f00000000c0)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r19) r20 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r21 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000002540)=ANY=[@ANYBLOB="8500000007e88aab9134e7bcae50c1af600bc1a4c00000008100000095000000000000002a17e8af869cd00cf7e1a473b56e021a70d85515d5c1c45f760d7fda99d1bb0288b5d5983cb56275f9a52edcb4b783a9883c2ec8120a0bcc8926040363b06cfc9ddde9bdcf07377a85cced76f5f08c84fd5a5c3db26e605c41175f6e76ff9a6d13d6ead22f8314ec73d799147b5a103435377507fe37ef2857e124"], &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r20, 0x40042408, r21) r22 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={r22, r20, 0x0, 0x0, 0x0}, 0x30) fstat(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000000c0)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r24) r25 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r26 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x25, 0x0, 0x0, 0x3}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) ioctl$PERF_EVENT_IOC_SET_BPF(r25, 0x40042408, r26) r27 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={r27, r25, 0x0, 0x0, 0x0}, 0x30) lstat(&(0x7f00000006c0)='./file0\x00', &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000780)=0x0, &(0x7f00000007c0), &(0x7f0000000800)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000840)=0x0) r31 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r31, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f00000000c0)='./file0\x00', r32, 0x0) lstat(&(0x7f00000000c0)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r33) lstat(&(0x7f00000000c0)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r34) lstat(&(0x7f00000000c0)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r35) getgroups(0x6, &(0x7f0000000880)=[0xee00, 0xee01, r33, r34, r35, 0xee00]) r37 = socket$alg(0x26, 0x5, 0x0) bind$alg(r37, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r38 = accept4(r37, 0x0, 0x0, 0x0) r39 = dup(r38) write$P9_RLOPEN(r39, 0x0, 0x0) ioctl$TIOCGSID(r39, 0x5429, &(0x7f00000008c0)=0x0) stat(&(0x7f0000000900)='./file0\x00', &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0}) r42 = getgid() r43 = socket$alg(0x26, 0x5, 0x0) bind$alg(r43, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r44 = accept4(r43, 0x0, 0x0, 0x0) r45 = dup(r44) write$P9_RLOPEN(r45, 0x0, 0x0) r46 = socket$alg(0x26, 0x5, 0x0) bind$alg(r46, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r47 = accept4(r46, 0x0, 0x0, 0x0) r48 = dup(r47) write$P9_RLOPEN(r48, 0x0, 0x0) r49 = socket$alg(0x26, 0x5, 0x0) bind$alg(r49, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r50 = accept4(r49, 0x0, 0x0, 0x0) dup(r50) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000020c0)={0xffffffffffffffff}) r52 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000002100)='/dev/udmabuf\x00', 0x2) r53 = socket$alg(0x26, 0x5, 0x0) bind$alg(r53, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r54 = accept4(r53, 0x0, 0x0, 0x0) r55 = dup(r54) write$P9_RLOPEN(r55, 0x0, 0x0) r56 = socket$pppoe(0x18, 0x1, 0x0) r57 = socket$can_bcm(0x1d, 0x2, 0x2) r58 = socket$alg(0x26, 0x5, 0x0) bind$alg(r58, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) accept4(r58, 0x0, 0x0, 0x0) r59 = accept4$x25(0xffffffffffffffff, &(0x7f0000002140), &(0x7f0000002180)=0x12, 0x100000) r60 = socket$alg(0x26, 0x5, 0x0) bind$alg(r60, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r61 = accept4(r60, 0x0, 0x0, 0x0) dup(r61) r62 = open(&(0x7f00000021c0)='./file0\x00', 0x400, 0x2) r63 = socket$alg(0x26, 0x5, 0x0) bind$alg(r63, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r64 = accept4(r63, 0x0, 0x0, 0x0) dup(r64) r65 = fcntl$getown(r64, 0x9) getresuid(&(0x7f0000002200)=0x0, &(0x7f0000002240), &(0x7f0000002280)) r67 = getegid() r68 = getpgid(0xffffffffffffffff) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000022c0)=0x0) lstat(&(0x7f0000002300)='./file0\x00', &(0x7f0000002340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r71 = socket$alg(0x26, 0x5, 0x0) bind$alg(r71, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r72 = accept4(r71, 0x0, 0x0, 0x0) dup(r72) r73 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f00000023c0)='/proc/self/attr/exec\x00', 0x2, 0x0) r74 = socket$alg(0x26, 0x5, 0x0) bind$alg(r74, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r75 = accept4(r74, 0x0, 0x0, 0x0) r76 = dup(r75) write$P9_RLOPEN(r76, 0x0, 0x0) r77 = socket$alg(0x26, 0x5, 0x0) bind$alg(r77, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r78 = accept4(r77, 0x0, 0x0, 0x0) r79 = dup(r78) write$P9_RLOPEN(r79, 0x0, 0x0) r80 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000002400)='/proc/self/net/pfkey\x00', 0x300000, 0x0) r81 = socket$inet_udplite(0x2, 0x2, 0x88) r82 = socket$alg(0x26, 0x5, 0x0) bind$alg(r82, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r83 = accept4(r82, 0x0, 0x0, 0x0) r84 = dup(r83) write$P9_RLOPEN(r84, 0x0, 0x0) r85 = accept$packet(r84, &(0x7f0000002440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000002480)=0x14) r86 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/video37\x00', 0x2, 0x0) r87 = syz_open_dev$video(&(0x7f0000002500)='/dev/video#\x00', 0x1, 0x200000) r88 = socket$inet_udp(0x2, 0x2, 0x0) r89 = socket$alg(0x26, 0x5, 0x0) bind$alg(r89, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) accept4(r89, 0x0, 0x0, 0x0) r90 = socket$alg(0x26, 0x5, 0x0) bind$alg(r90, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) accept4(r90, 0x0, 0x0, 0x0) r91 = socket$alg(0x26, 0x5, 0x0) bind$alg(r91, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) accept4(r91, 0x0, 0x0, 0x0) r92 = socket$alg(0x26, 0x5, 0x0) bind$alg(r92, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r93 = accept4(r92, 0x0, 0x0, 0x0) r94 = dup(r93) write$P9_RLOPEN(r94, 0x0, 0x0) r95 = socket$alg(0x26, 0x5, 0x0) bind$alg(r95, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) accept4(r95, 0x0, 0x0, 0x0) r96 = socket$alg(0x26, 0x5, 0x0) bind$alg(r96, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r97 = accept4(r96, 0x0, 0x0, 0x0) r98 = dup(r97) write$P9_RLOPEN(r98, 0x0, 0x0) r99 = fcntl$getown(r98, 0x9) r100 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r100, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f00000000c0)='./file0\x00', r101, 0x0) lstat(&(0x7f00000000c0)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r102) r103 = socket$alg(0x26, 0x5, 0x0) bind$alg(r103, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r104 = accept4(r103, 0x0, 0x0, 0x0) r105 = dup(r104) write$P9_RLOPEN(r105, 0x0, 0x0) r106 = socket$alg(0x26, 0x5, 0x0) bind$alg(r106, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r107 = accept4(r106, 0x0, 0x0, 0x0) dup(r107) r108 = socket$alg(0x26, 0x5, 0x0) bind$alg(r108, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r109 = accept4(r108, 0x0, 0x0, 0x0) r110 = dup(r109) write$P9_RLOPEN(r110, 0x0, 0x0) r111 = socket$alg(0x26, 0x5, 0x0) bind$alg(r111, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r112 = accept4(r111, 0x0, 0x0, 0x0) r113 = dup(r112) write$P9_RLOPEN(r113, 0x0, 0x0) r114 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f00000027c0)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r115 = inotify_init() r116 = socket$alg(0x26, 0x5, 0x0) bind$alg(r116, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r117 = accept4(r116, 0x0, 0x0, 0x0) r118 = dup(r117) write$P9_RLOPEN(r118, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000029c0)=[{&(0x7f0000000000)=@abs={0x0, 0x0, 0xfffffffd}, 0x6e, &(0x7f0000000440)=[{&(0x7f0000000080)="769727998d1dd5cb21f383b508992826b8b2af9063a307532583f2ca69f6ee97f9e9a43c5a0a368f3213011f07b3545efd706909c067e71f313200b93377e0be38c388f7fb3540573145882473c32c84623db3ce6cacddbdf95dadc8923f948fdcb3dc7abdc2da79af3a6e49127a8d5b1ac3f6e30e0284f8b33df374be03e39b42f819c197828c97ac8ea1711363e9c0c78fb0695996afe228dfa6aa157668d44e318a75e9a34bb5a59252896b4d538393a6d48efa6e9d1932a7a1162c63d74e0d0b0933d735791f20c853ba552afa9b5c0280", 0xd3}, {&(0x7f0000000180)="bee8648a2cd550a77416910f070c44cd0ce0d1205132655d7a55d0e0823d5209f49d47435008125d3c3dfbaad109cf5c8873122c6b7ec6a2a61ae5277c0eb70cea1f9a6a5cab26e25c22a00ed658899010f9e7a1413befb93f1486e70c7eb670893ff47dfa17909db8247f", 0x6b}, {&(0x7f0000000200)="b66d1254660eab70594f85180bd56c850fff4a70e26ccaad4f16505484d53502da7d0111d88e1bd350a2e33808ac4e27a70a1cc83d6e4dc9e442d13dd9444d52acefe20c9caebecb95b527dd34625371e3a5fdfdca3a6c53522d75d48b77d7a8cc54e83b9cf41a0bd4f1522b1087eff66f936264c161ab32cef2bff96602a1ae9ec725f759f74af3ee972fdbbd1f35a89a9dc29f8b80c9734af1f3d143afa398bc6c0e79b0e2f9fb8af7c10c", 0xac}, {&(0x7f00000002c0)="ba562e0efb518dc5a6be99d3d1ba7148e18a17de", 0x14}, {&(0x7f0000000300)}, {&(0x7f0000000340)="ba102d11676cb2723fd558560042417391451b7a2dc325b4998b691b4b97df9a0b8b14b299eb7b497c8f11b542fb06aab44f76eaf1b0de48427ee6c70ad6deb52ae4ba898fa393b53a6c1801345667909b22fbaf336ef9a3e5cb6c646521d247783c0906336598a5e2d12794cb5985c93e3adc22ade9a831dd994fdb3e8e557c39a0cead424e0dba930f133f9c68f24276735fa1bd5a4ea724fc2e42535fdf167fb1d8123e464354a912e19949bcac4a69812edeed01adb84a0c129e2faabdad5c4ed9bc5ce5b0b122bfd9354d6c09f7d23272d3d6e0cc2b26356e2e2df1dcd6", 0xe0}], 0x6, &(0x7f00000009c0)=[@rights={{0x1c, 0x1, 0x1, [r1, r4, r7]}}, @rights={{0x30, 0x1, 0x1, [r0, r9, r11, r13, r0, r0, r14, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r15, r18, r19}}}, @cred={{0x1c, 0x1, 0x2, {r22, r23, r24}}}, @cred={{0x1c, 0x1, 0x2, {r27, r28, r29}}}, @cred={{0x1c, 0x1, 0x2, {r30, r32, r36}}}, @cred={{0x1c, 0x1, 0x2, {r40, r41, r42}}}, @rights={{0x30, 0x1, 0x1, [r0, r0, r0, r0, r0, r45, r48, r50]}}], 0x120, 0x20008800}, {&(0x7f0000000b00)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000002000)=[{&(0x7f0000000b80)="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", 0x1000}, {&(0x7f0000001b80)="0f0dc7b2e3f26c595824b8cedba994c964d625694f15b61aa3a6aa4e4f768b204c01541bca9b01c97ff82a490c71554b505aef67f625915eaffb31c3ba0f9def52fb04b3987cad4aec75a3f04c20aa7b60172847bd0f00e0c737007b9e8139994d13ba0a43be1bebf2d077069375466b22f58c71b390144ac9205bfde55f70e68160241ba696cb9561f4e3847d309c0fbda2262e9dc873647922", 0x9a}, {&(0x7f0000001c40)="d3e7d5e6ad05f36885cac560e8af8253e683d8bff1462a2ae5f1b6264ce801ea10d16012b056cd0cdff5ff", 0x2b}, {&(0x7f0000001c80)="d273d6ef5480ad5d942f7ad9fc90b504f1524402f28714f9c89b98abbae1bdf057d4dc217be2dbf79156f9bc7685c1168e20d8f15871c6e83f8cac4b277f0e8e5767a650c12594af6bf29986c4d4cd993702a45675", 0x55}, {&(0x7f0000001d00)="b06b0d96b1149e430e4fc4667e8aa51a5673d9a8d8386432c84ffdd0c2a9662ff1c5247cb8b1256d42725bd297f4610194313426754341acdb4de383ffa0a444405ce76080cd896b5461000421547f4b074d87b089248da02605296996b6bc9734a43ac3bc507b0506271d910007cf82e0ee8762f3d5231264059263d91215489408033e88b56da862c98a13a5fa8baf1f17aea8d7c674b90e44cc2fcc14b42d74669eb0b86e56cd4fa42eb005f21313d2149770bfa1b05c70f902a047aec3d08084f6185c098bd6386281efb6a84551b1c7919487836c5f8668b815319ae4ebf72ef9847d611b275ffc4162b5781cdbbd5be826eab980f0fdc17b3161f2", 0xfe}, {&(0x7f0000001e00)="a728cac31d78a27fb7feab7fd410bcf85172ba831b277bf34fe5208597d9a1911dbbf547d919a6d4262475af9353af7ffc3f99d9592a35e8e447f6e2a4bb14e5869e8e7e99fb108785e2ade7d6c60d93551302032677d8bbcaec215122a89a16a34e5030814ed6ad975b74b9f1a5238d59359873b7813ec015c40ce4fc0c831a5c9bd24f6879135f84af0ec4f03b5c05a408e306c0b5e947e4022360b9b495f2dd329a9aa73d7b4c848a3851c1a025e0047ae879d9", 0xb5}, {&(0x7f0000001ec0)="af14143266172fb968e02dd2b38535d9a095115dead4f26d48f75b917fdcf9020c4957d663ae39ba369256f56f32efb26cec90d522e10f15dc20afaaca4a1c1170cea17465cfeae79c50e86b5b0e5363d4b1d0b10f508b3e2f81255a79226af5c3baf13393ced95890fc2d9c400c7f4fcf706003608e6af78bda327b09f0a7c6ad187ce6757c933b2b486619e7e8819d8e34091b765327067e0d62624c3333122cdb582463d47779a1ebc516a26a85287f306b", 0xb3}, {&(0x7f0000001f80)="ff0eef4b268894b41726aa681e1e202096e9b2d6ee4a9824c3b01ce75b0045fda0b54e831116911554614208afae68357bb9ed0589b18f2c094a48e824", 0x3d}, {&(0x7f0000001fc0)="bce37a8e", 0x4}], 0x9, &(0x7f0000002800)=[@rights={{0x1c, 0x1, 0x1, [r51, r0, r52]}}, @rights={{0x38, 0x1, 0x1, [r55, r0, r56, r57, r0, r58, 0xffffffffffffffff, r59, r61, r62]}}, @cred={{0x1c, 0x1, 0x2, {r65, r66, r67}}}, @cred={{0x1c, 0x1, 0x2, {r68, r69, r70}}}, @rights={{0x20, 0x1, 0x1, [r0, r72, r0, r73]}}, @rights={{0x24, 0x1, 0x1, [r0, r76, r79, r80, r81]}}, @rights={{0x38, 0x1, 0x1, [r85, r86, r87, r0, r88, r89, r0, r90, r91, r0]}}, @rights={{0x1c, 0x1, 0x1, [r94, r0, r95]}}, @cred={{0x1c, 0x1, 0x2, {r99, r101, r102}}}, @rights={{0x34, 0x1, 0x1, [r105, r107, r110, r113, r114, r0, r115, r0, r118]}}], 0x190, 0x4000000}], 0x2, 0x40000) ioprio_set$pid(0x2, 0x0, 0x0) clone(0xa02a6500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 20:32:02 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000100)={0x6, 0xff00, 0x0}) 20:32:02 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0xc0045878, &(0x7f0000000100)={0x0, 0xff00, 0x0}) 20:32:02 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00', 0x0, 0x8}, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) dup(r2) accept4$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0}, &(0x7f00000000c0)=0x14, 0x800) r4 = syz_open_dev$audion(&(0x7f0000000100)='/dev/audio#\x00', 0x4, 0x40000) bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x8, 0x81, 0xfffffffd, 0x7fff, 0xa0, r0, 0x6e1, [], r3, r4, 0x2, 0x4}, 0x3c) clone(0x83d631d74b2563e1, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 20:32:02 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000100)={0x9, 0xff00, 0x0}) 20:32:02 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x8447, 0x0) preadv(r0, &(0x7f0000000800)=[{&(0x7f0000000000)=""/31, 0x70800}, {0x0, 0x600}], 0x2, 0x0) 20:32:02 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000100)={0x7, 0xff00, 0x0}) 20:32:02 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x400454ca, &(0x7f0000000100)={0x0, 0xff00, 0x0}) 20:32:02 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x98000400, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 20:32:02 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000100)={0xa, 0xff00, 0x0}) 20:32:02 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000100)={0x8, 0xff00, 0x0}) 20:32:02 executing program 3 (fault-call:1 fault-nth:0): r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x80104592, &(0x7f0000000100)={0x0, 0xff00, 0x0}) [ 210.125317][T17771] FAULT_INJECTION: forcing a failure. [ 210.125317][T17771] name failslab, interval 1, probability 0, space 0, times 0 [ 210.161386][T17771] CPU: 1 PID: 17771 Comm: syz-executor.3 Not tainted 5.4.0-rc4+ #0 [ 210.169312][T17771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 210.179370][T17771] Call Trace: [ 210.182673][T17771] dump_stack+0x1d8/0x2f8 [ 210.187011][T17771] should_fail+0x555/0x770 [ 210.191432][T17771] __should_failslab+0x11a/0x160 [ 210.196368][T17771] ? tomoyo_realpath_from_path+0xdc/0x7c0 [ 210.202081][T17771] should_failslab+0x9/0x20 [ 210.206583][T17771] __kmalloc+0x7a/0x340 [ 210.210733][T17771] ? tomoyo_realpath_from_path+0xca/0x7c0 [ 210.216453][T17771] tomoyo_realpath_from_path+0xdc/0x7c0 [ 210.221998][T17771] tomoyo_path_number_perm+0x166/0x640 [ 210.227567][T17771] ? smack_file_ioctl+0x278/0x2e0 [ 210.232583][T17771] ? __fget+0x411/0x510 [ 210.236799][T17771] tomoyo_file_ioctl+0x23/0x30 [ 210.241556][T17771] security_file_ioctl+0x6d/0xd0 [ 210.246492][T17771] __x64_sys_ioctl+0xa3/0x120 [ 210.251181][T17771] do_syscall_64+0xf7/0x1c0 [ 210.255691][T17771] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 210.261582][T17771] RIP: 0033:0x459f39 [ 210.265503][T17771] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 210.285139][T17771] RSP: 002b:00007f3377f19c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 210.293552][T17771] RAX: ffffffffffffffda RBX: 00007f3377f19c90 RCX: 0000000000459f39 [ 210.301520][T17771] RDX: 0000000020000100 RSI: 0000000080104592 RDI: 0000000000000003 [ 210.309490][T17771] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 210.317543][T17771] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f3377f1a6d4 [ 210.325646][T17771] R13: 00000000004c246c R14: 00000000004d5f78 R15: 0000000000000004 [ 210.347528][T17771] ERROR: Out of memory at tomoyo_realpath_from_path. 20:32:03 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = dup(r1) write$P9_RLOPEN(r2, 0x0, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000000)='memory.swap.max\x00', 0x2, 0x0) ioctl$FS_IOC_SETFSLABEL(r3, 0x41009432, &(0x7f0000000040)="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") clone(0xa02a6500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 20:32:03 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x8447, 0x0) preadv(r0, &(0x7f0000000800)=[{&(0x7f0000000000)=""/31, 0x70800}, {0x0, 0x700}], 0x2, 0x0) 20:32:03 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000100)={0xb, 0xff00, 0x0}) 20:32:03 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000100)={0x9, 0xff00, 0x0}) 20:32:03 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x40000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioprio_set$pid(0x2, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = dup(r1) write$P9_RLOPEN(r2, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r2, 0x404c534a, &(0x7f0000000000)={0x6, 0x3, 0x1b438eeb}) clone(0xa02a6500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 20:32:03 executing program 3 (fault-call:1 fault-nth:1): r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x80104592, &(0x7f0000000100)={0x0, 0xff00, 0x0}) [ 211.134416][T17783] FAULT_INJECTION: forcing a failure. [ 211.134416][T17783] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 211.147724][T17783] CPU: 0 PID: 17783 Comm: syz-executor.3 Not tainted 5.4.0-rc4+ #0 [ 211.155622][T17783] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 211.165688][T17783] Call Trace: [ 211.168991][T17783] dump_stack+0x1d8/0x2f8 [ 211.173433][T17783] should_fail+0x555/0x770 [ 211.179348][T17783] should_fail_alloc_page+0x55/0x60 [ 211.184729][T17783] prepare_alloc_pages+0x283/0x460 [ 211.189857][T17783] __alloc_pages_nodemask+0xb2/0x5d0 [ 211.195191][T17783] kmem_getpages+0x4d/0xa00 [ 211.199740][T17783] cache_grow_begin+0x7e/0x2c0 [ 211.204593][T17783] cache_alloc_refill+0x311/0x3f0 [ 211.209619][T17783] ? check_preemption_disabled+0xb7/0x2a0 [ 211.209635][T17783] __kmalloc+0x318/0x340 [ 211.209645][T17783] ? tomoyo_realpath_from_path+0xdc/0x7c0 [ 211.209657][T17783] tomoyo_realpath_from_path+0xdc/0x7c0 20:32:04 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0xa02a6500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x0) r1 = accept(r0, &(0x7f0000000000)=@caif, &(0x7f0000000080)=0x80) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f00000000c0), &(0x7f0000000100)=0x4) [ 