[ 36.026292][ T26] audit: type=1800 audit(1550659472.241:28): pid=7425 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="ssh" dev="sda1" ino=2417 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 36.703805][ T26] audit: type=1800 audit(1550659472.961:29): pid=7425 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0 [ 36.724941][ T26] audit: type=1800 audit(1550659472.961:30): pid=7425 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2423 res=0 [....] startpar: service(s) returned failure: ssh ...[?25l[?1c7[FAIL8[?25h[?0c failed! Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.175' (ECDSA) to the list of known hosts. 2019/02/20 10:44:43 fuzzer started 2019/02/20 10:44:45 dialing manager at 10.128.0.26:33245 2019/02/20 10:44:46 syscalls: 1 2019/02/20 10:44:46 code coverage: enabled 2019/02/20 10:44:46 comparison tracing: enabled 2019/02/20 10:44:46 extra coverage: extra coverage is not supported by the kernel 2019/02/20 10:44:46 setuid sandbox: enabled 2019/02/20 10:44:46 namespace sandbox: enabled 2019/02/20 10:44:46 Android sandbox: /sys/fs/selinux/policy does not exist 2019/02/20 10:44:46 fault injection: enabled 2019/02/20 10:44:46 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/02/20 10:44:46 net packet injection: enabled 2019/02/20 10:44:46 net device setup: enabled 10:47:33 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000000)={0x3c53}) syzkaller login: [ 216.909369][ T7613] IPVS: ftp: loaded support on port[0] = 21 10:47:33 executing program 1: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000800)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r2, 0xc02c5341, &(0x7f00000000c0)) [ 217.033964][ T7613] chnl_net:caif_netlink_parms(): no params data found [ 217.129778][ T7613] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.139940][ T7613] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.148389][ T7613] device bridge_slave_0 entered promiscuous mode [ 217.157315][ T7613] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.164696][ T7613] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.172797][ T7613] device bridge_slave_1 entered promiscuous mode [ 217.197099][ T7613] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 217.199644][ T7616] IPVS: ftp: loaded support on port[0] = 21 [ 217.212098][ T7613] bond0: Enslaving bond_slave_1 as an active interface with an up link 10:47:33 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000000580)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='maps\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000237, 0x1f000000) [ 217.238547][ T7613] team0: Port device team_slave_0 added [ 217.247618][ T7613] team0: Port device team_slave_1 added [ 217.333376][ T7613] device hsr_slave_0 entered promiscuous mode [ 217.371557][ T7613] device hsr_slave_1 entered promiscuous mode 10:47:33 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='gid_map\x00') read(r0, 0x0, 0x0) [ 217.442444][ T7618] IPVS: ftp: loaded support on port[0] = 21 [ 217.454928][ T7613] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.462608][ T7613] bridge0: port 2(bridge_slave_1) entered forwarding state [ 217.470329][ T7613] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.477388][ T7613] bridge0: port 1(bridge_slave_0) entered forwarding state [ 217.663920][ T7616] chnl_net:caif_netlink_parms(): no params data found [ 217.706941][ T7613] 8021q: adding VLAN 0 to HW filter on device bond0 [ 217.709265][ T7621] IPVS: ftp: loaded support on port[0] = 21 [ 217.739268][ T3479] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 217.761022][ T3479] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.779574][ T3479] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.789101][ T3479] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready 10:47:34 executing program 4: syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x4, 0x0) [ 217.826546][ T7613] 8021q: adding VLAN 0 to HW filter on device team0 [ 217.893635][ T7616] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.903568][ T7616] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.922412][ T7616] device bridge_slave_0 entered promiscuous mode [ 217.945520][ T2987] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 217.960889][ T2987] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.967959][ T2987] bridge0: port 1(bridge_slave_0) entered forwarding state [ 217.991079][ T7618] chnl_net:caif_netlink_parms(): no params data found [ 218.001913][ T7616] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.008992][ T7616] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.019269][ T7616] device bridge_slave_1 entered promiscuous mode [ 218.054238][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 218.064028][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.071125][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 218.094137][ T7616] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 218.095894][ T7629] IPVS: ftp: loaded support on port[0] = 21 [ 218.121843][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 218.135310][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready 10:47:34 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x2, 0x0) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f00000000c0)) [ 218.180780][ T7616] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 218.197059][ T7613] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 218.212282][ T7613] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 218.229147][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 218.242440][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 218.253198][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 218.263657][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 218.273923][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 218.284201][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 218.294645][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 218.304354][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 218.337150][ T7616] team0: Port device team_slave_0 added [ 218.344016][ T7616] team0: Port device team_slave_1 added [ 218.364322][ T7618] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.371708][ T7618] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.379377][ T7618] device bridge_slave_0 entered promiscuous mode [ 218.389967][ T7618] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.397130][ T7618] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.405132][ T7618] device bridge_slave_1 entered promiscuous mode [ 218.427469][ T7631] IPVS: ftp: loaded support on port[0] = 21 [ 218.483239][ T7616] device hsr_slave_0 entered promiscuous mode [ 218.530551][ T7616] device hsr_slave_1 entered promiscuous mode [ 218.610339][ T7618] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 218.652842][ T7618] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 218.700186][ T7618] team0: Port device team_slave_0 added [ 218.709279][ T7618] team0: Port device team_slave_1 added [ 218.724727][ T7621] chnl_net:caif_netlink_parms(): no params data found [ 218.793185][ T7618] device hsr_slave_0 entered promiscuous mode [ 218.830707][ T7618] device hsr_slave_1 entered promiscuous mode [ 218.902014][ T7613] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 218.993176][ T7621] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.001460][ T7621] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.009141][ T7621] device bridge_slave_0 entered promiscuous mode [ 219.016999][ T7621] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.024181][ T7621] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.032214][ T7621] device bridge_slave_1 entered promiscuous mode 10:47:35 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000000)={0x3c53}) [ 219.071644][ T7618] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.078724][ T7618] bridge0: port 2(bridge_slave_1) entered forwarding state [ 219.086132][ T7618] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.093241][ T7618] bridge0: port 1(bridge_slave_0) entered forwarding state 10:47:35 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000000)={0x3c53}) 10:47:35 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000000)={0x3c53}) [ 219.155754][ T7621] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 219.179339][ T2987] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.188528][ T2987] bridge0: port 2(bridge_slave_1) entered disabled state 10:47:35 executing program 0: ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000000)={0x3c53}) [ 219.238210][ T7616] 8021q: adding VLAN 0 to HW filter on device bond0 10:47:35 executing program 0: ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000000)={0x3c53}) [ 219.286547][ T7621] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 219.302668][ T7631] chnl_net:caif_netlink_parms(): no params data found 10:47:35 executing program 0: ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000000)={0x3c53}) [ 219.355779][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 219.364860][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 219.389567][ T7616] 8021q: adding VLAN 0 to HW filter on device team0 10:47:35 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000000)={0x3c53}) [ 219.410808][ T7621] team0: Port device team_slave_0 added [ 219.416622][ T7629] chnl_net:caif_netlink_parms(): no params data found [ 219.459528][ T7621] team0: Port device team_slave_1 added [ 219.508303][ T7618] 8021q: adding VLAN 0 to HW filter on device bond0 [ 219.531790][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 219.550533][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 219.558818][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.565917][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 219.573733][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 219.582684][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 219.591065][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.598093][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 219.605861][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 219.614253][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 219.622912][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 219.633205][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 219.646332][ T7631] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.654699][ T7631] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.662931][ T7631] device bridge_slave_0 entered promiscuous mode [ 219.676632][ T7631] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.683723][ T7631] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.691818][ T7631] device bridge_slave_1 entered promiscuous mode [ 219.720607][ T7631] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 219.730661][ T7631] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 219.739088][ T3479] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 219.747852][ T3479] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 219.756077][ T3479] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 219.764533][ T3479] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 219.843519][ T7621] device hsr_slave_0 entered promiscuous mode [ 219.880675][ T7621] device hsr_slave_1 entered promiscuous mode [ 219.940182][ T7618] 8021q: adding VLAN 0 to HW filter on device team0 [ 219.967364][ T7624] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 219.977615][ T7624] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 219.986230][ T7624] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 219.993864][ T7624] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 220.001567][ T7624] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 220.009663][ T7624] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 220.038077][ T7631] team0: Port device team_slave_0 added [ 220.043988][ T7629] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.051387][ T7629] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.059023][ T7629] device bridge_slave_0 entered promiscuous mode [ 220.067165][ T7629] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.074337][ T7629] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.083068][ T7629] device bridge_slave_1 entered promiscuous mode [ 220.091587][ T7616] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 220.101394][ T7624] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 220.109842][ T7624] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 220.118399][ T7624] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.125479][ T7624] bridge0: port 1(bridge_slave_0) entered forwarding state [ 220.133803][ T7624] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 220.142461][ T7624] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 220.150987][ T7624] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.158032][ T7624] bridge0: port 2(bridge_slave_1) entered forwarding state [ 220.173082][ T7631] team0: Port device team_slave_1 added [ 220.200182][ T7624] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 220.208824][ T7624] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 220.218456][ T7624] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 220.227072][ T7624] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 220.236212][ T7624] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 220.244954][ T7624] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 220.253924][ T7624] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 220.270088][ T7629] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 220.288558][ T7629] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 220.314733][ T7629] team0: Port device team_slave_0 added [ 220.324108][ T7629] team0: Port device team_slave_1 added [ 220.383734][ T7631] device hsr_slave_0 entered promiscuous mode [ 220.420896][ T7631] device hsr_slave_1 entered promiscuous mode [ 220.477495][ T7616] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 220.494899][ T7624] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 220.504982][ T7624] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 220.563722][ T7629] device hsr_slave_0 entered promiscuous mode [ 220.630692][ T7629] device hsr_slave_1 entered promiscuous mode [ 220.688717][ T7621] 8021q: adding VLAN 0 to HW filter on device bond0 [ 220.755730][ T7621] 8021q: adding VLAN 0 to HW filter on device team0 [ 220.764879][ T7618] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 220.782120][ T7618] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 220.792830][ T7624] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready 10:47:37 executing program 1: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000800)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r2, 0xc02c5341, &(0x7f00000000c0)) [ 220.809005][ T7624] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 220.821554][ T7624] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 220.842337][ T7624] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 220.869759][ T2987] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 220.890108][ T2987] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 220.905590][ T2987] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.912694][ T2987] bridge0: port 1(bridge_slave_0) entered forwarding state [ 220.921336][ T2987] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 220.944092][ T2987] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 220.952837][ T2987] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 220.962457][ T2987] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.969515][ T2987] bridge0: port 2(bridge_slave_1) entered forwarding state [ 220.997258][ T7618] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 221.005619][ T7624] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 221.022122][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 221.062940][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 221.076634][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 221.085659][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 221.095018][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 221.103626][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready 10:47:37 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000000)={0x3c53}) [ 221.111972][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 221.120142][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 221.141956][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 221.166032][ T7631] 8021q: adding VLAN 0 to HW filter on device bond0 [ 221.178531][ T7629] 8021q: adding VLAN 0 to HW filter on device bond0 [ 221.188779][ T7621] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 221.203058][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 221.216119][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 221.244096][ T7629] 8021q: adding VLAN 0 to HW filter on device team0 [ 221.254593][ T7624] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 221.263806][ T7624] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 221.272629][ T7624] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 221.280148][ T7624] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 221.293282][ T7631] 8021q: adding VLAN 0 to HW filter on device team0 [ 221.308798][ T7621] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 221.316238][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 221.325315][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 221.333804][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.340888][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 221.348829][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 221.371324][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 221.381128][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 221.389441][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.396560][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 221.412280][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready 10:47:37 executing program 3: setrlimit(0x7, &(0x7f0000000000)) socket$key(0xf, 0x3, 0x2) [ 221.421451][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 221.437899][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.444984][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 221.466563][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 221.477426][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 221.486090][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 221.494740][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 221.522328][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 221.530103][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 221.540637][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 221.548996][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 221.557777][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 221.566316][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 221.574628][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 221.583379][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 221.591784][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.599030][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 221.606951][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 221.615454][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 221.624425][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 221.633330][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 221.643263][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 221.651158][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 221.659332][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 221.680972][ T7631] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 221.688701][ T7624] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 221.699842][ T7624] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 221.715459][ T7629] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 221.735332][ T7629] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 221.748052][ T7624] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 221.756627][ T7624] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 221.765060][ T7624] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 221.773379][ T7624] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 221.783811][ T7624] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 221.802676][ T7629] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 221.828948][ T7631] 8021q: adding VLAN 0 to HW filter on device batadv0 10:47:38 executing program 4: r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_RESERVED_SIZE(r0, 0x2272, &(0x7f0000000000)) 10:47:38 executing program 5: perf_event_open(&(0x7f000025c000)={0x400000002, 0x70, 0xc3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) 10:47:38 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000180)=0x2, 0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) getpgrp(0x0) sendto$inet6(r0, &(0x7f00000001c0), 0x0, 0x20000003, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x410) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) 10:47:38 executing program 1: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000800)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r2, 0xc02c5341, &(0x7f00000000c0)) 10:47:38 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000000)={0x3c53}) 10:47:38 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") msgget(0x2, 0x0) 10:47:38 executing program 4: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$addseals(r0, 0x409, 0x0) 10:47:38 executing program 1: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000800)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r2, 0xc02c5341, &(0x7f00000000c0)) 10:47:38 executing program 2: syz_mount_image$ntfs(&(0x7f0000000000)='ntfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={[{@dmask={'dmask'}}, {@fmask={'fmask'}}]}) 10:47:38 executing program 0: openat$uinput(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000000)={0x3c53}) 10:47:38 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x5, 0x0) 10:47:38 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_targets\x00') preadv(r0, &(0x7f00000017c0), 0x1d0, 0x100000) 10:47:38 executing program 1: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000800)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r2, 0xc02c5341, &(0x7f00000000c0)) [ 222.234820][ T7714] ntfs: (device loop2): parse_options(): Unrecognized mount option . 10:47:38 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_targets\x00') preadv(r0, &(0x7f00000017c0), 0x1d0, 0x800000000000000) [ 222.328123][ T7714] ntfs: (device loop2): parse_options(): Unrecognized mount option . [ 222.361462][ C1] hrtimer: interrupt took 35375 ns 10:47:38 executing program 0: openat$uinput(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000000)={0x3c53}) 10:47:38 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x2d) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) write(r1, &(0x7f0000000100), 0x20158) accept(r0, 0x0, 0x0) 10:47:38 executing program 2: syz_mount_image$ntfs(&(0x7f0000000000)='ntfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={[{@dmask={'dmask'}}, {@fmask={'fmask'}}]}) 10:47:38 executing program 1: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000800)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r2, 0xc02c5341, &(0x7f00000000c0)) 10:47:38 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='mounts\x00') preadv(r0, &(0x7f00000017c0), 0x1d0, 0x0) 10:47:38 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_targets\x00') preadv(r0, &(0x7f00000017c0), 0x1d0, 0x100000) 10:47:38 executing program 0: openat$uinput(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000000)={0x3c53}) [ 222.601908][ T7751] ntfs: (device loop2): parse_options(): Unrecognized mount option . 10:47:38 executing program 1: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000800)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r2, 0xc02c5341, &(0x7f00000000c0)) 10:47:39 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, 0x0) 10:47:39 executing program 2: syz_mount_image$ntfs(&(0x7f0000000000)='ntfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={[{@dmask={'dmask'}}, {@fmask={'fmask'}}]}) 10:47:39 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_targets\x00') preadv(r0, &(0x7f00000017c0), 0x1d0, 0x100000) 10:47:39 executing program 1: memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) syz_open_dev$sndseq(&(0x7f0000000800)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(0xffffffffffffffff, 0xc02c5341, &(0x7f00000000c0)) 10:47:39 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r0, 0x8948, &(0x7f0000000180)={'ip6gre0\x00\x01\x80\x00\x02\x00'}) [ 222.938464][ T7782] ntfs: (device loop2): parse_options(): Unrecognized mount option . 10:47:39 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCFLSH(r0, 0x5441, 0x0) 10:47:39 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, 0x0) 10:47:39 executing program 1: memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) syz_open_dev$sndseq(&(0x7f0000000800)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(0xffffffffffffffff, 0xc02c5341, &(0x7f00000000c0)) 10:47:39 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_targets\x00') preadv(r0, &(0x7f00000017c0), 0x1d0, 0x100000) 10:47:39 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCFLSH(r0, 0x5433, 0x0) 10:47:39 executing program 2: syz_mount_image$ntfs(&(0x7f0000000000)='ntfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={[{@dmask={'dmask'}}, {@fmask={'fmask'}}]}) [ 223.438526][ T7809] ntfs: (device loop2): parse_options(): Unrecognized mount option . 10:47:39 executing program 5: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uhid\x00', 0x802, 0x0) r1 = open(&(0x7f0000000340)='./bus\x00', 0x141042, 0x0) truncate(&(0x7f0000000040)='./bus\x00', 0x10001) sendfile(r0, r1, 0x0, 0x90ad) 10:47:39 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000040)=""/47) 10:47:39 executing program 1: memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) syz_open_dev$sndseq(&(0x7f0000000800)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(0xffffffffffffffff, 0xc02c5341, &(0x7f00000000c0)) 10:47:39 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x1d0, 0x100000) 10:47:39 executing program 2: syz_mount_image$ntfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={[{@dmask={'dmask'}}, {@fmask={'fmask'}}]}) 10:47:39 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, 0x0) [ 223.608816][ T7820] UHID_CREATE from different security context by process 17 (syz-executor.5), this is not allowed. 10:47:39 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x1d0, 0x100000) 10:47:40 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000000)=ANY=[@ANYBLOB="0f6f03fb"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:47:40 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000000)) 10:47:40 executing program 1: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = dup2(0xffffffffffffffff, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, &(0x7f00000000c0)) 10:47:40 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000180)) 10:47:40 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x1d0, 0x100000) 10:47:40 executing program 2: syz_mount_image$ntfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={[{@dmask={'dmask'}}, {@fmask={'fmask'}}]}) [ 223.911990][ T7852] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/l1tf.html for details. 10:47:40 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000000)) 10:47:40 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_targets\x00') preadv(r0, &(0x7f00000017c0), 0x1d0, 0x100000) 10:47:40 executing program 1: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = dup2(0xffffffffffffffff, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, &(0x7f00000000c0)) 10:47:40 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0x40405514, 0x0) 10:47:40 executing program 2: syz_mount_image$ntfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={[{@dmask={'dmask'}}, {@fmask={'fmask'}}]}) 10:47:40 executing program 1: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = dup2(0xffffffffffffffff, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, &(0x7f00000000c0)) 10:47:40 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x7) ioctl$TCFLSH(r0, 0x8925, 0x0) 10:47:40 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_targets\x00') preadv(r0, &(0x7f00000017c0), 0x1d0, 0x100000) 10:47:40 executing program 3: creat(&(0x7f0000000040)='./bus\x00', 0x0) r0 = open(&(0x7f0000000540)='./bus\x00', 0x0, 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000140)={0x0, 0x4, 0x2, 0x0, 0x1, [{}]}) 10:47:40 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000000)) 10:47:40 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000800)='/dev/snd/seq\x00', 0x0, 0x0) r1 = dup2(r0, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, &(0x7f00000000c0)) [ 224.310917][ T26] audit: type=1804 audit(1550659660.561:31): pid=7889 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir946792497/syzkaller.3zs4z6/9/bus" dev="sda1" ino=16546 res=1 [ 224.400250][ T7897] sp0: Synchronizing with TNC 10:47:40 executing program 3: syz_mount_image$nfs(&(0x7f0000000040)='nfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 10:47:40 executing program 2: syz_mount_image$ntfs(&(0x7f0000000000)='ntfs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={[{@dmask={'dmask'}}, {@fmask={'fmask'}}]}) 10:47:40 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_targets\x00') preadv(r0, &(0x7f00000017c0), 0x1d0, 0x100000) [ 224.423678][ T26] audit: type=1804 audit(1550659660.601:32): pid=7889 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir946792497/syzkaller.3zs4z6/9/bus" dev="sda1" ino=16546 res=1 [ 224.463814][ T7897] sp1: Synchronizing with TNC 10:47:40 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") mkdir(&(0x7f0000000340)='./file0\x00', 0x0) clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000040)=@nullb='[d::]:/llb:\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, &(0x7f0000000140)='\x00') openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsetxattr(r0, 0x0, 0x0, 0x0, 0x0) [ 224.579439][ T26] audit: type=1804 audit(1550659660.611:33): pid=7889 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir946792497/syzkaller.3zs4z6/9/bus" dev="sda1" ino=16546 res=1 10:47:40 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000800)='/dev/snd/seq\x00', 0x0, 0x0) r1 = dup2(r0, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, &(0x7f00000000c0)) 10:47:41 executing program 2: syz_mount_image$ntfs(&(0x7f0000000000)='ntfs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={[{@dmask={'dmask'}}, {@fmask={'fmask'}}]}) 10:47:41 executing program 4: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_targets\x00') preadv(r0, &(0x7f00000017c0), 0x1d0, 0x100000) [ 224.835307][ T5] libceph: connect [d::]:6789 error -101 [ 224.849549][ T5] libceph: mon0 [d::]:6789 connect error 10:47:41 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x200000000000002, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) add_key$user(&(0x7f00000000c0)='user\x00', 0x0, &(0x7f00000001c0)="f8c48a14e265e0dc1f0d41bcf28556e7e7ff08658ba5f6a9c0a197648ff7f0bc1fa4d8f5175f69309b0b0c8ebc2cb98698aba17e87ef22ac1bf192a53b6660fe49f0d5b47695dff942508734a82458743551488cb3b953c1f591011149fc3f7ed821d04df490825456b0d2fb387415bc42b0923ba08124915fdaeddb54e5b6adca534c1511a730695c", 0x89, 0x0) 10:47:41 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000800)='/dev/snd/seq\x00', 0x0, 0x0) r1 = dup2(r0, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, &(0x7f00000000c0)) 10:47:41 executing program 3: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) truncate(&(0x7f0000000240)='./bus\x00', 0x800) r1 = open(&(0x7f0000000540)='./bus\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) lseek(r0, 0x0, 0x2) sendfile(r0, r1, 0x0, 0x8000fffffffe) truncate(&(0x7f0000000080)='./bus\x00', 0x0) [ 224.910712][ T5] libceph: connect [d::]:6789 error -101 10:47:41 executing program 2: syz_mount_image$ntfs(&(0x7f0000000000)='ntfs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={[{@dmask={'dmask'}}, {@fmask={'fmask'}}]}) [ 224.968648][ T5] libceph: mon0 [d::]:6789 connect error 10:47:41 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") mkdir(&(0x7f0000000340)='./file0\x00', 0x0) clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000040)=@nullb='[d::]:/llb:\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, &(0x7f0000000140)='\x00') openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsetxattr(r0, 0x0, 0x0, 0x0, 0x0) 10:47:41 executing program 4: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_targets\x00') preadv(r0, &(0x7f00000017c0), 0x1d0, 0x100000) [ 225.070231][ T26] audit: type=1804 audit(1550659661.321:34): pid=7966 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir946792497/syzkaller.3zs4z6/11/bus" dev="sda1" ino=16546 res=1 10:47:41 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x200000000000002, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) add_key$user(&(0x7f00000000c0)='user\x00', 0x0, &(0x7f00000001c0)="f8c48a14e265e0dc1f0d41bcf28556e7e7ff08658ba5f6a9c0a197648ff7f0bc1fa4d8f5175f69309b0b0c8ebc2cb98698aba17e87ef22ac1bf192a53b6660fe49f0d5b47695dff942508734a82458743551488cb3b953c1f591011149fc3f7ed821d04df490825456b0d2fb387415bc42b0923ba08124915fdaeddb54e5b6adca534c1511a730695c", 0x89, 0x0) 10:47:41 executing program 1: r0 = memfd_create(0x0, 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000800)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r2, 0xc02c5341, &(0x7f00000000c0)) [ 225.241411][ T26] audit: type=1804 audit(1550659661.501:35): pid=7966 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir946792497/syzkaller.3zs4z6/11/bus" dev="sda1" ino=16546 res=1 10:47:41 executing program 3: 10:47:41 executing program 2: syz_mount_image$ntfs(&(0x7f0000000000)='ntfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 10:47:41 executing program 4: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_targets\x00') preadv(r0, &(0x7f00000017c0), 0x1d0, 0x100000) [ 225.394914][ T5] libceph: connect [d::]:6789 error -101 [ 225.407269][ T5] libceph: mon0 [d::]:6789 connect error 10:47:41 executing program 1: r0 = memfd_create(0x0, 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000800)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r2, 0xc02c5341, &(0x7f00000000c0)) 10:47:41 executing program 5: 10:47:41 executing program 3: 10:47:41 executing program 2: syz_mount_image$ntfs(&(0x7f0000000000)='ntfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 10:47:41 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_targets\x00') preadv(r0, &(0x7f00000017c0), 0x1d0, 0x100000) [ 226.460960][ T5] libceph: connect [d::]:6789 error -101 [ 226.466675][ T5] libceph: mon0 [d::]:6789 connect error [ 228.461062][ T5] libceph: connect [d::]:6789 error -101 [ 228.466774][ T5] libceph: mon0 [d::]:6789 connect error [ 228.473258][ T5] libceph: connect [d::]:6789 error -101 [ 228.478917][ T5] libceph: mon0 [d::]:6789 connect error [ 229.423201][ T5] libceph: connect [d::]:6789 error -101 [ 229.428905][ T5] libceph: mon0 [d::]:6789 connect error [ 230.460798][ T5] libceph: connect [d::]:6789 error -101 [ 230.466541][ T5] libceph: mon0 [d::]:6789 connect error [ 231.421329][ T5] libceph: connect [d::]:6789 error -101 [ 231.427060][ T5] libceph: mon0 [d::]:6789 connect error [ 232.460731][ T5] libceph: connect [d::]:6789 error -101 [ 232.466426][ T5] libceph: mon0 [d::]:6789 