211.230856][T17783] tomoyo_path_number_perm+0x166/0x640 [ 211.236392][T17783] ? smack_file_ioctl+0x278/0x2e0 [ 211.241428][T17783] ? __fget+0x411/0x510 [ 211.245609][T17783] tomoyo_file_ioctl+0x23/0x30 [ 211.250380][T17783] security_file_ioctl+0x6d/0xd0 [ 211.255337][T17783] __x64_sys_ioctl+0xa3/0x120 [ 211.260024][T17783] do_syscall_64+0xf7/0x1c0 [ 211.264550][T17783] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 211.264561][T17783] RIP: 0033:0x459f39 [ 211.264572][T17783] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 211.264578][T17783] RSP: 002b:00007f3377f19c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 211.264589][T17783] RAX: ffffffffffffffda RBX: 00007f3377f19c90 RCX: 0000000000459f39 [ 211.264595][T17783] RDX: 0000000020000100 RSI: 0000000080104592 RDI: 0000000000000003 [ 211.264600][T17783] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 211.264605][T17783] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f3377f1a6d4 20:32:04 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x8447, 0x0) preadv(r0, &(0x7f0000000800)=[{&(0x7f0000000000)=""/31, 0x70800}, {0x0, 0x900}], 0x2, 0x0) [ 211.264610][T17783] R13: 00000000004c246c R14: 00000000004d5f78 R15: 0000000000000004 20:32:04 executing program 3 (fault-call:1 fault-nth:2): r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x80104592, &(0x7f0000000100)={0x0, 0xff00, 0x0}) 20:32:04 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000100)={0xa, 0xff00, 0x0}) 20:32:04 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x100134000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() ioprio_set$pid(0x1, r0, 0x7) ioprio_set$pid(0x2, 0x0, 0x0) clone(0xa02a6500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = dup(r2) write$P9_RLOPEN(r3, 0x0, 0x0) ioctl$KDADDIO(r3, 0x4b34, 0x4742) 20:32:04 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000100)={0xc, 0xff00, 0x0}) 20:32:04 executing program 0: openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = dup(r1) write$P9_RLOPEN(r2, 0x0, 0x0) r3 = openat(r2, &(0x7f00000000c0)='./file0\x00', 0x151241, 0xf4d932512aeebce) socket$alg(0x26, 0x5, 0x0) ioctl$SIOCX25GFACILITIES(r3, 0x89e2, &(0x7f0000000100)) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0xa02a6500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setrlimit(0x3, &(0x7f0000000040)={0x80000000, 0xb4}) [ 211.517771][T18101] FAULT_INJECTION: forcing a failure. [ 211.517771][T18101] name failslab, interval 1, probability 0, space 0, times 0 [ 211.543352][T18101] CPU: 1 PID: 18101 Comm: syz-executor.3 Not tainted 5.4.0-rc4+ #0 [ 211.551279][T18101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 211.561433][T18101] Call Trace: 20:32:04 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000100)={0xb, 0xff00, 0x0}) 20:32:04 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x8447, 0x0) preadv(r0, &(0x7f0000000800)=[{&(0x7f0000000000)=""/31, 0x70800}, {0x0, 0xa00}], 0x2, 0x0) [ 211.564736][T18101] dump_stack+0x1d8/0x2f8 [ 211.569078][T18101] should_fail+0x555/0x770 [ 211.573504][T18101] __should_failslab+0x11a/0x160 [ 211.578451][T18101] ? tomoyo_encode2+0x273/0x5a0 [ 211.583313][T18101] should_failslab+0x9/0x20 [ 211.587825][T18101] __kmalloc+0x7a/0x340 [ 211.591991][T18101] tomoyo_encode2+0x273/0x5a0 [ 211.596695][T18101] tomoyo_realpath_from_path+0x769/0x7c0 [ 211.602432][T18101] tomoyo_path_number_perm+0x166/0x640 [ 211.607935][T18101] ? smack_file_ioctl+0x278/0x2e0 [ 211.612965][T18101] ? __fget+0x411/0x510 [ 211.617122][T18101] tomoyo_file_ioctl+0x23/0x30 [ 211.621896][T18101] security_file_ioctl+0x6d/0xd0 [ 211.626839][T18101] __x64_sys_ioctl+0xa3/0x120 [ 211.631521][T18101] do_syscall_64+0xf7/0x1c0 [ 211.636020][T18101] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 211.642042][T18101] RIP: 0033:0x459f39 [ 211.645990][T18101] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 211.665645][T18101] RSP: 002b:00007f3377f19c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 211.674046][T18101] RAX: ffffffffffffffda RBX: 00007f3377f19c90 RCX: 0000000000459f39 [ 211.684553][T18101] RDX: 0000000020000100 RSI: 0000000080104592 RDI: 0000000000000003 [ 211.692544][T18101] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 211.700510][T18101] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f3377f1a6d4 [ 211.708588][T18101] R13: 00000000004c246c R14: 00000000004d5f78 R15: 0000000000000004 [ 211.717969][T18101] ERROR: Out of memory at tomoyo_realpath_from_path. 20:32:04 executing program 4: r0 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x0, 0x309c41) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)=0x0) perf_event_open(0x0, r1, 0x0, r0, 0x5) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) dup(r4) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x40000, 0x0) ioctl$VIDIOC_S_AUDOUT(r5, 0x40345632, &(0x7f00000001c0)={0x0, "c7cb37282d9356978a9f1008afaa14972c802683c196c59e7dcabd8371b12fc1", 0x2}) ioctl$sock_bt_bnep_BNEPCONNDEL(r4, 0x400442c9, &(0x7f00000000c0)={0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1f}}) r6 = accept4(r2, 0x0, 0x0, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r8 = accept4(r7, 0x0, 0x0, 0x0) r9 = dup(r8) write$P9_RLOPEN(r9, 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r9, 0x6, 0x2, &(0x7f0000000100)={0x2, 0x1f, 0x0, 0x6}, 0x6) r10 = dup(r6) write$P9_RLOPEN(r10, 0x0, 0x0) r11 = socket$alg(0x26, 0x5, 0x0) bind$alg(r11, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r12 = accept4(r11, 0x0, 0x0, 0x0) r13 = dup(r12) write$P9_RLOPEN(r13, 0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(r13, 0x40086602, &(0x7f0000000140)=0x20168) write$FUSE_NOTIFY_DELETE(r10, &(0x7f0000000200)=ANY=[@ANYBLOB="3b0000000600000000000000000000000209000000000000000000090000000012000000000000002f6465762f6940000000745afbe33d000000007365230000"], 0x3b) ioprio_set$pid(0x2, 0x0, 0x0) clone(0xa02a6500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 20:32:04 executing program 3 (fault-call:1 fault-nth:3): r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x80104592, &(0x7f0000000100)={0x0, 0xff00, 0x0}) 20:32:04 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000100)={0xd, 0xff00, 0x0}) 20:32:04 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000100)={0xc, 0xff00, 0x0}) 20:32:04 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = dup(r1) sendto$packet(r1, &(0x7f0000000080)="e8eadb0cc49ded53a548c77984cc553b8ae8206bc6e77c728ab0825ff3950f918fd2a8e5a4a2692fb03ffab3e2c2fca6cc55a3b9123742f509055cfab94eef90f9b656d316fdd0f8303670c12ac823ea6962a59da73d84515f03e983f7ff82fced694c23b56795845fb22df8df2eec62adf58b7ae09f4b8fde07fb5063116a532ddf9025e07d0c54617894da3cbb4fe166d6d3596c84b584355944f23664413ccf8c94381bb8af1a80ed47c10af03df51b9bf4fd6a8304e462db27882eb7ea19", 0xc0, 0x4800, 0x0, 0x0) write$P9_RLOPEN(r2, 0x0, 0x0) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000000040)=0x8) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) r5 = dup(r4) write$P9_RLOPEN(r5, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r5, 0xc008640a, &(0x7f0000000240)) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000200)={0x51, 0x5, 0x47, {0x6, 0x2}, {0x101, 0x4}, @const={0x0, {0x8, 0x1000, 0x1, 0xf9a6}}}) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="c50002000700000025000000210000c3627d123ad54e4bbd72009500000000000000"], &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) r8 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={r8, r6, 0x0, 0x0, 0x0}, 0x30) r9 = gettid() kcmp(r9, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) ioprio_set$pid(0x2, r9, 0x1) clone(0xa02a6500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 20:32:04 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0xa02a6500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() kcmp(r0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = dup(r2) write$P9_RLOPEN(r3, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x0) r7 = dup(r6) write$P9_RLOPEN(r7, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f00000000c0), &(0x7f0000000100)=0x4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000018c0)={0x0, 0xffffffffffffffff, 0x0, 0xd, &(0x7f0000001880)='bond_slave_0\x00', r4}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000400)={0x0, 0xffffffffffffffff, 0x0, 0x1, &(0x7f00000003c0)='\x00', r4}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x5, &(0x7f0000000000)='syz1\x00', r4}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r0, r3, 0x0, 0x8, &(0x7f0000000000)='wlan0:#\x00', r4}, 0x30) sched_setscheduler(r8, 0x5, &(0x7f0000000080)=0x80000001) 20:32:04 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x80104592, &(0x7f0000000100)={0x0, 0xff00, 0x0}) 20:32:04 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x8447, 0x0) preadv(r0, &(0x7f0000000800)=[{&(0x7f0000000000)=""/31, 0x70800}, {0x0, 0xb00}], 0x2, 0x0) 20:32:05 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000100)={0xe, 0xff00, 0x0}) 20:32:05 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000100)={0xd, 0xff00, 0x0}) 20:32:05 executing program 4: perf_event_open(0x0, 0x0, 0xe, 0xffffffffffffffff, 0x15) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioprio_set$pid(0x2, 0x0, 0x0) clone(0xa02a6500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 20:32:05 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = dup(r1) write$P9_RLOPEN(r2, 0x0, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x11) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) r5 = dup(r4) write$P9_RLOPEN(r5, 0x0, 0x0) ioctl$VHOST_RESET_OWNER(r5, 0xaf02, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r7 = accept4(r6, 0x0, 0x0, 0x0) dup(r7) ioctl$SIOCX25SCUDMATCHLEN(r7, 0x89e7, &(0x7f0000000080)={0x62}) clone(0xb43a6300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 20:32:05 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x2, &(0x7f0000000100)={0x0, 0xff00, 0x0}) 20:32:05 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000100)={0xe, 0xff00, 0x0}) 20:32:05 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x5400, 0x0) clone(0xa02a6500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 212.353229][ C0] net_ratelimit: 18 callbacks suppressed [ 212.353236][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 212.365042][ C0] protocol 88fb is buggy, dev hsr_slave_1 20:32:05 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x8447, 0x0) preadv(r0, &(0x7f0000000800)=[{&(0x7f0000000000)=""/31, 0x70800}, {0x0, 0xc00}], 0x2, 0x0) 20:32:05 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000100)={0x10, 0xff00, 0x0}) 20:32:05 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0xa02a6500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = dup(r2) write$P9_RLOPEN(r3, 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(r3, 0xae03, 0x5) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r4 = accept4(r0, 0x0, 0x0, 0x0) r5 = dup(r4) write$P9_RLOPEN(r5, 0x0, 0x0) recvmmsg(r5, &(0x7f0000007400)=[{{&(0x7f00000000c0)=@rc, 0x80, &(0x7f00000014c0)=[{&(0x7f0000000140)=""/211, 0xd3}, {&(0x7f0000000240)=""/167, 0xa7}, {&(0x7f0000000300)=""/194, 0xc2}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/87, 0x57}, {&(0x7f0000001480)}], 0x6, &(0x7f0000001540)=""/4096, 0x1000}, 0x3}, {{&(0x7f0000002540)=@caif=@util, 0x80, &(0x7f0000002900)=[{&(0x7f00000025c0)=""/240, 0xf0}, {&(0x7f00000026c0)=""/21, 0x15}, {&(0x7f0000002700)=""/226, 0xe2}, {&(0x7f0000002800)=""/7, 0x7}, {&(0x7f0000002840)=""/186, 0xba}], 0x5, &(0x7f0000002980)=""/95, 0x5f}, 0x4}, {{&(0x7f0000002a00)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80, &(0x7f0000002b40)=[{&(0x7f0000002a80)=""/3, 0x3}, {&(0x7f0000002ac0)=""/77, 0x4d}], 0x2, &(0x7f0000002b80)=""/241, 0xf1}, 0x7}, {{0x0, 0x0, &(0x7f0000003f40)=[{&(0x7f0000002c80)=""/163, 0xa3}, {&(0x7f0000002d40)=""/129, 0x81}, {&(0x7f0000002e00)=""/4096, 0x1000}, {&(0x7f0000003e00)=""/66, 0x42}, {&(0x7f0000003e80)=""/192, 0xc0}], 0x5, &(0x7f0000003fc0)=""/137, 0x89}, 0x7f}, {{&(0x7f0000004080)=@vsock={0x28, 0x0, 0x0, @reserved}, 0x80, &(0x7f00000046c0)=[{&(0x7f0000004100)=""/87, 0x57}, {&(0x7f0000004180)=""/17, 0x11}, {&(0x7f00000041c0)=""/107, 0x6b}, {&(0x7f0000004240)=""/112, 0x70}, {&(0x7f00000042c0)=""/211, 0xd3}, {&(0x7f00000043c0)=""/246, 0xf6}, {&(0x7f00000044c0)=""/81, 0x51}, {&(0x7f0000004540)=""/5, 0x5}, {&(0x7f0000004580)=""/196, 0xc4}, {&(0x7f0000004680)}], 0xa, &(0x7f0000004780)=""/4096, 0x1000}, 0x4}, {{&(0x7f0000005780)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, &(0x7f00000068c0)=[{&(0x7f0000005800)=""/41, 0x29}, {&(0x7f0000005840)=""/4096, 0x1000}, {&(0x7f0000006840)=""/37, 0x25}, {&(0x7f0000006880)=""/33, 0x21}], 0x4, &(0x7f0000006900)=""/238, 0xee}, 0x5}, {{&(0x7f0000006a00)=@ipx, 0x80, &(0x7f0000006c40)=[{&(0x7f0000006a80)=""/100, 0x64}, {&(0x7f0000006b00)=""/98, 0x62}, {&(0x7f0000006b80)=""/137, 0x89}], 0x3, &(0x7f0000006c80)=""/85, 0x55}, 0x100}, {{&(0x7f0000006d00)=@sco, 0x80, &(0x7f0000006e80)=[{&(0x7f0000006d80)=""/126, 0x7e}, {&(0x7f0000006e00)=""/56, 0x38}, {&(0x7f0000006e40)=""/40, 0x28}], 0x3, &(0x7f0000006ec0)=""/91, 0x5b}, 0x2}, {{&(0x7f0000006f40)=@generic, 0x80, &(0x7f0000007040)=[{&(0x7f0000006fc0)=""/96, 0x60}], 0x1}, 0xd8}, {{&(0x7f0000007080)=@un=@abs, 0x80, &(0x7f0000007340)=[{&(0x7f0000007100)=""/156, 0x9c}, {&(0x7f00000071c0)=""/24, 0x18}, {&(0x7f0000007200)=""/86, 0x56}, {&(0x7f0000007280)=""/46, 0x2e}, {&(0x7f00000072c0)=""/85, 0x55}], 0x5, &(0x7f00000073c0)=""/20, 0x14}, 0x2}], 0xa, 0x2000, &(0x7f0000007680)) sendto$netrom(r6, &(0x7f00000076c0)="6e62940a69531fcc9ce89436fabc647260992c51c0dcc65aa5b3b2bbc38ad67dd6de9aaf2bd4d3bb9f39e35af5ff9a980a432f5bdd9054dd33875f08e7ba9e6261238d76abfb8352d99f44e64fc1d6cac4e570b72498dcd64031c3ace0622f49f76960c1cfa97c18d3823bb501888de7954eacc62135f516a19af333db9ea3c5116ae71bcc6cc751e8eccd8c80639ff9cb14087e7fb9bf0637ae8a6e4f30822bfb2215d3483b72", 0xa7, 0x800, &(0x7f0000007780)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}}, [@null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) 20:32:05 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x10, &(0x7f0000000100)={0x0, 0xff00, 0x0}) 20:32:05 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000100)={0x10, 0xff00, 0x0}) 20:32:05 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x1000, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x10540, 0x0) ioctl$VIDIOC_S_JPEGCOMP(r0, 0x408c563e, &(0x7f0000000080)={0x3ff, 0xd, 0x6, "ead5fcd1cb3f88ae64c3f06a180e874aca5a9895399db384659568ab528215258649ceece36aff463e750bb130f93d476e6c4f2e8e5958dd2926910f", 0x5, "cab016995d90a4929527749496a48b47677a660b6d5dfc52a7f90cd32d81e93d424dcd60832b7be9b096ff8cb78428d017cd7af9e17c07543cfdaf2c", 0x20}) clone(0xa02a6500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 20:32:05 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000100)={0x11, 0xff00, 0x0}) 20:32:05 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x4c00, &(0x7f0000000100)={0x0, 0xff00, 0x0}) 20:32:05 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x8447, 0x0) preadv(r0, &(0x7f0000000800)=[{&(0x7f0000000000)=""/31, 0x70800}, {0x0, 0xd00}], 0x2, 0x0) 20:32:05 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000100)={0x11, 0xff00, 0x0}) 20:32:05 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioprio_set$pid(0x2, 0x0, 0x0) r0 = shmget(0x2, 0x3000, 0x1000, &(0x7f0000ffb000/0x3000)=nil) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = dup(r2) write$P9_RLOPEN(r3, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000000c0)={{{@in6=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@local}}, &(0x7f00000001c0)=0xe8) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r7 = accept4(r6, 0x0, 0x0, 0x0) dup(r7) r8 = dup(r7) r9 = accept4(r8, 0x0, 0x0, 0x0) dup(r9) fstat(r9, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) r12 = getgid() ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000300)=0x0) r14 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x25}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r14, 0x40042408, r15) r16 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={r16, r14, 0x0, 0x0, 0x0}, 0x30) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000340)={{0x200, r4, r10, r11, r12, 0x2, 0x6}, 0x9, 0x1, 0x6, 0x5, r13, r16, 0xfffa}) clone(0xa02a6500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r17 = socket$alg(0x26, 0x5, 0x0) bind$alg(r17, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x3ec) r18 = accept4(r17, 0x0, 0x0, 0x0) dup(r18) recvfrom$x25(r18, &(0x7f0000000080)=""/47, 0xfffffffffffffeba, 0x1, 0x0, 0xffffff98) 20:32:05 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000100)={0x12, 0xff00, 0x0}) 20:32:05 executing program 0: r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f00000001c0)=ANY=[@ANYRESHEX=0x0], 0x1, 0x0) msgsnd(r0, &(0x7f0000000480)=ANY=[@ANYRESHEX=0x0], 0x1, 0x0) msgrcv(r0, &(0x7f00000000c0)={0x0, ""/147}, 0x9b, 0x0, 0x0) msgrcv(r0, &(0x7f0000000080)={0x0, ""/74}, 0x52, 0x0, 0x0) msgctl$IPC_STAT(r0, 0x2, &(0x7f0000000000)=""/4096) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0xa02a6500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 20:32:05 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000100)={0x12, 0xff00, 0x0}) 20:32:05 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x4c01, &(0x7f0000000100)={0x0, 0xff00, 0x0}) [ 212.993213][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 212.999217][ C1] protocol 88fb is buggy, dev hsr_slave_1 20:32:05 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = dup(r1) write$P9_RLOPEN(r2, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xc, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, r2, 0x10000000) ioprio_set$pid(0x2, 0x0, 0x0) io_setup(0x3b24, &(0x7f0000000740)=0x0) io_submit(r3, 0x0, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = dup(r5) write$P9_RLOPEN(r6, 0x0, 0x0) r7 = syz_open_dev$amidi(&(0x7f00000002c0)='/dev/amidi#\x00', 0x1, 0x320803) io_submit(r3, 0x3, &(0x7f0000000480)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x6, 0x2, r0, &(0x7f0000000080)="66dfbd950b79872f3f6ffa9f296fe2b1a3b1425e5f6b3ba6367d1eb6a482ed8353231321f33ee9bec9791663853bb25d7b4d9339fe67915be9cec0e7d311843448283b88396582e69a8c50bec0ea7e1d05d585845249a4f16c4d1e2a139ab0d463c9ff3d202b4b93b5b60cf89ee6f99a1b6c827f38681b2b5a04a9d111d96ecbfaba70b950609b3da8d9e13ca0335dd0904570e35095ddcb73b4e859a71928c4bd5e6f790ee81b99035b6a8d961de8acfeb97d2a89705e07daf5a56164cdeea2dd989857ed94c143e6f6bd88916db45d47eb8d5205a426d71921bc734e40adfd469779a638ed405e", 0xe8, 0xf2, 0x0, 0x1}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0xd09bebadc15c5796, 0x6, r6, &(0x7f00000001c0)="3c469b95d7fa6b72905809a0d2f481ddb2ab47f4b1a2b0c16d1d68c30186a1322fc5123ca94795d6bad11c3c29ffc350fd888844e8507feb3d112aef9c08ad94c492d0bf844130bfe5b49d842b2c1eb0b2c00310bbf41d87b8eb23cea987367788395cfd8d4d8c23ceec84057b3b0a4e63ec47266a1dd0971354ce076f1fee4a3aec52626f60d32799c05f9d68b02e9bb0b32dc5cea1154a509d0420c77ff04ec6a7063a27c8479d73fd6232f19d5141e231b6aa0666761127cc9f0690b8e34dc1cbaa59c1f7510cfccad2f0c7c200fe564d8c3e60762b66204fe85ad722dd71bdddaf874477", 0xe6, 0xfffffffffffffff9, 0x0, 0x0, r7}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x6, 0x4, r1, &(0x7f0000000340)="03cc295292563d91fba19f8869c888f0502108a0e0dbde0d96ff864d6b2869f006a1d83cc5d08fd0419e7e42538781d5c065ae1dcb4aa014b90deab8c37719787fa3f6cde517bb61db7db98429e395edcb463aba21904b9a1ab3be7c74ebdd685fb58fed06cfa17c9f481cc927f31a87465aa5a8c220ceeed333bb4f8c062502e0c3218394cb8827147fa2dfeea1b7c4fadb4f0d6a95afbdc0b8b6e1ae72eaf01cbb91c9204e74378501c5a44a9e5c4632e0469f9f5d56874c665809de3542f12491ad6989a787f403429fb63ae11c0925f8f1b59c4eb9d3fc6fae8b770a5b", 0xdf, 0x0, 0x0, 0x2, r2}]) clone(0xa02a6500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 213.073221][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 213.073239][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 213.082794][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 213.088542][ C1] protocol 88fb is buggy, dev hsr_slave_1 20:32:06 executing program 0: clone(0xa02a6500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x8000) bind$tipc(r0, &(0x7f00000000c0)=@id={0x1e, 0x3, 0x1, {0x4e23, 0x1}}, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) syz_open_dev$adsp(&(0x7f0000000100)='/dev/adsp#\x00', 0x81, 0x0) r3 = dup(r2) write$P9_RLOPEN(r3, 0x0, 0x0) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) 20:32:06 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x8447, 0x0) preadv(r0, &(0x7f0000000800)=[{&(0x7f0000000000)=""/31, 0x70800}, {0x0, 0xe00}], 0x2, 0x0) 20:32:06 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000100)={0x25, 0xff00, 0x0}) 20:32:06 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000100)={0x25, 0xff00, 0x0}) 20:32:06 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x5421, &(0x7f0000000100)={0x0, 0xff00, 0x0}) 20:32:06 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x8447, 0x0) preadv(r0, &(0x7f0000000800)=[{&(0x7f0000000000)=""/31, 0x70800}, {0x0, 0x1100}], 0x2, 0x0) [ 213.313216][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 213.319027][ C0] protocol 88fb is buggy, dev hsr_slave_1 20:32:06 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = add_key$user(&(0x7f00000002c0)='us`\x99\x00', &(0x7f0000000300)={'\x00', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) keyctl$chown(0x4, r0, r1, 0x0) keyctl$describe(0x6, r0, &(0x7f0000000000)=""/106, 0x6a) 20:32:06 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioprio_set$pid(0x2, 0x0, 0x0) clone(0x106e6e00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 20:32:06 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000100)={0x5c, 0xff00, 0x0}) 20:32:06 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000100)={0x5c, 0xff00, 0x0}) 20:32:06 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$TIOCGICOUNT(r0, 0x545d, 0x0) clone(0xa02a6500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 20:32:06 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x5450, &(0x7f0000000100)={0x0, 0xff00, 0x0}) 20:32:06 executing program 4: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x34843100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioprio_set$pid(0x2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x9) clone(0xf5a51ebc1f22479c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 20:32:06 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x8447, 0x0) preadv(r0, &(0x7f0000000800)=[{&(0x7f0000000000)=""/31, 0x70800}, {0x0, 0x1200}], 0x2, 0x0) 20:32:06 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000100)={0x300, 0xff00, 0x0}) 20:32:06 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000100)={0x1a0, 0xff00, 0x0}) 20:32:06 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0xab02e100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 20:32:06 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x5451, &(0x7f0000000100)={0x0, 0xff00, 0x0}) 20:32:06 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x8447, 0x0) preadv(r0, &(0x7f0000000800)=[{&(0x7f0000000000)=""/31, 0x70800}, {0x0, 0x2500}], 0x2, 0x0) 20:32:06 executing program 4: perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioprio_set$pid(0x2, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000000)={0x4, 0x0, 0x4, 0x3, 0x7}) clone(0xa02a6500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 20:32:06 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000100)={0x500, 0xff00, 0x0}) 20:32:06 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000100)={0x300, 0xff00, 0x0}) 20:32:06 executing program 0: clone(0x500a100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0xa02a6500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = dup(r1) write$P9_RLOPEN(r2, 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) r5 = dup(r4) write$P9_RLOPEN(r5, 0x0, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r7 = accept4(r6, 0x0, 0x0, 0x0) r8 = dup(r7) write$P9_RLOPEN(r8, 0x0, 0x0) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net/ip_tables_targets\x00') ioctl$KVM_GET_PIT2(r9, 0x8070ae9f, &(0x7f0000000140)) 20:32:06 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x8447, 0x0) preadv(r0, &(0x7f0000000800)=[{&(0x7f0000000000)=""/31, 0x70800}, {0x0, 0x3000}], 0x2, 0x0) 20:32:06 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x5452, &(0x7f0000000100)={0x0, 0xff00, 0x0}) 20:32:07 executing program 4: perf_event_open(0x0, 0x0, 0x800000000000000, 0xffffffffffffffff, 0x0) clone(0x100c0000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioprio_set$pid(0x2, 0x0, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x96ee8392a46e915a, 0x0) ioctl$VIDIOC_S_JPEGCOMP(0xffffffffffffffff, 0x408c563e, &(0x7f0000000240)={0x15a, 0x1, 0x2b, "c6e918115089a5256784dc10a38a24f3e4a6c1fc958c3a1caaecdf25a1abea29bb9ed4d12e5e96c6ca90fa18b19a5e1236fdb6263bc91e8d044df0c3", 0x38, "6f1e2b78482818583361b5e54bbc41db9a25627422d5d501c4d7b9ea631e636f73a244e787aa36b89ee749bddb300b71841eec97b2df3c187ad2014a", 0xa8}) preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000040)=""/163, 0xa3}], 0x1, 0x0) clone(0xa02a6500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = creat(&(0x7f0000000140)='./file0\x00', 0x26) r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x41) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) creat(&(0x7f0000000380)='./file0\x00', 0x20) close(r3) setsockopt$l2tp_PPPOL2TP_SO_DEBUG(r1, 0x111, 0x1, 0x3, 0x4) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f00000003c0)={0x0, 0x200}, &(0x7f0000000400)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r2, 0x84, 0x23, &(0x7f0000000440)={r4, 0x7ff}, 0x8) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x0) r7 = dup(r6) write$P9_RLOPEN(r7, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r7, 0x40082404, &(0x7f0000000480)=0x984a000000000000) r8 = socket(0x40000000015, 0x5, 0x0) close(r8) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_crypto(0x10, 0x3, 0x15) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r9, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r9, &(0x7f0000d83fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r9, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r8, 0x84, 0x66, &(0x7f0000000000)={r10}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000140)={r10}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f00000001c0)={r10, 0x1}, &(0x7f0000000200)=0x8) ioctl$sock_bt_bnep_BNEPCONNADD(0xffffffffffffffff, 0x400442c8, &(0x7f0000000300)={r2, 0x37, 0x24, "a4219214b6a9b965c753b257b11b1d55bf6be443c4d7457cd877dc0bb2f5a39cca24096d7fab38738bd81ee86a99d1589b7edddad82e2ed892702d084b1ed2c9ec8c1429"}) 20:32:07 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x8447, 0x0) preadv(r0, &(0x7f0000000800)=[{&(0x7f0000000000)=""/31, 0x70800}, {0x0, 0x3f00}], 0x2, 0x0) 20:32:07 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000100)={0x500, 0xff00, 0x0}) 20:32:07 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000100)={0x600, 0xff00, 0x0}) 20:32:07 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r1 = dup(0xffffffffffffffff) write$P9_RLOPEN(r1, 0x0, 0x0) ioctl$TIOCSRS485(r1, 0x542f, &(0x7f0000000000)={0xc6c, 0x3, 0xdb}) write$P9_RWALK(0xffffffffffffffff, &(0x7f0000000080)={0x57, 0x6f, 0x2, {0x6, [{0x150, 0x0, 0x3}, {0x9, 0x4}, {0x34, 0x1, 0x7}, {0x8, 0x1, 0x8}, {0x108, 0x3}, {0x31, 0x1, 0x4}]}}, 0x57) ioctl$BLKSECTGET(r1, 0x1267, &(0x7f0000000100)) clone(0xa0a82500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 20:32:07 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x5460, &(0x7f0000000100)={0x0, 0xff00, 0x0}) 20:32:07 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x8447, 0x0) preadv(r0, &(0x7f0000000800)=[{&(0x7f0000000000)=""/31, 0x70800}, {0x0, 0x4000}], 0x2, 0x0) 20:32:07 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000100)={0x600, 0xff00, 0x0}) 20:32:07 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0xc6100100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioprio_set$pid(0x6, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) dup(r1) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4) clone(0xa02a6500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 20:32:07 executing program 0: gettid() 20:32:07 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x6364, &(0x7f0000000100)={0x0, 0xff00, 0x0}) 20:32:07 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000100)={0x700, 0xff00, 0x0}) [ 214.576939][T20631] IPVS: ftp: loaded support on port[0] = 21 20:32:07 executing program 0: clone(0xea047b00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = dup(r1) write$P9_RLOPEN(r2, 0x0, 0x0) ioctl$TIOCGICOUNT(r2, 0x545d, 0x0) clone(0xa82b6500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 20:32:07 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x8447, 0x0) preadv(r0, &(0x7f0000000800)=[{&(0x7f0000000000)=""/31, 0x70800}, {0x0, 0x72fff}], 0x2, 0x0) 20:32:07 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000100)={0x700, 0xff00, 0x0}) 20:32:07 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000100)={0x900, 0xff00, 0x0}) 20:32:07 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x8912, &(0x7f0000000100)={0x0, 0xff00, 0x0}) 20:32:07 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) unshare(0x24020400) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r1 = syz_open_procfs(0x0, &(0x7f0000000200)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') sendfile(r0, r1, 0x0, 0x1) rt_sigaction(0xe, &(0x7f0000000080)={&(0x7f0000000000)="c4e2ed03c6c441bc59ae02000000c4a1b1fbf7460f18c5c4417e1638c4037917220dc421c1f94dbcf3e3752e3df80780410f2c2a", {0x6}, 0x7, &(0x7f0000000040)="652ef0210bc402c93ae1441d7bfe0000c4e1c9ec95bc000000f3470f1eff0f1c886b010000440f6774a14a3e66460f3a63690000f20fb3ae8700000044d9eb"}, &(0x7f0000000140)={&(0x7f00000000c0)="c4e2a9050483670fae36c441ad75e20f38f6787c64f20f5835e8450000c4e17c51f9c461ef5c00660f90d4c421f9e226c4a1b9fc0a", {}, 0x0, &(0x7f0000000100)="c421fd116d00c463bd7e048f3ec4a275aa1bf30fbde8c4c37d09aad3902d6400c48279315284c46179d617c462a93e308fc96095e60f0f05feefffffa6"}, 0x8, &(0x7f0000000180)) clone(0xa02a6500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 20:32:07 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x8447, 0x0) preadv(r0, &(0x7f0000000800)=[{&(0x7f0000000000)=""/31, 0x70800}, {0x0, 0x13b000}], 0x2, 0x0) 20:32:07 executing program 4: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x22000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) fstatfs(r0, &(0x7f0000000000)=""/67) ioprio_set$pid(0x2, 0x0, 0x0) clone(0xa02a6500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 20:32:07 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000100)={0xa00, 0xff00, 0x0}) 20:32:07 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000100)={0x900, 0xff00, 0x0}) 20:32:07 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0xe10a4400, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 20:32:08 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x891c, &(0x7f0000000100)={0x0, 0xff00, 0x0}) 20:32:08 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000100)={0xb00, 0xff00, 0x0}) 20:32:08 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000100)={0xa00, 0xff00, 0x0}) 20:32:08 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x8447, 0x0) preadv(r0, &(0x7f0000000800)=[{&(0x7f0000000000)=""/31, 0x70800}, {0x0, 0x300000}], 0x2, 0x0) 20:32:08 executing program 4: perf_event_open(0x0, 0x0, 0xfeffffff7ffffff8, 0xffffffffffffffff, 0x8) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getrusage(0x0, &(0x7f0000000000)) ioprio_set$pid(0x2, 0x0, 0x0) clone(0xa02a6500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 20:32:08 executing program 0: clone(0x400, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = dup(r1) fcntl$setlease(r1, 0x400, 0x3) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, &(0x7f00000000c0)={0x8}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$nfc_llcp(r1, &(0x7f0000000440)={&(0x7f0000000140)={0x27, 0x0, 0x1, 0x1, 0x3f, 0x0, "75b5f7e418f0d63da17843d7b044600cddcc55fd60a214c164768dd11e68c78faad3eab0138e8726cf7bb84ce595bc5404d4fdc30bfc540db47a67745fcce4", 0x5}, 0x60, &(0x7f0000000300)=[{&(0x7f00000001c0)="99bfe3ba621f0f8d4fb22822cab8fcec2a069ee5d0efd1208e6bdb6a21935694332ddd2f4d62bb31070a963ab7b11fe03d8e4757af3624401fbd7bbb36a57c288521253e532ac35b319c23306fceffeac38670230999929b2c52a6d18619b68982eb42f06759cae180d96e272483ca749a0e3547b9f7e8b23583072e2b529a04ccf2472476278443bb21c3cdd2dea4e81cca7991c8fde40f89a718a1b534844542124ef709e773c67c", 0xa9}, {&(0x7f0000000280)="33b6491701048f874f6b2a722aeb747ac4f8a261a6be7437140e849ae48e5dcb3cee3faef236117220e64036c8b7faf9d82ff8066167580f395177b97bd95ec094a8288405f642e8", 0x48}], 0x2, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x100, 0x4008000}, 0x40044058) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x0) dup(r6) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r8 = accept4(r7, 0x0, 0x0, 0x0) r9 = dup(r8) write$P9_RLOPEN(r9, 0x0, 0x0) ioctl$VIDIOC_DBG_G_REGISTER(r9, 0xc0385650, &(0x7f0000000100)={{0x4, @name="e6664ebb99e3d3ed7223e83e38b4f89b318f7d18188cb7ec5cf0e2eddaa91163"}, 0x8, 0x2, 0xdf}) setsockopt$inet_sctp6_SCTP_NODELAY(r6, 0x84, 0x3, &(0x7f0000000080)=0xf3, 0x4) r10 = dup(r4) write$P9_RLOPEN(r10, 0x0, 0x0) ioctl$KVM_INTERRUPT(r10, 0x4004ae86, &(0x7f0000000000)=0xfffffffb) clone(0x11160000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 20:32:08 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x8933, &(0x7f0000000100)={0x0, 0xff00, 0x0}) 20:32:08 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000100)={0xc00, 0xff00, 0x0}) 20:32:08 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0xa02a6500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x3, 0x8000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = dup(r2) write$P9_RLOPEN(r3, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f0000000040)={0x0, @in6={{0xa, 0x4e20, 0x4, @local, 0x8000000}}, 0x3, 0xfff, 0x8, 0x5}, &(0x7f0000000100)=0x98) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000140)={r4, 0x5}, 0xc) 20:32:08 executing program 4: r0 = gettid() kcmp(r0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = dup(r2) write$P9_RLOPEN(r3, 0x0, 0x0) perf_event_open(0x0, r0, 0xf, r3, 0xa) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioprio_set$pid(0x0, 0x0, 0x0) clone(0xa02a6500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 20:32:08 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000100)={0xb00, 0xff00, 0x0}) 20:32:08 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000100)={0xd00, 0xff00, 0x0}) 20:32:08 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40044581, &(0x7f0000000100)={0x0, 0xff00, 0x0}) 20:32:08 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x8447, 0x0) preadv(r0, &(0x7f0000000800)=[{&(0x7f0000000000)=""/31, 0x70800}, {0x0, 0xb01300}], 0x2, 0x0) 20:32:08 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0xa12a7500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r1 = dup(0xffffffffffffffff) write$P9_RLOPEN(r1, 0x0, 0x0) ioctl$KVM_GET_FPU(r1, 0x81a0ae8c, &(0x7f0000000000)) 20:32:08 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000100)={0xc00, 0xff00, 0x0}) 20:32:08 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000100)={0xe00, 0xff00, 0x0}) 20:32:08 executing program 4: fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000080)) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = dup(r1) write$P9_RLOPEN(r2, 0x0, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x8000000000000d, r2, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioprio_set$pid(0x2, 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) r5 = dup(r4) write$P9_RLOPEN(r5, 0x0, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r7 = accept4(r6, 0x0, 0x0, 0x0) r8 = dup(r7) write$P9_RLOPEN(r8, 0x0, 0x0) ioctl$KVM_SET_XCRS(r8, 0x4188aea7, &(0x7f00000000c0)={0xa, 0x66, [{0xc, 0x0, 0x101}, {0xd1}, {0x1ff, 0x0, 0xffffffff}, {0x0, 0x0, 0x1}, {}, {0x8}, {0x8, 0x0, 0x1f}, {0x6d, 0x0, 0x2}, {0x7, 0x0, 0x2}, {0x9, 0x0, 0x8}]}) ioctl$BLKROTATIONAL(r5, 0x127e, &(0x7f0000000000)) clone(0xa02a6500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 20:32:08 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40044590, &(0x7f0000000100)={0x0, 0xff00, 0x0}) 20:32:08 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x8447, 0x0) preadv(r0, &(0x7f0000000800)=[{&(0x7f0000000000)=""/31, 0x70800}, {0x0, 0xe8f87f}], 0x2, 0x0) 20:32:08 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) epoll_create(0x5) ioctl$VIDIOC_ENUMAUDOUT(0xffffffffffffffff, 0xc0345642, &(0x7f0000000000)={0xffffffe1, "670783ef54ad2e33b3dab150f8c6f3a0d151712a9fb034cec4a66dd146d874d5", 0x3, 0x1}) clone(0xa02a6500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 20:32:08 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000100)={0xd00, 0xff00, 0x0}) 20:32:09 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000100)={0x1100, 0xff00, 0x0}) 20:32:09 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioprio_set$pid(0x2, 0x0, 0x0) clone(0xa02a6500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x8, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x7fff, @remote, 0x1}, @in6={0xa, 0x4e20, 0x1f, @rand_addr="1da41abb8f9c9715a61bf4dfbee9a75b", 0x400}, @in={0x2, 