connect error [ 233.420733][ T5] libceph: connect [d::]:6789 error -101 [ 233.426457][ T5] libceph: mon0 [d::]:6789 connect error [ 234.460792][ T5] libceph: connect [d::]:6789 error -101 [ 234.466533][ T5] libceph: mon0 [d::]:6789 connect error [ 235.422726][ T5] libceph: connect [d::]:6789 error -101 [ 235.428443][ T5] libceph: mon0 [d::]:6789 connect error [ 236.460617][ T5] libceph: connect [d::]:6789 error -101 [ 236.466313][ T5] libceph: mon0 [d::]:6789 connect error [ 237.420770][ T5] libceph: connect [d::]:6789 error -101 [ 237.426509][ T5] libceph: mon0 [d::]:6789 connect error [ 238.460574][ T5] libceph: connect [d::]:6789 error -101 [ 238.466386][ T5] libceph: mon0 [d::]:6789 connect error [ 239.420670][ T5] libceph: connect [d::]:6789 error -101 [ 239.426500][ T5] libceph: mon0 [d::]:6789 connect error [ 240.460723][ T5] libceph: connect [d::]:6789 error -101 [ 240.466565][ T5] libceph: mon0 [d::]:6789 connect error [ 241.420559][ T5] libceph: connect [d::]:6789 error -101 [ 241.426364][ T5] libceph: mon0 [d::]:6789 connect error [ 242.460729][ T5] libceph: connect [d::]:6789 error -101 [ 242.466568][ T5] libceph: mon0 [d::]:6789 connect error [ 243.421031][ T5] libceph: connect [d::]:6789 error -101 [ 243.426772][ T5] libceph: mon0 [d::]:6789 connect error [ 244.460647][ T5] libceph: connect [d::]:6789 error -101 [ 244.466474][ T5] libceph: mon0 [d::]:6789 connect error [ 245.420566][ T5] libceph: connect [d::]:6789 error -101 [ 245.426367][ T5] libceph: mon0 [d::]:6789 connect error [ 246.460796][ T5] libceph: connect [d::]:6789 error -101 [ 246.466585][ T5] libceph: mon0 [d::]:6789 connect error [ 247.420676][ T5] libceph: connect [d::]:6789 error -101 [ 247.426490][ T5] libceph: mon0 [d::]:6789 connect error [ 248.460746][ T5] libceph: connect [d::]:6789 error -101 [ 248.466494][ T5] libceph: mon0 [d::]:6789 connect error [ 249.420783][ T5] libceph: connect [d::]:6789 error -101 [ 249.426571][ T5] libceph: mon0 [d::]:6789 connect error [ 250.460608][ T5] libceph: connect [d::]:6789 error -101 [ 250.466440][ T5] libceph: mon0 [d::]:6789 connect error [ 251.421193][ T5] libceph: connect [d::]:6789 error -101 [ 251.426907][ T5] libceph: mon0 [d::]:6789 connect error [ 252.460697][ T5] libceph: connect [d::]:6789 error -101 [ 252.466400][ T5] libceph: mon0 [d::]:6789 connect error [ 253.420592][ T5] libceph: connect [d::]:6789 error -101 [ 253.426392][ T5] libceph: mon0 [d::]:6789 connect error [ 254.460692][ T5] libceph: connect [d::]:6789 error -101 [ 254.466393][ T5] libceph: mon0 [d::]:6789 connect error [ 255.421026][ T5] libceph: connect [d::]:6789 error -101 [ 255.426734][ T5] libceph: mon0 [d::]:6789 connect error [ 256.460660][ T5] libceph: connect [d::]:6789 error -101 [ 256.466591][ T5] libceph: mon0 [d::]:6789 connect error [ 257.420771][ T5] libceph: connect [d::]:6789 error -101 [ 257.426479][ T5] libceph: mon0 [d::]:6789 connect error [ 258.460654][ T5] libceph: connect [d::]:6789 error -101 [ 258.466517][ T5] libceph: mon0 [d::]:6789 connect error [ 259.420613][ T5] libceph: connect [d::]:6789 error -101 [ 259.426329][ T5] libceph: mon0 [d::]:6789 connect error [ 260.460620][ T5] libceph: connect [d::]:6789 error -101 [ 260.466321][ T5] libceph: mon0 [d::]:6789 connect error [ 261.420792][ T5] libceph: connect [d::]:6789 error -101 [ 261.426503][ T5] libceph: mon0 [d::]:6789 connect error [ 262.460619][ T5] libceph: connect [d::]:6789 error -101 [ 262.466338][ T5] libceph: mon0 [d::]:6789 connect error [ 263.420611][ T5] libceph: connect [d::]:6789 error -101 [ 263.426306][ T5] libceph: mon0 [d::]:6789 connect error [ 264.460737][ T5] libceph: connect [d::]:6789 error -101 [ 264.466504][ T5] libceph: mon0 [d::]:6789 connect error [ 265.420617][ T5] libceph: connect [d::]:6789 error -101 [ 265.426318][ T5] libceph: mon0 [d::]:6789 connect error [ 266.460635][ T5] libceph: connect [d::]:6789 error -101 [ 266.466344][ T5] libceph: mon0 [d::]:6789 connect error [ 267.420636][ T5] libceph: connect [d::]:6789 error -101 [ 267.426342][ T5] libceph: mon0 [d::]:6789 connect error [ 268.460574][ T5] libceph: connect [d::]:6789 error -101 [ 268.466282][ T5] libceph: mon0 [d::]:6789 connect error [ 269.420568][ T5] libceph: connect [d::]:6789 error -101 [ 269.426402][ T5] libceph: mon0 [d::]:6789 connect error [ 270.460659][ T5] libceph: connect [d::]:6789 error -101 [ 270.466376][ T5] libceph: mon0 [d::]:6789 connect error [ 271.420616][ T5] libceph: connect [d::]:6789 error -101 [ 271.426333][ T5] libceph: mon0 [d::]:6789 connect error [ 272.460670][ T5] libceph: connect [d::]:6789 error -101 [ 272.466378][ T5] libceph: mon0 [d::]:6789 connect error [ 273.420957][ T5] libceph: connect [d::]:6789 error -101 [ 273.426876][ T5] libceph: mon0 [d::]:6789 connect error [ 274.460779][ T5] libceph: connect [d::]:6789 error -101 [ 274.466644][ T5] libceph: mon0 [d::]:6789 connect error [ 275.420601][ T5] libceph: connect [d::]:6789 error -101 [ 275.426422][ T5] libceph: mon0 [d::]:6789 connect error [ 276.460676][ T5] libceph: connect [d::]:6789 error -101 [ 276.466687][ T5] libceph: mon0 [d::]:6789 connect error [ 277.420587][ T5] libceph: connect [d::]:6789 error -101 [ 277.426455][ T5] libceph: mon0 [d::]:6789 connect error [ 278.460576][ T5] libceph: connect [d::]:6789 error -101 [ 278.466697][ T5] libceph: mon0 [d::]:6789 connect error [ 279.421026][ T5] libceph: connect [d::]:6789 error -101 [ 279.426931][ T5] libceph: mon0 [d::]:6789 connect error [ 280.460683][ T5] libceph: connect [d::]:6789 error -101 [ 280.466549][ T5] libceph: mon0 [d::]:6789 connect error [ 281.420685][ T5] libceph: connect [d::]:6789 error -101 [ 281.426496][ T5] libceph: mon0 [d::]:6789 connect error [ 282.460697][ T5] libceph: connect [d::]:6789 error -101 [ 282.466412][ T5] libceph: mon0 [d::]:6789 connect error [ 283.421063][ T5] libceph: connect [d::]:6789 error -101 [ 283.426961][ T5] libceph: mon0 [d::]:6789 connect error [ 284.460779][ T5] libceph: connect [d::]:6789 error -101 [ 284.466475][ T5] libceph: mon0 [d::]:6789 connect error [ 285.052730][ T7624] libceph: connect [d::]:6789 error -101 [ 285.058610][ T7624] libceph: mon0 [d::]:6789 connect error 10:48:41 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") mkdir(&(0x7f0000000340)='./file0\x00', 0x0) clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000040)=@nullb='[d::]:/llb:\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, &(0x7f0000000140)='\x00') openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsetxattr(r0, 0x0, 0x0, 0x0, 0x0) 10:48:41 executing program 5: 10:48:41 executing program 1: r0 = memfd_create(0x0, 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000800)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r2, 0xc02c5341, &(0x7f00000000c0)) 10:48:41 executing program 3: 10:48:41 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_targets\x00') preadv(r0, &(0x7f00000017c0), 0x1d0, 0x100000) 10:48:41 executing program 2: syz_mount_image$ntfs(&(0x7f0000000000)='ntfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 10:48:41 executing program 3: 10:48:41 executing program 5: 10:48:41 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_targets\x00') preadv(r0, &(0x7f00000017c0), 0x1d0, 0x100000) [ 285.347089][ T8029] __ntfs_error: 3 callbacks suppressed [ 285.347095][ T8029] ntfs: (device loop2): ntfs_fill_super(): Unable to determine device size. 10:48:41 executing program 3: 10:48:41 executing program 1: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r2, 0xc02c5341, &(0x7f00000000c0)) 10:48:41 executing program 5: [ 287.065930][ T8056] IPVS: ftp: loaded support on port[0] = 21 [ 287.107929][ T499] device bridge_slave_1 left promiscuous mode [ 287.117278][ T499] bridge0: port 2(bridge_slave_1) entered disabled state [ 287.175507][ T499] device bridge_slave_0 left promiscuous mode [ 287.181806][ T499] bridge0: port 1(bridge_slave_0) entered disabled state [ 290.235526][ T499] device hsr_slave_1 left promiscuous mode [ 290.303398][ T499] device hsr_slave_0 left promiscuous mode [ 290.356299][ T499] team0 (unregistering): Port device team_slave_1 removed [ 290.367708][ T499] team0 (unregistering): Port device team_slave_0 removed [ 290.379633][ T499] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 290.436589][ T499] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 290.517528][ T499] bond0 (unregistering): Released all slaves [ 290.652071][ T8056] chnl_net:caif_netlink_parms(): no params data found [ 290.685137][ T8056] bridge0: port 1(bridge_slave_0) entered blocking state [ 290.692414][ T8056] bridge0: port 1(bridge_slave_0) entered disabled state [ 290.700004][ T8056] device bridge_slave_0 entered promiscuous mode [ 290.707532][ T8056] bridge0: port 2(bridge_slave_1) entered blocking state [ 290.714719][ T8056] bridge0: port 2(bridge_slave_1) entered disabled state [ 290.722422][ T8056] device bridge_slave_1 entered promiscuous mode [ 290.742433][ T8056] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 290.752484][ T8056] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 290.771382][ T8056] team0: Port device team_slave_0 added [ 290.778059][ T8056] team0: Port device team_slave_1 added [ 290.845322][ T8056] device hsr_slave_0 entered promiscuous mode [ 290.900683][ T8056] device hsr_slave_1 entered promiscuous mode [ 290.984635][ T8056] bridge0: port 2(bridge_slave_1) entered blocking state [ 290.991748][ T8056] bridge0: port 2(bridge_slave_1) entered forwarding state [ 290.999004][ T8056] bridge0: port 1(bridge_slave_0) entered blocking state [ 291.006097][ T8056] bridge0: port 1(bridge_slave_0) entered forwarding state [ 291.037805][ T8056] 8021q: adding VLAN 0 to HW filter on device bond0 [ 291.049286][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 291.058464][ T5] bridge0: port 1(bridge_slave_0) entered disabled state [ 291.066321][ T5] bridge0: port 2(bridge_slave_1) entered disabled state [ 291.078665][ T8056] 8021q: adding VLAN 0 to HW filter on device team0 [ 291.123783][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 291.132604][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 291.139649][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 291.161746][ T2987] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 291.170085][ T2987] bridge0: port 2(bridge_slave_1) entered blocking state [ 291.177193][ T2987] bridge0: port 2(bridge_slave_1) entered forwarding state [ 291.186082][ T2987] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 291.195545][ T2987] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 291.211509][ T8056] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 291.222226][ T8056] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 291.236744][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 291.245348][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 291.254141][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 291.271981][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 291.282410][ T8056] 8021q: adding VLAN 0 to HW filter on device batadv0 10:48:47 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") mkdir(&(0x7f0000000340)='./file0\x00', 0x0) clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000040)=@nullb='[d::]:/llb:\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, &(0x7f0000000140)='\x00') openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsetxattr(r0, 0x0, 0x0, 0x0, 0x0) 10:48:47 executing program 3: 10:48:47 executing program 5: 10:48:47 executing program 4: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_targets\x00') preadv(r0, &(0x7f00000017c0), 0x1d0, 0x100000) 10:48:47 executing program 1: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r2, 0xc02c5341, &(0x7f00000000c0)) 10:48:47 executing program 2: syz_mount_image$ntfs(&(0x7f0000000000)='ntfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={[{@dmask={'dmask'}}]}) 10:48:47 executing program 3: r0 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$sock_int(r0, 0x1, 0xa, &(0x7f00000051c0), 0x4) [ 291.388950][ T8066] ntfs: (device loop2): parse_options(): Unrecognized mount option . 10:48:47 executing program 5: ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000140)=0x0) perf_event_open(&(0x7f0000000200)={0x3, 0x70, 0x0, 0xb1, 0x1ff, 0x3ff, 0x0, 0x6, 0x84002, 0x4, 0x5, 0x0, 0x4, 0x1, 0x0, 0x6072b802, 0x401, 0x100000001, 0x101, 0x0, 0x4, 0x7ff, 0x0, 0x0, 0x1, 0x40, 0x0, 0x0, 0x80000000, 0x72, 0x40, 0xe040, 0xb65, 0x100, 0x401, 0x2b6, 0x2, 0x5, 0x0, 0x4, 0x3, @perf_config_ext={0x339, 0x20}, 0x0, 0x800, 0x100000001, 0x7, 0x100000000, 0x1f}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x0, 0x8012004000000084) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) ioprio_set$uid(0x1000000003, 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ftruncate(r2, 0x208200) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000780)='./bus\x00', 0x0, 0x0) listen(r1, 0x3) 10:48:47 executing program 2: syz_mount_image$ntfs(&(0x7f0000000000)='ntfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={[{@dmask={'dmask'}}]}) 10:48:47 executing program 1: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r2, 0xc02c5341, &(0x7f00000000c0)) 10:48:47 executing program 4: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_targets\x00') preadv(r0, &(0x7f00000017c0), 0x1d0, 0x100000) 10:48:47 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xffffffffffffffff) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000000), 0x0) 10:48:47 executing program 3: r0 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$sock_int(r0, 0x1, 0xa, &(0x7f00000051c0), 0x4) [ 291.639825][ T8094] ntfs: (device loop2): parse_options(): Unrecognized mount option . [ 291.666677][ T26] audit: type=1804 audit(1550659727.921:37): pid=8098 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir195456208/syzkaller.YvPa2M/16/file0/bus" dev="ramfs" ino=27681 res=1 10:48:48 executing program 1: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) syz_open_dev$sndseq(&(0x7f0000000800)='/dev/snd/seq\x00', 0x0, 0x0) r1 = dup2(0xffffffffffffffff, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, &(0x7f00000000c0)) 10:48:48 executing program 2: syz_mount_image$ntfs(&(0x7f0000000000)='ntfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={[{@dmask={'dmask'}}]}) 10:48:48 executing program 4: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_targets\x00') preadv(r0, &(0x7f00000017c0), 0x1d0, 0x100000) 10:48:48 executing program 3: fdatasync(0xffffffffffffffff) accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) write$cgroup_type(r0, 0x0, 0x0) clone(0x100002102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000380)={{{@in6=@remote, @in=@empty}}, {{@in=@multicast2}, 0x0, @in6=@dev}}, &(0x7f00000000c0)=0xe8) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_misc(r1, &(0x7f00000000c0)=ANY=[], 0x7fffffff) recvfrom(r2, &(0x7f0000000180)=""/184, 0xfffffffffffffd84, 0x10100, 0x0, 0xfffffffffffffd51) ioctl$FS_IOC_ENABLE_VERITY(r3, 0x6685) connect$inet6(0xffffffffffffffff, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) socket(0x10, 0x2, 0x0) 10:48:48 executing program 1: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) syz_open_dev$sndseq(&(0x7f0000000800)='/dev/snd/seq\x00', 0x0, 0x0) r1 = dup2(0xffffffffffffffff, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, &(0x7f00000000c0)) [ 291.940513][ T8117] ntfs: (device loop2): parse_options(): Unrecognized mount option . 10:48:48 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_targets\x00') preadv(r0, &(0x7f00000017c0), 0x1d0, 0x100000) [ 292.428121][ T26] audit: type=1804 audit(1550659728.681:38): pid=8137 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir195456208/syzkaller.YvPa2M/16/file0/file0/bus" dev="ramfs" ino=28704 res=1 10:48:49 executing program 2: syz_mount_image$ntfs(&(0x7f0000000000)='ntfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={[{@fmask={'fmask'}}]}) 10:48:49 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, "7001e0f57c8cf6270b24e415e96042aae51d871554c11cd59cc8fb47081025bad6b39d778066f9da2293750e3a42f70a7c0f30f6615fa95bae15813f0dceb297", "a8a4cd01e527e6fd3de45387daf7b1ac786d0e8a75e89046550fa2d2d25b60361fe06f308fe6033a61edb75c8d51c055faf7f4fdb16e0cdaa4276939a3410334", "7b8ddcc0c891591c4116893616105829576914e70bfed06d00f97c97644ab8a7"}) 10:48:49 executing program 1: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) syz_open_dev$sndseq(&(0x7f0000000800)='/dev/snd/seq\x00', 0x0, 0x0) r1 = dup2(0xffffffffffffffff, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, &(0x7f00000000c0)) 10:48:49 executing program 5: lseek(0xffffffffffffffff, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) unshare(0x40000000) socket$inet(0x2, 0x4000000000000001, 0x0) 10:48:49 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_targets\x00') preadv(r0, &(0x7f00000017c0), 0x1d0, 0x100000) [ 292.790028][ T8143] ntfs: (device loop2): parse_options(): Unrecognized mount option . 10:48:49 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, "7001e0f57c8cf6270b24e415e96042aae51d871554c11cd59cc8fb47081025bad6b39d778066f9da2293750e3a42f70a7c0f30f6615fa95bae15813f0dceb297", "a8a4cd01e527e6fd3de45387daf7b1ac786d0e8a75e89046550fa2d2d25b60361fe06f308fe6033a61edb75c8d51c055faf7f4fdb16e0cdaa4276939a3410334", "7b8ddcc0c891591c4116893616105829576914e70bfed06d00f97c97644ab8a7"}) 10:48:49 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_targets\x00') preadv(r0, &(0x7f00000017c0), 0x1d0, 0x100000) 10:48:49 executing program 1: memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000000800)='/dev/snd/seq\x00', 0x0, 0x0) r1 = dup2(r0, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, &(0x7f00000000c0)) [ 292.885300][ T8155] IPVS: ftp: loaded support on port[0] = 21 10:48:49 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, &(0x7f0000000100)=""/4096, 0x100000, 0x1000, 0x1}, 0x20) 10:48:49 executing program 3: fdatasync(0xffffffffffffffff) accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) write$cgroup_type(r0, 0x0, 0x0) clone(0x100002102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000380)={{{@in6=@remote, @in=@empty}}, {{@in=@multicast2}, 0x0, @in6=@dev}}, &(0x7f00000000c0)=0xe8) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_misc(r1, &(0x7f00000000c0)=ANY=[], 0x7fffffff) recvfrom(r2, &(0x7f0000000180)=""/184, 0xfffffffffffffd84, 0x10100, 0x0, 0xfffffffffffffd51) ioctl$FS_IOC_ENABLE_VERITY(r3, 0x6685) connect$inet6(0xffffffffffffffff, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) socket(0x10, 0x2, 0x0) 10:48:49 executing program 1: memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000000800)='/dev/snd/seq\x00', 0x0, 0x0) r1 = dup2(r0, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, &(0x7f00000000c0)) 10:48:49 executing program 2: syz_mount_image$ntfs(&(0x7f0000000000)='ntfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={[{@fmask={'fmask'}}]}) 10:48:49 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_targets\x00') preadv(r0, &(0x7f00000017c0), 0x1d0, 0x100000) [ 293.204526][ T8157] IPVS: ftp: loaded support on port[0] = 21 [ 293.232892][ T8184] ntfs: (device loop2): parse_options(): Unrecognized mount option . 10:48:49 executing program 0: r0 = gettid() msgrcv(0x0, 0x0, 0xfffffe30, 0x0, 0x0) timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000044000)) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) sync() timer_settime(0x0, 0x0, &(0x7f00000000c0)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000013) 10:48:49 executing program 1: memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000000800)='/dev/snd/seq\x00', 0x0, 0x0) r1 = dup2(r0, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, &(0x7f00000000c0)) 10:48:50 executing program 5: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x10, 0xffffffffffffffff, 0x0) sendmsg(r1, &(0x7f00000001c0)={0x0, 0x8000000000000000, &(0x7f0000000100), 0x4c, &(0x7f0000000000), 0xf}, 0x0) recvmmsg(r0, &(0x7f0000007840)=[{{0x0, 0x0, &(0x7f0000005400)=[{&(0x7f0000005380)=""/115, 0x73}], 0x1}}], 0x1, 0x2002, 0x0) 10:48:50 executing program 1: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000800)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r2, 0xc02c5341, &(0x7f00000000c0)) 10:48:50 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_targets\x00') preadv(r0, &(0x7f00000017c0), 0x1d0, 0x100000) 10:48:50 executing program 2: syz_mount_image$ntfs(&(0x7f0000000000)='ntfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={[{@fmask={'fmask'}}]}) 10:48:50 executing program 1: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000800)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r2, 0xc02c5341, &(0x7f00000000c0)) [ 293.828910][ T8209] ntfs: (device loop2): parse_options(): Unrecognized mount option . 10:48:50 executing program 1: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000800)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r2, 0xc02c5341, &(0x7f00000000c0)) 10:48:50 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x3}, 0x1c) sendmmsg(r0, &(0x7f0000005b40)=[{{0x0, 0x0, &(0x7f0000001300), 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="a80300000000000029000000040000002472ead91fb7bc4d3200c0add4be6493991ea9dd93ea9e42bf6ad9532d264eab2a32d74e14b401efa902ba30928f5dfe3ef941c30d10f55a829f7a80e8b2bc2d3abcc2d7cc1dee086685adc962aeaf2e8724c5497aeef2604e6dd11ed05216606840b627b471fc5098b009ca6e3529c51757f4777b07bf2c47bcfe581363a9baf5951a909214f815bed0a62af384c3e6dc47834f51da8d48526edb216cd257f3c604e72b0486267e4e5942e5305860e35ce600963f360b75e25a84304a9fe34a00e732d16bb2669b6411577ce17bab0133147be535cc84c3baae1badab61e4d7a1c965719757f2b7ee9c9a10e413860c8a4909cf012de823dae506d794bacdf8f68127168bf0852a5bae9b27f50e18373f80b3a2fc8ecc2cf409000000295b6c5bf114a6595dc18f7c26b4080388df58ac711f11d47f0e97db140f0c4a63054f1e3119541c2fd68e183cd495e50c3c47e4f2ae15889ae2f8ffa79e7b11e21d295ab69cfcd09371cf3f6f2fb53afc605577bd302d4185c2c1a31466878a9753ac734ad385143ffe8e1c135935751f0b9bf33084e51b89d7aefcd886f157ce5bacef59dabdabf646039dcb849cea81199015f9a73e58de50bc981be9aa8cb70a897d0b64473d78d596b97ea4b064f5a064c6fca877b4b1b70502b6585c93aede6ba0df276c62878e0ae182e58de53fdc44820ef98fb80b6a772acd895f81d0b8074847ca5e962a97f7970ebefd0ccb5ab4d8493f43cfa789b2ec06b832440af90601000000195444c477b2353a6178b7c48bae1596bb82e7a5cf0bbe437b4fc096246346c27d9d1e8917ba53715d9c670266726eb2c13a14fb010316f34ca25a6e47a4a083d3ec2e7c17a8853165af25dc94330ac9221f3e9c0117be44693bec1a5732edc3bc9e8301bbe4d773987ff1d54beecbbb38d06c394bdeea265364277221a0f9e694cab85ed3c22100e04a2fa9b2358343385223f4716fe955ef00e181d1cb205cb0552ee86da2e658e0b67d22e08282e04ffda51c52b8d6b8130daf96fae18c3a8cacc775d5a8e04be05694bab2232f7946efcfe178bca3525f3c32a3496a3afd16de8ab9d16cb2b9b7e1b315ee49dd0995a29f7a521c3e099df0155a9b0a1babf53543edc343839aadf00c2c1bd6591f9b9d17fe72935fe09c4650588ef01fadeead3ad5426a1ba356025c4adf2d3248f066c0f86f1d91e72b2a955e848d88faa346656fa99c2b0c0264da99eefb479d12a01823ce5f74b05ac11c81cea8d96327e4aebbc2000000000000001133e24378e11e42571a616d46e04fec9e78d11834fdb47e43bd3d66f23e4360e2b77b19018a209669d2dae07df6387113356081951dc406d5ffc7091f5e42407a1a767ec3ec10397cde7c0f224ed6c618f55b9172a31be890d32f6a76cd2b65b79e371305b57d4224e0885d0fcb6bab413ec94043833bd98d01285fb202ae8f12a9cae0f9763b40d955c535db950c274cd69576b70d1a3e5e73913089fd1112419939f32767d709fc7852f44cffa612865b69125d66777b01eaa546f5445642d6"], 0x461}}], 0x1, 0x0) 10:48:50 executing program 1: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000800)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r2, 0xc02c5341, &(0x7f00000000c0)) 10:48:50 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_targets\x00') preadv(r0, &(0x7f00000017c0), 0x1d0, 0x100000) 10:48:50 executing program 5: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) pwritev(r1, &(0x7f0000000600)=[{&(0x7f0000000440)="16", 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x9) ioctl$LOOP_CLR_FD(r0, 0x4c01) 10:48:50 executing program 0: r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) sendfile(r0, r0, &(0x7f0000000080), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x125, &(0x7f0000000000)=[{}]}, 0x10) 10:48:50 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_targets\x00') preadv(r0, &(0x7f00000017c0), 0x1d0, 0x100000) 10:48:50 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000ac0)=ANY=[]}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x400000000000) 10:48:50 executing program 3: 10:48:50 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) vmsplice(r0, &(0x7f0000002c00)=[{&(0x7f0000002bc0)}], 0x1, 0x3) 10:48:50 executing program 1: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000800)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r2, 0xc02c5341, &(0x7f00000000c0)) 10:48:50 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000040)) [ 294.380487][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 294.386398][ C1] protocol 88fb is buggy, dev hsr_slave_1 10:48:50 executing program 1: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000800)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r2, 0xc02c5341, &(0x7f00000000c0)) 10:48:50 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_targets\x00') preadv(r0, &(0x7f00000017c0), 0x1d0, 0x100000) 10:48:50 executing program 2: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x40, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) syz_open_dev$dri(&(0x7f00000004c0)='/dev/dri/card#\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_trie\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0) 10:48:50 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = getpgid(0xffffffffffffffff) fcntl$setownex(r0, 0xf, &(0x7f0000000000)={0x2, r1}) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r2) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(r3, &(0x7f00000009c0)='threaded\x00', 0xfffffd5f) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) lseek(r4, 0x0, 0x3) close(r4) syz_emit_ethernet(0x74, &(0x7f0000000100)={@local, @link_local={0x1, 0x80, 0xc2, 0x2}, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @local, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) 10:48:50 executing program 1: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000800)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(0xffffffffffffffff, 0xc02c5341, &(0x7f00000000c0)) [ 294.654902][ T8273] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 294.792911][ T8273] syz-executor.3 (8273) used greatest stack depth: 23128 bytes left 10:48:51 executing program 5: ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') ioctl$KDDISABIO(0xffffffffffffffff, 0x4b37) sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000ac0)=ANY=[]}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x400000000000) 10:48:51 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_targets\x00') preadv(r0, &(0x7f00000017c0), 0x1d0, 0x100000) 10:48:51 executing program 2: r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000340)='threaded\x00', 0xffffffc5) 10:48:51 executing program 1: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000800)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(0xffffffffffffffff, 0xc02c5341, &(0x7f00000000c0)) 10:48:51 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000000)={0x7, 0x4, [0x0]}) 10:48:51 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x64}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000184000)=ANY=[@ANYBLOB="020100021000000000000600000000000800120000ffff00000000000000000006000000000000000000800000000000e00000010000000000000000000035000000000000000000ee000003ed94c700030006000000000002000004000000bb000000000000000003000500000000000200423b000001000012b478407f8604"], 0x80}}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmmsg(r1, &(0x7f0000000180), 0x400000000000003, 0x0) 10:48:51 executing program 1: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000800)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(0xffffffffffffffff, 0xc02c5341, &(0x7f00000000c0)) 10:48:51 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140), 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_targets\x00') preadv(r0, &(0x7f00000017c0), 0x1d0, 0x100000) 10:48:51 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x252, 0x82) r1 = memfd_create(&(0x7f0000000140)='cgroup2\x00u\xb56\xe0\x8f\x97\xe1\fB\x89\xe2\x96F/<\x8f\xc6\xa4\x18\"\x80\'\xbfMu\x93\x1e#\x8bA\xcfU\xaf\xcf}\xd2(Eg\xedZs\x8f3\x82\xaa\xe64\x9e\x103j\xdfhd\x99\xeb\x1d\x93y\xeb(', 0x0) r2 = syz_open_pts(0xffffffffffffffff, 0x40080) ioctl$KDMKTONE(r2, 0x4b30, 0xffffffffffffff79) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) sendfile(r0, r0, &(0x7f0000000000)=0x39044, 0x2000005) write$binfmt_elf32(r0, &(0x7f0000004100)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0x4, 0x6a, 0x9, 0x1, 0x2, 0x3f, 0x3, 0x1b1, 0x38, 0x375, 0x4, 0x5, 0x20, 0x1, 0xa9c, 0x100000000, 0x7}, [{0x3, 0xddc7c6f, 0x10001, 0x3b5dac96, 0x8, 0x6, 0x6, 0xac}], "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", [[], [], [], []]}, 0x1458) 10:48:51 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x44400) 10:48:51 executing program 1: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000800)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r2, 0xc02c5341, 0x0) 10:48:51 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140), 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_targets\x00') preadv(r0, &(0x7f00000017c0), 0x1d0, 0x100000) 10:48:52 executing program 5: ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') ioctl$KDDISABIO(0xffffffffffffffff, 0x4b37) sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000ac0)=ANY=[]}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x400000000000) 10:48:52 executing program 0: r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="3400000000209c00000900000dd0"], 0xe) sendfile(r0, r0, &(0x7f0000000080), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x125, &(0x7f0000000000)=[{}]}, 0x10) 10:48:52 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@bridge_delneigh={0x1c, 0x1c, 0xf07, 0x0, 0x0, {0x7, 0x300}}, 0x1c}}, 0x0) 10:48:52 executing program 1: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000800)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r2, 0xc02c5341, 0x0) 10:48:52 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) setitimer(0x0, &(0x7f0000000080)={{0x77359400}, {0x0, r1/1000+30000}}, 0x0) 10:48:52 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140), 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_targets\x00') preadv(r0, &(0x7f00000017c0), 0x1d0, 0x100000) 10:48:52 executing program 1: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000800)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r2, 0xc02c5341, 0x0) 10:48:52 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_targets\x00') preadv(r0, &(0x7f00000017c0), 0x1d0, 0x100000) 10:48:52 executing program 3: r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000040)={0x0, 0x0, 0x8}) 10:48:52 executing program 2: r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x2102) write(r0, &(0x7f00000001c0)="9bcc9e1b3978b94685dc33802be448f5f5404f6028caa79ca54b98fde2e28b09e18aac66f1165e9f22975218f3e1017b", 0x30) r1 = userfaultfd(0x0) ppoll(&(0x7f0000000180)=[{r1}, {r0}], 0x2, 0x0, 0x0, 0x0) 10:48:52 executing program 1: socketpair$unix(0x1, 0x400000001, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='net/udp6\x00') preadv(r1, &(0x7f00000017c0), 0x1d0, 0xff0f) 10:48:53 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_targets\x00') preadv(r0, &(0x7f00000017c0), 0x1d0, 0x100000) 10:48:53 executing program 5: ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') ioctl$KDDISABIO(0xffffffffffffffff, 0x4b37) sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000ac0)=ANY=[]}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x400000000000) 10:48:53 executing program 0: 10:48:53 executing program 2: r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x2102) write(r0, &(0x7f00000001c0)="9bcc9e1b3978b94685dc33802be448f5f5404f6028caa79ca54b98fde2e28b09e18aac66f1165e9f22975218f3e1017b", 0x30) r1 = userfaultfd(0x0) ppoll(&(0x7f0000000180)=[{r1}, {r0}], 0x2, 0x0, 0x0, 0x0) [ 296.890685][ C1] sd 0:0:1:0: tag#4427 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK [ 296.899647][ C1] sd 0:0:1:0: tag#4427 CDB: Read(6) 08 00 00 00 00 00 10:48:53 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_targets\x00') preadv(r0, &(0x7f00000017c0), 0x1d0, 0x100000) 10:48:53 executing program 0: 10:48:53 executing program 2: r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x2102) write(r0, &(0x7f00000001c0)="9bcc9e1b3978b94685dc33802be448f5f5404f6028caa79ca54b98fde2e28b09e18aac66f1165e9f22975218f3e1017b", 0x30) r1 = userfaultfd(0x0) ppoll(&(0x7f0000000180)=[{r1}, {r0}], 0x2, 0x0, 0x0, 0x0) [ 297.110512][ C1] sd 0:0:1:0: tag#4433 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK [ 297.119466][ C1] sd 0:0:1:0: tag#4433 CDB: Read(6) 08 00 00 00 00 00 10:48:53 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x1d0, 0x100000) 10:48:53 executing program 3: 10:48:53 executing program 2: r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x2102) write(r0, &(0x7f00000001c0)="9bcc9e1b3978b94685dc33802be448f5f5404f6028caa79ca54b98fde2e28b09e18aac66f1165e9f22975218f3e1017b", 0x30) r1 = userfaultfd(0x0) ppoll(&(0x7f0000000180)=[{r1}, {r0}], 0x2, 0x0, 0x0, 0x0) 10:48:53 executing program 0: 10:48:53 executing program 1: 10:48:53 executing program 3: 10:48:53 executing program 5: ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') ioctl$KDDISABIO(0xffffffffffffffff, 0x4b37) sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000ac0)=ANY=[]}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x400000000000) 10:48:53 executing program 2: r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x2102) write(r0, &(0x7f00000001c0)="9bcc9e1b3978b94685dc33802be448f5f5404f6028caa79ca54b98fde2e28b09e18aac66f1165e9f22975218f3e1017b", 0x30) ppoll(&(0x7f0000000180)=[{}, {r0}], 0x2, 0x0, 0x0, 0x0) 10:48:53 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x1d0, 0x100000) 10:48:53 executing program 0: 10:48:53 executing program 3: 10:48:53 executing program 1: 10:48:54 executing program 3: 10:48:54 executing program 1: 10:48:54 executing program 0: 10:48:54 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x1d0, 0x100000) 10:48:54 executing program 5: ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') ioctl$KDDISABIO(0xffffffffffffffff, 0x4b37) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x400000000000) 10:48:54 executing program 3: 10:48:54 executing program 0: 10:48:54 executing program 2: r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x2102) write(r0, &(0x7f00000001c0)="9bcc9e1b3978b94685dc33802be448f5f5404f6028caa79ca54b98fde2e28b09e18aac66f1165e9f22975218f3e1017b", 0x30) ppoll(&(0x7f0000000180)=[{}, {r0}], 0x2, 0x0, 0x0, 0x0) 10:48:54 executing program 1: 10:48:54 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_targets\x00') preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x1d0, 0x100000) 10:48:54 executing program 0: 10:48:54 executing program 3: 10:48:54 executing program 5: ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') ioctl$KDDISABIO(0xffffffffffffffff, 0x4b37) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x400000000000) 10:48:54 executing program 1: 10:48:54 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000380)='io\x00[\xfcW\x16\x9b\xab\xeeT\xed\x16\xe3\x9ez\x8f\xe4\xb9\x00\x16\xad\xae>\xc8\xf3B\xc7q\xd5E\xff\xff=\xe3\b\x9b\xf2f\xe3\xf60xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0xffffff7e) rt_sigprocmask(0x0, &(0x7f0000000140)={0xfffdfffffffffffe}, 0x0, 