0x4e20, @remote}], 0x48) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x25}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={r3, r1, 0x0, 0x0, 0x0}, 0x30) r4 = getpgid(r3) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x0) r7 = dup(r6) write$P9_RLOPEN(r7, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x0, 0x70, 0x1, 0x5, 0x40, 0x8, 0x0, 0x4, 0x20000, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x9, 0x0, @perf_config_ext={0x101, 0x5}, 0xfaf3ba0ac87ae236, 0x4, 0x0, 0x6, 0xfffffffffffffffb, 0x4}, r4, 0xc, r7, 0x2) 20:32:09 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x8447, 0x0) preadv(r0, &(0x7f0000000800)=[{&(0x7f0000000000)=""/31, 0x70800}, {0x0, 0x1000000}], 0x2, 0x0) 20:32:09 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40044591, &(0x7f0000000100)={0x0, 0xff00, 0x0}) 20:32:09 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000100)={0xe00, 0xff00, 0x0}) 20:32:09 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x404c9400, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='overlay\x00', 0x10002, &(0x7f0000000080)={[{@xino_auto='xino=auto'}], [{@fsname={'fsname', 0x3d, 'systemvboxnet1'}}]}) membarrier(0x10, 0x0) 20:32:09 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000100)={0x1200, 0xff00, 0x0}) 20:32:09 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 20:32:09 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x400445a0, &(0x7f0000000100)={0x0, 0xff00, 0x0}) 20:32:09 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioprio_set$pid(0x2, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x25}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = open(&(0x7f0000000100)='./file0\x00', 0x403, 0x62) accept$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000300)=0x14) connect$can_bcm(r2, &(0x7f0000000340)={0x1d, r3}, 0x10) r4 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={r4, r0, 0x0, 0x0, 0x0}, 0x30) syz_open_procfs(r4, &(0x7f0000000000)='net/rt6_stats\x00') clone(0xa02a6500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 20:32:09 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000100)={0x1100, 0xff00, 0x0}) 20:32:09 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x8447, 0x0) preadv(r0, &(0x7f0000000800)=[{&(0x7f0000000000)=""/31, 0x70800}, {0x0, 0x2000000}], 0x2, 0x0) 20:32:09 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000100)={0x2000, 0xff00, 0x0}) 20:32:09 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)=[&(0x7f0000000040)='\x8cGPL\x00', &(0x7f0000000080)=',+-\x00', &(0x7f00000000c0)='\x00'], &(0x7f0000000200)=[&(0x7f0000000140)='&&\x00', &(0x7f0000000180)='\x00', &(0x7f00000001c0)='@*[GPLmime_type\x00']) clone(0xa02a6500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 20:32:09 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x400454ca, &(0x7f0000000100)={0x0, 0xff00, 0x0}) 20:32:09 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioprio_set$pid(0x2, 0x0, 0x0) clone(0xa02a6500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 20:32:09 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x8447, 0x0) preadv(r0, &(0x7f0000000800)=[{&(0x7f0000000000)=""/31, 0x70800}, {0x0, 0x3000000}], 0x2, 0x0) 20:32:09 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000100)={0x2500, 0xff00, 0x0}) 20:32:09 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000100)={0x1200, 0xff00, 0x0}) 20:32:09 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0xa02a6500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) write$capi20_data(r0, &(0x7f0000000040)={{0x10, 0x3, 0x1ab0679ec2972986, 0x83, 0x2, 0x5}, 0x29, "dfb826de7606682a870241c8b8c9c8c1cf0770ac8da1cb99987c08850eb4608ee6f133a14db5ccc05a"}, 0x3b) 20:32:09 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x400454d1, &(0x7f0000000100)={0x0, 0xff00, 0x0}) 20:32:09 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x8447, 0x0) preadv(r0, &(0x7f0000000800)=[{&(0x7f0000000000)=""/31, 0x70800}, {0x0, 0x4000000}], 0x2, 0x0) 20:32:10 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000100)={0x4000, 0xff00, 0x0}) 20:32:10 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000100)={0x2000, 0xff00, 0x0}) 20:32:10 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40049409, &(0x7f0000000100)={0x0, 0xff00, 0x0}) 20:32:10 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x8447, 0x0) preadv(r0, &(0x7f0000000800)=[{&(0x7f0000000000)=""/31, 0x70800}, {0x0, 0x5000000}], 0x2, 0x0) 20:32:10 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xc0, r0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0xac, 0x4, [@TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x73}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x180e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd5c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}]}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x80}, 0x40000) clone(0xa02a6500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 20:32:10 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioprio_set$pid(0x2, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = dup(r1) write$P9_RLOPEN(r2, 0x0, 0x0) ioctl$TIOCSIG(r2, 0x40045436, 0x34) clone(0xa02a6500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 20:32:10 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000100)={0x2500, 0xff00, 0x0}) 20:32:10 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000100)={0x5100, 0xff00, 0x0}) [ 217.473200][ C0] net_ratelimit: 21 callbacks suppressed [ 217.473207][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 217.484718][ C0] protocol 88fb is buggy, dev hsr_slave_1 20:32:10 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = dup(r2) write$P9_RLOPEN(r3, 0x0, 0x0) ioctl$TCSBRKP(r3, 0x5425, 0x2) getsockopt$inet_buf(r0, 0x0, 0x2c, &(0x7f0000000000)=""/241, &(0x7f0000000100)=0xf1) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioprio_set$pid(0x2, 0x0, 0x0) clone(0xa02a6500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 20:32:10 executing program 0: clone(0x38901000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x60a587aaf1c8a81c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0xffff, 0x40000) ioctl$VIDIOC_S_FREQUENCY(r0, 0x402c5639, &(0x7f0000000040)={0x80000001, 0x1, 0x1000}) 20:32:10 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40084503, &(0x7f0000000100)={0x0, 0xff00, 0x0}) 20:32:10 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000100)={0x4000, 0xff00, 0x0}) 20:32:10 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x8447, 0x0) preadv(r0, &(0x7f0000000800)=[{&(0x7f0000000000)=""/31, 0x70800}, {0x0, 0x6000000}], 0x2, 0x0) 20:32:10 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000100)={0x5c00, 0xff00, 0x0}) 20:32:10 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioprio_set$pid(0x2, 0x0, 0x0) clone(0xa02a6500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = dup(r1) write$P9_RLOPEN(r2, 0x0, 0x0) read$FUSE(r2, &(0x7f0000000000), 0x1000) 20:32:10 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0xa02a6500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) dup(r1) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) dup(r3) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) dup(r5) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r7 = accept4(r6, 0x0, 0x0, 0x0) dup(r7) r8 = dup(r7) ioctl$KDMKTONE(r8, 0x4b30, 0x248c1cf7) 20:32:10 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40084504, &(0x7f0000000100)={0x0, 0xff00, 0x0}) 20:32:10 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000100)={0x60ff, 0xff00, 0x0}) [ 217.953244][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 217.959064][ C0] protocol 88fb is buggy, dev hsr_slave_1 20:32:10 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000100)={0x5100, 0xff00, 0x0}) 20:32:10 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x8447, 0x0) preadv(r0, &(0x7f0000000800)=[{&(0x7f0000000000)=""/31, 0x70800}, {0x0, 0x7000000}], 0x2, 0x0) 20:32:10 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x1ff, 0x511080) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000100)=r1, 0x4) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/backup_only\x00', 0x2, 0x0) ioctl$BLKFRASET(r2, 0x1264, &(0x7f0000000040)=0x10000) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioprio_set$pid(0x2, 0x0, 0x0) ioctl$DRM_IOCTL_AUTH_MAGIC(0xffffffffffffffff, 0x40046411, &(0x7f0000000080)=0x5) clone(0xa02a6500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 20:32:10 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = dup(r1) write$P9_RLOPEN(r2, 0x0, 0x0) r3 = accept4$bt_l2cap(r2, 0x0, &(0x7f0000000000), 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000000040)=0x9, &(0x7f0000000080)=0x4) clone(0x80a100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0xa02a6500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 20:32:11 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000100)={0x7600, 0xff00, 0x0}) 20:32:11 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000100)={0x0, 0xff00, 0x0}) 20:32:11 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x8447, 0x0) preadv(r0, &(0x7f0000000800)=[{&(0x7f0000000000)=""/31, 0x70800}, {0x0, 0x8000000}], 0x2, 0x0) 20:32:11 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000100)={0x9600, 0xff00, 0x0}) 20:32:11 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000100)={0x5c00, 0xff00, 0x0}) 20:32:11 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x20012000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioprio_set$pid(0x2, 0x0, 0x0) clone(0xa02a6500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 20:32:11 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x8447, 0x0) preadv(r0, &(0x7f0000000800)=[{&(0x7f0000000000)=""/31, 0x70800}, {0x0, 0x9000000}], 0x2, 0x0) 20:32:11 executing program 0: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x800, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x800004, 0x12, 0xffffffffffffffff, 0x70f4f000) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(r1, &(0x7f0000000640)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="440400002800070500"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff000000000800010063627100180402000404060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000004000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a193ec32adcd00000000000000000000000000000000000000000000000000ffe800000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000204ea72b265cd683000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002e3c000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4ff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100005000500000000006198cc6884bdedaea3074cf77f"], 0x444}}, 0x0) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000000040)={@mcast1, r3}, 0x14) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0xa02a6500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 20:32:11 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x4020940d, &(0x7f0000000100)={0x0, 0xff00, 0x0}) 20:32:11 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioprio_set$pid(0x2, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = dup(r1) write$P9_RLOPEN(r2, 0x0, 0x0) ioctl$TUNSETTXFILTER(r2, 0x400454d1, &(0x7f0000000000)={0x1, 0x1, [@broadcast]}) clone(0xa02a6500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 218.593259][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 218.599087][ C0] protocol 88fb is buggy, dev hsr_slave_1 20:32:11 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000100)={0x60ff, 0xff00, 0x0}) 20:32:11 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000100)={0x400000, 0xff00, 0x0}) 20:32:11 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) eventfd2(0x0, 0x1000) clone(0xa02a6500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 20:32:11 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40284504, &(0x7f0000000100)={0x0, 0xff00, 0x0}) 20:32:11 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x8447, 0x0) preadv(r0, &(0x7f0000000800)=[{&(0x7f0000000000)=""/31, 0x70800}, {0x0, 0xa000000}], 0x2, 0x0) 20:32:11 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioprio_set$pid(0x2, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = dup(r1) write$P9_RLOPEN(r2, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS(r2, 0x80605414, &(0x7f0000000000)=""/168) clone(0xa02a6500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 20:32:11 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000100)={0x510000, 0xff00, 0x0}) 20:32:11 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000100)={0x7600, 0xff00, 0x0}) 20:32:11 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = dup(r1) accept$inet6(0xffffffffffffffff, 0x0, &(0x7f00000001c0)) read(r1, &(0x7f0000000200)=""/150, 0xfffffffffffffe58) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) r5 = dup(r4) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r7 = accept4(r6, 0x0, 0x0, 0x0) dup(r7) sendfile(r7, r5, 0x0, 0x80000001) write$P9_RLOPEN(r5, 0x0, 0x0) ioctl$BLKRESETZONE(r5, 0x40101283, &(0x7f0000000180)={0x5, 0x5}) write$P9_RLOPEN(r2, 0x0, 0x0) accept4$nfc_llcp(r2, &(0x7f0000000000), &(0x7f0000000080)=0x60, 0x80000) clone(0x80c700, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0xa02a6500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 20:32:11 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x8447, 0x0) preadv(r0, &(0x7f0000000800)=[{&(0x7f0000000000)=""/31, 0x70800}, {0x0, 0xb000000}], 0x2, 0x0) 20:32:11 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x80044501, &(0x7f0000000100)={0x0, 0xff00, 0x0}) 20:32:12 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000100)={0x9600, 0xff00, 0x0}) 20:32:12 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$IOC_PR_PREEMPT(r0, 0x401870cb, &(0x7f0000000040)={0x3b4, 0x6d8, 0x5, 0xfffffffe}) ioprio_set$pid(0x2, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = dup(r2) write$P9_RLOPEN(r3, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r3, 0xc06864a2, &(0x7f00000000c0)={&(0x7f0000000080)=[0x8000, 0x0, 0x65], 0x3, 0x40, 0x457, 0xf3, 0x324, 0x0, {0x3, 0xfb, 0x190, 0x7, 0x8000, 0x4, 0xa2, 0x1, 0xc000, 0x4, 0x1, 0x6, 0x2, 0x1, "9985514e1405fca7acf2dbb230746090d768e537195c728e2af30dbc8efda927"}}) clone(0xa02a6500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 20:32:12 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000100)={0x70f000, 0xff00, 0x0}) 20:32:12 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0xa02a6500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x36f1eaef1b1134fe, 0x3dd5fac4dadd97f0) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x8) [ 219.233223][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 219.239119][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 219.313208][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 219.313275][ C0] protocol 88fb is buggy, dev hsr_slave_0 20:32:12 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x80044584, &(0x7f0000000100)={0x0, 0xff00, 0x0}) 20:32:12 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x8447, 0x0) preadv(r0, &(0x7f0000000800)=[{&(0x7f0000000000)=""/31, 0x70800}, {0x0, 0xc000000}], 0x2, 0x0) 20:32:12 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000100)={0x400000, 0xff00, 0x0}) 20:32:12 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x2000, 0x0) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f00000000c0)='./file0\x00', r3, 0x0) ioctl$SIOCAX25ADDUID(r1, 0x89e1, &(0x7f00000000c0)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, r3}) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r4 = accept4(r0, 0x0, 0x0, 0x0) r5 = dup(r4) write$P9_RLOPEN(r5, 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r5, 0xc010640c, &(0x7f0000000000)={0x7, 0x8}) ioprio_set$pid(0x2, 0x0, 0x0) clone(0xa02a6500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 20:32:12 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000100)={0x718000, 0xff00, 0x0}) 20:32:12 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) fchmodat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x2) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = dup(r2) write$P9_RLOPEN(r3, 0x0, 0x0) bind$alg(r3, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0xfe23) r4 = accept4(r0, 0x0, 0x0, 0x0) r5 = dup(r4) write$P9_RLOPEN(r5, 0x0, 0x0) ioctl$PPPIOCSMRU1(r5, 0x40047452, &(0x7f0000000040)=0xbc) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x8000, 0x0) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) ioctl$TCSBRKP(r0, 0x5425, 0xfffffffffffffffa) clone(0xa02a6500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 20:32:12 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x8447, 0x0) preadv(r0, &(0x7f0000000800)=[{&(0x7f0000000000)=""/31, 0x70800}, {0x0, 0xd000000}], 0x2, 0x0) 20:32:12 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x800454d2, &(0x7f0000000100)={0x0, 0xff00, 0x0}) [ 219.637694][T24577] Unknown ioctl 35297 20:32:12 executing program 0: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/pfkey\x00', 0x628840, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000001400)={0x401, 0xaa0e, 0x208, 0x8001, 0x2, 0x1, 0x7, 0x1f, 0x0}, &(0x7f0000001440)=0x20) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) r4 = dup(r3) write$P9_RLOPEN(r4, 0x0, 0x0) openat$cgroup(r4, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000001480)={r1, 0x1}, &(0x7f00000014c0)=0x8) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha1\x00'}, 0x58) clone(0xa02a6500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 20:32:12 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000100)={0x510000, 0xff00, 0x0}) 20:32:12 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000100)={0x760000, 0xff00, 0x0}) 20:32:12 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioprio_set$pid(0x2, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = dup(r1) write$P9_RLOPEN(r2, 0x0, 0x0) write$P9_RREADDIR(r2, &(0x7f0000000000)={0x2a, 0x29, 0x2, {0xf75, [{{0x40, 0x1, 0x7}, 0x4, 0xff, 0x7, './file0'}]}}, 0x2a) clone(0xa02a6500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 20:32:12 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x80084502, &(0x7f0000000100)={0x0, 0xff00, 0x0}) 20:32:12 executing program 0: clone(0x995237637c57c8fb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x40000, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000040)=0xffff, 0x8) clone(0xa02a6500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 20:32:12 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x8447, 0x0) preadv(r0, &(0x7f0000000800)=[{&(0x7f0000000000)=""/31, 0x70800}, {0x0, 0xe000000}], 0x2, 0x0) 20:32:12 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000100)={0x807100, 0xff00, 0x0}) 20:32:12 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000100)={0x70f000, 0xff00, 0x0}) 20:32:13 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x80084503, &(0x7f0000000100)={0x0, 0xff00, 0x0}) 20:32:13 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='hfsplus\x00=\x94\xfa\xe2\xf2\x95i*\xf2k\x8bk\xf0#\xd7\xc0\xab@\xf6\xf2\x8f\nf0x0, @in={{0x2, 0x4e22, @rand_addr=0x80000000}}, 0xff, 0x0, 0x9, 0xff, 0x80}, &(0x7f0000000100)=0x98) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000140)={r7}, 0x8) lseek(r0, 0x0, 0x4) r8 = gettid() kcmp(r8, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) sched_setscheduler(r8, 0x0, &(0x7f0000000000)=0x6) 20:32:13 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000100)={0x960000, 0xff00, 0x0}) 20:32:13 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000100)={0x718000, 0xff00, 0x0}) 20:32:13 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioprio_set$pid(0x2, 0x0, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x2000, 0x0) ioctl$EVIOCGSND(r0, 0x8040451a, &(0x7f0000000040)=""/132) clone(0xa02a6500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 20:32:13 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0xa02a6500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x6, &(0x7f0000000000)='bdev&\x00'}, 0x30) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2040, 0x0) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req={0x1, 0xfffffffb, 0x8, 0x6}, 0x10) write$P9_RMKDIR(r1, &(0x7f0000000100)={0x14, 0x49, 0x2, {0x0, 0x3}}, 0x14) ptrace(0xffffffffffffffff, r0) 20:32:13 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x8447, 0x0) preadv(r0, &(0x7f0000000800)=[{&(0x7f0000000000)=""/31, 0x70800}, {0x0, 0x10000000}], 0x2, 0x0) 20:32:13 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x80084504, &(0x7f0000000100)={0x0, 0xff00, 0x0}) 20:32:13 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000100)={0xf07000, 0xff00, 0x0}) 20:32:13 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x8447, 0x0) preadv(r0, &(0x7f0000000800)=[{&(0x7f0000000000)=""/31, 0x70800}, {0x0, 0x11000000}], 0x2, 0x0) 20:32:13 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000100)={0x760000, 0xff00, 0x0}) 20:32:13 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000000)={0x9, 0x1e, 0xf, 0x1b, 0x0, 0xde, 0x3, 0x27, 0xffffffffffffffff}) clone(0xa02a6500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 20:32:13 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioprio_set$pid(0x2, 0x0, 0x0) clone(0xa02a6500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 20:32:13 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x8447, 0x0) preadv(r0, &(0x7f0000000800)=[{&(0x7f0000000000)=""/31, 0x70800}, {0x0, 0x12000000}], 0x2, 0x0) 20:32:13 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x80086301, &(0x7f0000000100)={0x0, 0xff00, 0x0}) 20:32:13 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000100)={0x1000000, 0xff00, 0x0}) 20:32:13 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000100)={0x807100, 0xff00, 0x0}) 20:32:13 executing program 0: clone(0x62312165040ac226, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0xa02a6500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 20:32:13 executing program 4: r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x2, r0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioprio_set$pid(0x2, 0x0, 0x0) clone(0xa02a6500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = dup(r2) write$P9_RLOPEN(r3, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) r5 = socket(0x40000000015, 0x5, 0x0) close(r5) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r6, &(0x7f0000d83fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x66, &(0x7f0000000000)={r7}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000140)={r7}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r3, 0x84, 0x78, &(0x7f0000000000)=r7, 0x4) 20:32:13 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x80284504, &(0x7f0000000100)={0x0, 0xff00, 0x0}) 20:32:13 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000100)={0x2000000, 0xff00, 0x0}) 20:32:13 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x8000, 0x0) accept4$llc(r0, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000080)=0x10, 0x0) clone(0xc881fa00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 20:32:13 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioprio_set$pid(0x2, 0x0, 0x0) clone(0xa02a6500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x8) ioctl$EVIOCSABS2F(r0, 0x401845ef, &(0x7f0000000040)={0x0, 0x7f, 0x1, 0x9, 0xff, 0x4}) 20:32:13 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000100)={0x960000, 0xff00, 0x0}) 20:32:13 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x8447, 0x0) preadv(r0, &(0x7f0000000800)=[{&(0x7f0000000000)=""/31, 0x70800}, {0x0, 0x25000000}], 0x2, 0x0) 20:32:13 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000100)={0x3000000, 0xff00, 0x0}) 20:32:14 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0xc0045878, &(0x7f0000000100)={0x0, 0xff00, 0x0}) 20:32:14 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SG_GET_RESERVED_SIZE(r1, 0x2272, &(0x7f0000000040)) clone(0x4048400, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) statfs(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=""/4) ioctl$UI_END_FF_ERASE(r0, 0x400c55cb, &(0x7f0000000100)={0xd, 0x80, 0x7ff}) 20:32:14 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000100)={0xf07000, 0xff00, 0x0}) 20:32:14 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000100)={0x4000000, 0xff00, 0x0}) 20:32:14 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0xc0045878, &(0x7f0000000100)={0x0, 0xff00, 0x0}) 20:32:14 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x700, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = dup(r2) write$P9_RLOPEN(r3, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r3, 0x408c5333, &(0x7f0000000280)={0x101, 0xf88a, 0xfffffff7, 'queue1\x00'}) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r4 = accept4(r0, 0x0, 0x0, 0x0) r5 = dup(r4) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r7 = accept4(r6, 0x0, 0x0, 0x0) r8 = dup(r7) write$P9_RLOPEN(r8, 0x0, 0x0) write$P9_RLOPEN(r8, 0x0, 0xfffffffffffffdf2) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'bond0\x00', 0x10}) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r10 = accept4(r9, 0x0, 0x0, 0x0) r11 = dup(r10) write$P9_RLOPEN(r11, 0x0, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r11, &(0x7f0000000340)={0xa, 0x4}, 0xc) clone(0xa02a6500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r12 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/cache_bypass\x00', 0x2, 0x0) bind$alg(r12, &(0x7f0000000200)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-generic\x00'}, 0x58) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) rt_sigtimedwait(&(0x7f0000000380), &(0x7f00000000c0), &(0x7f0000000180)={r13, r14+10000000}, 0x8) 20:32:14 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0xa02a6500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0xffffffe7, 0x0, 0x0, 0x70bd27, 0xa5dfdbfe, {}, [@SEG6_ATTR_SECRET={0xc, 0x4, [0xffffff80, 0x101]}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0xfb408b0a9c34b698) 20:32:14 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x8447, 0x0) preadv(r0, &(0x7f0000000800)=[{&(0x7f0000000000)=""/31, 0x70800}, {0x0, 0x3f000000}], 0x2, 0x0) 20:32:14 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000100)={0x1000000, 0xff00, 0x0}) 20:32:14 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000100)={0x5000000, 0xff00, 0x0}) 20:32:14 executing program 0: clone(0x25120000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0xa02a6500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 20:32:14 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0xc0189436, &(0x7f0000000100)={0x0, 0xff00, 0x0}) 20:32:14 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000100)={0x2000000, 0xff00, 0x0}) 20:32:14 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x10000, 0x0) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000000040)) 20:32:14 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x8447, 0x0) preadv(r0, &(0x7f0000000800)=[{&(0x7f0000000000)=""/31, 0x70800}, {0x0, 0x40000000}], 0x2, 0x0) 20:32:14 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000100)={0x6000000, 0xff00, 0x0}) 20:32:14 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0xc020660b, &(0x7f0000000100)={0x0, 0xff00, 0x0}) 20:32:15 executing program 4: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x6000, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = dup(r2) write$P9_RLOPEN(r3, 0x0, 0x0) ioctl$KDSKBSENT(r3, 0x4b49, &(0x7f0000000040)="82f285f6d0d764ac44571f1b9ccd10d7e7d092ac0b20905def00c1edc5f1b1efcbe5f0b57141cb") perf_event_open(0x0, 0x0, 0x0, r0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioprio_set$pid(0x2, 0x0, 0x0) clone(0xa02a6500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 20:32:15 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000100)={0x3000000, 0xff00, 0x0}) 20:32:15 executing program 0: clone(0x80b48000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$isdn_base(0x22, 0x3, 0x0) clone(0xa02a6500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 20:32:15 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x80104592, &(0x7f0000000100)={0x0, 0xff00, 0x0}) 20:32:15 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x8447, 0x0) preadv(r0, &(0x7f0000000800)=[{&(0x7f0000000000)=""/31, 0x70800}, {0x0, 0x7ff8e800}], 0x2, 0x0) 20:32:15 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000100)={0x7000000, 0xff00, 0x0}) 20:32:15 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x8447, 0x0) preadv(r0, &(0x7f0000000800)=[{&(0x7f0000000000)=""/31, 0x70800}, {0x0, 0xa0010000}], 0x2, 0x0) 20:32:15 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = semget(0x1, 0x4, 0x620) getresuid(&(0x7f00000000c0), &(0x7f0000000100)=0x0, &(0x7f0000000140)) getresgid(&(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)=0x0) r3 = geteuid() lstat(&(0x7f00000000c0)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r4) getgroups(0x6, &(0x7f0000000240)=[0xffffffffffffffff, 0xee01, r4, 0x0, 0xee00, 0xee00]) semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f0000000280)={{0xf8, r1, r2, r3, r5, 0x10b, 0x6}, 0x505b, 0x4, 0x200}) clone(0xa02a6500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x2000, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r6, 0x29, 0xd3, &(0x7f0000000040)={{0xa, 0x4e24, 0x4, @empty, 0x5a0}, {0xa, 0x4e22, 0x9, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x9}, 0x2, [0xfc, 0x958, 0x8000, 0x68c9, 0x2, 0x100, 0x7fffffff, 0x7fff]}, 0x5c) 20:32:15 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioprio_set$pid(0x3, 0x0, 0x4) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'essiv(aegis256-aesni,ghash-generic)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) dup(r1) r2 = socket$alg(0x26, 0x5, 0x0) r3 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x0, 0x2) bind$alg(r3, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(sha224-avx2,cbc(blowfish))\x00'}, 0x174) r4 = accept4(r2, 0x0, 0x0, 0x0) dup(r4) r5 = fcntl$dupfd(r1, 0x406, r4) ioctl$SCSI_IOCTL_DOORLOCK(r5, 0x5380) clone(0xa02a6500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r7 = accept4(r6, 0x0, 0x0, 0x0) r8 = dup(r7) write$P9_RLOPEN(r8, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r8, 0x5, 0x0, 0x0) 20:32:15 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x80104592, &(0x7f0000000100)={0x2, 0xff00, 0x0}) 20:32:15 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000100)={0x4000000, 0xff00, 0x0}) 20:32:15 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x8447, 0x0) preadv(r0, &(0x7f0000000800)=[{&(0x7f0000000000)=""/31, 0x70800}, {0x0, 0xff2f0700}], 0x2, 0x0) 20:32:15 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000100)={0x8000000, 0xff00, 0x0}) 20:32:15 executing program 0: clone(0xb28d5000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x300, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = dup(r2) write$P9_RLOPEN(r3, 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r3, 0x541b, &(0x7f0000000040)) write$uinput_user_dev(r3, &(0x7f0000000080)={'syz1\x00', {0xea, 0x1ff, 0x2, 0x1}, 0x52, [0x10001, 0x1, 0x7, 0x3ff, 0x2, 0x27f, 0xfffff0b0, 0x1ff, 0x4, 0xc91, 0x6, 0x5, 0x3, 0x8, 0x2, 0x12a3, 0x7, 0x6, 0xfae, 0x0, 0x3, 0x3, 0x1, 0x9, 0x0, 0xf80, 0x80, 0x2, 0x9, 0x0, 0x7, 0x200, 0x9, 0x40, 0x5, 0x6, 0x1000, 0x9, 0x7, 0xfffffff7, 0x80000001, 0x1, 0xffff3463, 0x800, 0x3, 0x68, 0x5, 0x8001, 0x7fff, 0x9, 0x0, 0x200, 0x0, 0xfffffff9, 0x722, 0x7, 0x1, 0xfffffd7b, 0x7, 0x1ff, 0x101, 0x5, 0x2, 0xa12], [0xfe8, 0x2, 0xa6, 0x32d6, 0x200, 0x1ff, 0x2, 0x4, 0x8, 0x83c5, 0x7, 0x8, 0xfffffff9, 0x10000, 0x7fff, 0x0, 0x8001, 0xfffffff9, 0x4, 0x2, 0x2, 0x7fff, 0x1, 0x9, 0x2, 0x2, 0x9, 0x2, 0x53b8, 0x7fffffff, 0x5, 0x5, 0x64, 0x7, 0x4, 0x0, 0x9, 0x7, 0x7, 0x8, 0x1, 0x7fff, 0x0, 0xfffffffb, 0x4, 0x401, 0x3, 0x5, 0x6, 0xffff, 0x1, 0x68, 0x6800, 0x8, 0x3ff, 0x0, 0x1ff, 0xffffffff, 0xffffb262, 0x2a, 0x401, 0x2, 0x3bc, 0x1], [0x401, 0x9, 0x1ff, 0x2, 0x3, 0x3f, 0x7, 0x3517, 0x81, 0xe0c5, 0x6, 0x7fffffff, 0x4, 0xc46, 0x1, 0x4, 0xa2, 0xe69, 0x6, 0xb9cc, 0x1, 0x1, 0x8, 0x1, 0x0, 0x6, 0x3, 0x1, 0x101, 0x0, 0x9, 0xff, 0x2b25, 0x1, 0x100, 0x0, 0xffffffff, 0x1000, 0x3, 0x2000, 0x752, 0xbf, 0x6, 0x4, 0x2, 0x2, 0x8, 0x8, 0x4000000, 0x1f, 0x10001, 0x9, 0x3, 0x5, 0x7ff, 0xb5e7, 0x7fffffff, 0x1, 0x7, 0x3, 0xfffff800, 0xfffff853, 0xffffffff], [0x5, 0x0, 0x8001, 0x1000, 0xfff, 0xb8d9, 0xfff, 0x100, 0x208, 0xffff516d, 0x3ff, 0x9, 0x3, 0x200, 0x9c, 0x200, 0x4, 0x400, 0x3, 0xc16, 0xffffffff, 0x9, 0xffff8001, 0x3, 0x1000, 0x2, 0x4, 0x8, 0xfffffff8, 0x3, 0x4, 0x9, 0x800, 0x5, 0x81, 0x6, 0x25d8e9f9, 0xe9, 0x7fff, 0x20, 0xffff, 0x7fff, 0xb5000000, 0x7, 0x200, 0xffff, 0x6, 0x3, 0x5, 0x14, 0x3, 0x0, 0x0, 0xfff, 0x5, 0xb9300000, 0xff, 0x8000, 0x7fffffff, 0x9, 0x39, 0x7fffffff, 0x7, 0x3]}, 0x45c) clone(0xa02a6500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 20:32:15 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x80104592, &(0x7f0000000100)={0x3, 0xff00, 0x0}) 20:32:15 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = dup(r1) write$P9_RLOPEN(r2, 0x0, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000000)) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioprio_set$pid(0x2, 0x0, 0x0) clone(0xa02a6500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) dup(r4) getsockopt$inet6_int(r4, 0x29, 0x21, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 20:32:15 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000100)={0x5000000, 0xff00, 0x0}) [ 222.753710][ C0] net_ratelimit: 18 callbacks suppressed [ 222.753717][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 222.766113][ C0] protocol 88fb is buggy, dev hsr_slave_1 20:32:15 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) dup(r1) ioctl$sock_inet_SIOCGIFBRDADDR(r1, 0x8919, &(0x7f0000000000)={'\a\x00ql2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a', {0x2, 0x4e20, @remote}}) 20:32:15 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000100)={0x9000000, 0xff00, 0x0}) 20:32:15 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x8447, 0x0) preadv(r0, &(0x7f0000000800)=[{&(0x7f0000000000)=""/31, 0x70800}, {0x0, 0x1a0ffffffff}], 0x2, 0x0) 20:32:15 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x80104592, &(0x7f0000000100)={0x4, 0xff00, 0x0}) 20:32:15 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = dup(r1) write$P9_RLOPEN(r2, 0x0, 0x0) r3 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) perf_event_open(0x0, 0xffffffffffffffff, 0x4, r3, 0x2) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioprio_set$pid(0x2, 0x0, 0x0) clone(0xa02a6500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 20:32:15 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000100)={0x6000000, 0xff00, 0x0}) 20:32:15 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000100)={0x700, 0xff00, 0x0}) 20:32:15 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000100)={0xa000000, 0xff00, 0x0}) 20:32:15 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x80104592, &(0x7f0000000100)={0x5, 0xff00, 0x0}) 20:32:16 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x8447, 0x0) preadv(r0, &(0x7f0000000800)=[{&(0x7f0000000000)=""/31, 0x70800}, {0x0, 0x7ffffffff000}], 0x2, 0x0) 20:32:16 executing program 4: r0 = gettid() perf_event_open(0x0, r0, 0x5, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioprio_set$pid(0x2, 0x0, 0x0) clone(0xa02a6500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 20:32:16 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000100)={0x7000000, 0xff00, 0x0}) 20:32:16 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000100)={0x700, 0xff00, 0x0}) 20:32:16 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x80104592, &(0x7f0000000100)={0x6, 0xff00, 0x0}) 20:32:16 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000100)={0xb000000, 0xff00, 0x0}) [ 223.393669][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 223.399515][ C1] protocol 88fb is buggy, dev hsr_slave_1 20:32:16 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000100)={0x700, 0xff00, 0x0}) 20:32:16 executing program 4: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = dup(r2) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) r5 = socket(0x40000000015, 0x5, 0x0) close(r5) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r6, &(0x7f0000d83fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES32=0x0], &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x66, &(0x7f0000000000)={r7}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000140)={r7}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f0000000280)={r8, @in6={{0xa, 0x4e21, 0x5, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x3c52}}}, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000040)={r7, @in6={{0xa, 0x4e20, 0x5, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x401}}, 0xe000, 0x1f, 0x2, 0x0, 0x40}, &(0x7f0000000100)=0x98) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000140)={r9, 0x2, 0x10}, 0xc) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000001c0)={0xb1f, 0xfc00, 0x1, 0x6df, 0x9a, 0x683b450d, 0x80000000, 0x8}, &(0x7f0000000200)=0x20) ioctl$USBDEVFS_RESETEP(r3, 0x80045503, &(0x7f0000000240)={0x9}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioprio_set$pid(0x2, 0x0, 0x0) clone(0xa02a6500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 223.473231][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 223.473264][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 