0x8) r2 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x7, 0x4, @tid=r2}, &(0x7f0000000040)) timer_settime(0x0, 0x0, 0x0, 0x0) rt_sigreturn() 10:48:55 executing program 2: r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x2102) write(r0, &(0x7f00000001c0)="9bcc9e1b3978b94685dc33802be448f5f5404f6028caa79ca54b98fde2e28b09e18aac66f1165e9f22975218f3e1017b", 0x30) ppoll(&(0x7f0000000180)=[{}, {r0}], 0x2, 0x0, 0x0, 0x0) 10:48:55 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x80) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0xfffffffffffffdc6, 0x20000004, &(0x7f0000000280)={0xa, 0x4e22}, 0x1c) write(r1, &(0x7f0000000380), 0xfffffffe) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, 0x0) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpid() 10:48:55 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_targets\x00') preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x1d0, 0x100000) 10:48:55 executing program 0: 10:48:55 executing program 5: ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000ac0)=ANY=[]}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x400000000000) 10:48:55 executing program 1: 10:48:55 executing program 1: syz_emit_ethernet(0x4a, &(0x7f00000000c0)={@link_local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "4e081d", 0x14, 0x0, 0x0, @rand_addr="bf1a732bee313fcfebf23126e97717d6", @empty, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 10:48:55 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mbind(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x6) 10:48:55 executing program 1: perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)) 10:48:55 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_targets\x00') preadv(r0, 0x0, 0x0, 0x100000) 10:48:55 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x8, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7fe3, 0x0, 0x7, 0x61, 0x0, 0x98}]}, 0x0}, 0x48) 10:48:55 executing program 1: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 10:48:56 executing program 2: r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x2102) r1 = userfaultfd(0x0) ppoll(&(0x7f0000000180)=[{r1}, {r0}], 0x2, 0x0, 0x0, 0x0) 10:48:56 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_targets\x00') preadv(r0, 0x0, 0x0, 0x100000) 10:48:56 executing program 0: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpgid(0x0) 10:48:56 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) chdir(0x0) r0 = open(&(0x7f00000001c0)='./file1\x00', 0x201, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000040)="96", 0x1}], 0x1) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000940)="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", 0xd00}], 0x1) 10:48:56 executing program 5: ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000ac0)=ANY=[]}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x1fe, 0x400000000000) 10:48:56 executing program 3: r0 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000480)={0x0, 0x0, 0x30}, 0x0) 10:48:56 executing program 5: ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000ac0)=ANY=[]}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x1fe, 0x400000000000) 10:48:56 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x1, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000500)={0x0, 0x9000000, &(0x7f00000004c0)={&(0x7f0000000040)={0x30, r1, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x3fb}}, 0x0) 10:48:56 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_targets\x00') preadv(r0, 0x0, 0x0, 0x100000) 10:48:56 executing program 2: r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x2102) r1 = userfaultfd(0x0) ppoll(&(0x7f0000000180)=[{r1}, {r0}], 0x2, 0x0, 0x0, 0x0) 10:48:56 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0af51f023c123f3188a070") r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000100)={0x34000, 0x100000000000000, &(0x7f00008feff0)={&(0x7f00000001c0)={0x2, 0xd, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x2, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@loopback, @in=@remote}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x68}}, 0x0) 10:48:56 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x12c, 0x10000000000]}, 0x1}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000040)='\f', 0x1}], 0x1}, 0x20008844) unlink(0x0) bpf$OBJ_PIN_PROG(0x6, 0x0, 0xfffffffffffffe36) mkdir(0x0, 0x0) 10:48:56 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_targets\x00') preadv(r0, &(0x7f00000017c0), 0x1d0, 0x0) 10:48:56 executing program 1: r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x40000400000002c2, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0) sync() 10:48:56 executing program 5: ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000ac0)=ANY=[]}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x1fe, 0x400000000000) 10:48:56 executing program 2: r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x2102) r1 = userfaultfd(0x0) ppoll(&(0x7f0000000180)=[{r1}, {r0}], 0x2, 0x0, 0x0, 0x0) 10:48:56 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg(r2, &(0x7f0000003c40)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)}], 0x1}, 0x1000}], 0x1, 0xc0) 10:48:57 executing program 5: ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000ac0)=ANY=[]}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x400000000000) 10:48:57 executing program 2: write(0xffffffffffffffff, &(0x7f00000001c0)="9bcc9e1b3978b94685dc33802be448f5f5404f6028caa79ca54b98fde2e28b09e18aac66f1165e9f22975218f3e1017b", 0x30) r0 = userfaultfd(0x0) ppoll(&(0x7f0000000180)=[{r0}, {}], 0x2, 0x0, 0x0, 0x0) 10:48:57 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000300)={0x0, 0x0, 0x0, {0x3, @raw_data="6091725c2b80a7c7eb90c8b340a4c816e5d9f54588b1310f2263dd6d7702a0b782700700f7b6d7fc17dab7171d7cad6d6838d6c00819f1899593159b974aea75a6b5d1732e9c6fa9a4e642630daec815801f6d95a426b898b21d9626ff01e7f0ca3ea218f855e82579d3b174cd620ed633fce2bed41ba2561c80b19e7f9d7d9301398c5b17203e74afe6569d805f8d787a1d8634af4b3c0c6f4133de96aa29b09293ae07e8f938852b38bcd5b8b14c7b8e04373b039027113208b4c366b708e70513a60d09ef2bfe"}}) 10:48:57 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_targets\x00') preadv(r0, &(0x7f00000017c0), 0x1d0, 0x0) 10:48:57 executing program 1: syz_mount_image$hfs(&(0x7f0000000040)='hfs\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 10:48:57 executing program 2: write(0xffffffffffffffff, &(0x7f00000001c0)="9bcc9e1b3978b94685dc33802be448f5f5404f6028caa79ca54b98fde2e28b09e18aac66f1165e9f22975218f3e1017b", 0x30) r0 = userfaultfd(0x0) ppoll(&(0x7f0000000180)=[{r0}, {}], 0x2, 0x0, 0x0, 0x0) [ 301.040520][ T8580] hfs: can't find a HFS filesystem on dev loop1 10:48:57 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x12c, 0x10000000000]}, 0x1}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000040)='\f', 0x1}], 0x1}, 0x20008844) unlink(0x0) bpf$OBJ_PIN_PROG(0x6, 0x0, 0xfffffffffffffe36) mkdir(0x0, 0x0) 10:48:57 executing program 5: ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000ac0)=ANY=[]}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x400000000000) 10:48:57 executing program 2: write(0xffffffffffffffff, &(0x7f00000001c0)="9bcc9e1b3978b94685dc33802be448f5f5404f6028caa79ca54b98fde2e28b09e18aac66f1165e9f22975218f3e1017b", 0x30) r0 = userfaultfd(0x0) ppoll(&(0x7f0000000180)=[{r0}, {}], 0x2, 0x0, 0x0, 0x0) 10:48:57 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_targets\x00') preadv(r0, &(0x7f00000017c0), 0x1d0, 0x0) [ 301.165735][ T8580] hfs: can't find a HFS filesystem on dev loop1 10:48:57 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001240)="2e0000002a00815fe45ac11850f923311615fcce95cf0400b5eba0b4d65cdbaa98cb930507fff080000000000000", 0x2e}], 0x1}, 0x0) 10:48:57 executing program 2: r0 = syz_open_dev$sg(0x0, 0x0, 0x2102) write(r0, &(0x7f00000001c0)="9bcc9e1b3978b94685dc33802be448f5f5404f6028caa79ca54b98fde2e28b09e18aac66f1165e9f22975218f3e1017b", 0x30) r1 = userfaultfd(0x0) ppoll(&(0x7f0000000180)=[{r1}, {r0}], 0x2, 0x0, 0x0, 0x0) 10:48:57 executing program 1: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000080)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_NCCI_OPENCOUNT(r0, 0x80044326, &(0x7f00000000c0)) [ 301.369762][ T8610] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.0'. 10:48:57 executing program 0: syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = gettid() sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x4c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_NET_NS_PID={0x8, 0x13, r4}, @IFLA_MAP={0x24}]}, 0x4c}}, 0x0) 10:48:57 executing program 5: ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000ac0)=ANY=[]}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x400000000000) 10:48:57 executing program 4: r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000040)={0x0, 0x0, 0x37}) 10:48:57 executing program 2: r0 = syz_open_dev$sg(0x0, 0x0, 0x2102) write(r0, &(0x7f00000001c0)="9bcc9e1b3978b94685dc33802be448f5f5404f6028caa79ca54b98fde2e28b09e18aac66f1165e9f22975218f3e1017b", 0x30) r1 = userfaultfd(0x0) ppoll(&(0x7f0000000180)=[{r1}, {r0}], 0x2, 0x0, 0x0, 0x0) 10:48:57 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000040)={0x0, 0x7}) [ 301.650829][ T8624] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. 10:48:58 executing program 3: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x5, 0x0) ppoll(&(0x7f0000000100)=[{r0}], 0x1, 0x0, 0x0, 0x0) 10:48:58 executing program 4: fdatasync(0xffffffffffffffff) accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) write$cgroup_type(r0, 0x0, 0x0) clone(0x100002102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_misc(r1, &(0x7f00000000c0)=ANY=[], 0x7fffffff) recvfrom(r2, &(0x7f0000000180)=""/184, 0xfffffffffffffd84, 0x10100, 0x0, 0xfffffffffffffd51) connect$inet6(0xffffffffffffffff, 0x0, 0x0) 10:48:58 executing program 2: r0 = syz_open_dev$sg(0x0, 0x0, 0x2102) write(r0, &(0x7f00000001c0)="9bcc9e1b3978b94685dc33802be448f5f5404f6028caa79ca54b98fde2e28b09e18aac66f1165e9f22975218f3e1017b", 0x30) r1 = userfaultfd(0x0) ppoll(&(0x7f0000000180)=[{r1}, {r0}], 0x2, 0x0, 0x0, 0x0) 10:48:58 executing program 0: syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = gettid() sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x4c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_NET_NS_PID={0x8, 0x13, r4}, @IFLA_MAP={0x24}]}, 0x4c}}, 0x0) 10:48:58 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0af51f023c123f3188a070") r1 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x40000fffffb, 0x802) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000180)={0x100123}) 10:48:58 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000ac0)=ANY=[]}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x400000000000) [ 301.977149][ T8646] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. 10:48:58 executing program 2: r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) write(r0, &(0x7f00000001c0)="9bcc9e1b3978b94685dc33802be448f5f5404f6028caa79ca54b98fde2e28b09e18aac66f1165e9f22975218f3e1017b", 0x30) r1 = userfaultfd(0x0) ppoll(&(0x7f0000000180)=[{r1}, {r0}], 0x2, 0x0, 0x0, 0x0) [ 302.045640][ T8650] vhci_hcd: invalid port number 0 10:48:58 executing program 0: syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = gettid() sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x4c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_NET_NS_PID={0x8, 0x13, r4}, @IFLA_MAP={0x24}]}, 0x4c}}, 0x0) 10:48:58 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0af51f023c123f3188a070") r1 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x40000fffffb, 0x802) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000180)={0x100123}) 10:48:58 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000ac0)=ANY=[]}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x400000000000) 10:48:58 executing program 2: r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) write(r0, &(0x7f00000001c0)="9bcc9e1b3978b94685dc33802be448f5f5404f6028caa79ca54b98fde2e28b09e18aac66f1165e9f22975218f3e1017b", 0x30) r1 = userfaultfd(0x0) ppoll(&(0x7f0000000180)=[{r1}, {r0}], 0x2, 0x0, 0x0, 0x0) [ 302.232580][ T8660] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 302.300357][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 302.300508][ T8665] vhci_hcd: invalid port number 0 [ 302.306159][ C1] protocol 88fb is buggy, dev hsr_slave_1 10:48:58 executing program 0: syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = gettid() sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x4c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_NET_NS_PID={0x8, 0x13, r4}, @IFLA_MAP={0x24}]}, 0x4c}}, 0x0) [ 302.432257][ T8671] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. 10:48:58 executing program 3: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video1\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x0, 0x0, {0xa}}) 10:48:58 executing program 4: fdatasync(0xffffffffffffffff) accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) write$cgroup_type(r0, 0x0, 0x0) clone(0x100002102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_misc(r1, &(0x7f00000000c0)=ANY=[], 0x7fffffff) recvfrom(r2, &(0x7f0000000180)=""/184, 0xfffffffffffffd84, 0x10100, 0x0, 0xfffffffffffffd51) connect$inet6(0xffffffffffffffff, 0x0, 0x0) 10:48:58 executing program 2: r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) write(r0, &(0x7f00000001c0)="9bcc9e1b3978b94685dc33802be448f5f5404f6028caa79ca54b98fde2e28b09e18aac66f1165e9f22975218f3e1017b", 0x30) r1 = userfaultfd(0x0) ppoll(&(0x7f0000000180)=[{r1}, {r0}], 0x2, 0x0, 0x0, 0x0) 10:48:58 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0af51f023c123f3188a070") r1 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x40000fffffb, 0x802) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000180)={0x100123}) 10:48:58 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000ac0)=ANY=[]}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x400000000000) 10:48:58 executing program 0: syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x4c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_NET_NS_PID={0x8}, @IFLA_MAP={0x24}]}, 0x4c}}, 0x0) 10:48:59 executing program 2: r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x2102) write(0xffffffffffffffff, &(0x7f00000001c0)="9bcc9e1b3978b94685dc33802be448f5f5404f6028caa79ca54b98fde2e28b09e18aac66f1165e9f22975218f3e1017b", 0x30) r1 = userfaultfd(0x0) ppoll(&(0x7f0000000180)=[{r1}, {r0}], 0x2, 0x0, 0x0, 0x0) [ 302.740385][ T8686] vhci_hcd: invalid port number 0 10:48:59 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x0, 0x0) ppoll(&(0x7f0000000100)=[{r1}], 0x1, &(0x7f00000001c0)={0x0, 0x1c9c380}, 0x0, 0x0) 10:48:59 executing program 0: syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x4c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_NET_NS_PID={0x8}, @IFLA_MAP={0x24}]}, 0x4c}}, 0x0) 10:48:59 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0af51f023c123f3188a070") r1 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x40000fffffb, 0x802) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000180)={0x100123}) 10:48:59 executing program 2: r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x2102) write(0xffffffffffffffff, &(0x7f00000001c0)="9bcc9e1b3978b94685dc33802be448f5f5404f6028caa79ca54b98fde2e28b09e18aac66f1165e9f22975218f3e1017b", 0x30) r1 = userfaultfd(0x0) ppoll(&(0x7f0000000180)=[{r1}, {r0}], 0x2, 0x0, 0x0, 0x0) [ 302.940882][ T8708] vhci_hcd: invalid port number 0 10:48:59 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f00000001c0)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, 0x0, 0x6d, 0x0, 0x0, 0x0, 'syz1\x00', 0x0, 0x0, [], [0x4, 0x4acb]}) 10:48:59 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0af51f023c123f3188a070") ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0xc0185500, &(0x7f0000000180)={0x100123}) 10:48:59 executing program 2: r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x2102) write(0xffffffffffffffff, &(0x7f00000001c0)="9bcc9e1b3978b94685dc33802be448f5f5404f6028caa79ca54b98fde2e28b09e18aac66f1165e9f22975218f3e1017b", 0x30) r1 = userfaultfd(0x0) ppoll(&(0x7f0000000180)=[{r1}, {r0}], 0x2, 0x0, 0x0, 0x0) 10:48:59 executing program 0: syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x4c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_NET_NS_PID={0x8}, @IFLA_MAP={0x24}]}, 0x4c}}, 0x0) 10:48:59 executing program 4: fdatasync(0xffffffffffffffff) r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000340)='threaded\x00', 0xa7571fbb) clone(0x100002102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_misc(r1, &(0x7f00000000c0)=ANY=[], 0x7fffffff) recvfrom(r2, &(0x7f0000000180)=""/184, 0xfffffffffffffd84, 0x10100, 0x0, 0xfffffffffffffd51) ioctl$FS_IOC_ENABLE_VERITY(r3, 0x6685) connect$inet6(0xffffffffffffffff, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) socket(0x10, 0x2, 0x0) 10:48:59 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f00000001c0)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, 0x0, 0x6d, 0x0, 0x0, 0x0, 'syz1\x00', 0x0, 0x0, [], [0x4, 0x4acb]}) 10:48:59 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0af51f023c123f3188a070") ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0xc0185500, &(0x7f0000000180)={0x100123}) 10:48:59 executing program 5: ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000ac0)=ANY=[]}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x400000000000) 10:48:59 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f00000001c0)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, 0x0, 0x6d, 0x0, 0x0, 0x0, 'syz1\x00', 0x0, 0x0, [], [0x4, 0x4acb]}) 10:48:59 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0af51f023c123f3188a070") ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0xc0185500, &(0x7f0000000180)={0x100123}) 10:48:59 executing program 2: r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x2102) write(r0, 0x0, 0x0) r1 = userfaultfd(0x0) ppoll(&(0x7f0000000180)=[{r1}, {r0}], 0x2, 0x0, 0x0, 0x0) 10:49:00 executing program 0: syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) r3 = gettid() sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x4c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_NET_NS_PID={0x8, 0x13, r3}, @IFLA_MAP={0x24}]}, 0x4c}}, 0x0) 10:49:00 executing program 5: ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000ac0)=ANY=[]}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x400000000000) 10:49:00 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f00000001c0)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, 0x0, 0x6d, 0x0, 0x0, 0x0, 'syz1\x00', 0x0, 0x0, [], [0x4, 0x4acb]}) 10:49:00 executing program 2: r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x2102) write(r0, 0x0, 0x0) r1 = userfaultfd(0x0) ppoll(&(0x7f0000000180)=[{r1}, {r0}], 0x2, 0x0, 0x0, 0x0) 10:49:00 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x40000fffffb, 0x802) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000180)={0x100123}) [ 303.988970][ T8762] vhci_hcd: invalid port number 0 10:49:00 executing program 0: syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) r3 = gettid() sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x4c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_NET_NS_PID={0x8, 0x13, r3}, @IFLA_MAP={0x24}]}, 0x4c}}, 0x0) 10:49:00 executing program 3: ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f00000001c0)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, 0x0, 0x6d, 0x0, 0x0, 0x0, 'syz1\x00', 0x0, 0x0, [], [0x4, 0x4acb]}) 10:49:00 executing program 2: r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x2102) write(r0, 0x0, 0x0) r1 = userfaultfd(0x0) ppoll(&(0x7f0000000180)=[{r1}, {r0}], 0x2, 0x0, 0x0, 0x0) 10:49:00 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x40000fffffb, 0x802) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000180)={0x100123}) 10:49:00 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x8) 10:49:00 executing program 5: ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000ac0)=ANY=[]}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x400000000000) 10:49:01 executing program 3: ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f00000001c0)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, 0x0, 0x6d, 0x0, 0x0, 0x0, 'syz1\x00', 0x0, 0x0, [], [0x4, 0x4acb]}) [ 304.724855][ T8782] vhci_hcd: invalid port number 0 10:49:01 executing program 2: r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x2102) write(r0, &(0x7f00000001c0), 0x0) r1 = userfaultfd(0x0) ppoll(&(0x7f0000000180)=[{r1}, {r0}], 0x2, 0x0, 0x0, 0x0) 10:49:01 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x40000fffffb, 0x802) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000180)={0x100123}) 10:49:01 executing program 5: ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000ac0)=ANY=[]}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x400000000000) 10:49:01 executing program 0: syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) r3 = gettid() sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x4c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_NET_NS_PID={0x8, 0x13, r3}, @IFLA_MAP={0x24}]}, 0x4c}}, 0x0) 10:49:01 executing program 3: ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f00000001c0)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, 0x0, 0x6d, 0x0, 0x0, 0x0, 'syz1\x00', 0x0, 0x0, [], [0x4, 0x4acb]}) 10:49:01 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) pipe2(0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000002d000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000300)="f3420f7fbe1f529c2065daddc46215b83ac48211a68748000000b9cc080000b882fa0000ba000000000f30f20f79e73e2e660fea150068000048b800580000000000000f23c80f21f8350800e0000f23f8660f59ffb8010000000f01d9", 0x5d}], 0x1, 0x0, &(0x7f0000000280)=[@cr4={0x1, 0x20000}], 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 304.879473][ T8795] vhci_hcd: invalid port number 0 10:49:01 executing program 2: r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x2102) write(r0, &(0x7f00000001c0), 0x0) r1 = userfaultfd(0x0) ppoll(&(0x7f0000000180)=[{r1}, {r0}], 0x2, 0x0, 0x0, 0x0) 10:49:01 executing program 1: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0af51f023c123f3188a070") r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x40000fffffb, 0x802) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000180)={0x100123}) 10:49:01 executing program 3: r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f00000001c0)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, 0x0, 0x6d, 0x0, 0x0, 0x0, 'syz1\x00', 0x0, 0x0, [], [0x4, 0x4acb]}) [ 305.054821][ T8807] *** Guest State *** 10:49:01 executing program 0: syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = gettid() sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x4c, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_NET_NS_PID={0x8, 0x13, r2}, @IFLA_MAP={0x24}]}, 0x4c}}, 0x0) [ 305.090382][ T8807] CR0: actual=0x0000000000000031, shadow=0x0000000060000011, gh_mask=fffffffffffffff7 [ 305.126786][ T8807] CR4: actual=0x0000000000022060, shadow=0x0000000000020020, gh_mask=ffffffffffffe871 10:49:01 executing program 2: r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x2102) write(r0, &(0x7f00000001c0), 0x0) r1 = userfaultfd(0x0) ppoll(&(0x7f0000000180)=[{r1}, {r0}], 0x2, 0x0, 0x0, 0x0) 10:49:01 executing program 5: ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000ac0)=ANY=[]}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x400000000000) [ 305.131839][ T8815] vhci_hcd: invalid port number 0 [ 305.159897][ T8807] CR3 = 0x0000000000002000 [ 305.178977][ T8807] PDPTR0 = 0x0000000000000000 PDPTR1 = 0x0000000000000000 10:49:01 executing program 0: syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = gettid() sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x4c, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_NET_NS_PID={0x8, 0x13, r2}, @IFLA_MAP={0x24}]}, 0x4c}}, 0x0) 10:49:01 executing program 3: r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f00000001c0)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, 0x0, 0x6d, 0x0, 0x0, 0x0, 'syz1\x00', 0x0, 0x0, [], [0x4, 0x4acb]}) [ 305.217063][ T8807] PDPTR2 = 0x0000000000000000 PDPTR3 = 0x0000000000000000 [ 305.243700][ T8807] RSP = 0x0000000000000f80 RIP = 0x0000000000000000 [ 305.254301][ T8807] RFLAGS=0x00000002 DR7 = 0x0000000000000400 10:49:01 executing program 1: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0af51f023c123f3188a070") r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x40000fffffb, 0x802) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000180)={0x100123}) [ 305.277192][ T8807] Sysenter RSP=0000000000000f80 CS:RIP=0050:0000000000002810 [ 305.303234][ T8807] CS: sel=0x0030, attr=0x0409b, limit=0x000fffff, base=0x0000000000000000 10:49:01 executing program 2: r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x2102) write(r0, &(0x7f00000001c0)="9bcc9e1b3978b94685dc33802be448f5f5404f6028caa79c", 0x18) r1 = userfaultfd(0x0) ppoll(&(0x7f0000000180)=[{r1}, {r0}], 0x2, 0x0, 0x0, 0x0) [ 305.344685][ T8807] DS: sel=0x0038, attr=0x04093, limit=0x000fffff, base=0x0000000000000000 [ 305.375966][ T8835] vhci_hcd: invalid port number 0 [ 305.385819][ T8807] SS: sel=0x0038, attr=0x04093, limit=0x000fffff, base=0x0000000000000000 10:49:01 executing program 5: ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000ac0)=ANY=[]}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x400000000000) [ 305.420541][ T8807] ES: sel=0x0038, attr=0x04093, limit=0x000fffff, base=0x0000000000000000 [ 305.482642][ T8807] FS: sel=0x0038, attr=0x04093, limit=0x000fffff, base=0x0000000000000000 [ 305.520749][ T8807] GS: sel=0x0038, attr=0x04093, limit=0x000fffff, base=0x0000000000000000 [ 305.529584][ T8807] GDTR: limit=0x000007ff, base=0x0000000000001000 [ 305.546889][ T8807] LDTR: sel=0x0008, attr=0x04082, limit=0x000007ff, base=0x0000000000001800 [ 305.555765][ T8807] IDTR: limit=0x000001ff, base=0x0000000000003800 [ 305.570503][ T8807] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 305.579334][ T8807] EFER = 0x0000000000000001 PAT = 0x0007040600070406 [ 305.588228][ T8807] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 305.597025][ T8807] Interruptibility = 00000000 ActivityState = 00000000 [ 305.604240][ T8807] *** Host State *** [ 305.608156][ T8807] RIP = 0xffffffff811b3240 RSP = 0xffff88805938f8e0 [ 305.615491][ T8807] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 305.622738][ T8807] FSBase=00007f4ab5cdc700 GSBase=ffff8880ae800000 TRBase=fffffe0000003000 [ 305.631377][ T8807] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 305.637997][ T8807] CR0=0000000080050033 CR3=0000000089830000 CR4=00000000001426f0 [ 305.645792][ T8807] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87201360 [ 305.653191][ T8807] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 305.659941][ T8807] *** Control State *** [ 305.664306][ T8807] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000ca [ 305.671749][ T8807] EntryControls=0000d1ff ExitControls=002fefff [ 305.677904][ T8807] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 305.685580][ T8807] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 305.693008][ T8807] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 305.700320][ T8807] reason=80000021 qualification=0000000000000000 [ 305.707343][ T8807] IDTVectoring: info=00000000 errcode=00000000 [ 305.713551][ T8807] TSC Offset = 0xffffff5a296b1151 [ 305.718580][ T8807] EPT pointer = 0x000000009869101e 10:49:02 executing program 3: r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f00000001c0)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, 0x0, 0x6d, 0x0, 0x0, 0x0, 'syz1\x00', 0x0, 0x0, [], [0x4, 0x4acb]}) 10:49:02 executing program 0: syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = gettid() sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x4c, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_NET_NS_PID={0x8, 0x13, r2}, @IFLA_MAP={0x24}]}, 0x4c}}, 0x0) 10:49:02 executing program 2: r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x2102) write(r0, &(0x7f00000001c0)="9bcc9e1b3978b94685dc33802be448f5f5404f6028caa79c", 0x18) r1 = userfaultfd(0x0) ppoll(&(0x7f0000000180)=[{r1}, {r0}], 0x2, 0x0, 0x0, 0x0) 10:49:02 executing program 1: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0af51f023c123f3188a070") r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x40000fffffb, 0x802) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000180)={0x100123}) 10:49:02 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) pipe2(0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000002d000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000300)="f3420f7fbe1f529c2065daddc46215b83ac48211a68748000000b9cc080000b882fa0000ba000000000f30f20f79e73e2e660fea150068000048b800580000000000000f23c80f21f8350800e0000f23f8660f59ffb8010000000f01d9", 0x5d}], 0x1, 0x0, &(0x7f0000000280)=[@cr4={0x1, 0x20000}], 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:49:02 executing program 5: ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000ac0)=ANY=[]}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x400000000000) [ 305.809494][ T8858] vhci_hcd: invalid port number 0 10:49:02 executing program 2: r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x2102) write(r0, &(0x7f00000001c0)="9bcc9e1b3978b94685dc33802be448f5f5404f6028caa79c", 0x18) r1 = userfaultfd(0x0) ppoll(&(0x7f0000000180)=[{r1}, {r0}], 0x2, 0x0, 0x0, 0x0) 10:49:02 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0af51f023c123f3188a070") r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x40000fffffb, 0x802) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000180)={0x100123}) 10:49:02 executing program 3: syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f00000001c0)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, 0x0, 0x6d, 0x0, 0x0, 0x0, 'syz1\x00', 0x0, 0x0, [], [0x4, 0x4acb]}) 10:49:02 executing program 0: syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = gettid() sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x4c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_NET_NS_PID={0x8, 0x13, r3}, @IFLA_MAP={0x24}]}, 0x4c}}, 0x0) [ 305.894972][ T8860] *** Guest State *** 10:49:02 executing program 5: ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000ac0)=ANY=[]}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x400000000000) [ 305.963486][ T8860] CR0: actual=0x0000000000000031, shadow=0x0000000060000011, gh_mask=fffffffffffffff7 [ 305.995928][ T8860] CR4: actual=0x0000000000022060, shadow=0x0000000000020020, gh_mask=ffffffffffffe871 10:49:02 executing program 0: syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = gettid() sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x4c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_NET_NS_PID={0x8, 0x13, r3}, @IFLA_MAP={0x24}]}, 0x4c}}, 0x0) [ 306.016077][ T8860] CR3 = 0x0000000000002000 [ 306.016403][ T8870] vhci_hcd: invalid port number 0 [ 306.025000][ T8860] PDPTR0 = 0x0000000000000000 PDPTR1 = 0x0000000000000000 [ 306.037375][ T8860] PDPTR2 = 0x0000000000000000 PDPTR3 = 0x0000000000000000 [ 306.060561][ T8860] RSP = 0x0000000000000f80 RIP = 0x0000000000000000 10:49:02 executing program 3: syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f00000001c0)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, 0x0, 0x6d, 0x0, 0x0, 0x0, 'syz1\x00', 0x0, 0x0, [], [0x4, 0x4acb]}) 10:49:02 executing program 2: r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x2102) write(r0, &(0x7f00000001c0)="9bcc9e1b3978b94685dc33802be448f5f5404f6028caa79ca54b98fde2e28b09e18aac66", 0x24) r1 = userfaultfd(0x0) ppoll(&(0x7f0000000180)=[{r1}, {r0}], 0x2, 0x0, 0x0, 0x0) [ 306.093396][ T8860] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 306.129926][ T8860] Sysenter RSP=0000000000000f80 CS:RIP=0050:0000000000002810 10:49:02 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0af51f023c123f3188a070") r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x40000fffffb, 0x802) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000180)={0x100123}) 10:49:02 executing program 0: syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = gettid() sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x4c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_NET_NS_PID={0x8, 0x13, r3}, @IFLA_MAP={0x24}]}, 0x4c}}, 0x0) [ 306.165771][ T8860] CS: sel=0x0030, attr=0x0409b, limit=0x000fffff, base=0x0000000000000000 [ 306.234974][ T8860] DS: sel=0x0038, attr=0x04093, limit=0x000fffff, base=0x0000000000000000 [ 306.265890][ T8860] SS: sel=0x0038, attr=0x04093, limit=0x000fffff, base=0x0000000000000000 [ 306.286040][ T8860] ES: sel=0x0038, attr=0x04093, limit=0x000fffff, base=0x0000000000000000 [ 306.292256][ T8890] vhci_hcd: invalid port number 0 [ 306.328521][ T8860] FS: sel=0x0038, attr=0x04093, limit=0x000fffff, base=0x0000000000000000 [ 306.349230][ T8860] GS: sel=0x0038, attr=0x04093, limit=0x000fffff, base=0x0000000000000000 [ 306.358695][ T8860] GDTR: limit=0x000007ff, base=0x0000000000001000 [ 306.369068][ T8860] LDTR: sel=0x0008, attr=0x04082, limit=0x000007ff, base=0x0000000000001800 [ 306.378153][ T8860] IDTR: limit=0x000001ff, base=0x0000000000003800 [ 306.397753][ T8860] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 306.406853][ T8860] EFER = 0x0000000000000001 PAT = 0x0007040600070406 [ 306.414141][ T8860] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 306.422442][ T8860] Interruptibility = 00000000 ActivityState = 00000000 [ 306.429374][ T8860] *** Host State *** [ 306.433351][ T8860] RIP = 0xffffffff811b3240 RSP = 0xffff8880575c78e0 [ 306.440034][ T8860] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 306.447531][ T8860] FSBase=00007f4ab5cdc700 GSBase=ffff8880ae800000 TRBase=fffffe0000033000 [ 306.456604][ T8860] GDTBase=fffffe0000031000 IDTBase=fffffe0000000000 [ 306.463519][ T8860] CR0=0000000080050033 CR3=00000000911da000 CR4=00000000001426f0 [ 306.471452][ T8860] Sysenter RSP=fffffe0000032200 CS:RIP=0010:ffffffff87201360 [ 306.478821][ T8860] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 306.485627][ T8860] *** Control State *** [ 306.489777][ T8860] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000ca [ 306.497170][ T8860] EntryControls=0000d1ff ExitControls=002fefff [ 306.503371][ T8860] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 306.511064][ T8860] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 306.518433][ T8860] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 306.525749][ T8860] reason=80000021 qualification=0000000000000000 [ 306.532798][ T8860] IDTVectoring: info=00000000 errcode=00000000 [ 306.538934][ T8860] TSC Offset = 0xffffff59b4badc32 [ 306.544130][ T8860] EPT pointer = 0x00000000976cb01e 10:49:02 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) pipe2(0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000002d000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000300)="f3420f7fbe1f529c2065daddc46215b83ac48211a68748000000b9cc080000b882fa0000ba000000000f30f20f79e73e2e660fea150068000048b800580000000000000f23c80f21f8350800e0000f23f8660f59ffb8010000000f01d9", 0x5d}], 0x1, 0x0, &(0x7f0000000280)=[@cr4={0x1, 0x20000}], 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:49:02 executing program 3: syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f00000001c0)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, 0x0, 0x6d, 0x0, 0x0, 0x0, 'syz1\x00', 0x0, 0x0, [], [0x4, 0x4acb]}) 10:49:02 executing program 5: ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000ac0)=ANY=[]}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x400000000000) 