223.479049][ C0] protocol 88fb is buggy, dev hsr_slave_1 20:32:16 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x8447, 0x0) preadv(r0, &(0x7f0000000800)=[{&(0x7f0000000000)=""/31, 0x70800}, {0x0, 0x30000000000000}], 0x2, 0x0) 20:32:16 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000100)={0x8000000, 0xff00, 0x0}) 20:32:16 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x80104592, &(0x7f0000000100)={0x7, 0xff00, 0x0}) 20:32:16 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x8447, 0x0) preadv(r0, &(0x7f0000000800)=[{&(0x7f0000000000)=""/31, 0x70800}, {0x0, 0xb0130000000000}], 0x2, 0x0) 20:32:16 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000100)={0xc000000, 0xff00, 0x0}) 20:32:16 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x80104592, &(0x7f0000000100)={0x6, 0xff00, 0x0}) 20:32:16 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = dup(r1) write$P9_RLOPEN(r2, 0x0, 0x0) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0x4000}, 0x4) ioprio_set$pid(0x2, 0x0, 0x0) r3 = msgget(0x3, 0x200) msgrcv(r3, &(0x7f0000000080)={0x0, ""/122}, 0x82, 0x3, 0x0) clone(0xa02a6500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 223.713241][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 223.719103][ C0] protocol 88fb is buggy, dev hsr_slave_1 20:32:16 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000100)={0x9000000, 0xff00, 0x0}) 20:32:16 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x8447, 0x0) preadv(r0, &(0x7f0000000800)=[{&(0x7f0000000000)=""/31, 0x70800}, {0x0, 0xe8f87f00000000}], 0x2, 0x0) 20:32:16 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000100)={0xd000000, 0xff00, 0x0}) 20:32:16 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x80104592, &(0x7f0000000100)={0x6, 0xff00, 0x0}) 20:32:16 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x80104592, &(0x7f0000000100)={0x8, 0xff00, 0x0}) 20:32:16 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x8447, 0x0) preadv(r0, &(0x7f0000000800)=[{&(0x7f0000000000)=""/31, 0x70800}, {0x0, 0xf0ffffff7f0000}], 0x2, 0x0) 20:32:16 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) write$cgroup_pid(r0, &(0x7f0000000040), 0x12) ioprio_set$pid(0x2, 0x0, 0x0) clone(0xa02a6500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) select(0x40, &(0x7f0000000080)={0x6, 0x8, 0xd21, 0xd4a0, 0x8, 0x1f, 0x8, 0x5}, &(0x7f00000000c0)={0xed, 0x8, 0x1f, 0x6b9, 0x6, 0x7, 0x101, 0x80}, &(0x7f0000000100)={0x10001, 0x7, 0x4, 0x9716, 0xd41c, 0x2, 0xff, 0xffff}, &(0x7f0000000140)) openat$vhci(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhci\x00', 0x9e0229ce285b560b) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008551d, &(0x7f00000001c0)=ANY=[@ANYBLOB="063b0000070019008d8c85ef7d5605"]) 20:32:16 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000100)={0xa000000, 0xff00, 0x0}) 20:32:17 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x80104592, &(0x7f0000000100)={0x6, 0xff00, 0x0}) 20:32:17 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000100)={0xe000000, 0xff00, 0x0}) 20:32:17 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x8447, 0x0) preadv(r0, &(0x7f0000000800)=[{&(0x7f0000000000)=""/31, 0x70800}, {0x0, 0x100000000000000}], 0x2, 0x0) 20:32:17 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x80104592, &(0x7f0000000100)={0x9, 0xff00, 0x0}) [ 224.193240][ C0] protocol 88fb is buggy, dev hsr_slave_0 20:32:17 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioprio_set$pid(0x2, 0x0, 0x0) clone(0xa02a6500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0xe8195927353f6b97) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = dup(r2) write$P9_RLOPEN(r3, 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r3, 0x2282, &(0x7f0000000000)) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000040)={0x9}, 0x1) 20:32:17 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x8447, 0x0) preadv(r0, &(0x7f0000000800)=[{&(0x7f0000000000)=""/31, 0x70800}, {0x0, 0x200000000000000}], 0x2, 0x0) 20:32:17 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x80104592, &(0x7f0000000100)={0x7, 0xff00, 0x0}) 20:32:17 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000100)={0xb000000, 0xff00, 0x0}) 20:32:17 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000100)={0x10000000, 0xff00, 0x0}) 20:32:17 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x8447, 0x0) preadv(r0, &(0x7f0000000800)=[{&(0x7f0000000000)=""/31, 0x70800}, {0x0, 0x300000000000000}], 0x2, 0x0) 20:32:17 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x80104592, &(0x7f0000000100)={0xa, 0xff00, 0x0}) 20:32:17 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x800000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) io_uring_setup(0x67d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x143}) ioprio_set$pid(0x2, 0x0, 0x0) clone(0xa02a6500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 20:32:17 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000100)={0xc000000, 0xff00, 0x0}) 20:32:17 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x8447, 0x0) preadv(r0, &(0x7f0000000800)=[{&(0x7f0000000000)=""/31, 0x70800}, {0x0, 0x400000000000000}], 0x2, 0x0) 20:32:17 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x80104592, &(0x7f0000000100)={0x7, 0xff00, 0x0}) 20:32:17 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000100)={0x11000000, 0xff00, 0x0}) 20:32:17 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x8447, 0x0) preadv(r0, &(0x7f0000000800)=[{&(0x7f0000000000)=""/31, 0x70800}, {0x0, 0x500000000000000}], 0x2, 0x0) 20:32:17 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x80104592, &(0x7f0000000100)={0xb, 0xff00, 0x0}) 20:32:17 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000100)={0xd000000, 0xff00, 0x0}) 20:32:17 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x80104592, &(0x7f0000000100)={0x7, 0xff00, 0x0}) 20:32:17 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x8447, 0x0) preadv(r0, &(0x7f0000000800)=[{&(0x7f0000000000)=""/31, 0x70800}, {0x0, 0x600000000000000}], 0x2, 0x0) 20:32:17 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioprio_set$pid(0x2, 0x0, 0x0) clone(0xa02a6500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$RDS_FREE_MR(0xffffffffffffffff, 0x114, 0x3, &(0x7f0000000000)={{0x4, 0x47}, 0x10}, 0x10) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0x82000, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) accept4(r1, 0x0, 0x0, 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000080)=0x0) write$cgroup_pid(r0, &(0x7f00000000c0)=r2, 0x12) 20:32:17 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000100)={0x12000000, 0xff00, 0x0}) 20:32:17 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x80104592, &(0x7f0000000100)={0xc, 0xff00, 0x0}) 20:32:17 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x8447, 0x0) preadv(r0, &(0x7f0000000800)=[{&(0x7f0000000000)=""/31, 0x70800}, {0x0, 0x700000000000000}], 0x2, 0x0) 20:32:17 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000100)={0x8, 0xff00, 0x0}) 20:32:17 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000100)={0xe000000, 0xff00, 0x0}) 20:32:18 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000100)={0x20000000, 0xff00, 0x0}) 20:32:18 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000100)={0x8, 0xff00, 0x0}) 20:32:18 executing program 4 (fault-call:1 fault-nth:0): r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x8447, 0x0) preadv(r0, &(0x7f0000000800)=[{&(0x7f0000000000)=""/31, 0x70802}, {0x0}], 0x2, 0x0) 20:32:18 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x8447, 0x0) preadv(r0, &(0x7f0000000800)=[{&(0x7f0000000000)=""/31, 0x70800}, {0x0, 0x800000000000000}], 0x2, 0x0) 20:32:18 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x80104592, &(0x7f0000000100)={0xd, 0xff00, 0x0}) 20:32:18 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000100)={0x10000000, 0xff00, 0x0}) [ 225.314752][T29507] FAULT_INJECTION: forcing a failure. [ 225.314752][T29507] name failslab, interval 1, probability 0, space 0, times 0 20:32:18 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000100)={0x25000000, 0xff00, 0x0}) [ 225.386680][T29507] CPU: 1 PID: 29507 Comm: syz-executor.4 Not tainted 5.4.0-rc4+ #0 [ 225.394618][T29507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 225.404698][T29507] Call Trace: [ 225.408008][T29507] dump_stack+0x1d8/0x2f8 [ 225.412366][T29507] should_fail+0x555/0x770 [ 225.416829][T29507] __should_failslab+0x11a/0x160 [ 225.422052][T29507] should_failslab+0x9/0x20 [ 225.426578][T29507] kmem_cache_alloc_trace+0x5d/0x2f0 [ 225.431899][T29507] ? __vb2_init_fileio+0x19d/0xb80 [ 225.437030][T29507] __vb2_init_fileio+0x19d/0xb80 [ 225.441991][T29507] __vb2_perform_fileio+0x353/0x15e0 [ 225.447305][T29507] vb2_read+0x3b/0x50 [ 225.451345][T29507] vb2_fop_read+0x21e/0x310 [ 225.455851][T29507] v4l2_read+0x173/0x270 [ 225.460094][T29507] do_iter_read+0x4b1/0x5b0 [ 225.464590][T29507] do_preadv+0x178/0x290 [ 225.468815][T29507] ? check_preemption_disabled+0xb7/0x2a0 [ 225.474645][T29507] ? prepare_exit_to_usermode+0x1f7/0x580 [ 225.480368][T29507] ? trace_irq_disable_rcuidle+0x23/0x1e0 [ 225.486083][T29507] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 225.491544][T29507] ? trace_irq_disable_rcuidle+0x23/0x1e0 [ 225.497262][T29507] __x64_sys_preadv+0x9e/0xb0 [ 225.501937][T29507] do_syscall_64+0xf7/0x1c0 [ 225.506425][T29507] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 225.512299][T29507] RIP: 0033:0x459f39 [ 225.516225][T29507] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 20:32:18 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000100)={0x8, 0xff00, 0x0}) [ 225.536020][T29507] RSP: 002b:00007f977a4f1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 225.544428][T29507] RAX: ffffffffffffffda RBX: 00007f977a4f1c90 RCX: 0000000000459f39 [ 225.552650][T29507] RDX: 0000000000000002 RSI: 0000000020000800 RDI: 0000000000000003 [ 225.560618][T29507] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 225.568576][T29507] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f977a4f26d4 [ 225.576542][T29507] R13: 00000000004c7683 R14: 00000000004dd118 R15: 0000000000000004 20:32:18 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x8447, 0x0) preadv(r0, &(0x7f0000000800)=[{&(0x7f0000000000)=""/31, 0x70800}, {0x0, 0x900000000000000}], 0x2, 0x0) 20:32:18 executing program 4 (fault-call:1 fault-nth:1): r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x8447, 0x0) preadv(r0, &(0x7f0000000800)=[{&(0x7f0000000000)=""/31, 0x70802}, {0x0}], 0x2, 0x0) 20:32:18 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x80104592, &(0x7f0000000100)={0xe, 0xff00, 0x0}) 20:32:18 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000100)={0x11000000, 0xff00, 0x0}) 20:32:18 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x8447, 0x0) preadv(r0, &(0x7f0000000800)=[{&(0x7f0000000000)=""/31, 0x70800}, {0x0, 0xa00000000000000}], 0x2, 0x0) 20:32:18 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000100)={0x40000000, 0xff00, 0x0}) [ 225.779178][T29727] FAULT_INJECTION: forcing a failure. [ 225.779178][T29727] name failslab, interval 1, probability 0, space 0, times 0 20:32:18 executing program 0 (fault-call:3 fault-nth:0): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0800b5055e0bcfe87b0071") open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 225.849420][T29727] CPU: 0 PID: 29727 Comm: syz-executor.4 Not tainted 5.4.0-rc4+ #0 [ 225.857350][T29727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 225.867518][T29727] Call Trace: [ 225.870818][T29727] dump_stack+0x1d8/0x2f8 [ 225.875178][T29727] should_fail+0x555/0x770 [ 225.879615][T29727] __should_failslab+0x11a/0x160 [ 225.884556][T29727] ? kzalloc+0x1f/0x40 [ 225.884570][T29727] should_failslab+0x9/0x20 [ 225.884579][T29727] __kmalloc+0x7a/0x340 [ 225.884592][T29727] ? do_syscall_64+0xf7/0x1c0 [ 225.902129][T29727] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 225.902151][T29727] kzalloc+0x1f/0x40 [ 225.902162][T29727] __vb2_queue_alloc+0x148/0x15a0 [ 225.902173][T29727] ? __kasan_check_read+0x11/0x20 [ 225.902197][T29727] vb2_core_reqbufs+0x7e3/0xdb0 [ 225.927428][T29727] __vb2_init_fileio+0x2c5/0xb80 [ 225.932650][T29727] __vb2_perform_fileio+0x353/0x15e0 [ 225.938038][T29727] vb2_read+0x3b/0x50 [ 225.942013][T29727] vb2_fop_read+0x21e/0x310 [ 225.946602][T29727] v4l2_read+0x173/0x270 [ 225.950855][T29727] do_iter_read+0x4b1/0x5b0 [ 225.955388][T29727] do_preadv+0x178/0x290 [ 225.959633][T29727] ? check_preemption_disabled+0xb7/0x2a0 [ 225.965363][T29727] ? prepare_exit_to_usermode+0x1f7/0x580 [ 225.971094][T29727] ? trace_irq_disable_rcuidle+0x23/0x1e0 [ 225.976920][T29727] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 225.982484][T29727] ? trace_irq_disable_rcuidle+0x23/0x1e0 [ 225.988236][T29727] __x64_sys_preadv+0x9e/0xb0 [ 225.992924][T29727] do_syscall_64+0xf7/0x1c0 [ 225.997437][T29727] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 226.003326][T29727] RIP: 0033:0x459f39 [ 226.007371][T29727] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 226.027288][T29727] RSP: 002b:00007f977a4f1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 226.036183][T29727] RAX: ffffffffffffffda RBX: 00007f977a4f1c90 RCX: 0000000000459f39 20:32:18 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0800b5055e0bcfe87b0071") open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 20:32:18 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x8447, 0x0) preadv(r0, &(0x7f0000000800)=[{&(0x7f0000000000)=""/31, 0x70800}, {0x0, 0xb00000000000000}], 0x2, 0x0) 20:32:18 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = dup(r1) write$P9_RLOPEN(r2, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f00000000c0)={0x0, 0x0}) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = dup(r5) write$P9_RLOPEN(r6, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000100)={0x0, 0x80000}) ioctl$DRM_IOCTL_GEM_OPEN(r2, 0xc010640b, &(0x7f0000000180)={r3, r7, 0x6}) r8 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r8, 0x1000008912, &(0x7f0000000140)="0800b5055e0bcfe87b0071") open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000000, 0x0, @perf_config_ext={0x53cb, 0x3ff}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 20:32:18 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x80104592, &(0x7f0000000100)={0x10, 0xff00, 0x0}) [ 226.044257][T29727] RDX: 0000000000000002 RSI: 0000000020000800 RDI: 0000000000000003 [ 226.052248][T29727] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 226.060312][T29727] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f977a4f26d4 [ 226.068294][T29727] R13: 00000000004c7683 R14: 00000000004dd118 R15: 0000000000000004 20:32:19 executing program 4 (fault-call:1 fault-nth:2): r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x8447, 0x0) preadv(r0, &(0x7f0000000800)=[{&(0x7f0000000000)=""/31, 0x70802}, {0x0}], 0x2, 0x0) 20:32:19 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000100)={0x12000000, 0xff00, 0x0}) 20:32:19 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000100)={0x5c000000, 0xff00, 0x0}) 20:32:19 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x8447, 0x0) preadv(r0, &(0x7f0000000800)=[{&(0x7f0000000000)=""/31, 0x70800}, {0x0, 0xc00000000000000}], 0x2, 0x0) 20:32:19 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0800b5055e0bcfe87b0071") open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x86) 20:32:19 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x80104592, &(0x7f0000000100)={0x11, 0xff00, 0x0}) [ 226.301297][T30053] FAULT_INJECTION: forcing a failure. [ 226.301297][T30053] name failslab, interval 1, probability 0, space 0, times 0 [ 226.343310][T30053] CPU: 0 PID: 30053 Comm: syz-executor.4 Not tainted 5.4.0-rc4+ #0 [ 226.351326][T30053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 226.362513][T30053] Call Trace: [ 226.365814][T30053] dump_stack+0x1d8/0x2f8 [ 226.370161][T30053] should_fail+0x555/0x770 [ 226.374582][T30053] __should_failslab+0x11a/0x160 [ 226.380062][T30053] should_failslab+0x9/0x20 [ 226.384574][T30053] kmem_cache_alloc_trace+0x5d/0x2f0 [ 226.389884][T30053] ? vb2_vmalloc_alloc+0x86/0x210 [ 226.389896][T30053] ? kzalloc+0x1f/0x40 [ 226.389910][T30053] vb2_vmalloc_alloc+0x86/0x210 [ 226.389921][T30053] ? vb2_common_vm_close+0x80/0x80 [ 226.389934][T30053] __vb2_queue_alloc+0x876/0x15a0 [ 226.403873][T30053] vb2_core_reqbufs+0x7e3/0xdb0 [ 226.403905][T30053] __vb2_init_fileio+0x2c5/0xb80 [ 226.403925][T30053] __vb2_perform_fileio+0x353/0x15e0 [ 226.403949][T30053] vb2_read+0x3b/0x50 [ 226.403963][T30053] vb2_fop_read+0x21e/0x310 [ 226.438320][T30053] v4l2_read+0x173/0x270 [ 226.442581][T30053] do_iter_read+0x4b1/0x5b0 [ 226.447125][T30053] do_preadv+0x178/0x290 [ 226.447140][T30053] ? check_preemption_disabled+0xb7/0x2a0 [ 226.447166][T30053] ? prepare_exit_to_usermode+0x1f7/0x580 [ 226.457107][T30053] ? trace_irq_disable_rcuidle+0x23/0x1e0 [ 226.457122][T30053] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 226.457130][T30053] ? trace_irq_disable_rcuidle+0x23/0x1e0 [ 226.457146][T30053] __x64_sys_preadv+0x9e/0xb0 [ 226.484587][T30053] do_syscall_64+0xf7/0x1c0 20:32:19 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 226.489101][T30053] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 226.495147][T30053] RIP: 0033:0x459f39 [ 226.499041][T30053] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 226.518765][T30053] RSP: 002b:00007f977a4f1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 226.527210][T30053] RAX: ffffffffffffffda RBX: 00007f977a4f1c90 RCX: 0000000000459f39 [ 226.535171][T30053] RDX: 0000000000000002 RSI: 0000000020000800 RDI: 0000000000000003 20:32:19 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000100)={0x20000000, 0xff00, 0x0}) [ 226.535177][T30053] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 226.535182][T30053] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f977a4f26d4 [ 226.535188][T30053] R13: 00000000004c7683 R14: 00000000004dd118 R15: 0000000000000004 20:32:19 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x8447, 0x0) preadv(r0, &(0x7f0000000800)=[{&(0x7f0000000000)=""/31, 0x70800}, {0x0, 0xd00000000000000}], 0x2, 0x0) 20:32:19 executing program 4 (fault-call:1 fault-nth:3): r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x8447, 0x0) preadv(r0, &(0x7f0000000800)=[{&(0x7f0000000000)=""/31, 0x70802}, {0x0}], 0x2, 0x0) 20:32:19 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000100)={0xff600000, 0xff00, 0x0}) 20:32:19 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x80104592, &(0x7f0000000100)={0x12, 0xff00, 0x0}) 20:32:19 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x8447, 0x0) preadv(r0, &(0x7f0000000800)=[{&(0x7f0000000000)=""/31, 0x70800}, {0x0, 0xe00000000000000}], 0x2, 0x0) 20:32:19 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000100)={0x25000000, 0xff00, 0x0}) [ 226.765559][T30279] FAULT_INJECTION: forcing a failure. [ 226.765559][T30279] name failslab, interval 1, probability 0, space 0, times 0 [ 226.811788][T30279] CPU: 0 PID: 30279 Comm: syz-executor.4 Not tainted 5.4.0-rc4+ #0 [ 226.819711][T30279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 226.829771][T30279] Call Trace: [ 226.829798][T30279] dump_stack+0x1d8/0x2f8 [ 226.829816][T30279] should_fail+0x555/0x770 [ 226.829833][T30279] __should_failslab+0x11a/0x160 [ 226.829850][T30279] should_failslab+0x9/0x20 [ 226.846775][T30279] kmem_cache_alloc_node_trace+0x6e/0x2d0 [ 226.846787][T30279] ? __get_vm_area_node+0x142/0x320 [ 226.846803][T30279] __get_vm_area_node+0x142/0x320 [ 226.846822][T30279] __vmalloc_node_range+0xea/0x860 [ 226.862208][T30279] ? vb2_vmalloc_alloc+0xc7/0x210 [ 226.862223][T30279] ? rcu_read_lock_sched_held+0x10b/0x170 [ 226.862237][T30279] ? trace_kmalloc+0xcd/0x130 [ 226.862252][T30279] vmalloc_user+0x73/0x80 [ 226.862261][T30279] ? vb2_vmalloc_alloc+0xc7/0x210 [ 226.862269][T30279] vb2_vmalloc_alloc+0xc7/0x210 [ 226.862280][T30279] ? vb2_common_vm_close+0x80/0x80 [ 226.862290][T30279] __vb2_queue_alloc+0x876/0x15a0 [ 226.862317][T30279] vb2_core_reqbufs+0x7e3/0xdb0 [ 226.862341][T30279] __vb2_init_fileio+0x2c5/0xb80 [ 226.872452][T30279] __vb2_perform_fileio+0x353/0x15e0 [ 226.872481][T30279] vb2_read+0x3b/0x50 [ 226.872493][T30279] vb2_fop_read+0x21e/0x310 [ 226.872508][T30279] v4l2_read+0x173/0x270 [ 226.872524][T30279] do_iter_read+0x4b1/0x5b0 [ 226.872545][T30279] do_preadv+0x178/0x290 [ 226.872557][T30279] ? check_preemption_disabled+0xb7/0x2a0 [ 226.872578][T30279] ? prepare_exit_to_usermode+0x1f7/0x580 20:32:19 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0800b5055e0bcfe87b0071") open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x8, 0x200001) [ 226.872594][T30279] ? trace_irq_disable_rcuidle+0x23/0x1e0 [ 226.936472][T30279] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 226.945170][T30279] ? trace_irq_disable_rcuidle+0x23/0x1e0 [ 226.945185][T30279] __x64_sys_preadv+0x9e/0xb0 [ 226.945198][T30279] do_syscall_64+0xf7/0x1c0 [ 226.945211][T30279] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 226.945220][T30279] RIP: 0033:0x459f39 20:32:19 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0800b5055e0bcfe87b0071") open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) dup(r3) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) accept4(r4, 0x0, 0x0, 0x0) r5 = fcntl$dupfd(r3, 0x0, r4) fsetxattr$trusted_overlay_nlink(r5, &(0x7f0000000100)='trusted.overlay.nlink\x00', &(0x7f0000000200)={'U-', 0x4}, 0x28, 0x3) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r6 = accept4(r1, 0x0, 0x0, 0x0) r7 = dup(r6) write$P9_RLOPEN(r7, 0x0, 0x0) ioctl$TIOCCBRK(r7, 0x5428) r8 = gettid() kcmp(r8, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) r9 = syz_open_procfs(r8, &(0x7f0000000080)='net/nfsfs\x00') write$FUSE_NOTIFY_INVAL_ENTRY(r9, &(0x7f00000000c0)={0x2f, 0x3, 0x0, {0x0, 0xe, 0x0, 'poly1305-simd\x00'}}, 0x2f) [ 226.945233][T30279] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 226.945241][T30279] RSP: 002b:00007f977a4f1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 227.024645][T30279] RAX: ffffffffffffffda RBX: 00007f977a4f1c90 RCX: 0000000000459f39 [ 227.033432][T30279] RDX: 0000000000000002 RSI: 0000000020000800 RDI: 0000000000000003 [ 227.041407][T30279] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 227.049375][T30279] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f977a4f26d4 [ 227.057345][T30279] R13: 00000000004c7683 R14: 00000000004dd118 R15: 0000000000000004 20:32:19 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000100)={0xffffffff, 0xff00, 0x0}) [ 227.100527][T30279] syz-executor.4: vmalloc: allocation failure: 462848 bytes, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz4,mems_allowed=0-1 [ 227.119805][T30279] CPU: 0 PID: 30279 Comm: syz-executor.4 Not tainted 5.4.0-rc4+ #0 [ 227.127716][T30279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 227.137772][T30279] Call Trace: [ 227.141065][T30279] dump_stack+0x1d8/0x2f8 [ 227.145390][T30279] warn_alloc+0x17d/0x2e0 20:32:20 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0800b5055e0bcfe87b0071") open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 227.145404][T30279] ? __get_vm_area_node+0x155/0x320 [ 227.145423][T30279] __vmalloc_node_range+0x29b/0x860 [ 227.145438][T30279] ? rcu_read_lock_sched_held+0x10b/0x170 [ 227.165865][T30279] ? trace_kmalloc+0xcd/0x130 [ 227.170593][T30279] vmalloc_user+0x73/0x80 [ 227.174964][T30279] ? vb2_vmalloc_alloc+0xc7/0x210 [ 227.180000][T30279] vb2_vmalloc_alloc+0xc7/0x210 [ 227.184879][T30279] ? vb2_common_vm_close+0x80/0x80 [ 227.189993][T30279] __vb2_queue_alloc+0x876/0x15a0 [ 227.195039][T30279] vb2_core_reqbufs+0x7e3/0xdb0 [ 227.199912][T30279] __vb2_init_fileio+0x2c5/0xb80 [ 227.204872][T30279] __vb2_perform_fileio+0x353/0x15e0 [ 227.210191][T30279] vb2_read+0x3b/0x50 [ 227.210213][T30279] vb2_fop_read+0x21e/0x310 [ 227.210232][T30279] v4l2_read+0x173/0x270 [ 227.218704][T30279] do_iter_read+0x4b1/0x5b0 [ 227.218727][T30279] do_preadv+0x178/0x290 [ 227.218740][T30279] ? check_preemption_disabled+0xb7/0x2a0 [ 227.218764][T30279] ? prepare_exit_to_usermode+0x1f7/0x580 [ 227.243238][T30279] ? trace_irq_disable_rcuidle+0x23/0x1e0 [ 227.248979][T30279] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 227.254450][T30279] ? trace_irq_disable_rcuidle+0x23/0x1e0 [ 227.260184][T30279] __x64_sys_preadv+0x9e/0xb0 [ 227.264909][T30279] do_syscall_64+0xf7/0x1c0 [ 227.269424][T30279] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 227.275481][T30279] RIP: 0033:0x459f39 [ 227.279409][T30279] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 20:32:20 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0800b5055e0bcfe87b0071") open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) lsetxattr$security_smack_transmute(&(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='security.SMACK64TRANSMUTE\x00', &(0x7f00000000c0)='TRUE', 0x4, 0x0) [ 227.299019][T30279] RSP: 002b:00007f977a4f1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 227.307425][T30279] RAX: ffffffffffffffda RBX: 00007f977a4f1c90 RCX: 0000000000459f39 [ 227.315389][T30279] RDX: 0000000000000002 RSI: 0000000020000800 RDI: 0000000000000003 [ 227.323359][T30279] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 227.323366][T30279] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f977a4f26d4 [ 227.323371][T30279] R13: 00000000004c7683 R14: 00000000004dd118 R15: 0000000000000004 20:32:20 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x80104592, &(0x7f0000000100)={0x25, 0xff00, 0x0}) [ 227.370025][T30279] Mem-Info: [ 227.373561][T30279] active_anon:150488 inactive_anon:219 isolated_anon:0 [ 227.373561][T30279] active_file:7716 inactive_file:38566 isolated_file:0 [ 227.373561][T30279] unevictable:0 dirty:108 writeback:0 unstable:0 [ 227.373561][T30279] slab_reclaimable:13013 slab_unreclaimable:100095 [ 227.373561][T30279] mapped:59006 shmem:269 pagetables:2440 bounce:0 [ 227.373561][T30279] free:1225595 free_pcp:586 free_cma:0 [ 227.418803][T30279] Node 0 active_anon:601952kB inactive_anon:876kB active_file:30720kB inactive_file:154264kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:236024kB dirty:428kB writeback:0kB shmem:1076kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 129024kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no 20:32:20 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000100)={0x40000000, 0xff00, 0x0}) [ 227.481735][T30279] Node 1 active_anon:0kB inactive_anon:0kB active_file:144kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 227.517036][T30279] Node 0 DMA free:15904kB min:216kB low:268kB high:320kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15904kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 227.561729][T30279] lowmem_reserve[]: 0 2567 2568 2568 [ 227.571727][T30279] Node 0 DMA32 free:1110116kB min:36352kB low:45440kB high:54528kB active_anon:599756kB inactive_anon:872kB active_file:29452kB inactive_file:154220kB unevictable:0kB writepending:424kB present:3129332kB managed:2632152kB mlocked:0kB kernel_stack:9280kB pagetables:9664kB bounce:0kB free_pcp:2280kB local_pcp:1276kB free_cma:0kB [ 227.615337][T30279] lowmem_reserve[]: 0 0 1 1 [ 227.621940][T30279] Node 0 Normal free:4kB min:16kB low:20kB high:24kB active_anon:60kB inactive_anon:4kB active_file:1268kB inactive_file:92kB unevictable:0kB writepending:4kB present:786432kB managed:1428kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 227.668302][T30279] lowmem_reserve[]: 0 0 0 0 [ 227.672939][T30279] Node 1 Normal free:3778120kB min:53516kB low:66892kB high:80268kB active_anon:0kB inactive_anon:0kB active_file:144kB inactive_file:0kB unevictable:0kB writepending:4kB present:3932160kB managed:3870244kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 227.709074][T30279] lowmem_reserve[]: 0 0 0 0 [ 227.716457][T30279] Node 0 DMA: 0*4kB 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15904kB [ 227.737426][T30279] Node 0 DMA32: 305*4kB (UME) 270*8kB (UME) 190*16kB (UME) 121*32kB (UME) 95*64kB (ME) 11*128kB (UME) 1*256kB (M) 3*512kB (UE) 1*1024kB (E) 2*2048kB (ME) 265*4096kB (M) = 1110132kB [ 227.786805][T30279] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 227.801121][T30279] Node 1 Normal: 2*4kB (UE) 86*8kB (UME) 175*16kB (UME) 87*32kB (UE) 29*64kB (UE) 15*128kB (UM) 5*256kB (UME) 5*512kB (UE) 2*1024kB (UM) 1*2048kB (M) 918*4096kB (M) = 3778120kB [ 227.820535][T30279] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 227.830491][T30279] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 227.840198][T30279] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 227.849920][T30279] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 227.859537][T30279] 46562 total pagecache pages [ 227.864537][T30279] 0 pages in swap cache [ 227.868753][T30279] Swap cache stats: add 0, delete 0, find 0/0 [ 227.873256][ C0] net_ratelimit: 21 callbacks suppressed [ 227.873261][ C0] protocol 88fb is buggy, dev hsr_slave_0 20:32:20 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x8447, 0x0) preadv(r0, &(0x7f0000000800)=[{&(0x7f0000000000)=""/31, 0x70802}, {0x0}], 0x2, 0x0) 20:32:20 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x80104592, &(0x7f0000000100)={0x5c, 0xff00, 0x0}) 20:32:20 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0800b5055e0bcfe87b0071") r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000380)='/dev/vcs\x00', 0x5165f77787030bd0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) r4 = dup(r3) write$P9_RLOPEN(r4, 0x0, 0x0) r5 = getuid() lstat(&(0x7f00000000c0)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r6) lstat(&(0x7f00000000c0)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r7) lstat(&(0x7f00000000c0)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r8) lstat(&(0x7f00000000c0)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r9) lstat(&(0x7f00000000c0)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r10) getgroups(0x6, &(0x7f00000000c0)=[r6, r7, r8, r9, r10, 0xee00]) lstat(&(0x7f00000000c0)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r12) r13 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f00000000c0)='./file0\x00', r14, 0x0) lstat(&(0x7f00000000c0)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r15) r16 = socket$alg(0x26, 0x5, 0x0) bind$alg(r16, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) accept4(r16, 0x0, 0x0, 0x0) getsockopt$sock_cred(r16, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0}, &(0x7f00000002c0)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000300)={0x0, 0x0, 0x0}, &(0x7f0000000340)=0xc) r19 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r19, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f00000000c0)='./file0\x00', r20, 0x0) r21 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r21, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f00000000c0)='./file0\x00', r22, 0x0) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000780)=ANY=[@ANYBLOB="c80300000000000005000000000000000600000000000000030000000000000016800000000000000300000000000000080000000200000002000000000000007f00000000000000000000000000000000000100000000000a7500000000000009000000000000000200000003000000020000003b07000004000000", @ANYRES32=r5, @ANYRES32=r11, @ANYBLOB="75680000fbffffff0000000002000000000000000600000000000000050000000300000068617368000000000200000000000000000000000000000004000000000000000500000000000000080000000500000000000000000000000100012000000000ad0100000000000001000000000000002e0e0000000000000100000000000000ff00000000010000000001000004000008000000", @ANYRES32=0xee01, @ANYRES32=r12, @ANYBLOB="060000008f000000000000000100000000000000ed0600000000000009000000060000002f6465762f7663730000000000000000040000000000000002000000000000000600000000000000070000000000000003000000bd9000000300000000000000040000000000000008000000000000000000000000000000070000000000000040000000000000000600000003000000000400003f00000005000000", @ANYRES32=r14, @ANYRES32=r15, @ANYBLOB="050000002c4200000000000002000000000000000800000000000000000000000400000000000000000000000200000000000000763b000000000000090000000000000000010000ffffffff06000000000000000600000000000000000000000000004047ffffffffffffffff03000000000000bb90051300000000000200000000008004000000a90200007a720000", @ANYRES32=r17, @ANYRES32=r18, @ANYBLOB="0500000002000000000000000600000000000000000800000000000001000000010000002c0000000000000003000000000000000300000000000000400000000000000001000000000000003f0000000300000002000000000000000600000000000000010000000000000007000000000000000100000000000000810000000000000001000080ff070000ff7f0000fbffffff04000000", @ANYRES32=r20, @ANYRES32, @ANYBLOB="090000000004000000000000060000000000000020000000000000000000000002000000010000000000000001000000000000000100008000000000070000000000000009000000050000000600000000000000500000000000000007000000000000000700000000000000000000c0c10900000100000000000000ff7f0000010001000900"/144, @ANYRES32=r22, @ANYRES32=0xee00, @ANYBLOB="8000000044c10000ce4000000000010000000000000006000000068aa2f80c17a300000000050000000000000068136464b5918cb536ab0e6084905f9cedeecf30c34a2efe15119501e0cef94df8c61ee125d0f1b4ac486a8f"], 0x3c8) ioctl$VIDIOC_QUERYMENU(r1, 0xc02c5625, &(0x7f0000000080)={0xf411, 0x0, @value=0x3a8a19bf}) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r23 = socket$alg(0x26, 0x5, 0x0) bind$alg(r23, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r24 = accept4(r23, 0x0, 0x0, 0x0) r25 = dup(r24) write$P9_RLOPEN(r25, 0x0, 0x0) ioctl$KVM_SET_REGS(r25, 0x4090ae82, &(0x7f0000000200)={[0xfffffffffffffff7, 0x1, 0x7, 0x7, 0x6, 0x7ff, 0x864, 0x3, 0x7ff, 0x6, 0xfffffffffffffffe, 0x81, 0x7, 0xfffffffffffffff7, 0x2, 0x80000], 0x0, 0x28400}) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 20:32:20 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x8447, 0x0) preadv(r0, &(0x7f0000000800)=[{&(0x7f0000000000)=""/31, 0x70800}, {0x0, 0x1000000000000000}], 0x2, 0x0) 20:32:20 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000100)={0x0, 0x8, 0x0}) 20:32:20 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000100)={0x5c000000, 0xff00, 0x0}) [ 227.881683][T30279] Free swap = 0kB [ 227.886350][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 227.890036][T30279] Total swap = 0kB [ 227.900434][T30279] 1965979 pages RAM [ 227.904747][T30279] 0 pages HighMem/MovableOnly [ 227.911232][T30279] 336047 pages reserved [ 227.915499][T30279] 0 pages cma reserved 20:32:20 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0800b5055e0bcfe87b0071") open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x400000, 0x40) sendmsg$unix(r1, &(0x7f0000000640)={&(0x7f0000000340)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000000600)=[{&(0x7f00000003c0)="31d0ff8919e3bd67bbd733e09b9499b2e4460383926c1424", 0x18}, {&(0x7f0000000400)="68ac0ca0ef001f6850447aa7bef7116c7bd39bc364d10730e2cd9ec44285eab7778495418cefb288a836ac80ce9c8a4a3db40fef9a0ed0563ce1b89a02cd59ecd8ae25b35eb50e00c36e3c87d1557e90bd61ede53c776ebc9ab12eb7b66ecdea4534493b68ee91294a19fb16787ec7d90c50e54e43727f3fe0cb1c992be0223b31233c2d261975b6ee03856a634de47e89fea4c6387616a04fbb78a737adcf5d0c7207f76fdd84486f3d37d74cbef8df70f4e7fb9fa9d4ff87a51767711b1ff0b9b5309aa4c3a1963d8a127861b2aa85c77b8a20975ccde383c8602a2b", 0xdd}, {&(0x7f0000000500)="b5c734cae44c7c5ccb6a5829b412fa93d0d3246e4de4f16e0fa5f8c55ea4b86e5cbaf94c4908121d4ab2b5fe19346d3643dd578c555c4679bde1a76330ef60ed876ad501e1d20cc81127d22952cbdcc5912f92bd0abcc99b54be6764a651e5d1dfb431cefb328f72f6e58f96297eb115c44a093fd29655f5193e2a3197d0b69b261b1dda7852ee41fea7fb2006c4", 0x8e}, {&(0x7f00000005c0)="3652a8208d2dae51cb471a7384add0358132572cce8b35c3c1cf9a189b2448502bc4fb3723ac3168aeaa68b03567d99f743192b0b1f641", 0x37}], 0x4, 0x0, 0x0, 0x40000}, 0x4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0x7c, 0x0, &(0x7f0000000200)=[@reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000080)={@fda={0x66646185, 0x2, 0x0, 0xa}, @fd, @fda={0x66646185, 0x4, 0x1, 0x34}}, &(0x7f0000000100)={0x0, 0x20, 0x38}}}, @exit_looper, @release={0x40046306, 0x1}, @release={0x40046306, 0x2}, @dead_binder_done, @clear_death, @decrefs={0x40046307, 0x1}], 0x80, 0x0, &(0x7f0000000280)="2bf1b02c1d3a4a4e9090a1900bfa3cd4ebda02141912487f9baea23412fbaf802e2faa5cb05ff00325271b911894e7f5b58da3446cbfae984af77ecee6cc1a6eb8aa66aecbdeb940fb18383172c623d1f38ff29c82d921a432240e62eff71670f8e93fd99ba8bc3daaac95bd86829ecdf367c4d1c4c4af32043ed52fd4778020"}) perf_event_open(&(0x7f0000000180)={0x5, 0x70, 0x2, 0x20, 0x0, 0x0, 0x0, 0x0, 0x2340, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) r4 = dup(r3) write$P9_RLOPEN(r4, 0x0, 0x0) ioctl$TUNGETDEVNETNS(r4, 0x54e3, 0x0) 20:32:20 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x8447, 0x0) preadv(r0, &(0x7f0000000800)=[{&(0x7f0000000000)=""/31, 0x70800}, {0x0, 0x1100000000000000}], 0x2, 0x0) 20:32:20 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x80104592, &(0x7f0000000100)={0x1a0, 0xff00, 0x0}) 20:32:20 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000100)={0x0, 0xff02, 0x0}) 20:32:21 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000100)={0xa0010000, 0xff00, 0x0}) 20:32:21 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x8447, 0x0) preadv(r0, &(0x7f0000000800)=[{&(0x7f0000000000)=""/31, 0x70800}, {0x0}], 0x2, 