10:49:02 executing program 2: r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x2102) write(r0, &(0x7f00000001c0)="9bcc9e1b3978b94685dc33802be448f5f5404f6028caa79ca54b98fde2e28b09e18aac66", 0x24) r1 = userfaultfd(0x0) ppoll(&(0x7f0000000180)=[{r1}, {r0}], 0x2, 0x0, 0x0, 0x0) 10:49:02 executing program 0: syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = gettid() sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x4c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_NET_NS_PID={0x8, 0x13, r4}, @IFLA_MAP={0x24}]}, 0x4c}}, 0x0) 10:49:02 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0af51f023c123f3188a070") r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x40000fffffb, 0x802) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000180)={0x100123}) 10:49:02 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, 0x0) 10:49:02 executing program 2: r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x2102) write(r0, &(0x7f00000001c0)="9bcc9e1b3978b94685dc33802be448f5f5404f6028caa79ca54b98fde2e28b09e18aac66", 0x24) r1 = userfaultfd(0x0) ppoll(&(0x7f0000000180)=[{r1}, {r0}], 0x2, 0x0, 0x0, 0x0) [ 306.605615][ T8903] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 306.632145][ T8905] vhci_hcd: invalid port number 0 10:49:03 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000040)="0af51f023c123f3188a070") r1 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x40000fffffb, 0x802) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000180)={0x100123}) [ 306.735423][ T8908] *** Guest State *** 10:49:03 executing program 0: syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = gettid() sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x4c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_NET_NS_PID={0x8, 0x13, r4}, @IFLA_MAP={0x24}]}, 0x4c}}, 0x0) 10:49:03 executing program 5: ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000ac0)=ANY=[]}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x400000000000) [ 306.760571][ T8908] CR0: actual=0x0000000000000031, shadow=0x0000000060000011, gh_mask=fffffffffffffff7 [ 306.793272][ T8908] CR4: actual=0x0000000000022060, shadow=0x0000000000020020, gh_mask=ffffffffffffe871 10:49:03 executing program 2: r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x2102) write(r0, &(0x7f00000001c0)="9bcc9e1b3978b94685dc33802be448f5f5404f6028caa79ca54b98fde2e28b09e18aac66f1165e9f2297", 0x2a) r1 = userfaultfd(0x0) ppoll(&(0x7f0000000180)=[{r1}, {r0}], 0x2, 0x0, 0x0, 0x0) [ 306.824185][ T8918] vhci_hcd: invalid port number 0 [ 306.840426][ T8908] CR3 = 0x0000000000002000 [ 306.871313][ T8908] PDPTR0 = 0x0000000000000000 PDPTR1 = 0x0000000000000000 [ 306.878532][ T8908] PDPTR2 = 0x0000000000000000 PDPTR3 = 0x0000000000000000 [ 306.900464][ T8908] RSP = 0x0000000000000f80 RIP = 0x0000000000000000 [ 306.907318][ T8908] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 306.917393][ T8925] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 306.932620][ T8908] Sysenter RSP=0000000000000f80 CS:RIP=0050:0000000000002810 [ 306.943708][ T8908] CS: sel=0x0030, attr=0x0409b, limit=0x000fffff, base=0x0000000000000000 [ 306.960709][ T8908] DS: sel=0x0038, attr=0x04093, limit=0x000fffff, base=0x0000000000000000 [ 306.982543][ T8908] SS: sel=0x0038, attr=0x04093, limit=0x000fffff, base=0x0000000000000000 [ 306.993381][ T8908] ES: sel=0x0038, attr=0x04093, limit=0x000fffff, base=0x0000000000000000 [ 307.010581][ T8908] FS: sel=0x0038, attr=0x04093, limit=0x000fffff, base=0x0000000000000000 [ 307.019279][ T8908] GS: sel=0x0038, attr=0x04093, limit=0x000fffff, base=0x0000000000000000 [ 307.029687][ T8908] GDTR: limit=0x000007ff, base=0x0000000000001000 [ 307.039191][ T8908] LDTR: sel=0x0008, attr=0x04082, limit=0x000007ff, base=0x0000000000001800 [ 307.056330][ T8908] IDTR: limit=0x000001ff, base=0x0000000000003800 [ 307.065128][ T8908] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 307.075531][ T8908] EFER = 0x0000000000000001 PAT = 0x0007040600070406 [ 307.083034][ T8908] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 307.091325][ T8908] Interruptibility = 00000000 ActivityState = 00000000 [ 307.098338][ T8908] *** Host State *** [ 307.102620][ T8908] RIP = 0xffffffff811b3240 RSP = 0xffff888056eaf8e0 [ 307.109298][ T8908] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 307.116437][ T8908] FSBase=00007f4ab5cdc700 GSBase=ffff8880ae900000 TRBase=fffffe0000003000 [ 307.124990][ T8908] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 307.131639][ T8908] CR0=0000000080050033 CR3=00000000a07ff000 CR4=00000000001426e0 [ 307.139364][ T8908] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87201360 [ 307.146779][ T8908] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 307.153565][ T8908] *** Control State *** [ 307.157702][ T8908] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000ca [ 307.165115][ T8908] EntryControls=0000d1ff ExitControls=002fefff [ 307.171312][ T8908] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 10:49:03 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) pipe2(0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000002d000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000300)="f3420f7fbe1f529c2065daddc46215b83ac48211a68748000000b9cc080000b882fa0000ba000000000f30f20f79e73e2e660fea150068000048b800580000000000000f23c80f21f8350800e0000f23f8660f59ffb8010000000f01d9", 0x5d}], 0x1, 0x0, &(0x7f0000000280)=[@cr4={0x1, 0x20000}], 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:49:03 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, 0x0) 10:49:03 executing program 5: ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000ac0)=ANY=[]}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x400000000000) 10:49:03 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000040)="0af51f023c123f3188a070") r1 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x40000fffffb, 0x802) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000180)={0x100123}) 10:49:03 executing program 2: r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x2102) write(r0, &(0x7f00000001c0)="9bcc9e1b3978b94685dc33802be448f5f5404f6028caa79ca54b98fde2e28b09e18aac66f1165e9f2297", 0x2a) r1 = userfaultfd(0x0) ppoll(&(0x7f0000000180)=[{r1}, {r0}], 0x2, 0x0, 0x0, 0x0) 10:49:03 executing program 0: syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = gettid() sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x4c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_NET_NS_PID={0x8, 0x13, r3}, @IFLA_MAP={0x24}]}, 0x4c}}, 0x0) [ 307.178933][ T8908] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 307.186426][ T8908] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 307.193777][ T8908] reason=80000021 qualification=0000000000000000 [ 307.201110][ T8908] IDTVectoring: info=00000000 errcode=00000000 [ 307.207283][ T8908] TSC Offset = 0xffffff5943197641 [ 307.212380][ T8908] EPT pointer = 0x0000000096e1801e [ 307.291782][ T8937] vhci_hcd: invalid port number 0 [ 307.301448][ T8936] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. 10:49:03 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, 0x0) 10:49:03 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000040)="0af51f023c123f3188a070") r1 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x40000fffffb, 0x802) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000180)={0x100123}) [ 307.340346][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 307.346181][ C0] protocol 88fb is buggy, dev hsr_slave_1 10:49:03 executing program 2: r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x2102) write(r0, &(0x7f00000001c0)="9bcc9e1b3978b94685dc33802be448f5f5404f6028caa79ca54b98fde2e28b09e18aac66f1165e9f2297", 0x2a) r1 = userfaultfd(0x0) ppoll(&(0x7f0000000180)=[{r1}, {r0}], 0x2, 0x0, 0x0, 0x0) 10:49:03 executing program 0: syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = gettid() sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x4c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_NET_NS_PID={0x8, 0x13, r3}, @IFLA_MAP={0x24}]}, 0x4c}}, 0x0) [ 307.411709][ T8949] vhci_hcd: invalid port number 0 10:49:03 executing program 5: ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000ac0)=ANY=[]}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x400000000000) 10:49:03 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) r1 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x40000fffffb, 0x802) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000180)={0x100123}) [ 307.517417][ T8957] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. 10:49:03 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) pipe2(0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000002d000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000300)="f3420f7fbe1f529c2065daddc46215b83ac48211a68748000000b9cc080000b882fa0000ba000000000f30f20f79e73e2e660fea150068000048b800580000000000000f23c80f21f8350800e0000f23f8660f59ffb8010000000f01d9", 0x5d}], 0x1, 0x0, &(0x7f0000000280)=[@cr4={0x1, 0x20000}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:49:03 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f00000001c0)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, 0x0, 0x6d, 0x0, 0x0, 0x0, 'syz1\x00', 0x0, 0x0, [], [0x4, 0x4acb]}) 10:49:03 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) r1 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x40000fffffb, 0x802) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000180)={0x100123}) [ 307.588468][ T8965] vhci_hcd: invalid port number 0 10:49:03 executing program 2: r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x2102) write(r0, &(0x7f00000001c0)="9bcc9e1b3978b94685dc33802be448f5f5404f6028caa79ca54b98fde2e28b09e18aac66f1165e9f22975218f3", 0x2d) r1 = userfaultfd(0x0) ppoll(&(0x7f0000000180)=[{r1}, {r0}], 0x2, 0x0, 0x0, 0x0) 10:49:03 executing program 5: ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') sendmsg(0xffffffffffffffff, 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x400000000000) 10:49:03 executing program 0: syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = gettid() sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x4c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_NET_NS_PID={0x8, 0x13, r3}, @IFLA_MAP={0x24}]}, 0x4c}}, 0x0) 10:49:04 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f00000001c0)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, 0x0, 0x6d, 0x0, 0x0, 0x0, 'syz1\x00', 0x0, 0x0, [], [0x4, 0x4acb]}) [ 307.739944][ T8975] vhci_hcd: invalid port number 0 10:49:04 executing program 2: r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x2102) write(r0, &(0x7f00000001c0)="9bcc9e1b3978b94685dc33802be448f5f5404f6028caa79ca54b98fde2e28b09e18aac66f1165e9f22975218f3", 0x2d) r1 = userfaultfd(0x0) ppoll(&(0x7f0000000180)=[{r1}, {r0}], 0x2, 0x0, 0x0, 0x0) 10:49:04 executing program 5: ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') sendmsg(0xffffffffffffffff, 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x400000000000) [ 307.789444][ T8983] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 307.797670][ T8973] *** Guest State *** [ 307.820378][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 307.826173][ C1] protocol 88fb is buggy, dev hsr_slave_1 10:49:04 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) r1 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x40000fffffb, 0x802) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000180)={0x100123}) [ 307.850704][ T8973] CR0: actual=0x0000000000000031, shadow=0x0000000060000011, gh_mask=fffffffffffffff7 [ 307.871687][ T8973] CR4: actual=0x0000000000022060, shadow=0x0000000000020020, gh_mask=ffffffffffffe871 10:49:04 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f00000001c0)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, 0x0, 0x6d, 0x0, 0x0, 0x0, 'syz1\x00', 0x0, 0x0, [], [0x4, 0x4acb]}) [ 307.900560][ T8973] CR3 = 0x0000000000002000 [ 307.904999][ T8973] PDPTR0 = 0x0000000000000000 PDPTR1 = 0x0000000000000000 [ 307.932726][ T8994] vhci_hcd: invalid port number 0 10:49:04 executing program 2: r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x2102) write(r0, &(0x7f00000001c0)="9bcc9e1b3978b94685dc33802be448f5f5404f6028caa79ca54b98fde2e28b09e18aac66f1165e9f22975218f3", 0x2d) r1 = userfaultfd(0x0) ppoll(&(0x7f0000000180)=[{r1}, {r0}], 0x2, 0x0, 0x0, 0x0) [ 308.005932][ T8973] PDPTR2 = 0x0000000000000000 PDPTR3 = 0x0000000000000000 [ 308.057369][ T8973] RSP = 0x0000000000000f80 RIP = 0x0000000000000000 [ 308.067858][ T8973] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 308.085085][ T8973] Sysenter RSP=0000000000000f80 CS:RIP=0050:0000000000002810 [ 308.093122][ T8973] CS: sel=0x0030, attr=0x0409b, limit=0x000fffff, base=0x0000000000000000 [ 308.112837][ T8973] DS: sel=0x0038, attr=0x04093, limit=0x000fffff, base=0x0000000000000000 [ 308.121760][ T8973] SS: sel=0x0038, attr=0x04093, limit=0x000fffff, base=0x0000000000000000 [ 308.130633][ T8973] ES: sel=0x0038, attr=0x04093, limit=0x000fffff, base=0x0000000000000000 [ 308.139454][ T8973] FS: sel=0x0038, attr=0x04093, limit=0x000fffff, base=0x0000000000000000 [ 308.148639][ T8973] GS: sel=0x0038, attr=0x04093, limit=0x000fffff, base=0x0000000000000000 [ 308.157492][ T8973] GDTR: limit=0x000007ff, base=0x0000000000001000 [ 308.166386][ T8973] LDTR: sel=0x0008, attr=0x04082, limit=0x000007ff, base=0x0000000000001800 [ 308.175252][ T8973] IDTR: limit=0x000001ff, base=0x0000000000003800 [ 308.184114][ T8973] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 308.192940][ T8973] EFER = 0x0000000000000001 PAT = 0x0007040600070406 [ 308.200079][ T8973] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 308.208307][ T8973] Interruptibility = 00000000 ActivityState = 00000000 [ 308.215289][ T8973] *** Host State *** [ 308.219180][ T8973] RIP = 0xffffffff811b3240 RSP = 0xffff8880560e78e0 [ 308.227295][ T8973] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 308.234534][ T8973] FSBase=00007f4ab5cdc700 GSBase=ffff8880ae800000 TRBase=fffffe0000003000 [ 308.243192][ T8973] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 308.249788][ T8973] CR0=0000000080050033 CR3=00000000a10f8000 CR4=00000000001426f0 [ 308.257544][ T8973] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87201360 [ 308.264948][ T8973] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 308.271756][ T8973] *** Control State *** [ 308.275905][ T8973] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000ca [ 308.283299][ T8973] EntryControls=0000d1ff ExitControls=002fefff [ 308.289457][ T8973] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 308.297126][ T8973] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 308.304827][ T8973] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 10:49:04 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) pipe2(0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000002d000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000300)="f3420f7fbe1f529c2065daddc46215b83ac48211a68748000000b9cc080000b882fa0000ba000000000f30f20f79e73e2e660fea150068000048b800580000000000000f23c80f21f8350800e0000f23f8660f59ffb8010000000f01d9", 0x5d}], 0x1, 0x0, &(0x7f0000000280)=[@cr4={0x1, 0x20000}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:49:04 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)) r1 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x40000fffffb, 0x802) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000180)={0x100123}) 10:49:04 executing program 5: ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') sendmsg(0xffffffffffffffff, 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x400000000000) 10:49:04 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f00000001c0)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz1\x00', 0x0, 0x0, [], [0x4, 0x4acb]}) 10:49:04 executing program 0: syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = gettid() sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x4c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_NET_NS_PID={0x8, 0x13, r3}, @IFLA_MAP={0x24}]}, 0x4c}}, 0x0) 10:49:04 executing program 2: r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x2102) write(r0, &(0x7f00000001c0)="9bcc9e1b3978b94685dc33802be448f5f5404f6028caa79ca54b98fde2e28b09e18aac66f1165e9f22975218f3e101", 0x2f) r1 = userfaultfd(0x0) ppoll(&(0x7f0000000180)=[{r1}, {r0}], 0x2, 0x0, 0x0, 0x0) [ 308.312179][ T8973] reason=80000021 qualification=0000000000000000 [ 308.319224][ T8973] IDTVectoring: info=00000000 errcode=00000000 [ 308.325403][ T8973] TSC Offset = 0xffffff58ae9de8bd [ 308.330486][ T8973] EPT pointer = 0x0000000094e2d01e 10:49:04 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f00000001c0)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz1\x00', 0x0, 0x0, [], [0x4, 0x4acb]}) 10:49:04 executing program 5: ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, 0x0}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x400000000000) 10:49:04 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)) r1 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x40000fffffb, 0x802) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000180)={0x100123}) [ 308.409950][ T9015] vhci_hcd: invalid port number 0 [ 308.426712][ T9016] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. 10:49:04 executing program 2: r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x2102) write(r0, &(0x7f00000001c0)="9bcc9e1b3978b94685dc33802be448f5f5404f6028caa79ca54b98fde2e28b09e18aac66f1165e9f22975218f3e101", 0x2f) r1 = userfaultfd(0x0) ppoll(&(0x7f0000000180)=[{r1}, {r0}], 0x2, 0x0, 0x0, 0x0) 10:49:04 executing program 0: syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = gettid() sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x4c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_NET_NS_PID={0x8, 0x13, r3}, @IFLA_MAP={0x24}]}, 0x4c}}, 0x0) [ 308.550935][ T9026] vhci_hcd: invalid port number 0 10:49:04 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f00000001c0)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz1\x00', 0x0, 0x0, [], [0x4, 0x4acb]}) 10:49:04 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) pipe2(0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000002d000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000300)="f3420f7fbe1f529c2065daddc46215b83ac48211a68748000000b9cc080000b882fa0000ba000000000f30f20f79e73e2e660fea150068000048b800580000000000000f23c80f21f8350800e0000f23f8660f59ffb8010000000f01d9", 0x5d}], 0x1, 0x0, &(0x7f0000000280)=[@cr4={0x1, 0x20000}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:49:04 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)) r1 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x40000fffffb, 0x802) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000180)={0x100123}) 10:49:04 executing program 5: ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, 0x0}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x400000000000) 10:49:04 executing program 2: r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x2102) write(r0, &(0x7f00000001c0)="9bcc9e1b3978b94685dc33802be448f5f5404f6028caa79ca54b98fde2e28b09e18aac66f1165e9f22975218f3e101", 0x2f) r1 = userfaultfd(0x0) ppoll(&(0x7f0000000180)=[{r1}, {r0}], 0x2, 0x0, 0x0, 0x0) [ 308.670008][ T9034] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 308.778599][ T9043] vhci_hcd: invalid port number 0 10:49:05 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f00000001c0)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, 0x0, 0x6d, 0x0, 0x0, 0x0, 'syz1\x00', 0x0, 0x0, [], [0x4]}) 10:49:05 executing program 2: r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x2102) write(r0, &(0x7f00000001c0)="9bcc9e1b3978b94685dc33802be448f5f5404f6028caa79ca54b98fde2e28b09e18aac66f1165e9f22975218f3e1017b", 0x30) userfaultfd(0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 10:49:05 executing program 5: ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, 0x0}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x400000000000) [ 308.800626][ T9046] *** Guest State *** [ 308.806429][ T9046] CR0: actual=0x0000000000000031, shadow=0x0000000060000011, gh_mask=fffffffffffffff7 10:49:05 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0af51f023c12") r1 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x40000fffffb, 0x802) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000180)={0x100123}) [ 308.851047][ T9046] CR4: actual=0x0000000000022060, shadow=0x0000000000020020, gh_mask=ffffffffffffe871 10:49:05 executing program 0: syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = gettid() sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x4c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_NET_NS_PID={0x8, 0x13, r3}, @IFLA_MAP={0x24}]}, 0x4c}}, 0x0) 10:49:05 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f00000001c0)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, 0x0, 0x6d, 0x0, 0x0, 0x0, 'syz1\x00', 0x0, 0x0, [], [0x4]}) [ 308.940654][ T9046] CR3 = 0x0000000000002000 [ 308.949290][ T9046] PDPTR0 = 0x0000000000000000 PDPTR1 = 0x0000000000000000 [ 308.975492][ T9062] vhci_hcd: invalid port number 0 [ 308.983747][ T9046] PDPTR2 = 0x0000000000000000 PDPTR3 = 0x0000000000000000 10:49:05 executing program 5: ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000ac0)=ANY=[]}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x1fe, 0x400000000000) 10:49:05 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = gettid() sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x4c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_NET_NS_PID={0x8, 0x13, r4}, @IFLA_MAP={0x24}]}, 0x4c}}, 0x0) [ 309.010422][ T9046] RSP = 0x0000000000000f80 RIP = 0x0000000000000000 [ 309.027987][ T9046] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 309.036177][ T9046] Sysenter RSP=0000000000000f80 CS:RIP=0050:0000000000002810 [ 309.051572][ T9046] CS: sel=0x0030, attr=0x0409b, limit=0x000fffff, base=0x0000000000000000 [ 309.072942][ T9046] DS: sel=0x0038, attr=0x04093, limit=0x000fffff, base=0x0000000000000000 [ 309.132276][ T9046] SS: sel=0x0038, attr=0x04093, limit=0x000fffff, base=0x0000000000000000 [ 309.156509][ T9046] ES: sel=0x0038, attr=0x04093, limit=0x000fffff, base=0x0000000000000000 [ 309.179582][ T9046] FS: sel=0x0038, attr=0x04093, limit=0x000fffff, base=0x0000000000000000 [ 309.195936][ T9046] GS: sel=0x0038, attr=0x04093, limit=0x000fffff, base=0x0000000000000000 [ 309.207459][ T9046] GDTR: limit=0x000007ff, base=0x0000000000001000 [ 309.216687][ T9046] LDTR: sel=0x0008, attr=0x04082, limit=0x000007ff, base=0x0000000000001800 [ 309.232982][ T9046] IDTR: limit=0x000001ff, base=0x0000000000003800 [ 309.242327][ T9046] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 309.251413][ T9046] EFER = 0x0000000000000001 PAT = 0x0007040600070406 [ 309.258534][ T9046] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 309.266863][ T9046] Interruptibility = 00000000 ActivityState = 00000000 [ 309.273897][ T9046] *** Host State *** [ 309.277796][ T9046] RIP = 0xffffffff811b3240 RSP = 0xffff8880575f78e0 [ 309.284561][ T9046] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 309.291712][ T9046] FSBase=00007f4ab5cdc700 GSBase=ffff8880ae900000 TRBase=fffffe0000033000 [ 309.300210][ T9046] GDTBase=fffffe0000031000 IDTBase=fffffe0000000000 [ 309.306865][ T9046] CR0=0000000080050033 CR3=000000009fcc3000 CR4=00000000001426e0 [ 309.314614][ T9046] Sysenter RSP=fffffe0000032200 CS:RIP=0010:ffffffff87201360 [ 309.322072][ T9046] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 309.328837][ T9046] *** Control State *** [ 309.333034][ T9046] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000ca [ 309.340527][ T9046] EntryControls=0000d1ff ExitControls=002fefff [ 309.346687][ T9046] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 309.354387][ T9046] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 309.362644][ T9046] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 309.369921][ T9046] reason=80000021 qualification=0000000000000000 [ 309.376982][ T9046] IDTVectoring: info=00000000 errcode=00000000 10:49:05 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) pipe2(0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:49:05 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0af51f023c12") r1 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x40000fffffb, 0x802) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000180)={0x100123}) 10:49:05 executing program 5: ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000ac0)=ANY=[]}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x1fe, 0x400000000000) 10:49:05 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f00000001c0)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, 0x0, 0x6d, 0x0, 0x0, 0x0, 'syz1\x00', 0x0, 0x0, [], [0x4]}) 10:49:05 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = gettid() sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x4c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_NET_NS_PID={0x8, 0x13, r4}, @IFLA_MAP={0x24}]}, 0x4c}}, 0x0) [ 309.383197][ T9046] TSC Offset = 0xffffff5823bce890 [ 309.388225][ T9046] EPT pointer = 0x00000000991a901e [ 309.464249][ T9083] vhci_hcd: invalid port number 0 10:49:05 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f00000001c0)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, 0x0, 0x6d, 0x0, 0x0, 0x0, 'syz1\x00', 0x0, 0x0, [], [0x0, 0x4acb]}) 10:49:05 executing program 2: r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x2102) write(r0, &(0x7f00000001c0)="9bcc9e1b3978b94685dc33802be448f5f5404f6028caa79ca54b98fde2e28b09e18aac66f1165e9f22975218f3e1017b", 0x30) userfaultfd(0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 10:49:05 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = gettid() sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x4c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_NET_NS_PID={0x8, 0x13, r4}, @IFLA_MAP={0x24}]}, 0x4c}}, 0x0) 10:49:05 executing program 5: ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000ac0)=ANY=[]}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x1fe, 0x400000000000) 10:49:05 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0af51f023c12") r1 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x40000fffffb, 0x802) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000180)={0x100123}) 10:49:05 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) pipe2(0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 309.742794][ T9102] vhci_hcd: invalid port number 0 10:49:06 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0af51f023c123f3188") r1 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x40000fffffb, 0x802) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000180)={0x100123}) 10:49:06 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f00000001c0)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, 0x0, 0x6d, 0x0, 0x0, 0x0, 'syz1\x00', 0x0, 0x0, [], [0x0, 0x4acb]}) 10:49:06 executing program 0: syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = gettid() sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x4c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_NET_NS_PID={0x8, 0x13, r4}, @IFLA_MAP={0x24}]}, 0x4c}}, 0x0) 10:49:06 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) pipe2(0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:49:06 executing program 5: ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000ac0)=ANY=[]}, 0x0) preadv(r0, 0x0, 0x0, 0x400000000000) [ 309.845325][ T9111] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 309.875457][ T9113] vhci_hcd: invalid port number 0 10:49:06 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0af51f023c123f3188") r1 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x40000fffffb, 0x802) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000180)={0x100123}) 10:49:06 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f00000001c0)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, 0x0, 0x6d, 0x0, 0x0, 0x0, 'syz1\x00', 0x0, 0x0, [], [0x0, 0x4acb]}) [ 310.072455][ T9129] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 310.089637][ T9126] vhci_hcd: invalid port number 0 10:49:06 executing program 2: r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x2102) write(r0, &(0x7f00000001c0)="9bcc9e1b3978b94685dc33802be448f5f5404f6028caa79ca54b98fde2e28b09e18aac66f1165e9f22975218f3e1017b", 0x30) userfaultfd(0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 10:49:06 executing program 0: syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = gettid() sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x4c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_NET_NS_PID={0x8, 0x13, r4}, @IFLA_MAP={0x24}]}, 0x4c}}, 0x0) 10:49:06 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) pipe2(0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000002d000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000300)="f3420f7fbe1f529c2065daddc46215b83ac48211a68748000000b9cc080000b882fa0000ba000000000f30f20f79e73e2e660fea150068000048b800580000000000000f23c80f21f8350800e0000f23f8660f59ffb8010000000f01d9", 0x5d}], 0x1, 0x0, &(0x7f0000000280)=[@cr4={0x1, 0x20000}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:49:06 executing program 5: ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000ac0)=ANY=[]}, 0x0) preadv(r0, 0x0, 0x0, 0x400000000000) 10:49:06 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0af51f023c123f3188") r1 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x40000fffffb, 0x802) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000180)={0x100123}) 10:49:06 executing program 3: syz_mount_image$gfs2(&(0x7f0000000080)='gfs2\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 310.612436][ T9143] vhci_hcd: invalid port number 0 10:49:06 executing program 5: ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000ac0)=ANY=[]}, 0x0) preadv(r0, 0x0, 0x0, 0x400000000000) 10:49:06 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0af51f023c123f3188a0") r1 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x40000fffffb, 0x802) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000180)={0x100123}) [ 310.648372][ T9139] gfs2: not a GFS2 filesystem 10:49:07 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) pipe2(0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000002d000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000300)="f3420f7fbe1f529c2065daddc46215b83ac48211a68748000000b9cc080000b882fa0000ba000000000f30f20f79e73e2e660fea150068000048b800580000000000000f23c80f21f8350800e0000f23f8660f59ffb8010000000f01d9", 0x5d}], 0x1, 0x0, &(0x7f0000000280)=[@cr4={0x1, 0x20000}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:49:07 executing program 0: syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = gettid() sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x4c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_NET_NS_PID={0x8, 0x13, r4}, @IFLA_MAP={0x24}]}, 0x4c}}, 0x0) [ 310.728429][ T9139] gfs2: not a GFS2 filesystem [ 310.743213][ T9155] vhci_hcd: invalid port number 0 10:49:07 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0af51f023c123f3188a0") r1 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x40000fffffb, 0x802) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000180)={0x100123}) 10:49:07 executing program 5: ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000ac0)=ANY=[]}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x0) [ 310.911779][ T9170] vhci_hcd: invalid port number 0 10:49:07 executing program 2: r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x2102) write(r0, &(0x7f00000001c0)="9bcc9e1b3978b94685dc33802be448f5f5404f6028caa79ca54b98fde2e28b09e18aac66f1165e9f22975218f3e1017b", 0x30) r1 = userfaultfd(0x0) ppoll(&(0x7f0000000180)=[{r1}], 0x1, 0x0, 0x0, 0x0) 10:49:07 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFCONF(r0, 0x8912, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) getpgid(0x0) request_key(&(0x7f00000000c0)='id_legacy\x00', &(0x7f0000000100)={'syz'}, 0x0, 0x0) 10:49:07 executing program 0: syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = gettid() sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x4c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_NET_NS_PID={0x8, 0x13, r4}, @IFLA_MAP={0x24}]}, 0x4c}}, 0x0) 10:49:07 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) pipe2(0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000002d000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000300)="f3420f7fbe1f529c2065daddc46215b83ac48211a68748000000b9cc080000b882fa0000ba000000000f30f20f79e73e2e660fea150068000048b800580000000000000f23c80f21f8350800e0000f23f8660f59ffb8010000000f01d9", 0x5d}], 0x1, 0x0, &(0x7f0000000280)=[@cr4={0x1, 0x20000}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:49:07 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0af51f023c123f3188a0") r1 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x40000fffffb, 0x802) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000180)={0x100123}) 10:49:07 executing program 5: ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000ac0)=ANY=[]}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x0) 10:49:07 executing program 5: ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000ac0)=ANY=[]}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x0) [ 311.521165][ T9185] vhci_hcd: invalid port number 0 10:49:07 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0af51f023c123f3188a070") r1 = syz_open_dev$usb(0x0, 0x40000fffffb, 0x802) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000180)={0x100123}) 10:49:07 executing program 0: syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = gettid() sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x4c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_NET_NS_PID={0x8, 0x13, r4}, @IFLA_MAP={0x24}]}, 0x4c}}, 0x0) 10:49:07 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000002d000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000300)="f3420f7fbe1f529c2065daddc46215b83ac48211a68748000000b9cc080000b882fa0000ba000000000f30f20f79e73e2e660fea150068000048b800580000000000000f23c80f21f8350800e0000f23f8660f59ffb8010000000f01d9", 0x5d}], 0x1, 0x0, &(0x7f0000000280)=[@cr4={0x1, 0x20000}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:49:07 executing program 3: syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa02000000000086dd60b4090000000000000000ffffe0000002ff020000000000000000000000000001830090780000000060b680fa0000000000000000000000000000ffffffffffff00000000000000000000ffffac14ffbb"], 0x0) 10:49:07 executing program 2: r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x2102) write(r0, &(0x7f00000001c0)="9bcc9e1b3978b94685dc33802be448f5f5404f6028caa79ca54b98fde2e28b09e18aac66f1165e9f22975218f3e1017b", 0x30) r1 = userfaultfd(0x0) ppoll(&(0x7f0000000180)=[{r1}], 0x1, 0x0, 0x0, 0x0) 10:49:08 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) semget(0x2, 0x0, 0x220) 10:49:08 executing program 2: r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x2102) write(r0, &(0x7f00000001c0)="9bcc9e1b3978b94685dc33802be448f5f5404f6028caa79ca54b98fde2e28b09e18aac66f1165e9f22975218f3e1017b", 0x30) r1 = userfaultfd(0x0) ppoll(&(0x7f0000000180)=[{r1}], 0x1, 0x0, 0x0, 0x0) [ 311.763725][ T9210] *** Guest State *** [ 311.771325][ T9210] CR0: actual=0x0000000000000031, shadow=0x0000000060000011, gh_mask=fffffffffffffff7 10:49:08 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0af51f023c123f3188a070") r1 = syz_open_dev$usb(0x0, 0x40000fffffb, 0x802) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000180)={0x100123}) 10:49:08 executing program 0: syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = gettid() sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x4c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_NET_NS_PID={0x8, 0x13, r4}, @IFLA_MAP={0x24}]}, 0x4c}}, 0x0) [ 311.805218][ T9210] CR4: actual=0x0000000000022060, shadow=0x0000000000020020, gh_mask=ffffffffffffe871 [ 311.890503][ T9210] CR3 = 0x0000000000002000 10:49:08 executing program 3: socketpair$unix(0x1, 0x1000000000000002, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdir(&(0x7f0000027000)='./file0\x00', 0x0) r1 = open$dir(&(0x7f00000001c0)='./file0/bus\x00', 0x40, 0x0) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000000140)={0x0, 0x0, 0x800000000000055, 0x0, 0x0, [{}]}) [ 311.911275][ T9210] PDPTR0 = 0x0000000000000000 PDPTR1 = 0x0000000000000000 [ 311.933159][ T9210] PDPTR2 = 0x0000000000000000 PDPTR3 = 0x0000000000000000 10:49:08 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000100)={'bridge_slave_0\x00\x04'}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000080)={'bridge_slave_0\x00', 0x22000000c0ffffff}) 10:49:08 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0af51f023c123f3188a070") r1 = syz_open_dev$usb(0x0, 0x40000fffffb, 0x802) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000180)={0x100123}) 10:49:08 executing program 2: r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x2102) write(r0, &(0x7f00000001c0)="9bcc9e1b3978b94685dc33802be448f5f5404f6028caa79ca54b98fde2e28b09e18aac66f1165e9f22975218f3e1017b", 0x30) r1 = userfaultfd(0x0) ppoll(&(0x7f0000000180)=[{r1}, {}], 0x2, 0x0, 0x0, 0x0) [ 311.966767][ T9225] net_ratelimit: 9 callbacks suppressed [ 311.966778][ T9225] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 311.990359][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 311.996141][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 312.002409][ T9210] RSP = 0x0000000000000f80 RIP = 0x0000000000000000 10:49:08 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000200)="240000005e0007031dfffd946fa2830020200a0009000300741d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) [ 312.031479][ T9210] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 312.056548][ T9210] Sysenter RSP=0000000000000f80 CS:RIP=0050:0000000000002810 [ 312.105112][ T9210] CS: sel=0x0030, attr=0x0409b, limit=0x000fffff, base=0x0000000000000000 [ 312.144391][ T9210] DS: sel=0x0038, attr=0x04093, limit=0x000fffff, base=0x0000000000000000 [ 312.173258][ T9210] SS: sel=0x0038, attr=0x04093, limit=0x000fffff, base=0x0000000000000000 [ 312.190531][ T9210] ES: sel=0x0038, attr=0x04093, limit=0x000fffff, base=0x0000000000000000 [ 312.205482][ T9210] FS: sel=0x0038, attr=0x04093, limit=0x000fffff, base=0x0000000000000000 [ 312.216363][ T9210] GS: sel=0x0038, attr=0x04093, limit=0x000fffff, base=0x0000000000000000 [ 312.225761][ T9210] GDTR: limit=0x000007ff, base=0x0000000000001000 [ 312.234878][ T9210] LDTR: sel=0x0008, attr=0x04082, limit=0x000007ff, base=0x0000000000001800 [ 312.243966][ T9210] IDTR: limit=0x000001ff, base=0x0000000000003800 [ 312.253071][ T9210] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 312.262188][ T9210] EFER = 0x0000000000000001 PAT = 0x0007040600070406 [ 312.269494][ T9210] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 312.278094][ T9210] Interruptibility = 00000000 ActivityState = 00000000 [ 312.285417][ T9210] *** Host State *** [ 312.289499][ T9210] RIP = 0xffffffff811b3240 RSP = 0xffff8880958ef8e0 [ 312.296651][ T9210] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 312.304149][ T9210] FSBase=00007f4ab5cdc700 GSBase=ffff8880ae900000 TRBase=fffffe0000003000 [ 312.313073][ T9210] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 312.319845][ T9210] CR0=0000000080050033 CR3=00000000a612b000 CR4=00000000001426e0 [ 312.328080][ T9210] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87201360 [ 312.335871][ T9210] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 312.343123][ T9210] *** Control State *** [ 312.347454][ T9210] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000ca [ 312.355253][ T9210] EntryControls=0000d1ff ExitControls=002fefff [ 312.361814][ T9210] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 312.369630][ T9210] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 312.377528][ T9210] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 312.385276][ T9210] reason=80000021 qualification=0000000000000000 [ 312.392745][ T9210] IDTVectoring: info=00000000 errcode=00000000 [ 312.399074][ T9210] TSC Offset = 0xffffff568e1c6d50 [ 312.404563][ T9210] EPT pointer = 0x00000000a806601e 10:49:08 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000002d000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000300)="f3420f7fbe1f529c2065daddc46215b83ac48211a68748000000b9cc080000b882fa0000ba000000000f30f20f79e73e2e660fea150068000048b800580000000000000f23c80f21f8350800e0000f23f8660f59ffb8010000000f01d9", 0x5d}], 0x1, 0x0, &(0x7f0000000280)=[@cr4={0x1, 0x20000}], 0x1) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 10:49:08 executing program 0: syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = gettid() sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x4c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_NET_NS_PID={0x8, 0x13, r3}, @IFLA_MAP={0x24}]}, 0x4c}}, 0x0) 10:49:08 executing program 2: r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x2102) write(r0, &(0x7f00000001c0)="9bcc9e1b3978b94685dc33802be448f5f5404f6028caa79ca54b98fde2e28b09e18aac66f1165e9f22975218f3e1017b", 0x30) r1 = userfaultfd(0x0) ppoll(&(0x7f0000000180)=[{r1}, {}], 0x2, 0x0, 0x0, 0x0) [ 312.460409][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 312.466487][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 312.476315][ T9231] bridge0: port 1(bridge_slave_0) entered disabled state 10:49:08 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0af51f023c123f3188a070") r1 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x0, 0x802) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000180)={0x100123}) 10:49:08 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000000)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={[{@part={'part'}}]}) [ 312.541824][ T9248] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. 10:49:08 executing program 2: r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x2102) write(r0, &(0x7f00000001c0)="9bcc9e1b3978b94685dc33802be448f5f5404f6028caa79ca54b98fde2e28b09e18aac66f1165e9f22975218f3e1017b", 0x30) r1 = userfaultfd(0x0) ppoll(&(0x7f0000000180)=[{r1}, {}], 0x2, 0x0, 0x0, 0x0) [ 312.594310][ T7624] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 312.615742][ T7624] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.622873][ T7624] bridge0: port 1(bridge_slave_0) entered forwarding state 10:49:08 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000002d000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000300)="f3420f7fbe1f529c2065daddc46215b83ac48211a68748000000b9cc080000b882fa0000ba000000000f30f20f79e73e2e660fea150068000048b800580000000000000f23c80f21f8350800e0000f23f8660f59ffb8010000000f01d9", 0x5d}], 0x1, 0x0, &(0x7f0000000280)=[@cr4={0x1, 0x20000}], 0x1) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 10:49:08 executing program 0: syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = gettid() sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x4c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_NET_NS_PID={0x8, 0x13, r3}, @IFLA_MAP={0x24}]}, 0x4c}}, 0x0) [ 312.665743][ T9256] hfsplus: unable to find HFS+ superblock [ 312.710345][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 312.716197][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 312.827710][ T9256] hfsplus: unable to find HFS+ superblock 10:49:09 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000100)={'bridge_slave_0\x00\x04'}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000080)={'bridge_slave_0\x00', 0x22000000c0ffffff}) [ 313.029620][ T9239] bridge0: port 1(bridge_slave_0) entered disabled state [ 313.038872][ T9251] bridge0: port 1(bridge_slave_0) entered blocking state [ 313.045995][ T9251] bridge0: port 1(bridge_slave_0) entered forwarding state [ 313.061320][ T9270] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. 10:49:09 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000002d000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000300)="f3420f7fbe1f529c2065daddc46215b83ac48211a68748000000b9cc080000b882fa0000ba000000000f30f20f79e73e2e660fea150068000048b800580000000000000f23c80f21f8350800e0000f23f8660f59ffb8010000000f01d9", 0x5d}], 0x1, 0x0, &(0x7f0000000280)=[@cr4={0x1, 0x20000}], 0x1) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 10:49:09 executing program 2: r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x2102) write(r0, &(0x7f00000001c0)="9bcc9e1b3978b94685dc33802be448f5f5404f6028caa79ca54b98fde2e28b09e18aac66f1165e9f22975218f3e1017b", 0x30) userfaultfd(0x0) ppoll(&(0x7f0000000180)=[{r0}], 0x1, 0x0, 0x0, 0x0) 10:49:09 executing program 3: r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x2102) write(r0, &(0x7f00000001c0)="9bcc9e1b3978b94685dc33802be448f5f5404f6028caa79ca54b98fde2e28b09e18aac66f1165e9f22975218f3e1017b", 0x30) ppoll(&(0x7f0000000040)=[{r0}], 0x1, 0x0, 0x0, 0x0) 10:49:09 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0af51f023c123f3188a070") r1 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x0, 0x802) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000180)={0x100123}) [ 313.100395][ C1] protocol 88fb is buggy, dev hsr_slave_0 10:49:09 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0af51f023c123f3188a070") r1 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x0, 0x802) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000180)={0x100123}) 10:49:09 executing program 0: syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = gettid() sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x4c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_NET_NS_PID={0x8, 0x13, r3}, @IFLA_MAP={0x24}]}, 0x4c}}, 0x0) 10:49:09 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f000002d000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000300)="f3420f7fbe1f529c2065daddc46215b83ac48211a68748000000b9cc080000b882fa0000ba000000000f30f20f79e73e2e660fea150068000048b800580000000000000f23c80f21f8350800e0000f23f8660f59ffb8010000000f01d9", 0x5d}], 0x1, 0x0, &(0x7f0000000280)=[@cr4={0x1, 0x20000}], 0x1) ioctl$KVM_RUN(r0, 0xae80, 0x0) 10:49:09 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f000002d000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000300)="f3420f7fbe1f529c2065daddc46215b83ac48211a68748000000b9cc080000b882fa0000ba000000000f30f20f79e73e2e660fea150068000048b800580000000000000f23c80f21f8350800e0000f23f8660f59ffb8010000000f01d9", 0x5d}], 0x1, 0x0, &(0x7f0000000280)=[@cr4={0x1, 0x20000}], 0x1) ioctl$KVM_RUN(r0, 0xae80, 0x0) 10:49:09 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f000002d000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000300)="f3420f7fbe1f529c2065daddc46215b83ac48211a68748000000b9cc080000b882fa0000ba000000000f30f20f79e73e2e660fea150068000048b800580000000000000f23c80f21f8350800e0000f23f8660f59ffb8010000000f01d9", 0x5d}], 0x1, 0x0, &(0x7f0000000280)=[@cr4={0x1, 0x20000}], 0x1) ioctl$KVM_RUN(r0, 0xae80, 0x0) 10:49:09 executing program 4: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f000002d000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000300)="f3420f7fbe1f529c2065daddc46215b83ac48211a68748000000b9cc080000b882fa0000ba000000000f30f20f79e73e2e660fea150068000048b800580000000000000f23c80f21f8350800e0000f23f8660f59ffb8010000000f01d9", 0x5d}], 0x1, 0x0, &(0x7f0000000280)=[@cr4={0x1, 0x20000}], 0x1) ioctl$KVM_RUN(r1, 0xae80, 0x0) 10:49:09 executing program 4: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f000002d000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000300)="f3420f7fbe1f529c2065daddc46215b83ac48211a68748000000b9cc080000b882fa0000ba000000000f30f20f79e73e2e660fea150068000048b800580000000000000f23c80f21f8350800e0000f23f8660f59ffb8010000000f01d9", 0x5d}], 0x1, 0x0, &(0x7f0000000280)=[@cr4={0x1, 0x20000}], 0x1) ioctl$KVM_RUN(r1, 0xae80, 0x0) [ 313.593957][ T9288] bridge0: port 1(bridge_slave_0) entered disabled state [ 313.620918][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 313.633718][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 313.640861][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state 10:49:09 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000100)={'bridge_slave_0\x00\x04'}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000080)={'bridge_slave_0\x00', 0x22000000c0ffffff}) 10:49:09 executing program 4: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f000002d000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000300)="f3420f7fbe1f529c2065daddc46215b83ac48211a68748000000b9cc080000b882fa0000ba000000000f30f20f79e73e2e660fea150068000048b800580000000000000f23c80f21f8350800e0000f23f8660f59ffb8010000000f01d9", 0x5d}], 0x1, 0x0, &(0x7f0000000280)=[@cr4={0x1, 0x20000}], 0x1) ioctl$KVM_RUN(r1, 0xae80, 0x0) 10:49:10 executing program 2: r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x2102) write(r0, &(0x7f00000001c0)="9bcc9e1b3978b94685dc33802be448f5f5404f6028caa79ca54b98fde2e28b09e18aac66f1165e9f22975218f3e1017b", 0x30) userfaultfd(0x0) ppoll(&(0x7f0000000180)=[{r0}], 0x1, 0x0, 0x0, 0x0) 10:49:10 executing program 3: syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="14bc42000000000000000000000800000900de56b5000000000800000000080008000100000008"], 0x1}}, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="00ff04463019d9476a25"], 0x1}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x40) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000002c0)="b8010000000f01c166b8e2000f00d8b9800000c00f3235004000000f304a0fc75f20c44379608d00000100f22e0f01ca67440ff6143f66ba4000b846c95182ef0f01cf400f01df", 0x47}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:49:10 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0af51f023c123f3188a070") r1 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x40000fffffb, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000180)={0x100123}) 10:49:10 executing program 0: syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = gettid() sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x4c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_NET_NS_PID={0x8, 0x13, r3}, @IFLA_MAP={0x24}]}, 0x4c}}, 0x0) 10:49:10 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000002d000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000300)="f3420f7fbe1f529c2065daddc46215b83ac48211a68748000000b9cc080000b882fa0000ba000000000f30f20f79e73e2e660fea150068000048b800580000000000000f23c80f21f8350800e0000f23f8660f59ffb8010000000f01d9", 0x5d}], 0x1, 0x0, &(0x7f0000000280)=[@cr4={0x1, 0x20000}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 313.967779][ T9321] bridge0: port 1(bridge_slave_0) entered disabled state 10:49:10 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000002d000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000300)="f3420f7fbe1f529c2065daddc46215b83ac48211a68748000000b9cc080000b882fa0000ba000000000f30f20f79e73e2e660fea150068000048b800580000000000000f23c80f21f8350800e0000f23f8660f59ffb8010000000f01d9", 0x5d}], 0x1, 0x0, &(0x7f0000000280)=[@cr4={0x1, 0x20000}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 314.018504][ T9323] bridge0: port 1(bridge_slave_0) entered blocking state [ 314.025674][ T9323] bridge0: port 1(bridge_slave_0) entered forwarding state 10:49:10 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0af51f023c123f3188a070") r1 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x40000fffffb, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000180)={0x100123}) 10:49:10 executing program 0: syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = gettid() sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x4c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_NET_NS_PID={0x8, 0x13, r3}, @IFLA_MAP={0x24}]}, 0x4c}}, 0x0) 10:49:10 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0af51f023c123f3188a070") r1 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x40000fffffb, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000180)={0x100123}) 10:49:10 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000100)={'bridge_slave_0\x00\x04'}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000080)={'bridge_slave_0\x00', 0x22000000c0ffffff}) 10:49:10 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000002d000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000300)="f3420f7fbe1f529c2065daddc46215b83ac48211a68748000000b9cc080000b882fa0000ba000000000f30f20f79e73e2e660fea150068000048b800580000000000000f23c80f21f8350800e0000f23f8660f59ffb8010000000f01d9", 0x5d}], 0x1, 0x0, &(0x7f0000000280)=[@cr4={0x1, 0x20000}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:49:10 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x803, 0x9) ioctl$RTC_ALM_READ(0xffffffffffffffff, 0x80247008, 0x0) r1 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000800)='/dev/snd/seq\x00', 0x0, 0x1) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, 0x0) write$sndseq(r1, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) fstatfs(r0, &(0x7f0000004200)=""/4096) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r3, 0xc02c5341, &(0x7f00000000c0)) [ 314.619418][ T9356] bridge0: port 1(bridge_slave_0) entered disabled state [ 314.634880][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 314.644377][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 314.651557][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state 10:49:11 executing program 2: r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x2102) write(r0, &(0x7f00000001c0)="9bcc9e1b3978b94685dc33802be448f5f5404f6028caa79ca54b98fde2e28b09e18aac66f1165e9f22975218f3e1017b", 0x30) userfaultfd(0x0) ppoll(&(0x7f0000000180)=[{r0}], 0x1, 0x0, 0x0, 0x0) 10:49:11 executing program 0: syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = gettid() sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x4c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_NET_NS_PID={0x8, 0x13, r3}, @IFLA_MAP={0x24}]}, 0x4c}}, 0x0) 10:49:11 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f000002d000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000300)="f3420f7fbe1f529c2065daddc46215b83ac48211a68748000000b9cc080000b882fa0000ba000000000f30f20f79e73e2e660fea150068000048b800580000000000000f23c80f21f8350800e0000f23f8660f59ffb8010000000f01d9", 0x5d}], 0x1, 0x0, &(0x7f0000000280)=[@cr4={0x1, 0x20000}], 0x1) ioctl$KVM_RUN(r1, 0xae80, 0x0) 10:49:11 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0af51f023c123f3188a070") syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x40000fffffb, 0x802) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0xc0185500, &(0x7f0000000180)={0x100123}) 10:49:11 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x803, 0x9) ioctl$RTC_ALM_READ(0xffffffffffffffff, 0x80247008, 0x0) r1 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000800)='/dev/snd/seq\x00', 0x0, 0x1) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, 0x0) write$sndseq(r1, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) fstatfs(r0, &(0x7f0000004200)=""/4096) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r3, 0xc02c5341, &(0x7f00000000c0)) 10:49:11 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000080)={'bridge_slave_0\x00', 0x22000000c0ffffff}) 10:49:11 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0af51f023c123f3188a070") syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x40000fffffb, 0x802) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0xc0185500, &(0x7f0000000180)={0x100123}) 10:49:11 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f000002d000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000300)="f3420f7fbe1f529c2065daddc46215b83ac48211a68748000000b9cc080000b882fa0000ba000000000f30f20f79e73e2e660fea150068000048b800580000000000000f23c80f21f8350800e0000f23f8660f59ffb8010000000f01d9", 0x5d}], 0x1, 0x0, &(0x7f0000000280)=[@cr4={0x1, 0x20000}], 0x1) ioctl$KVM_RUN(r1, 0xae80, 0x0) 10:49:11 executing program 0: syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = gettid() sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x4c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_NET_NS_PID={0x8, 0x13, r4}, @IFLA_MAP={0x24}]}, 0x4c}}, 0x0) 10:49:11 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000080)={'bridge_slave_0\x00', 0x22000000c0ffffff}) 10:49:11 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x803, 0x9) ioctl$RTC_ALM_READ(0xffffffffffffffff, 0x80247008, 0x0) r1 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000800)='/dev/snd/seq\x00', 0x0, 0x1) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, 0x0) write$sndseq(r1, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) fstatfs(r0, &(0x7f0000004200)=""/4096) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r3, 0xc02c5341, &(0x7f00000000c0)) 10:49:11 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0af51f023c123f3188a070") syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x40000fffffb, 0x802) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0xc0185500, &(0x7f0000000180)={0x100123}) 10:49:11 executing program 2: r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x2102) write(r0, &(0x7f00000001c0)="9bcc9e1b3978b94685dc33802be448f5f5404f6028caa79ca54b98fde2e28b09e18aac66f1165e9f22975218f3e1017b", 0x30) userfaultfd(0x0) ppoll(&(0x7f0000000180)=[{}, {r0}], 0x2, 0x0, 0x0, 0x0) 10:49:11 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0af51f023c123f3188a070") r1 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x40000fffffb, 0x802) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, 0x0) 10:49:11 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f000002d000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000300)="f3420f7fbe1f529c2065daddc46215b83ac48211a68748000000b9cc080000b882fa0000ba000000000f30f20f79e73e2e660fea150068000048b800580000000000000f23c80f21f8350800e0000f23f8660f59ffb8010000000f01d9", 0x5d}], 0x1, 0x0, &(0x7f0000000280)=[@cr4={0x1, 0x20000}], 0x1) ioctl$KVM_RUN(r1, 0xae80, 0x0) 10:49:11 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000080)={'bridge_slave_0\x00', 0x22000000c0ffffff}) 10:49:11 executing program 0: syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = gettid() sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x4c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_NET_NS_PID={0x8, 0x13, r4}, @IFLA_MAP={0x24}]}, 0x4c}}, 0x0) 10:49:11 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x803, 0x9) ioctl$RTC_ALM_READ(0xffffffffffffffff, 0x80247008, 0x0) r1 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000800)='/dev/snd/seq\x00', 0x0, 0x1) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, 0x0) write$sndseq(r1, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) fstatfs(r0, &(0x7f0000004200)=""/4096) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r3, 0xc02c5341, &(0x7f00000000c0)) 10:49:11 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000002d000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000300)="f3420f7fbe1f529c2065daddc46215b83ac48211a68748000000b9cc080000b882fa0000ba000000000f30f20f79e73e2e660fea150068000048b800580000000000000f23c80f21f8350800e0000f23f8660f59ffb8010000000f01d9", 0x5d}], 0x1, 0x0, &(0x7f0000000280)=[@cr4={0x1, 0x20000}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:49:11 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000100)={'bridge_slave_0\x00\x04'}) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000080)={'bridge_slave_0\x00', 0x22000000c0ffffff}) 10:49:11 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0af51f023c123f3188a070") r1 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x40000fffffb, 0x802) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, 0x0) 10:49:12 executing program 0: syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = gettid() sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x4c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_NET_NS_PID={0x8, 0x13, r4}, @IFLA_MAP={0x24}]}, 0x4c}}, 0x0) 10:49:12 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0af51f023c123f3188a070") r1 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x40000fffffb, 0x802) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, 0x0) 10:49:12 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000002d000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000300)="f3420f7fbe1f529c2065daddc46215b83ac48211a68748000000b9cc080000b882fa0000ba000000000f30f20f79e73e2e660fea150068000048b800580000000000000f23c80f21f8350800e0000f23f8660f59ffb8010000000f01d9", 0x5d}], 0x1, 0x0, &(0x7f0000000280)=[@cr4={0x1, 0x20000}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:49:12 executing program 2: r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x2102) write(r0, &(0x7f00000001c0)="9bcc9e1b3978b94685dc33802be448f5f5404f6028caa79ca54b98fde2e28b09e18aac66f1165e9f22975218f3e1017b", 0x30) userfaultfd(0x0) ppoll(&(0x7f0000000180)=[{}, {r0}], 0x2, 0x0, 0x0, 0x0) 10:49:12 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000100)={'bridge_slave_0\x00\x04'}) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000080)={'bridge_slave_0\x00', 0x22000000c0ffffff}) 10:49:12 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x803, 0x9) ioctl$RTC_ALM_READ(0xffffffffffffffff, 0x80247008, 0x0) r1 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000800)='/dev/snd/seq\x00', 0x0, 0x1) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, 0x0) write$sndseq(r1, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) fstatfs(r0, &(0x7f0000004200)=""/4096) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r3, 0xc02c5341, &(0x7f00000000c0)) 10:49:12 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0af51f023c123f3188a070") r1 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x40000fffffb, 0x802) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000180)) 10:49:12 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000002d000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000300)="f3420f7fbe1f529c2065daddc46215b83ac48211a68748000000b9cc080000b882fa0000ba000000000f30f20f79e73e2e660fea150068000048b800580000000000000f23c80f21f8350800e0000f23f8660f59ffb8010000000f01d9", 0x5d}], 0x1, 0x0, &(0x7f0000000280)=[@cr4={0x1, 0x20000}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:49:12 executing program 0: syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = gettid() sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x4c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_NET_NS_PID={0x8, 0x13, r4}, @IFLA_MAP={0x24}]}, 0x4c}}, 0x0) 10:49:12 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000100)={'bridge_slave_0\x00\x04'}) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000080)={'bridge_slave_0\x00', 0x22000000c0ffffff}) 10:49:12 executing program 0: syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = gettid() sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x4c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_NET_NS_PID={0x8, 0x13, r4}, @IFLA_MAP={0x24}]}, 0x4c}}, 0x0) [ 316.526871][ T9448] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 10:49:12 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0af51f023c123f3188a070") r1 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x40000fffffb, 0x802) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000180)) 10:49:12 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000002d000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000300)="f3420f7fbe1f529c2065daddc46215b83ac48211a68748000000b9cc080000b882fa0000ba000000000f30f20f79e73e2e660fea150068000048b800580000000000000f23c80f21f8350800e0000f23f8660f59ffb8010000000f01d9", 0x5d}], 0x1, 0x0, &(0x7f0000000280)=[@cr4={0x1, 0x20000}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:49:12 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bridge_slave_0\x00\x04'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'bridge_slave_0\x00', 0x22000000c0ffffff}) 10:49:12 executing program 0: syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = gettid() sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x4c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_NET_NS_PID={0x8, 0x13, r4}, @IFLA_MAP={0x24}]}, 0x4c}}, 0x0) [ 316.709285][ T9463] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 316.986608][ T9471] bridge0: port 1(bridge_slave_0) entered disabled state [ 316.997238][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 317.006830][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 317.013956][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state 10:49:13 executing program 2: r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x2102) write(r0, &(0x7f00000001c0)="9bcc9e1b3978b94685dc33802be448f5f5404f6028caa79ca54b98fde2e28b09e18aac66f1165e9f22975218f3e1017b", 0x30) userfaultfd(0x0) ppoll(&(0x7f0000000180)=[{}, {r0}], 0x2, 0x0, 0x0, 0x0) 10:49:13 executing program 3: perf_event_open(&(0x7f000025c000)={0x400000002, 0x70, 0xc3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sync() 10:49:13 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0af51f023c123f3188a070") r1 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x40000fffffb, 0x802) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000180)) 10:49:13 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000002d000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000300)="f3420f7fbe1f529c2065daddc46215b83ac48211a68748000000b9cc080000b882fa0000ba000000000f30f20f79e73e2e660fea150068000048b800580000000000000f23c80f21f8350800e0000f23f8660f59ffb8010000000f01d9", 0x5d}], 0x1, 0x0, &(0x7f0000000280)=[@cr4={0x1, 0x20000}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:49:13 executing program 0: syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = gettid() sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x4c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_NET_NS_PID={0x8, 0x13, r3}, @IFLA_MAP={0x24}]}, 0x4c}}, 0x0) 10:49:13 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bridge_slave_0\x00\x04'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'bridge_slave_0\x00', 0x22000000c0ffffff}) [ 317.366786][ T9485] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 10:49:13 executing program 1: r0 = syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r3, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x204) 10:49:13 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000002d000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000300)="f3420f7fbe1f529c2065daddc46215b83ac48211a68748000000b9cc080000b882fa0000ba000000000f30f20f79e73e2e660fea150068000048b800580000000000000f23c80f21f8350800e0000f23f8660f59ffb8010000000f01d9", 0x5d}], 0x1, 0x0, &(0x7f0000000280)=[@cr4={0x1, 0x20000}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:49:13 executing program 3: ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) socket$inet(0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) syz_genetlink_get_family_id$tipc(0x0) prctl$PR_SET_FP_MODE(0x2d, 0x2) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000680)='memory.events\x00', 0x7a05, 0x1700) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r0, &(0x7f0000000480)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10020}, 0xc, 0x0}, 0x1) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) 10:49:13 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000002d000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000300)="f3420f7fbe1f529c2065daddc46215b83ac48211a68748000000b9cc080000b882fa0000ba000000000f30f20f79e73e2e660fea150068000048b800580000000000000f23c80f21f8350800e0000f23f8660f59ffb8010000000f01d9", 0x5d}], 0x1, 0x0, &(0x7f0000000280)=[@cr4={0x1, 0x20000}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 317.750350][ C0] net_ratelimit: 18 callbacks suppressed [ 317.750358][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 317.761912][ C0] protocol 88fb is buggy, dev hsr_slave_1 10:49:14 executing program 1: r0 = syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r3, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x204) [ 317.820412][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 317.826252][ C1] protocol 88fb is buggy, dev hsr_slave_1 10:49:14 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000002d000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000300)="f3420f7fbe1f529c2065daddc46215b83ac48211a68748000000b9cc080000b882fa0000ba000000000f30f20f79e73e2e660fea150068000048b800580000000000000f23c80f21f8350800e0000f23f8660f59ffb8010000000f01d9", 0x5d}], 0x1, 0x0, &(0x7f0000000280)=[@cr4={0x1, 0x20000}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 318.011383][ T9483] bridge0: port 1(bridge_slave_0) entered disabled state [ 318.049893][ T3479] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 318.067098][ T3479] bridge0: port 1(bridge_slave_0) entered blocking state [ 318.074259][ T3479] bridge0: port 1(bridge_slave_0) entered forwarding state 10:49:14 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bridge_slave_0\x00\x04'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'bridge_slave_0\x00', 0x22000000c0ffffff}) 10:49:14 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000000)=ANY=[@ANYBLOB="0f6f03fb"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:49:14 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCGETA(r0, 0x541e, 0x0) 10:49:14 executing program 1: r0 = syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r3, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x204) 10:49:14 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000002d000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000300)="f3420f7fbe1f529c2065daddc46215b83ac48211a68748000000b9cc080000b882fa0000ba000000000f30f20f79e73e2e660fea150068000048b800580000000000000f23c80f21f8350800e0000f23f8660f59ffb8010000000f01d9", 0x5d}], 0x1, 0x0, &(0x7f0000000280)=[@cr4={0x1, 0x20000}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:49:14 executing program 0: syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = gettid() sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x4c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_NET_NS_PID={0x8, 0x13, r3}, @IFLA_MAP={0x24}]}, 0x4c}}, 0x0) 10:49:14 executing program 2: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x3, 0x2) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f00000024c0)={0x0, 0x0, [], @raw_data}) 10:49:14 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) [ 318.307484][ T9533] *** Guest State *** [ 318.318049][ T9533] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 10:49:14 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000002d000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000300)="f3420f7fbe1f529c2065daddc46215b83ac48211a68748000000b9cc080000b882fa0000ba000000000f30f20f79e73e2e660fea150068000048b800580000000000000f23c80f21f8350800e0000f23f8660f59ffb8010000000f01d9", 0x5d}], 0x1, 0x0, &(0x7f0000000280)=[@cr4={0x1, 0x20000}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:49:14 executing program 1: r0 = syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r3, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x204) [ 318.385173][ T9533] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 318.453284][ T9533] CR3 = 0x0000000000000000 [ 318.468121][ T9533] RSP = 0x0000000000000f80 RIP = 0x0000000000000004 [ 318.500531][ T9533] RFLAGS=0x00000202 DR7 = 0x0000000000000400 [ 318.533329][ T9533] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 10:49:14 executing program 1: r0 = syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x204) [ 318.551104][ T9533] CS: sel=0x0000, attr=0x0009b, limit=0x0000ffff, base=0x0000000000000000 [ 318.566894][ T9533] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 318.585659][ T9533] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 318.616886][ T9533] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 318.628709][ T9533] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 318.685900][ T9533] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 318.700373][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 318.706216][ C0] protocol 88fb is buggy, dev hsr_slave_1 10:49:15 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000000380)={0x2, 0x0, 0x2080, {}, [], "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", "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"}) [ 318.728208][ T9533] GDTR: limit=0x000007ff, base=0x0000000000001000 [ 318.746674][ T9533] LDTR: sel=0x0008, attr=0x04082, limit=0x000007ff, base=0x0000000000001800 [ 318.785082][ T9533] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 318.808528][ T9536] bridge0: port 1(bridge_slave_0) entered disabled state [ 318.819176][ T9533] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 318.860011][ T9540] bridge0: port 1(bridge_slave_0) entered blocking state [ 318.862281][ T9533] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 318.867215][ T9540] bridge0: port 1(bridge_slave_0) entered forwarding state [ 318.881073][ T9533] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 318.899713][ T9533] Interruptibility = 00000001 ActivityState = 00000000 [ 318.907139][ T9533] *** Host State *** [ 318.919816][ T9533] RIP = 0xffffffff811b3240 RSP = 0xffff88805e7778e0 [ 318.938431][ T9533] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 318.948880][ T9533] FSBase=00007f0883b71700 GSBase=ffff8880ae800000 TRBase=fffffe0000033000 10:49:15 executing program 5: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bridge_slave_0\x00\x04'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'bridge_slave_0\x00', 0x22000000c0ffffff}) [ 318.969964][ T9533] GDTBase=fffffe0000031000 IDTBase=fffffe0000000000 [ 318.977655][ T9533] CR0=0000000080050033 CR3=00000000897af000 CR4=00000000001426f0 [ 318.988237][ T9533] Sysenter RSP=fffffe0000032200 CS:RIP=0010:ffffffff87201360 [ 319.006036][ T9533] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 319.016059][ T9533] *** Control State *** [ 319.020239][ T9533] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000ca [ 319.038265][ T9533] EntryControls=0000d1ff ExitControls=002fefff [ 319.044895][ T9533] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 319.053043][ T9533] VMEntry: intr_info=80000202 errcode=00000000 ilen=00000000 [ 319.061106][ T9533] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003 [ 319.068527][ T9533] reason=80000021 qualification=0000000000000003 10:49:15 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000002d000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000300)="f3420f7fbe1f529c2065daddc46215b83ac48211a68748000000b9cc080000b882fa0000ba000000000f30f20f79e73e2e660fea150068000048b800580000000000000f23c80f21f8350800e0000f23f8660f59ffb8010000000f01d9", 0x5d}], 0x1, 0x0, &(0x7f0000000280)=[@cr4={0x1, 0x20000}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:49:15 executing program 1: r0 = syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x204) 10:49:15 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000000380)={0x2, 0x0, 0x2080, {}, [], "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", "e97b839f936e2b6e70c2344d8cea8dc106787dfed02cc50005f4967a6c09e292feb6a63b9b6bbecf33ef45e815300124746f7eb897db85c93f096417afb520f08184e65eb79386bc07636b8d82be780e8d56823057cd0c4d83d00587fb4cf95a51f558ed7c245e2ac78cc0ba0e964872e97b7ee962e0aad8a2b616666cf2545c243128e1e1fc21f499ca4b84ef1ee8794cac2c1a836b3f7fa8c5b976e9b0bed931af4e13fb68f71fb226e4e840bf96cb483f3601cf74a506baffd699732fc031e9e37258d9014c7307199392e9087d651ce7d271d12f315c16410a4db7b680bd3e02e1c2e65bd61f26697ea261afb7d8fa27266344c774871a2bca96e889d68f7c243f38aaa18f72b374207f3157b435f0139ad1954d5b219f74b1ec3985cb14969dbc169ca45bfaab2d6b3197be05be03b0f5b560643d6307bb1de831c292fdfd90504420ab9626b9970d118c65e0a825a9b7fd825b46739bcfe79ded7aecf321249a4d8d6031dc1182c3e06987591099c8842586731fc9d4969936a2a12d85f926c092e265252d811d2a70a577d42a368f26f4b73954dcafa24e7e51e9260bd23f06fc8b3f1c6caec0616a89173f1c157cdfacec15cf3f453e0d1e6dbdd2861e3fbf89f52b982616938d15b735bee0c5878746e236e0bd38b0a1f4b68442aa329ed72c10c196d364fafeeab0e2266f15c063b35ce4b7d5ec135b40b8463d30b751a27d37257ff9a1a98640b067f670a0ad8ed9190f5e482f7a7d22bab81ebb108156a689b86b7af608f03751b06cdddff1d6c8ab1092bf824441c111c86dd0e3919db3974109fafb22768660db1e34dc8637141a6dc73935848f7836c7cfc923a8494b6cadcab736d01d74887a3cf26c9e236a79526036d0a7fd2fea4b1a57c640032090444253b9197eaf67a3c6a2f478de576d672e6437e534d925c56855af1ceddd883df65b401b30d03cc9f7b36154705ec9988d9f3db3485db7827191126d6a5cd04a3f96cc06f91bb4b630bb029d292269a0043adc2cfafa080b91e312ee696843042a7a88843591139ffe8f565fb85a984f413e991d71e79b6ebb571f63d45e1b54046afcd0fb9b004f118570ee5371f1dc2c3af97742f9707198df53120568db66826561c20d672a371e3aa2e2f328d5ba1482bc0055a7eed26daadfc1b3bc23812fb92900e6a270c8a068f70af4e17b0bc82326c5b85e0f376a9a591cbfe1b6aae07bae5604c0d0eafcc0dcbe79de98c7ce692be7bd57fa548fd29028b4bf0ed54d0b643cd994edef091e08bcf66385cda84a0ed602b071f9a1c43245bcff03048ee8fc44f7c13f066d8dff661a7039cfb0922b28b81d4b28bc18d7fba2fdbefa759e220094b1e511930b599692f0d0f013132d653d9bbde23b29e1c22f0c878fcd8558069d9f71dd36c87338e320a298e1da1dd602867a39aad0cf5d5b449ab4bceffffb88faffda8bd0d4ff0fc074eb9449a909ee6958d2d530c53077489d890342cd868dfa2f2e515e67da59e89ebb24bb1602b7c4eb6de251d9790f03ea6c8e787cbaeb06891441826b427410a1db571bcc84419fe9aef957ba9a872c07fa056accac0668c606a70a48e8f6d9f014f20ff52b78be78eea50d42336403960341c5721b1f0e0766316fc466f060d0a195cf50a5fdea5c5bbfedafa5708da58ec7a36c845d638b902e7d4a6a5ad76cca3dc46c8bbd2d880fcf913548b2861d0386e662499d4097871b29b7fa661c501f3046461f2f7ffdff695a4c5cb623351243cc2dac14a43f848430a1bf1a9c74b6f4046b8ce0c364d933e5e560166b5e98f422f54da63f5071ed0c253fbc24dd2754f9a24758407d716c9d3e3e5ce00ab3816050a225a320898ed7cdef52e1e9a1c4df6fc8809605c112644dd1439dedc836ac3f4b94cb63e9fc38b092d4a8532baa2796eda28775456c61e640a18f64a54553ecc81f42eefa346a450d0c78093434fee10fa576da5fe6fa1d4e50d13f737953d20392a2f6962847ef355c3abdab85fec6c7c30ee175111130772314e1005bbed037486eb3fdc3b7f7a487eb996eb1ee6825e36d9af62a889a0a4c10814d45eb1a704b8e1885cfac4faf264a4eec6db1ce1fa19794275aab516cba74f19d2b95821fb41d6e071d711742c03cf1dd5c51a22f5c859de048b7755ebe1da0029ef049624e20c9d167324c00d14f3a0f2a204bae6af1680d8ac408c73c7b1e52c677fa37f93d51117cc534d12e2cd01dc7afc58d3ee2865bb36f9afdfbd970b6261ce60d67f2733b89859d30f2e536cfa3538242d20e040eb9cb960bd66f5d0f1aaa221fe8a16100154060f600157bf9efef5ddb327815c42bf99abd56a9020c7602856f09d5a42cbd4dd57736ee8d632e905689c77e0fd8e801c1ff3946a64c2401b8b2ce4c2323f77c53a587c4f0381c284211d6311dac547d517ed08fe69ed87e9a6e8ea9734101737090e33c25735d3b17922fc37cbe9212e0b4b2bd4d90b1dfcded2ea8fec6971e1242cc8a16876d7b3a800a11782ef4cd1787d066cab980c9d60093e815cb5e9321d0352be7dec60b7b0790d72f98639c7afe87ee52c1f68c69e8ee0279833641bf6ee48d9a4f980d9629b6f73dbb6bc922ebf4633e14eaf45bda317d660b8c542fb4996f9064bb92a9c7d0cccca6216ee6b39c507d2af198a029812380f21adf0a5230b497b209bdf27a5f6512cd9e547ebcd60bc9fc593f91827f5201a39cf8e8ed9e3f4bc6ebe6cb06050f96b7900a1f181524b7c3106edbea542a670c11989496a88d725173bbef5a3943918f84debcf535ec69368c08f06254c52c51179a8b5df7d9c31b9db98e40e46808593c1fc1c06223b09fc72f3eaa34255aa50682473cef7069d38e78a790fc0f1e0fd7c8963557ae8a71453db283efbd0e3be5ec729e7269d47ca7e8eeba6d2ddf4053f89d6de0b6792dcae07cc695a95cfe45b34ba148d5dbbf72c4ab0b808329d32f87ad79e3d52bc6e41b2d4a4624fe5a2c830be327e5409b668d24b85fce5eafc202b3eed13a722e5405f5f7e7999e33d96d6eb702d65fa84a3c460a1bea300ab622a647ce4f075d2903f4ecb8b1768f93d225ade8a72990ac1fcccf6505aeb41236f5e4c60ff672e3d2f333f9784b203d2d3a12fe4bf35a1692b1aef8593821d8a7a46a06059c8cfb96dad7fb9a44a7d0e5d4bd0ab0e55925eae423da698a574bb157e107f9e53a1e232897158994c6a71296f8afef86df2f1db9052844fd42a7c881818395bd8dd5462a75dd1f32158c2b6d1df947e6a69a884f89b40c6a62b9376b432e5908acfa41577c63e06fe0b3c48980aa062ad668e273ab8a1268ef102567fe5e96658d9f40b2dab47f4ac1f241ca7a04f95c98411f9b375bbf53f328440adc49f19fc1653c8db7a1759abd42e4d2e81ab919383ad00d85cf163201cf536cf5a655975534b425350d946e664b76908ad5689ea06bbf2dabe3f56de258b5bd1a1027bc138407f9fd4dcc103a0942eb8f535773b2048c99c3ffc51f6c8f23e0d7627c75e5f3b7bc32d1784b5300e2fad41f9db8a64aee113a3d0e68e2fb4fa1abc9d3ad3f98b66c6475db0c2650339ef62152c0d120e92a2da7ac4124d0c62aac1c66b3974e0a080e3090500edb3b5f2a0ef5e63049c4a063b86eafb7f44820a20a637e73af8aeaa34fe15d81fd4495621cf174a66588813be56c39acff7584eba45ba5f205a78ca8d1e4b76e725861576fc769f30546d0aee9d28f2189887621288e6ba2d6f3a28af469fa39df9ae27d451d6d46aa54f6fae580b6eeb5df51b39f93e6e419b696a22f2b1578b41bf4b5cb81150a1ae0bfa5b937679deef9ef7460002e83bb980a73d0e1509a656498e40051c322a0a9c059ccac7bd33cbc30bdcac585c8b7f984805d9ef9f9dafedbe3adc224c0213ac2d71c01830275a72ac82326fbe1a93fdac9ecb39efcb521fc8a53f264595e6486d26a23901f5d4518650517c5a4a3141c23a6f2cc7e520bd829f710c1ca29ffb9006869b128b67fa6652fab82e2c7249c9cfefc167f9cc9062b53efbca35d94adc40dd938a83254269c5c022c92ca8e2097c57932e0be966d33db2b3ad40fbeacb5eccf275e37f4dae5ec2c553f3a2fbbadcd1ce81b4df7a570690f35052a257d57975eccb4704add11d64ec9688701d15ada55606ab23f60fcb9ca694fc68c6220b5971b259d1c1a534b300eb44accbb732404f859dfb874f36ebd9870a357cf663223d578de6f40e1d69f12295f2e6161cf6769bdb70fa54b76e3febf98c47f5397909fc84c46f48138451859754770cf6b8a68ce790632ff31c2c766a1d6eabdbe5996f7b2733b0db20f06e8615862d39f7b5e996148d56bbc78cac9313dd71ce9c65e5ca132e23ba56df5b481e6318b79b3bcb20bb053c503e851cdd0d85edaab67df11ce3e75cffe002f555acaf823a0190088dcd14a47ef1dd44d7cf4bcc743069e03a7e9428a9a8ec288df17cddd453ddd039a961ee8dbd35d9e03da93731c7dd4dc646d9aafd4e782e59014c9cc38f4dfc9f805adfa034bf52ff0093db6c7140260df372a04575ebc6ff6533533056c068d7eff73891ab52414fa1b7ba545b32582e156da9d82d95f6f6446e2c4cf2d5cb413c1ed86ff43e5bc7d562847e185551f9d09c245de5dc818762e67af7fac0854e441fbbf034d50333a34ec2906d32856c8697a92ff5f4582feab4aba9f0ef3fb5c4b573b5e7632a79222b12f801a4e9b5692059f31424181c3b5be35bae2bf395a7c1690feca2e17ef43bd4e8cfcb63159367977ecfec9fb0caaa24b8d4a639432cbc8c8c1625a8db9e09d624730385dcef4374f5eb4c17861991763b91084f00f7f123a9b5c58ec8798183546f766948340fc4e945eb624c2a077917032fc70a56a98ed9f918ae0793ed8d7a5719d121e1ea209fd2fddbfbd10a0022ffaf5c0f64d6b062f9233cb2ea30921022dcb3d8159e460b56ff45e44b5c949c22dcf737987c643acb8df8a95e19e79239ce1cdfef1d2c3d5c8ac6dbe4eb1039c42f0085efd067b0f48ad8ea5d84f1c469bd2a571fe9447f012029afff5a8112efe2c070e3d5de85098d0e9dace117dde7487d16b9c2c2edb719f92d5f4838096e9d805aafcdd7c833002d946430955c559ab0c7f4efe4ed61724a35e5f1329d9f5cb30388b35aa39b3646ad2f76860a4244115076ed87ad8c84bbbe61cb43cdda6ca9aa6a460f4c8287ef3b539b5012a186c2623f2bbb8a79110d9d2b92392e902a97245d606ff36e52b87fd217a23f94f44cbae1a3997edcee6e5aa716279f0a6fa79e468669127d17c5ab379d8e309cdfe9caa39d80594f11a12e3fb804e5fe03065d4a041c033130df839d729e5c6960a33e013379b2a2f9d709e5fadd66e0366dad3acecd50ecaf79c76fb0578189ea2d03f89025ddacbb8a3e2da0c54894d2850a5e488aefc1426fcb67b9aeec553800e5ee8dadfc2b007342fbc93e1ab3b289a9358232c71c12e1de8fe3b6506ec08750f6c41bcda4c497808aef28901ceae904d7b0d029c264a5ed84b8919fc024b9499b21e350a7f3663161db2076e981f9d615fa937f00b6fdedd974b34562b41212cac44923609aa41a8746e6fe3ea51c6a33983b983d5a8001d9007b08e9f3402a8be4df2fdffe137329f6c086d5de4779677e3fbfa475c9fc547d4a9aa2904c96e1bb8c446e949def3cbdd91f38ebe0e1cbd737361ecdda2abfc30c746c575b3a6d0eed61ee937d099b1699a18c307af9d7900d62cb50f16af773653480b1684f975"}) 10:49:15 executing program 3: 10:49:15 executing program 0: syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = gettid() sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x4c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_NET_NS_PID={0x8, 0x13, r3}, @IFLA_MAP={0x24}]}, 0x4c}}, 0x0) [ 319.077062][ T9533] IDTVectoring: info=00000000 errcode=00000000 [ 319.092717][ T9533] TSC Offset = 0xffffff5310426c0d [ 319.103793][ T9533] EPT pointer = 0x00000000919c401e 10:49:15 executing program 3: 10:49:15 executing program 1: r0 = syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x204) 10:49:15 executing program 3: [ 319.340361][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 319.346269][ C1] protocol 88fb is buggy, dev hsr_slave_1 10:49:15 executing program 3: 10:49:15 executing program 2: [ 319.481140][ T9567] bridge0: port 1(bridge_slave_0) entered disabled state [ 319.510822][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready 10:49:15 executing program 3: [ 319.536846][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 319.544015][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state 10:49:15 executing program 5: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bridge_slave_0\x00\x04'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'bridge_slave_0\x00', 0x22000000c0ffffff}) 10:49:15 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000002d000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000300)="f3420f7fbe1f529c2065daddc46215b83ac48211a68748000000b9cc080000b882fa0000ba000000000f30f20f79e73e2e660fea150068000048b800580000000000000f23c80f21f8350800e0000f23f8660f59ffb8010000000f01d9", 0x5d}], 0x1, 0x0, &(0x7f0000000280)=[@cr4={0x1, 0x20000}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:49:15 executing program 1: r0 = syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r1, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x204) 10:49:15 executing program 2: 10:49:15 executing program 3: 10:49:15 executing program 0: syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = gettid() sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x4c, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_NET_NS_PID={0x8, 0x13, r3}, @IFLA_MAP={0x24}]}, 0x4c}}, 0x0) 10:49:16 executing program 1: r0 = syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r1, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x204) 10:49:16 executing program 3: 10:49:16 executing program 2: 10:49:16 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000002d000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000280)=[@cr4={0x1, 0x20000}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 319.820337][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 319.826149][ C0] protocol 88fb is buggy, dev hsr_slave_1 10:49:16 executing program 1: r0 = syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r1, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x204) 10:49:16 executing program 3: [ 320.019642][ T9623] *** Guest State *** [ 320.055897][ T9623] CR0: actual=0x0000000000000031, shadow=0x0000000060000011, gh_mask=fffffffffffffff7 [ 320.086357][ T9623] CR4: actual=0x0000000000022060, shadow=0x0000000000020020, gh_mask=ffffffffffffe871 [ 320.096264][ T9623] CR3 = 0x0000000000002000 [ 320.101036][ T9623] PDPTR0 = 0x0000000000000000 PDPTR1 = 0x0000000000000000 [ 320.108415][ T9623] PDPTR2 = 0x0000000000000000 PDPTR3 = 0x0000000000000000 [ 320.120638][ T9623] RSP = 0x0000000000000f80 RIP = 0x0000000000000000 [ 320.127494][ T9623] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 320.139765][ T9623] Sysenter RSP=0000000000000f80 CS:RIP=0050:0000000000002810 [ 320.149483][ T9623] CS: sel=0x0030, attr=0x0409b, limit=0x000fffff, base=0x0000000000000000 [ 320.164004][ T9623] DS: sel=0x0038, attr=0x04093, limit=0x000fffff, base=0x0000000000000000 [ 320.173831][ T9623] SS: sel=0x0038, attr=0x04093, limit=0x000fffff, base=0x0000000000000000 [ 320.187768][ T9623] ES: sel=0x0038, attr=0x04093, limit=0x000fffff, base=0x0000000000000000 [ 320.197783][ T9623] FS: sel=0x0038, attr=0x04093, limit=0x000fffff, base=0x0000000000000000 [ 320.213259][ T9623] GS: sel=0x0038, attr=0x04093, limit=0x000fffff, base=0x0000000000000000 [ 320.225645][ T9623] GDTR: limit=0x000007ff, base=0x0000000000001000 [ 320.239210][ T9623] LDTR: sel=0x0008, attr=0x04082, limit=0x000007ff, base=0x0000000000001800 [ 320.250387][ T9623] IDTR: limit=0x000001ff, base=0x0000000000003800 [ 320.259192][ T9623] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 320.259785][ T9604] bridge0: port 1(bridge_slave_0) entered disabled state [ 320.268364][ T9623] EFER = 0x0000000000000001 PAT = 0x0007040600070406 [ 320.282611][ T9623] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 320.290850][ T9623] Interruptibility = 00000000 ActivityState = 00000000 [ 320.296835][ T9612] bridge0: port 1(bridge_slave_0) entered blocking state [ 320.297777][ T9623] *** Host State *** [ 320.297792][ T9623] RIP = 0xffffffff811b3240 RSP = 0xffff88804eb278e0 [ 320.297817][ T9623] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 320.297831][ T9623] FSBase=00007f4ab5cdc700 GSBase=ffff8880ae800000 TRBase=fffffe0000003000 [ 320.297843][ T9623] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 320.297863][ T9623] CR0=0000000080050033 CR3=0000000090106000 CR4=00000000001426f0 [ 320.304946][ T9612] bridge0: port 1(bridge_slave_0) entered forwarding state [ 320.308831][ T9623] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87201360 [ 320.360341][ T9623] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 320.367092][ T9623] *** Control State *** [ 320.371316][ T9623] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000ca [ 320.378674][ T9623] EntryControls=0000d1ff ExitControls=002fefff [ 320.384878][ T9623] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 320.392538][ T9623] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 320.399901][ T9623] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 320.407216][ T9623] reason=80000021 qualification=0000000000000000 [ 320.414283][ T9623] IDTVectoring: info=00000000 errcode=00000000 [ 320.420485][ T9623] TSC Offset = 0xffffff5223c705e2 [ 320.425511][ T9623] EPT pointer = 0x0000000092bb601e 10:49:16 executing program 5: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bridge_slave_0\x00\x04'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'bridge_slave_0\x00', 0x22000000c0ffffff}) 10:49:16 executing program 2: 10:49:16 executing program 3: 10:49:16 executing program 1: r0 = syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x204) 10:49:16 executing program 0: syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = gettid() sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x4c, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_NET_NS_PID={0x8, 0x13, r3}, @IFLA_MAP={0x24}]}, 0x4c}}, 0x0) 10:49:16 executing program 2: 10:49:16 executing program 3: 10:49:16 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000002d000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:49:16 executing program 1: r0 = syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x204) 10:49:16 executing program 3: 10:49:17 executing program 2: 10:49:17 executing program 3: 10:49:17 executing program 5: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000100)={'bridge_slave_0\x00\x04'}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000080)={'bridge_slave_0\x00', 0x22000000c0ffffff}) 10:49:17 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000002d000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:49:17 executing program 1: r0 = syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x204) 10:49:17 executing program 2: 10:49:17 executing program 3: 10:49:17 executing program 0: syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = gettid() sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x4c, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_NET_NS_PID={0x8, 0x13, r3}, @IFLA_MAP={0x24}]}, 0x4c}}, 0x0) [ 321.006544][ T9639] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.019141][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 321.029588][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 321.036725][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state 10:49:17 executing program 3: 10:49:17 executing program 2: 10:49:17 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x204) 10:49:17 executing program 0: syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = gettid() sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x4c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_NET_NS_PID={0x8, 0x13, r3}, @IFLA_MAP={0x24}]}, 0x4c}}, 0x0) 10:49:17 executing program 3: 10:49:17 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000002d000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 321.630562][ T9674] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.639399][ T9679] bridge0: port 1(bridge_slave_0) entered blocking state [ 321.646514][ T9679] bridge0: port 1(bridge_slave_0) entered forwarding state 10:49:17 executing program 5: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000100)={'bridge_slave_0\x00\x04'}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000080)={'bridge_slave_0\x00', 0x22000000c0ffffff}) 10:49:17 executing program 2: 10:49:17 executing program 3: 10:49:17 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x204) 10:49:17 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000002d000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000280), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:49:17 executing program 0: syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = gettid() sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x4c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_NET_NS_PID={0x8, 0x13, r3}, @IFLA_MAP={0x24}]}, 0x4c}}, 0x0) 10:49:18 executing program 2: 10:49:18 executing program 3: 10:49:18 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x204) 10:49:18 executing program 0: syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = gettid() sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x4c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_NET_NS_PID={0x8, 0x13, r3}, @IFLA_MAP={0x24}]}, 0x4c}}, 0x0) 10:49:18 executing program 3: 10:49:18 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000002d000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000280), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:49:18 executing program 5: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000100)={'bridge_slave_0\x00\x04'}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000080)={'bridge_slave_0\x00', 0x22000000c0ffffff}) 10:49:18 executing program 2: 10:49:18 executing program 3: 10:49:18 executing program 1: r0 = syz_open_dev$media(0x0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r3, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x204) 10:49:18 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000002d000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000280), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 322.294930][ T9708] bridge0: port 1(bridge_slave_0) entered disabled state [ 322.304771][ T3479] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 322.320548][ T3479] bridge0: port 1(bridge_slave_0) entered blocking state [ 322.327641][ T3479] bridge0: port 1(bridge_slave_0) entered forwarding state 10:49:18 executing program 3: capset(&(0x7f00000000c0)={0x19980330}, &(0x7f0000000100)) shmat(0x0, &(0x7f0000ffa000/0x4000)=nil, 0x0) 10:49:18 executing program 2: syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @rand_addr=0x7f000000}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 10:49:18 executing program 0: syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syz_tun\x00'}) r2 = socket$nl_route(0x10, 0x3, 0x0) gettid() sendmsg$nl_route(r2, 0x0, 0x0) [ 322.448114][ T9742] capability: warning: `syz-executor.3' uses 32-bit capabilities (legacy support in use) 10:49:18 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000002d000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000280)=[@cr4], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:49:18 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)=""/4096, 0x1000}, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) writev(r2, &(0x7f0000000700), 0x100000000000010b) 10:49:18 executing program 1: r0 = syz_open_dev$media(0x0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r3, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x204) 10:49:18 executing program 2: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000560007031dfffd946f610500070000001f00000000000000421ba3a20400ff7e", 0x24}], 0x1}, 0x0) [ 322.860410][ C0] net_ratelimit: 14 callbacks suppressed [ 322.860419][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 322.871906][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 322.975476][ T9739] bridge0: port 1(bridge_slave_0) entered disabled state [ 322.987641][ T9748] bridge0: port 1(bridge_slave_0) entered blocking state [ 322.994788][ T9748] bridge0: port 1(bridge_slave_0) entered forwarding state 10:49:19 executing program 5: socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bridge_slave_0\x00\x04'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'bridge_slave_0\x00', 0x22000000c0ffffff}) 10:49:19 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000002d000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000280)=[@cr4], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:49:19 executing program 1: r0 = syz_open_dev$media(0x0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r3, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x204) 10:49:19 executing program 3: readlink(0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x10060, 0x88) 10:49:19 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000001680)={0x1, 0x0, [{0x48}]}) 10:49:19 executing program 0: syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syz_tun\x00'}) r2 = socket$nl_route(0x10, 0x3, 0x0) gettid() sendmsg$nl_route(r2, 0x0, 0x0) 10:49:19 executing program 3: 10:49:19 executing program 0: syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syz_tun\x00'}) r2 = socket$nl_route(0x10, 0x3, 0x0) gettid() sendmsg$nl_route(r2, 0x0, 0x0) 10:49:19 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000002d000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000280)=[@cr4], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:49:19 executing program 1: r0 = syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r3, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x204) 10:49:19 executing program 3: 10:49:19 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000001680)={0x1, 0x0, [{0x48}]}) [ 323.500381][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 323.506196][ C1] protocol 88fb is buggy, dev hsr_slave_1 10:49:20 executing program 5: socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bridge_slave_0\x00\x04'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'bridge_slave_0\x00', 0x22000000c0ffffff}) 10:49:20 executing program 3: 10:49:20 executing program 1: r0 = syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r3, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x204) 10:49:20 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000002d000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000280)=[@cr4={0x1, 0x20000}], 0x1) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 10:49:20 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000001680)={0x1, 0x0, [{0x48}]}) 10:49:20 executing program 0: syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syz_tun\x00'}) r2 = socket$nl_route(0x10, 0x3, 0x0) gettid() sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) [ 323.696195][ T9781] bridge0: port 1(bridge_slave_0) entered disabled state [ 323.705856][ T2987] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 323.714998][ T2987] bridge0: port 1(bridge_slave_0) entered blocking state [ 323.722124][ T2987] bridge0: port 1(bridge_slave_0) entered forwarding state 10:49:20 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) utimensat(0xffffffffffffffff, 0x0, 0x0, 0x0) 10:49:20 executing program 1: r0 = syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r3, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x204) 10:49:20 executing program 0: syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syz_tun\x00'}) r2 = socket$nl_route(0x10, 0x3, 0x0) gettid() sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) 10:49:20 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000001680)={0x1, 0x0, [{0x48}]}) 10:49:20 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000002d000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000280)=[@cr4={0x1, 0x20000}], 0x1) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 10:49:20 executing program 1: r0 = syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x204) [ 323.980332][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 323.986145][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 324.060363][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 324.066195][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 324.315250][ T9817] bridge0: port 1(bridge_slave_0) entered disabled state [ 324.324598][ T9820] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.331728][ T9820] bridge0: port 1(bridge_slave_0) entered forwarding state 10:49:20 executing program 5: socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bridge_slave_0\x00\x04'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'bridge_slave_0\x00', 0x22000000c0ffffff}) 10:49:20 executing program 1: r0 = syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x204) 10:49:20 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000002d000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000280)=[@cr4={0x1, 0x20000}], 0x1) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 10:49:20 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000001680)={0x1, 0x0, [{0x48}]}) 10:49:20 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) get_robust_list(0x0, 0x0, &(0x7f0000000200)) 10:49:20 executing program 0: syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syz_tun\x00'}) r2 = socket$nl_route(0x10, 0x3, 0x0) gettid() sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) 10:49:20 executing program 1: r0 = syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x204) 10:49:20 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000001680)={0x1, 0x0, [{0x48}]}) 10:49:20 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) getgid() 10:49:20 executing program 4: 10:49:20 executing program 0: syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syz_tun\x00'}) r2 = socket$nl_route(0x10, 0x3, 0x0) gettid() sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 10:49:20 executing program 1: r0 = syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x204) [ 324.940399][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 324.946288][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 324.969788][ T9857] bridge0: port 1(bridge_slave_0) entered disabled state [ 324.980997][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready 10:49:21 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bridge_slave_0\x00\x04'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'bridge_slave_0\x00', 0x22000000c0ffffff}) 10:49:21 executing program 4: 10:49:21 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000001680)={0x1, 0x0, [{0x48}]}) 10:49:21 executing program 1: r0 = syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x204) 10:49:21 executing program 0: syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syz_tun\x00'}) r2 = socket$nl_route(0x10, 0x3, 0x0) gettid() sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 10:49:21 executing program 3: [ 324.996040][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 325.003173][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state 10:49:21 executing program 4: 10:49:21 executing program 3: 10:49:21 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r0, 0xc008ae88, &(0x7f0000001680)={0x1, 0x0, [{0x48}]}) 10:49:21 executing program 1: r0 = syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x204) 10:49:21 executing program 0: syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syz_tun\x00'}) r2 = socket$nl_route(0x10, 0x3, 0x0) gettid() sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 10:49:21 executing program 3: [ 325.575900][ T9893] bridge0: port 1(bridge_slave_0) entered disabled state [ 325.584959][ T9895] bridge0: port 1(bridge_slave_0) entered blocking state [ 325.592110][ T9895] bridge0: port 1(bridge_slave_0) entered forwarding state 10:49:21 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bridge_slave_0\x00\x04'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'bridge_slave_0\x00', 0x22000000c0ffffff}) 10:49:21 executing program 4: 10:49:21 executing program 1: syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x204) 10:49:21 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r0, 0xc008ae88, &(0x7f0000001680)={0x1, 0x0, [{0x48}]}) 10:49:21 executing program 3: 10:49:21 executing program 0: syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = gettid() sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x4c, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_NET_NS_PID={0x8, 0x13, r4}, @IFLA_MAP={0x24}]}, 0x4c}}, 0x0) 10:49:22 executing program 3: 10:49:22 executing program 4: 10:49:22 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r0, 0xc008ae88, &(0x7f0000001680)={0x1, 0x0, [{0x48}]}) 10:49:22 executing program 0: syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = gettid() sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x4c, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_NET_NS_PID={0x8, 0x13, r4}, @IFLA_MAP={0x24}]}, 0x4c}}, 0x0) 10:49:22 executing program 4: 10:49:22 executing program 2: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r1, 0xc008ae88, &(0x7f0000001680)={0x1, 0x0, [{0x48}]}) 10:49:22 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bridge_slave_0\x00\x04'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'bridge_slave_0\x00', 0x22000000c0ffffff}) 10:49:22 executing program 1: syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x204) 10:49:22 executing program 3: 10:49:22 executing program 2: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r1, 0xc008ae88, &(0x7f0000001680)={0x1, 0x0, [{0x48}]}) 10:49:22 executing program 4: r0 = memfd_create(&(0x7f0000000140)='X\']\xe6\x90\x1clB\x00', 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x0, 0x11, r0, 0x0) pwritev(r0, &(0x7f00000000c0)=[{0x0}], 0x1, 0x0) 10:49:22 executing program 0: syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = gettid() sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x4c, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_NET_NS_PID={0x8, 0x13, r4}, @IFLA_MAP={0x24}]}, 0x4c}}, 0x0) [ 326.150741][ T9926] bridge0: port 1(bridge_slave_0) entered disabled state [ 326.160871][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 326.169471][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 326.176583][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state 10:49:22 executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000003800)={'vcan0\x00', 0x0}) connect(r0, &(0x7f0000000300)=@hci={0x1f, r1}, 0x2b) close(r0) 10:49:22 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20-neon\x00'}, 0x58) 10:49:22 executing program 0: syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syz_tun\x00'}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = gettid() sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x4c, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_NET_NS_PID={0x8, 0x13, r3}, @IFLA_MAP={0x24}]}, 0x4c}}, 0x0) 10:49:22 executing program 1: syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x204) 10:49:22 executing program 2: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r1, 0xc008ae88, &(0x7f0000001680)={0x1, 0x0, [{0x48}]}) 10:49:22 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000001680)={0x1, 0x0, [{0x48}]}) [ 326.763377][ T9961] bridge0: port 1(bridge_slave_0) entered disabled state [ 326.772438][ T9967] bridge0: port 1(bridge_slave_0) entered blocking state [ 326.779492][ T9967] bridge0: port 1(bridge_slave_0) entered forwarding state 10:49:23 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000100)={'bridge_slave_0\x00\x04'}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000080)={'bridge_slave_0\x00', 0x22000000c0ffffff}) 10:49:23 executing program 3: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000000)=@in={0x2, 0x0, @rand_addr=0x6}, 0x80) 10:49:23 executing program 1: r0 = syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x204) 10:49:23 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000001680)={0x1, 0x0, [{0x48}]}) 10:49:23 executing program 4: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x3, 0x2) ioctl$VIDIOC_ENUMSTD(r0, 0xc0485619, &(0x7f0000000000)={0x2, 0x0, "3aa6a07ece2ea61ca7714f5daa58467987aff3666163a944"}) 10:49:23 executing program 0: syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syz_tun\x00'}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = gettid() sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x4c, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_NET_NS_PID={0x8, 0x13, r3}, @IFLA_MAP={0x24}]}, 0x4c}}, 0x0) 10:49:23 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x4000fff, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285629, &(0x7f0000000080)={0x3, 0x0, 0x2, [], &(0x7f0000000140)}) 10:49:23 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000001680)={0x1, 0x0, [{0x48}]}) 10:49:23 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f000051cff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000943ffc)=0x7) read(r0, &(0x7f00003fefff)=""/1, 0x1) readv(r0, &(0x7f00000002c0)=[{&(0x7f0000cd8000)=""/1, 0x2e171c03}], 0x1) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)) 10:49:23 executing program 0: syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syz_tun\x00'}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = gettid() sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x4c, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_NET_NS_PID={0x8, 0x13, r3}, @IFLA_MAP={0x24}]}, 0x4c}}, 0x0) 10:49:23 executing program 3: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r1 = memfd_create(&(0x7f0000000280)='[\'posix_acl_access\x00', 0x0) pwritev(r1, &(0x7f0000000240)=[{&(0x7f0000000200)=',', 0x1}], 0x1, 0x4081806) sendfile(r0, r1, 0x0, 0x20020102000007) sendfile(r0, r1, 0x0, 0x3) r2 = gettid() timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000380)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r2, 0x15) 10:49:23 executing program 1: r0 = syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x204) 10:49:23 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r1, 0xc008ae88, &(0x7f0000001680)={0x1, 0x0, [{0x48}]}) 10:49:23 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000300)="23000000210081ae00060c00f20e000002000000000000018001006fabeb264e7d06a4", 0x23}], 0x1}, 0x0) 10:49:23 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f000051cff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000943ffc)=0x7) read(r0, &(0x7f00003fefff)=""/1, 0x1) readv(r0, &(0x7f00000002c0)=[{&(0x7f0000cd8000)=""/1, 0x2e171c03}], 0x1) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)) 10:49:23 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000100)={'bridge_slave_0\x00\x04'}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000080)={'bridge_slave_0\x00', 0x22000000c0ffffff}) 10:49:23 executing program 1: r0 = syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x204) [ 327.371297][T10007] bridge0: port 1(bridge_slave_0) entered disabled state [ 327.382774][ T3479] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 327.391843][ T3479] bridge0: port 1(bridge_slave_0) entered blocking state [ 327.398978][ T3479] bridge0: port 1(bridge_slave_0) entered forwarding state 10:49:23 executing program 0: syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = gettid() sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_NET_NS_PID={0x8, 0x13, r4}]}, 0x28}}, 0x0) [ 327.451357][T10045] netlink: 7 bytes leftover after parsing attributes in process `syz-executor.3'. 