0x0) 20:32:21 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x80104592, &(0x7f0000000100)={0x300, 0xff00, 0x0}) 20:32:21 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x8447, 0x0) preadv(r0, &(0x7f0000000800)=[{&(0x7f0000000000)=""/31, 0x70800}, {0x0, 0x1200000000000000}], 0x2, 0x0) 20:32:21 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x8447, 0x0) preadv(r0, &(0x7f0000000800)=[{&(0x7f0000000000)=""/31, 0x70803}, {0x0}], 0x2, 0x0) 20:32:21 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000100)={0x0, 0xff03, 0x0}) 20:32:21 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0800b5055e0bcfe87b0071") open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = dup(r2) write$P9_RLOPEN(r3, 0x0, 0x0) getsockname$tipc(r3, &(0x7f0000000040), &(0x7f0000000080)=0x10) 20:32:21 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000100)={0xff600000, 0xff00, 0x0}) [ 228.353251][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 228.359071][ C0] protocol 88fb is buggy, dev hsr_slave_1 20:32:21 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x8447, 0x0) preadv(r0, &(0x7f0000000800)=[{&(0x7f0000000000)=""/31, 0x70800}, {0x0, 0x2500000000000000}], 0x2, 0x0) 20:32:21 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x80104592, &(0x7f0000000100)={0x500, 0xff00, 0x0}) 20:32:21 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x8447, 0x0) preadv(r0, &(0x7f0000000800)=[{&(0x7f0000000000)=""/31, 0x70804}, {0x0}], 0x2, 0x0) 20:32:21 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0800b5055e0bcfe87b0071") open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = dup(r2) write$P9_RLOPEN(r3, 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r3, 0x400c6615, &(0x7f0000000040)) 20:32:21 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000100)={0x0, 0xff04, 0x0}) 20:32:21 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000100)={0xffffffff, 0xff00, 0x0}) 20:32:21 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x8447, 0x0) preadv(r0, &(0x7f0000000800)=[{&(0x7f0000000000)=""/31, 0x70800}, {0x0, 0x3f00000000000000}], 0x2, 0x0) 20:32:21 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x8447, 0x0) preadv(r0, &(0x7f0000000800)=[{&(0x7f0000000000)=""/31, 0x70808}, {0x0}], 0x2, 0x0) 20:32:21 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x80104592, &(0x7f0000000100)={0x600, 0xff00, 0x0}) 20:32:21 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x8447, 0x0) preadv(r0, &(0x7f0000000800)=[{&(0x7f0000000000)=""/31, 0x70800}, {0x0, 0x4000000000000000}], 0x2, 0x0) 20:32:21 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = dup(r1) write$P9_RLOPEN(r2, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(r2, 0xc040564b, &(0x7f0000000040)={0x401, 0x0, 0x0, 0x9, 0x1, {0x0, 0x2}, 0x1}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000140)="0800b5055e0bcfe87b0071") open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 20:32:21 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000100)={0x0, 0xff05, 0x0}) 20:32:21 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000100)={0x0, 0x8, 0x0}) 20:32:21 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0800b5055e0bcfe87b0071") open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = dup(r2) write$P9_RLOPEN(r3, 0x0, 0x0) ioctl$GIO_SCRNMAP(r3, 0x4b40, &(0x7f0000000040)=""/217) 20:32:21 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x80104592, &(0x7f0000000100)={0x700, 0xff00, 0x0}) 20:32:21 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x8447, 0x0) preadv(r0, &(0x7f0000000800)=[{&(0x7f0000000000)=""/31, 0x20070802}, {0x0}], 0x2, 0x0) 20:32:21 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x8447, 0x0) preadv(r0, &(0x7f0000000800)=[{&(0x7f0000000000)=""/31, 0x70800}, {0x0, 0xff2f070000000000}], 0x2, 0x0) 20:32:21 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0800b5055e0bcfe87b0071") open(&(0x7f0000000000)='./bus\x00', 0x400000, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 20:32:21 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000100)={0x0, 0xff06, 0x0}) [ 229.073227][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 229.079036][ C0] protocol 88fb is buggy, dev hsr_slave_1 20:32:22 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000100)={0x0, 0xff02, 0x0}) 20:32:22 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x80104592, &(0x7f0000000100)={0x900, 0xff00, 0x0}) 20:32:22 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0800b5055e0bcfe87b0071") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = dup(r2) write$P9_RLOPEN(r3, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='net/snmp6\x00') write$FUSE_NOTIFY_DELETE(r4, &(0x7f0000000240)=ANY=[@ANYBLOB="360000000600000000003ea149cc0000020000000000000002000000000000080d000000000000007d657468303a3a70726f632f2100"], 0x36) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000280)={0xffff, 0x36736673129406e5}) r5 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x8, 0x2000) ioctl$PIO_UNIMAP(r5, 0x4b67, &(0x7f00000000c0)={0x3, &(0x7f0000000080)=[{0x7, 0x7f}, {0xfff9, 0x5}, {0x2, 0x1ff}]}) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 20:32:22 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000100)={0x0, 0xff07, 0x0}) 20:32:22 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000100)={0x0, 0xff03, 0x0}) 20:32:22 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x8447, 0x0) preadv(r0, &(0x7f0000000800)=[{&(0x7f0000000000)=""/31, 0x7ffff000}, {0x0}], 0x2, 0x0) 20:32:22 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x8447, 0x0) preadv(r0, &(0x7f0000000800)=[{&(0x7f0000000000)=""/31, 0x70800}, {0x0, 0xffffffff00000000}], 0x2, 0x0) 20:32:22 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x3, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}, 0xf462087d4f3d0ed7, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 20:32:22 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x80104592, &(0x7f0000000100)={0xa00, 0xff00, 0x0}) 20:32:22 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x8447, 0x0) preadv(r0, &(0x7f0000000800)=[{&(0x7f0000000000)=""/31, 0x70800}, {0x0, 0xffffffffa0010000}], 0x2, 0x0) 20:32:22 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x8447, 0x0) preadv(r0, &(0x7f0000000800)=[{&(0x7f0000000000)=""/31, 0xffffffffffffffff}, {0x0}], 0x2, 0x0) 20:32:22 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000100)={0x0, 0xff08, 0x0}) 20:32:22 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000100)={0x0, 0xff04, 0x0}) 20:32:22 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x8447, 0x0) preadv(r0, &(0x7f0000000800)=[{&(0x7f0000000000)=""/31, 0x70800}, {0x0}], 0x3, 0x0) 20:32:22 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x8447, 0x0) preadv(r0, &(0x7f0000000800)=[{&(0x7f0000000000)=""/31, 0x70802}, {0x0, 0x2}], 0x2, 0x0) 20:32:22 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x80104592, &(0x7f0000000100)={0xb00, 0xff00, 0x0}) [ 229.713224][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 229.713230][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 229.713272][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 229.719005][ C1] protocol 88fb is buggy, dev hsr_slave_1 20:32:22 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0xffffffffffffffc1, &(0x7f0000000200)="0800b5055e0bcfe87b007173c68e6dd21229f92e1e955c5fe3e2dce88bd51a7480edac5565eea3daf27fe01bc5e37c1b08c830bd01e24e76899292ada28d9a48760a3e6d9a8e09c1a4bc80fa317e84370e7ce1355f3916f2abd760f81cbedf48f521835d89d4f0575863b730a90dcd796be4c9e04bddfe6d18b67a94f5ce55e67624f0b76f28d32b9a5210c963d7866cc3d0537ab3495632b46374b88cdfec540eebf2992ce886f2aff09eb9fd0dc46320d6d53dab5a00"/192) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f00000000c0)='./file0\x00', r3, 0x0) r4 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f00000000c0)='./file0\x00', r5, 0x0) write$P9_RSTATu(r1, &(0x7f0000000040)={0x94, 0x7d, 0x2, {{0x0, 0x7f, 0x0, 0xb583, {0x80, 0x1, 0x4}, 0x10000, 0x7, 0xb0a, 0x80, 0x2e, '#vmnet0\'security[cgroup(vboxnet1vboxnet0wlan1)', 0x2, '-,', 0x10, ']selinuxvboxnet0', 0xc, 'user^wlan1\'^'}, 0x0, '', r3, 0xffffffffffffffff, r5}}, 0x94) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 20:32:22 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x8447, 0x0) preadv(r0, &(0x7f0000000800)=[{&(0x7f0000000000)=""/31, 0x70802}, {0x0, 0x3}], 0x2, 0x0) 20:32:22 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000100)={0x0, 0xff09, 0x0}) 20:32:22 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x8447, 0x0) preadv(r0, &(0x7f0000000800)=[{&(0x7f0000000000)=""/31, 0x70800}, {0x0}], 0x4, 0x0) 20:32:22 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000100)={0x0, 0xff05, 0x0}) 20:32:22 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x8447, 0x0) preadv(r0, &(0x7f0000000800)=[{&(0x7f0000000000)=""/31, 0x70802}, {0x0, 0x4}], 0x2, 0x0) 20:32:22 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x80104592, &(0x7f0000000100)={0xc00, 0xff00, 0x0}) 20:32:22 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x8447, 0x0) preadv(r0, &(0x7f0000000800)=[{&(0x7f0000000000)=""/31, 0x70800}, {0x0}], 0x8, 0x0) 20:32:23 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000100)={0x0, 0xff0a, 0x0}) 20:32:23 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x8447, 0x0) preadv(r0, &(0x7f0000000800)=[{&(0x7f0000000000)=""/31, 0x70802}, {0x0, 0x5}], 0x2, 0x0) 20:32:23 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000100)={0x0, 0xff06, 0x0}) 20:32:23 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) r4 = dup(r3) write$P9_RLOPEN(r4, 0x0, 0x0) ioctl$PPPOEIOCSFWD(r4, 0x4008b100, &(0x7f0000000380)={0x18, 0x0, {0x2, @random="8261cddbe774", 'bridg[sears\xc2\xff\x00\x01\x00'}}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) io_setup(0x80000001, &(0x7f0000000140)) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r5, 0x1000008912, &(0x7f0000000140)="0800b5055e0bcfe87b0071") r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) syz_open_dev$vcsa(&(0x7f00000003c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0xfbb007fd6f92a5e8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000400)={0x0, 0x9, 0x20}, &(0x7f0000000440)=0x8) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r8 = accept4(r7, 0x0, 0x0, 0x0) dup(r8) ioctl$sock_kcm_SIOCKCMCLONE(r8, 0x89e2, &(0x7f0000000300)={r6}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r10) r11 = socket(0x40000000015, 0x5, 0x0) close(r11) r12 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r12, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r12, &(0x7f0000d83fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r12, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r11, 0x84, 0x66, &(0x7f0000000000)={r13}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_RTOINFO(r10, 0x84, 0x0, &(0x7f0000000140)={r13}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_CONTEXT(r9, 0x84, 0x11, &(0x7f0000000480)={r13, 0x1fc}, 0x8) r14 = accept4(r6, 0x0, 0x0, 0x0) r15 = dup(r14) write$P9_RLOPEN(r15, 0x0, 0x0) stat(&(0x7f0000000540)='./bus\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) r17 = socket$alg(0x26, 0x5, 0x0) bind$alg(r17, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) accept4(r17, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r17, 0x117, 0x1, &(0x7f00000004c0)="f1938fa0f458244d0160d10c4cf96e06d6b4cc29532556512084208770078aa5666052715389de965b", 0x29) lstat(&(0x7f0000000500)='./bus\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r18) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@dev, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in=@remote}}, &(0x7f0000000100)=0xe8) write$P9_RSTATu(r15, &(0x7f00000005c0)=ANY=[@ANYBLOB="67000052000600090000002004000000000002000000000000040003ffa80000080000f13c92ba57ef8be787000000000000ff030000656c696e7578776c616e30776c614e30252a620765762b2601007f00000000000000000010009cb7089b6b5d1b16419010b729f357886b535e1051fe3a8e6be5000000", @ANYRES32=r16, @ANYRES32=r18, @ANYRES32=r19], 0x67) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x27, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 20:32:23 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x80104592, &(0x7f0000000100)={0xd00, 0xff00, 0x0}) 20:32:23 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0800b5055e0bcfe87b0071") getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, &(0x7f00000000c0)={'NETMAP\x00'}, &(0x7f0000000100)=0x1e) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/btrfs-control\x00', 0x200000, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000040)=0x9, 0x4) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 20:32:23 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000100)={0x0, 0xff0b, 0x0}) 20:32:23 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000100)={0x0, 0xff07, 0x0}) 20:32:23 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x8447, 0x0) preadv(r0, &(0x7f0000000800)=[{&(0x7f0000000000)=""/31, 0x70800}, {0x0}], 0x2, 0x2) 20:32:23 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x8447, 0x0) preadv(r0, &(0x7f0000000800)=[{&(0x7f0000000000)=""/31, 0x70802}, {0x0, 0x6}], 0x2, 0x0) 20:32:23 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x80104592, &(0x7f0000000100)={0xe00, 0xff00, 0x0}) 20:32:23 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0800b5055e0bcfe87b0071") open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 20:32:23 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000100)={0x0, 0xff0c, 0x0}) 20:32:23 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x8447, 0x0) preadv(r0, &(0x7f0000000800)=[{&(0x7f0000000000)=""/31, 0x70802}, {0x0, 0x7}], 0x2, 0x0) 20:32:23 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x8447, 0x0) preadv(r0, &(0x7f0000000800)=[{&(0x7f0000000000)=""/31, 0x70800}, {0x0}], 0x2, 0x3) 20:32:23 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000100)={0x0, 0xff08, 0x0}) 20:32:23 executing program 0: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) mknodat(r0, &(0x7f0000000080)='./bus\x00', 0x8000, 0x1d) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0800b5055e0bcfe87b0071") open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 20:32:23 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x80104592, &(0x7f0000000100)={0x1100, 0xff00, 0x0}) 20:32:23 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000100)={0x0, 0xff0d, 0x0}) 20:32:23 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0800b5055e0bcfe87b0071") r1 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x8dc4, 0x241000) getsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xfffffffc, 0x0, 0x100000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) 20:32:23 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000100)={0x0, 0xff09, 0x0}) 20:32:23 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x8447, 0x0) preadv(r0, &(0x7f0000000800)=[{&(0x7f0000000000)=""/31, 0x70802}, {0x0, 0x8}], 0x2, 0x0) 20:32:23 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x8447, 0x0) preadv(r0, &(0x7f0000000800)=[{&(0x7f0000000000)=""/31, 0x70800}, {0x0}], 0x2, 0x4) 20:32:23 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x80104592, &(0x7f0000000100)={0x1200, 0xff00, 0x0}) 20:32:23 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000100)={0x0, 0xff0a, 0x0}) [ 231.071578][T32456] ------------[ cut here ]------------ [ 231.077587][T32456] WARNING: CPU: 1 PID: 32456 at drivers/media/common/videobuf2/videobuf2-core.c:1882 __vb2_queue_cancel+0xa57/0xd60 [ 231.089815][T32456] Kernel panic - not syncing: panic_on_warn set ... [ 231.096407][T32456] CPU: 1 PID: 32456 Comm: syz-executor.1 Not tainted 5.4.0-rc4+ #0 [ 231.104300][T32456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 231.114463][T32456] Call Trace: [ 231.117750][T32456] dump_stack+0x1d8/0x2f8 [ 231.122073][T32456] panic+0x264/0x7a9 [ 231.125973][T32456] ? __warn+0x105/0x210 [ 231.130129][T32456] ? __vb2_queue_cancel+0xa57/0xd60 [ 231.135311][T32456] __warn+0x20e/0x210 [ 231.139630][T32456] ? __vb2_queue_cancel+0xa57/0xd60 [ 231.144994][T32456] report_bug+0x1b6/0x2f0 [ 231.149315][T32456] ? __vb2_queue_cancel+0xa57/0xd60 [ 231.154672][T32456] do_error_trap+0xd7/0x440 [ 231.159333][T32456] do_invalid_op+0x36/0x40 [ 231.163998][T32456] ? __vb2_queue_cancel+0xa57/0xd60 [ 231.169467][T32456] invalid_op+0x23/0x30 [ 231.173605][T32456] RIP: 0010:__vb2_queue_cancel+0xa57/0xd60 [ 231.179426][T32456] Code: ff e8 ad 4d b3 fc 48 8b 55 d0 e9 cc fc ff ff e8 af 0e 7a fc eb 05 e8 a8 0e 7a fc 48 83 c4 48 5b 41 5c 41 5d 41 5e 41 5f 5d c3 <0f> 0b 4d 8d ac 24 28 02 00 00 4c 89 e9 48 c1 e9 03 48 b8 00 00 00 [ 231.199576][T32456] RSP: 0018:ffff88805863fbb0 EFLAGS: 00010202 [ 231.206607][T32456] RAX: ffff88805b350340 RBX: 0000000000000001 RCX: 0000000000000000 [ 231.215186][T32456] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 231.223271][T32456] RBP: ffff88805863fc20 R08: ffffffff84f92b85 R09: ffffed1043014e88 [ 231.231333][T32456] R10: ffffed1043014e88 R11: 0000000000000000 R12: ffff8882180a71f8 [ 231.239485][T32456] R13: ffff8882180a71f8 R14: 1ffff11043014e9a R15: 1ffff11043014e87 [ 231.247598][T32456] ? __vb2_queue_cancel+0x105/0xd60 [ 231.252927][T32456] vb2_core_queue_release+0x51/0x240 [ 231.258323][T32456] vb2_fop_release+0x154/0x1e0 [ 231.263440][T32456] vivid_fop_release+0x5ae/0x700 [ 231.268464][T32456] v4l2_release+0x1da/0x360 [ 231.272954][T32456] ? vivid_req_validate+0xc0/0xc0 [ 231.277965][T32456] ? v4l2_open+0x310/0x310 [ 231.282394][T32456] __fput+0x2e4/0x740 [ 231.286382][T32456] ____fput+0x15/0x20 [ 231.290645][T32456] task_work_run+0x17e/0x1b0 [ 231.296365][T32456] prepare_exit_to_usermode+0x459/0x580 [ 231.301987][T32456] syscall_return_slowpath+0x113/0x4a0 [ 231.307622][T32456] do_syscall_64+0x11f/0x1c0 [ 231.312222][T32456] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 231.318098][T32456] RIP: 0033:0x413ad1 [ 231.321986][T32456] Code: 75 14 b8 03 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 1b 00 00 c3 48 83 ec 08 e8 0a fc ff ff 48 89 04 24 b8 03 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 231.341594][T32456] RSP: 002b:00007ffeeb1c2620 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 231.350008][T32456] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 0000000000413ad1 [ 231.358678][T32456] RDX: 0000001b2e820000 RSI: 0000000000000000 RDI: 0000000000000003 [ 231.366652][T32456] RBP: 0000000000000001 R08: 000000008d70a52b R09: 000000008d70a52f [ 231.374988][T32456] R10: 00007ffeeb1c2700 R11: 0000000000000293 R12: 000000000075bf20 [ 231.383052][T32456] R13: 0000000000038671 R14: 00000000007601c8 R15: 000000000075bf2c [ 231.392735][T32456] Kernel Offset: disabled [ 231.397247][T32456] Rebooting in 86400 seconds..