10:49:23 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r1, 0xc008ae88, &(0x7f0000001680)={0x1, 0x0, [{0x48}]}) 10:49:23 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f0000000080)}, 0x20) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f0, &(0x7f0000000300)='gre0\x00') 10:49:23 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r1, 0xc008ae88, &(0x7f0000001680)={0x1, 0x0, [{0x48}]}) 10:49:23 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f0000000080)}, 0x20) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f0, &(0x7f0000000300)='gre0\x00') ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000300)='gre0\x00') 10:49:24 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r1, 0xc008ae88, &(0x7f0000001680)={0x1, 0x0, [{0x48}]}) 10:49:24 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r1, 0xc008ae88, &(0x7f0000001680)={0x1, 0x0, [{0x48}]}) 10:49:24 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r1, 0xc008ae88, &(0x7f0000001680)={0x1, 0x0, [{0x48}]}) [ 328.069059][T10050] bridge0: port 1(bridge_slave_0) entered disabled state 10:49:24 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000001680)={0x1, 0x0, [{0x48}]}) [ 328.112429][T10054] bridge0: port 1(bridge_slave_0) entered blocking state [ 328.119660][T10054] bridge0: port 1(bridge_slave_0) entered forwarding state 10:49:24 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f000051cff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000943ffc)=0x7) read(r0, &(0x7f00003fefff)=""/1, 0x1) readv(r0, &(0x7f00000002c0)=[{&(0x7f0000cd8000)=""/1, 0x2e171c03}], 0x1) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)) 10:49:24 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000000)='cgroup.type\x00', 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000040)='threaded\x00', 0x9) 10:49:24 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340)='/dev/net/tun\x00', 0x0, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f00000000c0)=0x1) 10:49:24 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000100)={'bridge_slave_0\x00\x04'}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000080)={'bridge_slave_0\x00', 0x22000000c0ffffff}) 10:49:24 executing program 0: syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = gettid() sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_NET_NS_PID={0x8, 0x13, r4}]}, 0x28}}, 0x0) 10:49:24 executing program 1: r0 = timerfd_create(0x0, 0x0) poll(&(0x7f0000000000)=[{r0}], 0x1, 0x9) 10:49:24 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000001680)={0x1, 0x0, [{0x48}]}) 10:49:24 executing program 3: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000240)='./file0\x00', 0x0) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) chdir(&(0x7f00000009c0)='./file0\x00') symlink(&(0x7f0000000400)='./file0\x00', &(0x7f0000000080)='./file0\x00') lstat(&(0x7f0000000600)='./file0/file0\x00', 0x0) 10:49:24 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, 0x0) 10:49:24 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000001680)={0x1, 0x0, [{0x48}]}) 10:49:24 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000180)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000100)) [ 328.620391][ C1] net_ratelimit: 16 callbacks suppressed [ 328.620400][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 328.631878][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 328.700477][T10117] EXT4-fs (sda1): re-mounted. Opts: 10:49:25 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, 0x0) [ 328.925888][T10093] bridge0: port 1(bridge_slave_0) entered disabled state [ 328.945893][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 328.954624][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 328.961736][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state 10:49:25 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f000051cff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000943ffc)=0x7) read(r0, &(0x7f00003fefff)=""/1, 0x1) readv(r0, &(0x7f00000002c0)=[{&(0x7f0000cd8000)=""/1, 0x2e171c03}], 0x1) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)) 10:49:25 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x113800, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0xfffffffffffffffc}, 0x48) fcntl$setown(r0, 0x8, 0x0) prctl$PR_GET_FP_MODE(0x2e) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r1, 0x80) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) lstat(0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='reno\x00', 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0xfffffffffffffdc6, 0x20000004, &(0x7f0000000280)={0xa, 0x4e22}, 0x1c) write(r2, &(0x7f0000000380), 0xfffffffe) recvfrom$inet6(r2, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880), 0x1c) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000140)={'lo\x00\x00\x00$\x00\x00\x00\x00\x00\x00\b\x00\x00\x11', 0xff}) r4 = accept4(r1, 0x0, 0x0, 0x0) sendto$inet6(r4, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) 10:49:25 executing program 3: mkdir(&(0x7f0000000240)='./file0\x00', 0x0) rename(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000040)='./file0\x00') 10:49:25 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, 0x0) 10:49:25 executing program 0: syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = gettid() sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_NET_NS_PID={0x8, 0x13, r4}]}, 0x28}}, 0x0) 10:49:25 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x0, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000100)={'bridge_slave_0\x00\x04'}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000080)={'bridge_slave_0\x00', 0x22000000c0ffffff}) 10:49:25 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x0, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000100)={'bridge_slave_0\x00\x04'}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000080)={'bridge_slave_0\x00', 0x22000000c0ffffff}) 10:49:25 executing program 3: r0 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write$P9_RSTAT(r0, &(0x7f00000003c0)=ANY=[], 0xfffffefb) setsockopt$IP_VS_SO_SET_DEL(0xffffffffffffffff, 0x0, 0x484, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x0) 10:49:25 executing program 0: syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) gettid() sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MAP={0x24}]}, 0x44}}, 0x0) 10:49:25 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, 0x0) 10:49:25 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x0, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000100)={'bridge_slave_0\x00\x04'}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000080)={'bridge_slave_0\x00', 0x22000000c0ffffff}) 10:49:25 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000001680)) [ 329.740348][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 329.746227][ C1] protocol 88fb is buggy, dev hsr_slave_1 10:49:26 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f000051cff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000943ffc)=0x7) read(r0, &(0x7f00003fefff)=""/1, 0x1) readv(r0, &(0x7f00000002c0)=[{&(0x7f0000cd8000)=""/1, 0x2e171c03}], 0x1) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) 10:49:26 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) getpgid(0xffffffffffffffff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) unshare(0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) mount$bpf(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, 0x0) 10:49:26 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000001680)) 10:49:26 executing program 3: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mkdir(&(0x7f0000000240)='./file0\x00', 0x0) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000027000)) chdir(&(0x7f00000009c0)='./file0\x00') symlink(&(0x7f0000000400)='./file0\x00', &(0x7f0000000080)='./file0\x00') getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, 0x0, &(0x7f0000000180)) lstat(0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) 10:49:26 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000100)={'bridge_slave_0\x00\x04'}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000080)={'bridge_slave_0\x00', 0x22000000c0ffffff}) 10:49:26 executing program 0: syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) gettid() sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MAP={0x24}]}, 0x44}}, 0x0) 10:49:26 executing program 0: syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) gettid() sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MAP={0x24}]}, 0x44}}, 0x0) 10:49:26 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000100)={'bridge_slave_0\x00\x04'}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000080)={'bridge_slave_0\x00', 0x22000000c0ffffff}) [ 330.339903][T10198] EXT4-fs (sda1): re-mounted. Opts: 10:49:26 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000001680)) 10:49:26 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000100)={'bridge_slave_0\x00\x04'}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000080)={'bridge_slave_0\x00', 0x22000000c0ffffff}) 10:49:26 executing program 0: syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) gettid() sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x4c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_NET_NS_PID={0x8}, @IFLA_MAP={0x24}]}, 0x4c}}, 0x0) [ 330.413299][T10207] EXT4-fs (sda1): re-mounted. Opts: 10:49:26 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) getpgid(0xffffffffffffffff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) unshare(0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) mount$bpf(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, 0x0) [ 330.616936][T10223] EXT4-fs (sda1): re-mounted. Opts: 10:49:27 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f000051cff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000943ffc)=0x7) read(r0, &(0x7f00003fefff)=""/1, 0x1) readv(r0, &(0x7f00000002c0)=[{&(0x7f0000cd8000)=""/1, 0x2e171c03}], 0x1) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) 10:49:27 executing program 3: socket$inet6(0xa, 0x400000000001, 0x0) r0 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write$P9_RSTAT(r0, &(0x7f00000003c0)=ANY=[], 0xfffffefb) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x44000) 10:49:27 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000080)={'bridge_slave_0\x00', 0x22000000c0ffffff}) 10:49:27 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000001680)={0x1, 0x0, [{}]}) 10:49:27 executing program 0: syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) gettid() sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x4c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_NET_NS_PID={0x8}, @IFLA_MAP={0x24}]}, 0x4c}}, 0x0) 10:49:27 executing program 1: socketpair$unix(0x1, 0x400000000000005, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x1, 0x0) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000), 0x10) r2 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,') sendfile(r1, r2, 0x0, 0x80000003) 10:49:27 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000001680)={0x1, 0x0, [{}]}) 10:49:27 executing program 1: 10:49:27 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000080)={'bridge_slave_0\x00', 0x22000000c0ffffff}) 10:49:27 executing program 0: syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) gettid() sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x4c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_NET_NS_PID={0x8}, @IFLA_MAP={0x24}]}, 0x4c}}, 0x0) 10:49:27 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000001680)={0x1, 0x0, [{}]}) 10:49:27 executing program 3: 10:49:28 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f000051cff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000943ffc)=0x7) read(r0, &(0x7f00003fefff)=""/1, 0x1) readv(r0, &(0x7f00000002c0)=[{&(0x7f0000cd8000)=""/1, 0x2e171c03}], 0x1) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) 10:49:28 executing program 1: 10:49:28 executing program 0: 10:49:28 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000080)={'bridge_slave_0\x00', 0x22000000c0ffffff}) 10:49:28 executing program 3: 10:49:28 executing program 2: 10:49:28 executing program 3: 10:49:28 executing program 2: 10:49:28 executing program 0: 10:49:28 executing program 1: 10:49:28 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000100)={'bridge_slave_0\x00\x04'}) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000080)={'bridge_slave_0\x00', 0x22000000c0ffffff}) 10:49:28 executing program 2: [ 332.234656][T10287] bridge0: port 1(bridge_slave_0) entered disabled state 10:49:28 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f000051cff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000943ffc)=0x7) read(r0, &(0x7f00003fefff)=""/1, 0x1) readv(r0, &(0x7f00000002c0)=[{&(0x7f0000cd8000)=""/1, 0x2e171c03}], 0x1) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)) 10:49:28 executing program 3: 10:49:28 executing program 0: 10:49:28 executing program 1: 10:49:28 executing program 2: 10:49:28 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000100)={'bridge_slave_0\x00\x04'}) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000080)={'bridge_slave_0\x00', 0x22000000c0ffffff}) 10:49:28 executing program 3: 10:49:28 executing program 2: 10:49:28 executing program 0: 10:49:28 executing program 1: 10:49:29 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000100)={'bridge_slave_0\x00\x04'}) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000080)={'bridge_slave_0\x00', 0x22000000c0ffffff}) 10:49:29 executing program 0: 10:49:29 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f000051cff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000943ffc)=0x7) read(r0, &(0x7f00003fefff)=""/1, 0x1) readv(r0, &(0x7f00000002c0)=[{&(0x7f0000cd8000)=""/1, 0x2e171c03}], 0x1) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)) 10:49:29 executing program 3: 10:49:29 executing program 1: 10:49:29 executing program 2: 10:49:29 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000100)={'bridge_slave_0\x00\x04'}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, 0x0) 10:49:29 executing program 0: 10:49:29 executing program 3: 10:49:29 executing program 0: 10:49:29 executing program 1: 10:49:29 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000100)={'bridge_slave_0\x00\x04'}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, 0x0) 10:49:29 executing program 2: 10:49:29 executing program 0: 10:49:30 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f000051cff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000943ffc)=0x7) read(r0, &(0x7f00003fefff)=""/1, 0x1) readv(r0, &(0x7f00000002c0)=[{&(0x7f0000cd8000)=""/1, 0x2e171c03}], 0x1) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)) 10:49:30 executing program 1: 10:49:30 executing program 2: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe(&(0x7f0000000100)={0xffffffffffffffff}) write(0xffffffffffffffff, 0x0, 0x0) r2 = epoll_create(0x4) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000200)) ppoll(&(0x7f0000000140)=[{}, {r1}], 0x2, 0x0, 0x0, 0x0) getrandom(&(0x7f0000000080)=""/57, 0x39, 0x2) 10:49:30 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000100)={'bridge_slave_0\x00\x04'}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, 0x0) 10:49:30 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000001680)={0x1, 0x0, [{0x2ff}]}) 10:49:30 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000001680)={0x1, 0x0, [{0x560}]}) 10:49:30 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000001680)={0x1, 0x0, [{0xda0}]}) 10:49:30 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000100)={'bridge_slave_0\x00\x04'}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000080)={'bridge_slave_0\x00'}) 10:49:30 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='/gro<#\xfbW\xe6\xc6\x0f\x1fKE\xb7M\x99\x9a\x9a\x8c,\xe1[&\xe5\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ}\xb7\xf3\xfe\xf6\xe0.+\xe3\x89\xde\x139E\xa3\x85\xbd\x81\xe9\xbd\xee\xee\x03\x00\x00\x00\x00\x00\x00\x00[T\aE\xdfK\x1d\xeeH;\x15v$\xc5\xbcq\x9a\t\x9ej5\t\x00\x00\x009\x8c4', 0x2761, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0xda4fff08) r2 = getpid() perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x1f, 0x1, 0x7fffffff, 0x2, 0x0, 0x7, 0x0, 0xa, 0x7fffffff, 0xffffffff, 0x1, 0x78, 0xb4, 0x14d, 0x3, 0x1, 0x0, 0xffffffffffffff46, 0x40, 0x5, 0x7, 0x0, 0x8001, 0x7, 0x1000, 0xb0e, 0x1, 0x3f, 0x8, 0x80000000, 0x9, 0xb84, 0xffff, 0x0, 0x4, 0x9, 0x0, 0x309, 0x0, @perf_bp={0x0, 0x2}, 0x2000, 0xffffffff, 0x2, 0x6, 0x9, 0x0, 0xae1}, r2, 0xb, r0, 0x8) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x0, 0x4, 0x20, 0x8, 0xa, 0x1}, 0x2c) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x660c, 0x1a) 10:49:30 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000001680)={0x1, 0x0, [{0x2ff}]}) 10:49:30 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f000051cff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000943ffc)=0x7) read(r0, &(0x7f00003fefff)=""/1, 0x1) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)) 10:49:30 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000100)={'bridge_slave_0\x00\x04'}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000080)={'bridge_slave_0\x00'}) 10:49:30 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000001680)={0x1, 0x0, [{0x571}]}) 10:49:30 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000100)={'bridge_slave_0\x00\x04'}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000080)={'bridge_slave_0\x00'}) 10:49:31 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{}]}, 0x10) 10:49:31 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000001680)={0x1, 0x0, [{0x2ff}]}) 10:49:31 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f000051cff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000943ffc)=0x7) read(r0, &(0x7f00003fefff)=""/1, 0x1) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)) 10:49:31 executing program 5: r0 = socket(0xa, 0x1, 0x0) sendto$unix(r0, 0x0, 0x0, 0x20000084, &(0x7f0000000100)=@abs, 0x6e) 10:49:31 executing program 1: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='setgroups\x00') 10:49:31 executing program 0: clock_settime(0x101, 0x0) 10:49:31 executing program 5: perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0x23, &(0x7f0000000040)=0x5, 0x4) sendmmsg(r0, &(0x7f0000000000), 0x400000000000195, 0x0) 10:49:31 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000400)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r0, 0x4c06) 10:49:31 executing program 1: syz_open_dev$vcsa(0x0, 0x0, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x100, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000080)) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x8000010004}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, &(0x7f000000a000)) gettid() ioctl$KVM_SET_NESTED_STATE(r0, 0x4080aebf, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) mount$fuseblk(&(0x7f00000004c0)='/dev/loop0\x00', &(0x7f00000007c0)='./file0\x00', &(0x7f0000000840)='fuseblk\x00', 0x200000, &(0x7f0000000800)=ANY=[]) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000100)='/dev/input/mice\x00', 0x0, 0x2813c) r2 = semget$private(0x0, 0x0, 0x5b0) semctl$IPC_INFO(r2, 0x3, 0x3, &(0x7f00000001c0)=""/137) socketpair(0x0, 0x0, 0x0, 0x0) close(r1) 10:49:31 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/uinput\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f00000000c0)={0x0, {0x0, 0x0, 0x0, 0x0, 0xf7}}) 10:49:31 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f000051cff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000943ffc)=0x7) read(r0, &(0x7f00003fefff)=""/1, 0x1) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)) 10:49:31 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000001680)={0x1, 0x0, [{0x2ff}]}) 10:49:31 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, 0x0, 0x0) 10:49:31 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000300)={{}, {}, {0x0, 0x0, 0x0, 0x0, 0x100000001}, {}, {}, {}, {}, {}, {}, {}, 0xfffffffffffffffd, 0x0, 0x0, 0x100a0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 335.605324][T10441] *** Guest State *** [ 335.625476][T10441] CR0: actual=0xffffffff9ffffffd, shadow=0xfffffffffffffffd, gh_mask=fffffffffffffff7 [ 335.649320][T10441] CR4: actual=0x00000000000120e0, shadow=0x00000000000100a0, gh_mask=ffffffffffffe871 [ 335.663062][T10441] CR3 = 0x0000000000000000 [ 335.667728][T10441] PDPTR0 = 0x0000000000000000 PDPTR1 = 0x0000000000000000 10:49:31 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/uinput\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f00000000c0)={0x0, {0x0, 0x0, 0x0, 0x0, 0xf7}}) 10:49:31 executing program 1: r0 = getegid() setregid(0x0, r0) r1 = eventfd(0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r1) accept$unix(0xffffffffffffffff, &(0x7f0000000140)=@abs, &(0x7f00000001c0)=0x6e) getcwd(&(0x7f0000000340)=""/180, 0xb4) [ 335.675226][T10441] PDPTR2 = 0x0000000000000000 PDPTR3 = 0x0000000000000000 [ 335.682699][T10441] RSP = 0x0000000000000000 RIP = 0x000000000000fff0 [ 335.703087][T10441] RFLAGS=0x00010002 DR7 = 0x0000000000000400 10:49:32 executing program 5: getpgid(0x0) getpgrp(0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0) ioctl$KDSKBMODE(r0, 0x4b45, 0x0) 10:49:32 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f000051cff6)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f00003fefff)=""/1, 0x1) readv(r0, &(0x7f00000002c0)=[{&(0x7f0000cd8000)=""/1, 0x2e171c03}], 0x1) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)) [ 335.720447][T10441] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 335.727846][T10441] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 335.780565][T10441] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 10:49:32 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000001680)={0x1, 0x0, [{0x2ff}]}) 10:49:32 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/uinput\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f00000000c0)={0x0, {0x0, 0x0, 0x0, 0x0, 0xf7}}) 10:49:32 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x802, 0x0) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@ipv4_getnetconf={0x14, 0x52, 0xa09}, 0x14}}, 0x0) 10:49:32 executing program 5: semop(0x0, &(0x7f0000000040)=[{0x0, 0x0, 0xffffffffffffffff}], 0x1) [ 335.851629][T10441] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 335.879821][T10441] ES: sel=0x0000, attr=0x00081, limit=0x00000000, base=0x0000000000000000 [ 335.940118][T10441] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 335.974955][T10441] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 10:49:32 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/uinput\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f00000000c0)={0x0, {0x0, 0x0, 0x0, 0x0, 0xf7}}) 10:49:32 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000001680)={0x1, 0x0, [{0x2ff}]}) 10:49:32 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x109}}, 0x0) [ 335.999225][T10441] GDTR: limit=0x00000000, base=0x0000000000000000 [ 336.014379][T10441] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 336.036607][T10441] IDTR: limit=0x00000000, base=0x0000000000000000 [ 336.067478][T10441] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 336.076379][T10441] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 336.099673][T10441] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 336.129812][T10441] Interruptibility = 00000000 ActivityState = 00000000 [ 336.143487][T10441] *** Host State *** [ 336.150678][T10441] RIP = 0xffffffff811b3240 RSP = 0xffff88805a29f8e0 [ 336.163961][T10441] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 336.173206][T10441] FSBase=00007fa48f0ba700 GSBase=ffff8880ae900000 TRBase=fffffe0000003000 [ 336.182417][T10441] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 336.189255][T10441] CR0=0000000080050033 CR3=00000000894ce000 CR4=00000000001426e0 [ 336.201931][T10441] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87201360 [ 336.221414][T10441] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 336.239819][T10441] *** Control State *** [ 336.244513][T10441] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 336.258387][T10441] EntryControls=0000d1ff ExitControls=002fefff [ 336.274273][T10441] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 336.283477][T10441] VMEntry: intr_info=80000306 errcode=00000000 ilen=00000000 [ 336.295861][T10441] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003 [ 336.303685][T10441] reason=80000021 qualification=0000000000000000 [ 336.311159][T10441] IDTVectoring: info=00000000 errcode=00000000 [ 336.317319][T10441] TSC Offset = 0xffffff49c8e2325f [ 336.322396][T10441] EPT pointer = 0x000000009ff4401e [ 336.370524][T10499] *** Guest State *** [ 336.374671][T10499] CR0: actual=0xffffffff9ffffffd, shadow=0xfffffffffffffffd, gh_mask=fffffffffffffff7 [ 336.384649][T10499] CR4: actual=0x00000000000120e0, shadow=0x00000000000100a0, gh_mask=ffffffffffffe871 [ 336.394927][T10499] CR3 = 0x0000000000000000 [ 336.399348][T10499] PDPTR0 = 0x0000000000000000 PDPTR1 = 0x0000000000000000 [ 336.406604][T10499] PDPTR2 = 0x0000000000000000 PDPTR3 = 0x0000000000000000 [ 336.413857][T10499] RSP = 0x0000000000000000 RIP = 0x000000000000fff0 [ 336.420604][T10499] RFLAGS=0x00010002 DR7 = 0x0000000000000400 [ 336.427283][T10499] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 336.427298][T10499] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 336.427321][T10499] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 336.443440][T10499] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 336.443459][T10499] ES: sel=0x0000, attr=0x00081, limit=0x00000000, base=0x0000000000000000 [ 336.443490][T10499] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 336.478373][T10499] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 336.487127][T10499] GDTR: limit=0x00000000, base=0x0000000000000000 [ 336.495834][T10499] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 336.504752][T10499] IDTR: limit=0x00000000, base=0x0000000000000000 [ 336.513625][T10499] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 336.523278][T10499] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 336.530574][T10499] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 336.538723][T10499] Interruptibility = 00000000 ActivityState = 00000000 [ 336.545876][T10499] *** Host State *** [ 336.549775][T10499] RIP = 0xffffffff811b3240 RSP = 0xffff88805b3c78e0 [ 336.556508][T10499] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 336.563680][T10499] FSBase=00007fa48f078700 GSBase=ffff8880ae900000 TRBase=fffffe0000033000 [ 336.572253][T10499] GDTBase=fffffe0000031000 IDTBase=fffffe0000000000 [ 336.578837][T10499] CR0=0000000080050033 CR3=00000000894ce000 CR4=00000000001426e0 [ 336.586609][T10499] Sysenter RSP=fffffe0000032200 CS:RIP=0010:ffffffff87201360 [ 336.594122][T10499] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 336.600938][T10499] *** Control State *** [ 336.605101][T10499] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 336.612504][T10499] EntryControls=0000d1ff ExitControls=002fefff 10:49:32 executing program 2: r0 = socket$packet(0x11, 0x40800000000003, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x80, 0x1f8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000500)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000140)={0x11, 0x800, r3, 0x1, 0x0, 0x6, @random="286e6a8d6980"}, 0x14) r4 = dup2(r0, r0) sendto$inet6(r4, &(0x7f00000002c0)="020400000300603900382b8a5b5aa242b90516db4d23a3bb09f82632e33715d26206cd6b80a7699507938207d9fb3780d88d5375000001000000301e", 0x3c, 0x0, 0x0, 0x0) 10:49:32 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000600)={'ip_vti0\x00\x00\x01\x00', 0x201e}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000001fc0)={'ip_vti0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f00000001c0)={@ipv4={[], [], @multicast2}, 0x0, r4}) r5 = socket$inet6(0xa, 0x1000000000002, 0x0) sendto(r5, 0x0, 0x0, 0x0, &(0x7f0000000200)=@generic={0xa, "a268d051afbb30b9923e133c4f56259c85a08979aa34c5e1f0eb820d62d5b0cc4faf74f741cba4496bcce0b430f1a59cf4b0969164bfc3019718e2cecf7aea450e50c1f6c3411889c8b9aefdcf069642a4897d1ae6f8749697df253a8bcfae046f8b9741ca762548255274875d3f737894f8e5c23221b0087c41ad03467a"}, 0x80) 10:49:32 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000001680)={0x1, 0x0, [{0x2ff}]}) 10:49:32 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x400000001, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$EVIOCGPHYS(r0, 0x80404507, &(0x7f00000000c0)=""/117) [ 336.618655][T10499] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 336.626345][T10499] VMEntry: intr_info=80000306 errcode=00000000 ilen=00000000 [ 336.633772][T10499] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003 [ 336.641126][T10499] reason=80000021 qualification=0000000000000000 [ 336.648148][T10499] IDTVectoring: info=00000000 errcode=00000000 [ 336.655014][T10499] TSC Offset = 0xffffff49c8e2325f [ 336.660038][T10499] EPT pointer = 0x000000009ff4401e 10:49:32 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f000051cff6)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f00003fefff)=""/1, 0x1) readv(r0, &(0x7f00000002c0)=[{&(0x7f0000cd8000)=""/1, 0x2e171c03}], 0x1) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)) 10:49:32 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/uinput\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f00000000c0)={0x0, {0x0, 0x0, 0x0, 0x0, 0xf7}}) 10:49:33 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/uinput\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f00000000c0)={0x0, {0x0, 0x0, 0x0, 0x0, 0xf7}}) 10:49:33 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x8000, 0x0) socket$nl_route(0x10, 0x3, 0x0) write$P9_RSTAT(0xffffffffffffffff, 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) setsockopt$IP_VS_SO_SET_DEL(0xffffffffffffffff, 0x0, 0x484, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) mmap(&(0x7f00008da000/0x1000)=nil, 0x1000, 0x0, 0xb4972, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x44000) io_setup(0x4ed4, &(0x7f0000000100)=0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000380)='TIPC\x00') ftruncate(r3, 0xbb1) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x377140be6b5ef4c7}]) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f00000003c0)={[], 0x387, 0x0, 0xfffffffffffffffe, 0x0, 0x2}) sendfile(r0, 0xffffffffffffffff, &(0x7f0000d83ff8), 0x800000000024) 10:49:33 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r0, 0xc008ae88, &(0x7f0000001680)={0x1, 0x0, [{0x2ff}]}) 10:49:33 executing program 1: perf_event_open(&(0x7f00000003c0)={0x20000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 10:49:33 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='ns\x00') getdents64(r0, 0x0, 0xfffffffffffffe7e) 10:49:33 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r0, 0xc008ae88, &(0x7f0000001680)={0x1, 0x0, [{0x2ff}]}) [ 336.940386][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 336.946247][ C1] protocol 88fb is buggy, dev hsr_slave_1 10:49:33 executing program 2: r0 = socket$packet(0x11, 0x40800000000003, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x80, 0x1f8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000500)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000140)={0x11, 0x800, r3, 0x1, 0x0, 0x6, @random="286e6a8d6980"}, 0x14) r4 = dup2(r0, r0) sendto$inet6(r4, &(0x7f00000002c0)="020400000300603900382b8a5b5aa242b90516db4d23a3bb09f82632e33715d26206cd6b80a7699507938207d9fb3780d88d5375000001000000301e", 0x3c, 0x0, 0x0, 0x0) 10:49:33 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/uinput\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f00000000c0)={0x0, {0x0, 0x0, 0x0, 0x0, 0xf7}}) 10:49:33 executing program 1: clock_nanosleep(0x2, 0x0, &(0x7f0000000140)={0x0, 0x989680}, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1000000000016) 10:49:33 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/uinput\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f00000000c0)={0x0, {0x0, 0x0, 0x0, 0x0, 0xf7}}) 10:49:33 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/uinput\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f00000000c0)={0x0, {0x0, 0x0, 0x0, 0x0, 0xf7}}) 10:49:33 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r0, 0xc008ae88, &(0x7f0000001680)={0x1, 0x0, [{0x2ff}]}) 10:49:33 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f000051cff6)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f00003fefff)=""/1, 0x1) readv(r0, &(0x7f00000002c0)=[{&(0x7f0000cd8000)=""/1, 0x2e171c03}], 0x1) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)) 10:49:33 executing program 2: r0 = socket$packet(0x11, 0x40800000000003, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x80, 0x1f8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000500)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000140)={0x11, 0x800, r3, 0x1, 0x0, 0x6, @random="286e6a8d6980"}, 0x14) r4 = dup2(r0, r0) sendto$inet6(r4, &(0x7f00000002c0)="020400000300603900382b8a5b5aa242b90516db4d23a3bb09f82632e33715d26206cd6b80a7699507938207d9fb3780d88d5375000001000000301e", 0x3c, 0x0, 0x0, 0x0) 10:49:33 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x8000, 0x0) socket$nl_route(0x10, 0x3, 0x0) write$P9_RSTAT(0xffffffffffffffff, 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) setsockopt$IP_VS_SO_SET_DEL(0xffffffffffffffff, 0x0, 0x484, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) mmap(&(0x7f00008da000/0x1000)=nil, 0x1000, 0x0, 0xb4972, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x44000) io_setup(0x4ed4, &(0x7f0000000100)=0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000380)='TIPC\x00') ftruncate(r3, 0xbb1) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x377140be6b5ef4c7}]) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f00000003c0)={[], 0x387, 0x0, 0xfffffffffffffffe, 0x0, 0x2}) sendfile(r0, 0xffffffffffffffff, &(0x7f0000d83ff8), 0x800000000024) 10:49:33 executing program 3: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r1, 0xc008ae88, &(0x7f0000001680)={0x1, 0x0, [{0x2ff}]}) 10:49:33 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/uinput\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f00000000c0)={0x0, {0x0, 0x0, 0x0, 0x0, 0xf7}}) [ 337.660372][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 337.666513][ C1] protocol 88fb is buggy, dev hsr_slave_1 10:49:34 executing program 2: r0 = socket$packet(0x11, 0x40800000000003, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x80, 0x1f8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000500)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000140)={0x11, 0x800, r3, 0x1, 0x0, 0x6, @random="286e6a8d6980"}, 0x14) r4 = dup2(r0, r0) sendto$inet6(r4, &(0x7f00000002c0)="020400000300603900382b8a5b5aa242b90516db4d23a3bb09f82632e33715d26206cd6b80a7699507938207d9fb3780d88d5375000001000000301e", 0x3c, 0x0, 0x0, 0x0) 10:49:34 executing program 3: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r1, 0xc008ae88, &(0x7f0000001680)={0x1, 0x0, [{0x2ff}]}) 10:49:34 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f00000000c0)={0x0, {0x0, 0x0, 0x0, 0x0, 0xf7}}) 10:49:34 executing program 1: syz_open_procfs(0x0, &(0x7f00000008c0)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\x00\x00\xae\x98&@\xd0\xe6\xbbQ\xff\a\x00\x00\x00\x00\x00\x00\xaa1\x91\x98\xe9\x1f\nMCi|+\xcd\xf9N\xdc\xc5\xa2*\x13\x8f\xf3;\xd6d2\xeb\xe5\x14\x0e\x8b\xda\xb7\xfc9h(mf\'\xa19q\x93\"}G3\xc1E\xe6e6\xc6\xc2u\x11%`\xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xa8\x14Ts\xcb\xde\x84\x1d\xc7\xcc;\xb18') 10:49:34 executing program 3: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r1, 0xc008ae88, &(0x7f0000001680)={0x1, 0x0, [{0x2ff}]}) 10:49:34 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f00000000c0)={0x0, {0x0, 0x0, 0x0, 0x0, 0xf7}}) 10:49:34 executing program 2: r0 = socket$packet(0x11, 0x40800000000003, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x80, 0x1f8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000500)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000140)={0x11, 0x800, r3, 0x1, 0x0, 0x6, @random="286e6a8d6980"}, 0x14) sendto$inet6(0xffffffffffffffff, &(0x7f00000002c0)="020400000300603900382b8a5b5aa242b90516db4d23a3bb09f82632e33715d26206cd6b80a7699507938207d9fb3780d88d5375000001000000301e", 0x3c, 0x0, 0x0, 0x0) [ 338.070347][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 338.076190][ C1] protocol 88fb is buggy, dev hsr_slave_1 10:49:34 executing program 4: ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000943ffc)=0x7) read(0xffffffffffffffff, &(0x7f00003fefff)=""/1, 0x1) readv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000cd8000)=""/1, 0x2e171c03}], 0x1) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)) 10:49:34 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f00000000c0)={0x0, {0x0, 0x0, 0x0, 0x0, 0xf7}}) 10:49:34 executing program 5: creat(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) 10:49:34 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000001680)={0x1, 0x0, [{0x2ff}]}) 10:49:34 executing program 1: 10:49:34 executing program 2: r0 = socket$packet(0x11, 0x40800000000003, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x80, 0x1f8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000500)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000140)={0x11, 0x800, r3, 0x1, 0x0, 0x6, @random="286e6a8d6980"}, 0x14) sendto$inet6(0xffffffffffffffff, &(0x7f00000002c0)="020400000300603900382b8a5b5aa242b90516db4d23a3bb09f82632e33715d26206cd6b80a7699507938207d9fb3780d88d5375000001000000301e", 0x3c, 0x0, 0x0, 0x0) 10:49:34 executing program 1: 10:49:34 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f00000000c0)={0x0, {0x0, 0x0, 0x0, 0x0, 0xf7}}) 10:49:34 executing program 4: ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000943ffc)=0x7) read(0xffffffffffffffff, &(0x7f00003fefff)=""/1, 0x1) readv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000cd8000)=""/1, 0x2e171c03}], 0x1) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)) 10:49:34 executing program 5: 10:49:34 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000001680)={0x1, 0x0, [{0x2ff}]}) 10:49:34 executing program 5: 10:49:34 executing program 1: 10:49:34 executing program 2: r0 = socket$packet(0x11, 0x40800000000003, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x80, 0x1f8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000500)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000140)={0x11, 0x800, r3, 0x1, 0x0, 0x6, @random="286e6a8d6980"}, 0x14) sendto$inet6(0xffffffffffffffff, &(0x7f00000002c0)="020400000300603900382b8a5b5aa242b90516db4d23a3bb09f82632e33715d26206cd6b80a7699507938207d9fb3780d88d5375000001000000301e", 0x3c, 0x0, 0x0, 0x0) 10:49:34 executing program 4: ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000943ffc)=0x7) read(0xffffffffffffffff, &(0x7f00003fefff)=""/1, 0x1) readv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000cd8000)=""/1, 0x2e171c03}], 0x1) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)) 10:49:34 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f00000000c0)={0x0, {0x0, 0x0, 0x0, 0x0, 0xf7}}) 10:49:35 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000001680)={0x1, 0x0, [{0x2ff}]}) 10:49:35 executing program 5: 10:49:35 executing program 1: 10:49:35 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000943ffc)=0x7) read(r0, &(0x7f00003fefff)=""/1, 0x1) readv(r0, &(0x7f00000002c0)=[{&(0x7f0000cd8000)=""/1, 0x2e171c03}], 0x1) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)) 10:49:35 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f00000000c0)={0x0, {0x0, 0x0, 0x0, 0x0, 0xf7}}) 10:49:35 executing program 2: r0 = socket$packet(0x11, 0x40800000000003, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x80, 0x1f8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000500)={'syz_tun\x00'}) r3 = dup2(r0, r0) sendto$inet6(r3, &(0x7f00000002c0)="020400000300603900382b8a5b5aa242b90516db4d23a3bb09f82632e33715d26206cd6b80a7699507938207d9fb3780d88d5375000001000000301e", 0x3c, 0x0, 0x0, 0x0) 10:49:35 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r1, 0xc008ae88, &(0x7f0000001680)={0x1, 0x0, [{0x2ff}]}) 10:49:35 executing program 1: 10:49:35 executing program 5: 10:49:35 executing program 1: 10:49:35 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/uinput\x00', 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f00000000c0)={0x0, {0x0, 0x0, 0x0, 0x0, 0xf7}}) [ 339.020531][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 339.026404][ C1] protocol 88fb is buggy, dev hsr_slave_1 10:49:35 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000943ffc)=0x7) read(r0, &(0x7f00003fefff)=""/1, 0x1) readv(r0, &(0x7f00000002c0)=[{&(0x7f0000cd8000)=""/1, 0x2e171c03}], 0x1) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)) 10:49:35 executing program 5: 10:49:35 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r1, 0xc008ae88, &(0x7f0000001680)={0x1, 0x0, [{0x2ff}]}) 10:49:35 executing program 2: r0 = socket$packet(0x11, 0x40800000000003, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x80, 0x1f8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000500)={'syz_tun\x00'}) r3 = dup2(r0, r0) sendto$inet6(r3, &(0x7f00000002c0)="020400000300603900382b8a5b5aa242b90516db4d23a3bb09f82632e33715d26206cd6b80a7699507938207d9fb3780d88d5375000001000000301e", 0x3c, 0x0, 0x0, 0x0) 10:49:35 executing program 1: 10:49:35 executing program 5: 10:49:35 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/uinput\x00', 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f00000000c0)={0x0, {0x0, 0x0, 0x0, 0x0, 0xf7}}) 10:49:35 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000943ffc)=0x7) read(r0, &(0x7f00003fefff)=""/1, 0x1) readv(r0, &(0x7f00000002c0)=[{&(0x7f0000cd8000)=""/1, 0x2e171c03}], 0x1) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)) 10:49:35 executing program 2: r0 = socket$packet(0x11, 0x40800000000003, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x80, 0x1f8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000500)={'syz_tun\x00'}) r3 = dup2(r0, r0) sendto$inet6(r3, &(0x7f00000002c0)="020400000300603900382b8a5b5aa242b90516db4d23a3bb09f82632e33715d26206cd6b80a7699507938207d9fb3780d88d5375000001000000301e", 0x3c, 0x0, 0x0, 0x0) 10:49:35 executing program 1: 10:49:35 executing program 5: 10:49:35 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r1, 0xc008ae88, &(0x7f0000001680)={0x1, 0x0, [{0x2ff}]}) 10:49:35 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f000051cff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000943ffc)=0x7) read(r0, &(0x7f00003fefff)=""/1, 0x1) readv(r0, &(0x7f00000002c0)=[{&(0x7f0000cd8000)=""/1, 0x2e171c03}], 0x1) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)) 10:49:35 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/uinput\x00', 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f00000000c0)={0x0, {0x0, 0x0, 0x0, 0x0, 0xf7}}) 10:49:35 executing program 1: 10:49:35 executing program 2: r0 = socket$packet(0x11, 0x40800000000003, 0x300) socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x80, 0x1f8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bind$packet(r0, &(0x7f0000000140)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @random="286e6a8d6980"}, 0x14) r2 = dup2(r0, r0) sendto$inet6(r2, &(0x7f00000002c0)="020400000300603900382b8a5b5aa242b90516db4d23a3bb09f82632e33715d26206cd6b80a7699507938207d9fb3780d88d5375000001000000301e", 0x3c, 0x0, 0x0, 0x0) 10:49:35 executing program 5: 10:49:35 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/uinput\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f00000000c0)={0x0, {0x0, 0x0, 0x0, 0x0, 0xf7}}) 10:49:35 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r1, 0xc008ae88, &(0x7f0000001680)={0x1, 0x0, [{0x2ff}]}) 10:49:35 executing program 1: 10:49:35 executing program 5: 10:49:35 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/uinput\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f00000000c0)={0x0, {0x0, 0x0, 0x0, 0x0, 0xf7}}) 10:49:36 executing program 1: 10:49:36 executing program 2: r0 = socket$packet(0x11, 0x40800000000003, 0x300) socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x80, 0x1f8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bind$packet(r0, &(0x7f0000000140)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @random="286e6a8d6980"}, 0x14) r2 = dup2(r0, r0) sendto$inet6(r2, &(0x7f00000002c0)="020400000300603900382b8a5b5aa242b90516db4d23a3bb09f82632e33715d26206cd6b80a7699507938207d9fb3780d88d5375000001000000301e", 0x3c, 0x0, 0x0, 0x0) 10:49:36 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f000051cff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000943ffc)=0x7) read(r0, &(0x7f00003fefff)=""/1, 0x1) readv(r0, &(0x7f00000002c0)=[{&(0x7f0000cd8000)=""/1, 0x2e171c03}], 0x1) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)) 10:49:36 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r1, 0xc008ae88, &(0x7f0000001680)={0x1, 0x0, [{0x2ff}]}) 10:49:36 executing program 5: 10:49:36 executing program 1: 10:49:36 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/uinput\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f00000000c0)={0x0, {0x0, 0x0, 0x0, 0x0, 0xf7}}) 10:49:36 executing program 2: r0 = socket$packet(0x11, 0x40800000000003, 0x300) socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x80, 0x1f8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bind$packet(r0, &(0x7f0000000140)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @random="286e6a8d6980"}, 0x14) r2 = dup2(r0, r0) sendto$inet6(r2, &(0x7f00000002c0)="020400000300603900382b8a5b5aa242b90516db4d23a3bb09f82632e33715d26206cd6b80a7699507938207d9fb3780d88d5375000001000000301e", 0x3c, 0x0, 0x0, 0x0) 10:49:36 executing program 1: 10:49:36 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/uinput\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f00000000c0)={0x0, {0x0, 0x0, 0x0, 0x0, 0xf7}}) 10:49:36 executing program 5: 10:49:36 executing program 1: 10:49:36 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r1, 0xc008ae88, &(0x7f0000001680)={0x1, 0x0, [{0x2ff}]}) 10:49:36 executing program 2: r0 = socket$packet(0x11, 0x40800000000003, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x80, 0x1f8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000500)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000140)={0x11, 0x800, r2, 0x1, 0x0, 0x6, @random="286e6a8d6980"}, 0x14) r3 = dup2(r0, r0) sendto$inet6(r3, &(0x7f00000002c0)="020400000300603900382b8a5b5aa242b90516db4d23a3bb09f82632e33715d26206cd6b80a7699507938207d9fb3780d88d5375000001000000301e", 0x3c, 0x0, 0x0, 0x0) [ 340.620342][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 340.626187][ C0] protocol 88fb is buggy, dev hsr_slave_1 10:49:37 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f000051cff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000943ffc)=0x7) read(r0, &(0x7f00003fefff)=""/1, 0x1) readv(r0, &(0x7f00000002c0)=[{&(0x7f0000cd8000)=""/1, 0x2e171c03}], 0x1) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)) 10:49:37 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/uinput\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f00000000c0)={0x0, {0x0, 0x0, 0x0, 0x0, 0xf7}}) 10:49:37 executing program 1: 10:49:37 executing program 5: 10:49:37 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000001680)={0x1, 0x0, [{0x2ff}]}) 10:49:37 executing program 2: r0 = socket$packet(0x11, 0x40800000000003, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x80, 0x1f8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000500)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000140)={0x11, 0x800, r2, 0x1, 0x0, 0x6, @random="286e6a8d6980"}, 0x14) r3 = dup2(r0, r0) sendto$inet6(r3, &(0x7f00000002c0)="020400000300603900382b8a5b5aa242b90516db4d23a3bb09f82632e33715d26206cd6b80a7699507938207d9fb3780d88d5375000001000000301e", 0x3c, 0x0, 0x0, 0x0) 10:49:37 executing program 5: 10:49:37 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/uinput\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f00000000c0)={0x0, {0x0, 0x0, 0x0, 0x0, 0xf7}}) 10:49:37 executing program 1: 10:49:37 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000001680)={0x1, 0x0, [{0x2ff}]}) 10:49:37 executing program 2: r0 = socket$packet(0x11, 0x40800000000003, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x80, 0x1f8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000500)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000140)={0x11, 0x800, r2, 0x1, 0x0, 0x6, @random="286e6a8d6980"}, 0x14) r3 = dup2(r0, r0) sendto$inet6(r3, &(0x7f00000002c0)="020400000300603900382b8a5b5aa242b90516db4d23a3bb09f82632e33715d26206cd6b80a7699507938207d9fb3780d88d5375000001000000301e", 0x3c, 0x0, 0x0, 0x0) 10:49:37 executing program 1: 10:49:38 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f000051cff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, 0x0) read(r0, &(0x7f00003fefff)=""/1, 0x1) readv(r0, &(0x7f00000002c0)=[{&(0x7f0000cd8000)=""/1, 0x2e171c03}], 0x1) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)) 10:49:38 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=ANY=[@ANYBLOB="ec1956700000e5ff4c0000000000000095000098cb07d700"], 0x0}, 0x48) 10:49:38 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/uinput\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f00000000c0)={0x0, {0x0, 0x0, 0x0, 0x0, 0xf7}}) 10:49:38 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000001680)={0x1, 0x0, [{0x2ff}]}) 10:49:38 executing program 1: r0 = socket$inet(0x2, 0x3, 0x6) getsockopt$inet_mreqsrc(r0, 0x0, 0x50, 0x0, &(0x7f0000000000)=0x327) 10:49:38 executing program 2: r0 = socket$packet(0x11, 0x40800000000003, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x80, 0x1f8) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000500)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000140)={0x11, 0x800, r2, 0x1, 0x0, 0x6, @random="286e6a8d6980"}, 0x14) r3 = dup2(r0, r0) sendto$inet6(r3, &(0x7f00000002c0)="020400000300603900382b8a5b5aa242b90516db4d23a3bb09f82632e33715d26206cd6b80a7699507938207d9fb3780d88d5375000001000000301e", 0x3c, 0x0, 0x0, 0x0) 10:49:38 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, 0x0, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x3c) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) 10:49:38 executing program 5: mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0xfffffffffffffffd, 0x10031, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) sendmsg(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000002e00)="b1", 0x1}], 0x1}, 0x0) 10:49:38 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/uinput\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f00000000c0)={0x0, {0x0, 0x0, 0x0, 0x0, 0xf7}}) 10:49:38 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, 0x0) 10:49:38 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000280)='[\'posix_acl_access\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) pwritev(r2, &(0x7f0000000240)=[{&(0x7f0000000200)=',', 0x1}], 0x1, 0x4081806) sendfile(r0, r2, 0x0, 0x20020102000007) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00'], 0x1) recvfrom$unix(r1, &(0x7f0000000080)=""/4, 0xfffffffffffffeda, 0x0, 0x0, 0x0) 10:49:38 executing program 2: r0 = socket$packet(0x11, 0x40800000000003, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x80, 0x1f8) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000500)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000140)={0x11, 0x800, r2, 0x1, 0x0, 0x6, @random="286e6a8d6980"}, 0x14) r3 = dup2(r0, r0) sendto$inet6(r3, &(0x7f00000002c0)="020400000300603900382b8a5b5aa242b90516db4d23a3bb09f82632e33715d26206cd6b80a7699507938207d9fb3780d88d5375000001000000301e", 0x3c, 0x0, 0x0, 0x0) 10:49:39 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f000051cff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, 0x0) read(r0, &(0x7f00003fefff)=""/1, 0x1) readv(r0, &(0x7f00000002c0)=[{&(0x7f0000cd8000)=""/1, 0x2e171c03}], 0x1) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)) 10:49:39 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/uinput\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f00000000c0)={0x0, {0x0, 0x0, 0x0, 0x0, 0xf7}}) 10:49:39 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, 0x0) 10:49:39 executing program 2: r0 = socket$packet(0x11, 0x40800000000003, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x80, 0x1f8) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000500)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000140)={0x11, 0x800, r2, 0x1, 0x0, 0x6, @random="286e6a8d6980"}, 0x14) r3 = dup2(r0, r0) sendto$inet6(r3, &(0x7f00000002c0)="020400000300603900382b8a5b5aa242b90516db4d23a3bb09f82632e33715d26206cd6b80a7699507938207d9fb3780d88d5375000001000000301e", 0x3c, 0x0, 0x0, 0x0) 10:49:39 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='loginuid\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x4) r1 = syz_open_procfs(0x0, &(0x7f0000000380)='fdinfo\x00\x92\xbb\v>co\xe8\xf2%\xc57=\xf7\xfd\a\x89\x80\xa5\x84\a\xee\x1f\xbb\xd7j.\xe7?C\"\xbe\vJ$\xb1p7wU\xf1i6\x91\x9f!E\xb0_\x80\x14\a?\xca\xb5CD\x8c\xee\xed\x9c\xb2\xb6\xb6\x97\x00`\x14\xb7\xda\xe2\xab^\xb3\xe3\x0e\xce\x11\xa7\x81\xe6\xc4\x1a\x06\xd7\xbff\xcb\xf9\xb1\xf0 \x00\x00\x00\x00\x00\x00\x03\x96\xd2;\xca?M\xe47\x1ce\x83\x8dK}|\xeb\x86$\x9cN\x01d\xb6\x80:\xa0B\xec\xd7\xa8\x8az.\xba~C\xb4L\xbf\x17\xec\xe9l\xa7\r\x85\xeaS\xe4B\xeb\xe9O\xfa\x12\xa5\xe8Buqe!\x86\x18\x16r\xa7\xd6\x1c\xb2n\xa4T0\xf1\x10\x16\xfe\"\xc3=\x0en|\xc6h\x9d\xe5\xc3]\xf1\xaej+\xfd\xb6\x96r\xe8\x81~LN\xc5L\xd0A-\x1a\xf4fm\b\x1c\xf6\x7f\x148l\xc4\b\x9a-\xb8\xfe\x8a\xe0\x03\x9btv\x1e\xef\xb5\xf1\xcfL-f>\xb4_\rl\x7f\x99d\xc2\xd9\xe8\xc9\xfb\xff\x96\xf0)\x831\x1b\x1cW\xc4\xb1\x1c\xae\x8b\x06\xe8=\xd2\xbe\x06$k\xe7\xdd\xa8z\x91q\x02~\xc2`\xe2\xfd\xcf\xed58\x90\xbb\xf4\x84\x88\x8f\xec\xc4U\xc0\xf9i\x94*e\x81v\x86\xb6aD\x82\xacIU\x9eo\aY\x84l8\xd4\x18\xb1\x1c\xed?\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00') fchdir(r1) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) 10:49:39 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='loginuid\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x4) r1 = syz_open_procfs(0x0, &(0x7f0000000380)='fdinfo\x00\x92\xbb\v>co\xe8\xf2%\xc57=\xf7\xfd\a\x89\x80\xa5\x84\a\xee\x1f\xbb\xd7j.\xe7?C\"\xbe\vJ$\xb1p7wU\xf1i6\x91\x9f!E\xb0_\x80\x14\a?\xca\xb5CD\x8c\xee\xed\x9c\xb2\xb6\xb6\x97\x00`\x14\xb7\xda\xe2\xab^\xb3\xe3\x0e\xce\x11\xa7\x81\xe6\xc4\x1a\x06\xd7\xbff\xcb\xf9\xb1\xf0 \x00\x00\x00\x00\x00\x00\x03\x96\xd2;\xca?M\xe47\x1ce\x83\x8dK}|\xeb\x86$\x9cN\x01d\xb6\x80:\xa0B\xec\xd7\xa8\x8az.\xba~C\xb4L\xbf\x17\xec\xe9l\xa7\r\x85\xeaS\xe4B\xeb\xe9O\xfa\x12\xa5\xe8Buqe!\x86\x18\x16r\xa7\xd6\x1c\xb2n\xa4T0\xf1\x10\x16\xfe\"\xc3=\x0en|\xc6h\x9d\xe5\xc3]\xf1\xaej+\xfd\xb6\x96r\xe8\x81~LN\xc5L\xd0A-\x1a\xf4fm\b\x1c\xf6\x7f\x148l\xc4\b\x9a-\xb8\xfe\x8a\xe0\x03\x9btv\x1e\xef\xb5\xf1\xcfL-f>\xb4_\rl\x7f\x99d\xc2\xd9\xe8\xc9\xfb\xff\x96\xf0)\x831\x1b\x1cW\xc4\xb1\x1c\xae\x8b\x06\xe8=\xd2\xbe\x06$k\xe7\xdd\xa8z\x91q\x02~\xc2`\xe2\xfd\xcf\xed58\x90\xbb\xf4\x84\x88\x8f\xec\xc4U\xc0\xf9i\x94*e\x81v\x86\xb6aD\x82\xacIU\x9eo\aY\x84l8\xd4\x18\xb1\x1c\xed?\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00') fchdir(r1) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) 10:49:39 executing program 0: openat$uinput(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/uinput\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f00000000c0)={0x0, {0x0, 0x0, 0x0, 0x0, 0xf7}}) 10:49:39 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, 0x0) 10:49:39 executing program 2: r0 = socket$packet(0x11, 0x40800000000003, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000500)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000140)={0x11, 0x800, r3, 0x1, 0x0, 0x6, @random="286e6a8d6980"}, 0x14) r4 = dup2(r0, r0) sendto$inet6(r4, &(0x7f00000002c0)="020400000300603900382b8a5b5aa242b90516db4d23a3bb09f82632e33715d26206cd6b80a7699507938207d9fb3780d88d5375000001000000301e", 0x3c, 0x0, 0x0, 0x0) 10:49:39 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000001680)) 10:49:39 executing program 5: mount(&(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0) syz_mount_image$ntfs(&(0x7f0000000000)='ntfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x400, &(0x7f0000000140)={[{@utf8='utf8'}, {@uid={'uid'}}, {@errors_continue='errors=continue'}]}) 10:49:39 executing program 0: openat$uinput(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/uinput\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f00000000c0)={0x0, {0x0, 0x0, 0x0, 0x0, 0xf7}}) [ 343.256324][T10891] ntfs: (device loop5): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 343.282672][T10891] ntfs: (device loop5): parse_options(): Unrecognized mount option . 10:49:39 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f000051cff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, 0x0) read(r0, &(0x7f00003fefff)=""/1, 0x1) readv(r0, &(0x7f00000002c0)=[{&(0x7f0000cd8000)=""/1, 0x2e171c03}], 0x1) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)) 10:49:39 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='loginuid\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x4) r1 = syz_open_procfs(0x0, &(0x7f0000000380)='fdinfo\x00\x92\xbb\v>co\xe8\xf2%\xc57=\xf7\xfd\a\x89\x80\xa5\x84\a\xee\x1f\xbb\xd7j.\xe7?C\"\xbe\vJ$\xb1p7wU\xf1i6\x91\x9f!E\xb0_\x80\x14\a?\xca\xb5CD\x8c\xee\xed\x9c\xb2\xb6\xb6\x97\x00`\x14\xb7\xda\xe2\xab^\xb3\xe3\x0e\xce\x11\xa7\x81\xe6\xc4\x1a\x06\xd7\xbff\xcb\xf9\xb1\xf0 \x00\x00\x00\x00\x00\x00\x03\x96\xd2;\xca?M\xe47\x1ce\x83\x8dK}|\xeb\x86$\x9cN\x01d\xb6\x80:\xa0B\xec\xd7\xa8\x8az.\xba~C\xb4L\xbf\x17\xec\xe9l\xa7\r\x85\xeaS\xe4B\xeb\xe9O\xfa\x12\xa5\xe8Buqe!\x86\x18\x16r\xa7\xd6\x1c\xb2n\xa4T0\xf1\x10\x16\xfe\"\xc3=\x0en|\xc6h\x9d\xe5\xc3]\xf1\xaej+\xfd\xb6\x96r\xe8\x81~LN\xc5L\xd0A-\x1a\xf4fm\b\x1c\xf6\x7f\x148l\xc4\b\x9a-\xb8\xfe\x8a\xe0\x03\x9btv\x1e\xef\xb5\xf1\xcfL-f>\xb4_\rl\x7f\x99d\xc2\xd9\xe8\xc9\xfb\xff\x96\xf0)\x831\x1b\x1cW\xc4\xb1\x1c\xae\x8b\x06\xe8=\xd2\xbe\x06$k\xe7\xdd\xa8z\x91q\x02~\xc2`\xe2\xfd\xcf\xed58\x90\xbb\xf4\x84\x88\x8f\xec\xc4U\xc0\xf9i\x94*e\x81v\x86\xb6aD\x82\xacIU\x9eo\aY\x84l8\xd4\x18\xb1\x1c\xed?\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00') fchdir(r1) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) 10:49:39 executing program 2: r0 = socket$packet(0x11, 0x40800000000003, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000500)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000140)={0x11, 0x800, r3, 0x1, 0x0, 0x6, @random="286e6a8d6980"}, 0x14) r4 = dup2(r0, r0) sendto$inet6(r4, &(0x7f00000002c0)="020400000300603900382b8a5b5aa242b90516db4d23a3bb09f82632e33715d26206cd6b80a7699507938207d9fb3780d88d5375000001000000301e", 0x3c, 0x0, 0x0, 0x0) 10:49:39 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000001680)) 10:49:39 executing program 0: openat$uinput(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/uinput\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f00000000c0)={0x0, {0x0, 0x0, 0x0, 0x0, 0xf7}}) 10:49:39 executing program 5: mount(&(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0) syz_mount_image$ntfs(&(0x7f0000000000)='ntfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x400, &(0x7f0000000140)={[{@utf8='utf8'}, {@uid={'uid'}}, {@errors_continue='errors=continue'}]}) 10:49:40 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/uinput\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$UI_ABS_SETUP(r0, 0x401c5504, 0x0) [ 343.708328][T10902] ntfs: (device loop5): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. 10:49:40 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='loginuid\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x4) r1 = syz_open_procfs(0x0, &(0x7f0000000380)='fdinfo\x00\x92\xbb\v>co\xe8\xf2%\xc57=\xf7\xfd\a\x89\x80\xa5\x84\a\xee\x1f\xbb\xd7j.\xe7?C\"\xbe\vJ$\xb1p7wU\xf1i6\x91\x9f!E\xb0_\x80\x14\a?\xca\xb5CD\x8c\xee\xed\x9c\xb2\xb6\xb6\x97\x00`\x14\xb7\xda\xe2\xab^\xb3\xe3\x0e\xce\x11\xa7\x81\xe6\xc4\x1a\x06\xd7\xbff\xcb\xf9\xb1\xf0 \x00\x00\x00\x00\x00\x00\x03\x96\xd2;\xca?M\xe47\x1ce\x83\x8dK}|\xeb\x86$\x9cN\x01d\xb6\x80:\xa0B\xec\xd7\xa8\x8az.\xba~C\xb4L\xbf\x17\xec\xe9l\xa7\r\x85\xeaS\xe4B\xeb\xe9O\xfa\x12\xa5\xe8Buqe!\x86\x18\x16r\xa7\xd6\x1c\xb2n\xa4T0\xf1\x10\x16\xfe\"\xc3=\x0en|\xc6h\x9d\xe5\xc3]\xf1\xaej+\xfd\xb6\x96r\xe8\x81~LN\xc5L\xd0A-\x1a\xf4fm\b\x1c\xf6\x7f\x148l\xc4\b\x9a-\xb8\xfe\x8a\xe0\x03\x9btv\x1e\xef\xb5\xf1\xcfL-f>\xb4_\rl\x7f\x99d\xc2\xd9\xe8\xc9\xfb\xff\x96\xf0)\x831\x1b\x1cW\xc4\xb1\x1c\xae\x8b\x06\xe8=\xd2\xbe\x06$k\xe7\xdd\xa8z\x91q\x02~\xc2`\xe2\xfd\xcf\xed58\x90\xbb\xf4\x84\x88\x8f\xec\xc4U\xc0\xf9i\x94*e\x81v\x86\xb6aD\x82\xacIU\x9eo\aY\x84l8\xd4\x18\xb1\x1c\xed?\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00') fchdir(r1) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) 10:49:40 executing program 2: r0 = socket$packet(0x11, 0x40800000000003, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000500)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000140)={0x11, 0x800, r3, 0x1, 0x0, 0x6, @random="286e6a8d6980"}, 0x14) r4 = dup2(r0, r0) sendto$inet6(r4, &(0x7f00000002c0)="020400000300603900382b8a5b5aa242b90516db4d23a3bb09f82632e33715d26206cd6b80a7699507938207d9fb3780d88d5375000001000000301e", 0x3c, 0x0, 0x0, 0x0) 10:49:40 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/uinput\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$UI_ABS_SETUP(r0, 0x401c5504, 0x0) 10:49:40 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='loginuid\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x4) syz_open_procfs(0x0, &(0x7f0000000380)='fdinfo\x00\x92\xbb\v>co\xe8\xf2%\xc57=\xf7\xfd\a\x89\x80\xa5\x84\a\xee\x1f\xbb\xd7j.\xe7?C\"\xbe\vJ$\xb1p7wU\xf1i6\x91\x9f!E\xb0_\x80\x14\a?\xca\xb5CD\x8c\xee\xed\x9c\xb2\xb6\xb6\x97\x00`\x14\xb7\xda\xe2\xab^\xb3\xe3\x0e\xce\x11\xa7\x81\xe6\xc4\x1a\x06\xd7\xbff\xcb\xf9\xb1\xf0 \x00\x00\x00\x00\x00\x00\x03\x96\xd2;\xca?M\xe47\x1ce\x83\x8dK}|\xeb\x86$\x9cN\x01d\xb6\x80:\xa0B\xec\xd7\xa8\x8az.\xba~C\xb4L\xbf\x17\xec\xe9l\xa7\r\x85\xeaS\xe4B\xeb\xe9O\xfa\x12\xa5\xe8Buqe!\x86\x18\x16r\xa7\xd6\x1c\xb2n\xa4T0\xf1\x10\x16\xfe\"\xc3=\x0en|\xc6h\x9d\xe5\xc3]\xf1\xaej+\xfd\xb6\x96r\xe8\x81~LN\xc5L\xd0A-\x1a\xf4fm\b\x1c\xf6\x7f\x148l\xc4\b\x9a-\xb8\xfe\x8a\xe0\x03\x9btv\x1e\xef\xb5\xf1\xcfL-f>\xb4_\rl\x7f\x99d\xc2\xd9\xe8\xc9\xfb\xff\x96\xf0)\x831\x1b\x1cW\xc4\xb1\x1c\xae\x8b\x06\xe8=\xd2\xbe\x06$k\xe7\xdd\xa8z\x91q\x02~\xc2`\xe2\xfd\xcf\xed58\x90\xbb\xf4\x84\x88\x8f\xec\xc4U\xc0\xf9i\x94*e\x81v\x86\xb6aD\x82\xacIU\x9eo\aY\x84l8\xd4\x18\xb1\x1c\xed?\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00') quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) [ 343.797610][T10902] ntfs: (device loop5): parse_options(): Unrecognized mount option . 10:49:40 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000001680)) 10:49:40 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f000051cff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000943ffc)) read(r0, &(0x7f00003fefff)=""/1, 0x1) readv(r0, &(0x7f00000002c0)=[{&(0x7f0000cd8000)=""/1, 0x2e171c03}], 0x1) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)) 10:49:40 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='loginuid\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x4) syz_open_procfs(0x0, &(0x7f0000000380)='fdinfo\x00\x92\xbb\v>co\xe8\xf2%\xc57=\xf7\xfd\a\x89\x80\xa5\x84\a\xee\x1f\xbb\xd7j.\xe7?C\"\xbe\vJ$\xb1p7wU\xf1i6\x91\x9f!E\xb0_\x80\x14\a?\xca\xb5CD\x8c\xee\xed\x9c\xb2\xb6\xb6\x97\x00`\x14\xb7\xda\xe2\xab^\xb3\xe3\x0e\xce\x11\xa7\x81\xe6\xc4\x1a\x06\xd7\xbff\xcb\xf9\xb1\xf0 \x00\x00\x00\x00\x00\x00\x03\x96\xd2;\xca?M\xe47\x1ce\x83\x8dK}|\xeb\x86$\x9cN\x01d\xb6\x80:\xa0B\xec\xd7\xa8\x8az.\xba~C\xb4L\xbf\x17\xec\xe9l\xa7\r\x85\xeaS\xe4B\xeb\xe9O\xfa\x12\xa5\xe8Buqe!\x86\x18\x16r\xa7\xd6\x1c\xb2n\xa4T0\xf1\x10\x16\xfe\"\xc3=\x0en|\xc6h\x9d\xe5\xc3]\xf1\xaej+\xfd\xb6\x96r\xe8\x81~LN\xc5L\xd0A-\x1a\xf4fm\b\x1c\xf6\x7f\x148l\xc4\b\x9a-\xb8\xfe\x8a\xe0\x03\x9btv\x1e\xef\xb5\xf1\xcfL-f>\xb4_\rl\x7f\x99d\xc2\xd9\xe8\xc9\xfb\xff\x96\xf0)\x831\x1b\x1cW\xc4\xb1\x1c\xae\x8b\x06\xe8=\xd2\xbe\x06$k\xe7\xdd\xa8z\x91q\x02~\xc2`\xe2\xfd\xcf\xed58\x90\xbb\xf4\x84\x88\x8f\xec\xc4U\xc0\xf9i\x94*e\x81v\x86\xb6aD\x82\xacIU\x9eo\aY\x84l8\xd4\x18\xb1\x1c\xed?\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00') quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) 10:49:40 executing program 5: mount(&(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0) syz_mount_image$ntfs(&(0x7f0000000000)='ntfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x400, &(0x7f0000000140)={[{@utf8='utf8'}, {@uid={'uid'}}, {@errors_continue='errors=continue'}]}) 10:49:40 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/uinput\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$UI_ABS_SETUP(r0, 0x401c5504, 0x0) 10:49:40 executing program 2: r0 = socket$packet(0x11, 0x40800000000003, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x80, 0x1f8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000140)={0x11, 0x800, r2, 0x1, 0x0, 0x6, @random="286e6a8d6980"}, 0x14) r3 = dup2(r0, r0) sendto$inet6(r3, &(0x7f00000002c0)="020400000300603900382b8a5b5aa242b90516db4d23a3bb09f82632e33715d26206cd6b80a7699507938207d9fb3780d88d5375000001000000301e", 0x3c, 0x0, 0x0, 0x0) 10:49:40 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000001680)={0x1, 0x0, [{}]}) 10:49:40 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/uinput\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f00000000c0)) [ 344.549727][T10941] ntfs: (device loop5): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 344.571067][T10941] ntfs: (device loop5): parse_options(): Unrecognized mount option . 10:49:40 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='loginuid\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x4) syz_open_procfs(0x0, &(0x7f0000000380)='fdinfo\x00\x92\xbb\v>co\xe8\xf2%\xc57=\xf7\xfd\a\x89\x80\xa5\x84\a\xee\x1f\xbb\xd7j.\xe7?C\"\xbe\vJ$\xb1p7wU\xf1i6\x91\x9f!E\xb0_\x80\x14\a?\xca\xb5CD\x8c\xee\xed\x9c\xb2\xb6\xb6\x97\x00`\x14\xb7\xda\xe2\xab^\xb3\xe3\x0e\xce\x11\xa7\x81\xe6\xc4\x1a\x06\xd7\xbff\xcb\xf9\xb1\xf0 \x00\x00\x00\x00\x00\x00\x03\x96\xd2;\xca?M\xe47\x1ce\x83\x8dK}|\xeb\x86$\x9cN\x01d\xb6\x80:\xa0B\xec\xd7\xa8\x8az.\xba~C\xb4L\xbf\x17\xec\xe9l\xa7\r\x85\xeaS\xe4B\xeb\xe9O\xfa\x12\xa5\xe8Buqe!\x86\x18\x16r\xa7\xd6\x1c\xb2n\xa4T0\xf1\x10\x16\xfe\"\xc3=\x0en|\xc6h\x9d\xe5\xc3]\xf1\xaej+\xfd\xb6\x96r\xe8\x81~LN\xc5L\xd0A-\x1a\xf4fm\b\x1c\xf6\x7f\x148l\xc4\b\x9a-\xb8\xfe\x8a\xe0\x03\x9btv\x1e\xef\xb5\xf1\xcfL-f>\xb4_\rl\x7f\x99d\xc2\xd9\xe8\xc9\xfb\xff\x96\xf0)\x831\x1b\x1cW\xc4\xb1\x1c\xae\x8b\x06\xe8=\xd2\xbe\x06$k\xe7\xdd\xa8z\x91q\x02~\xc2`\xe2\xfd\xcf\xed58\x90\xbb\xf4\x84\x88\x8f\xec\xc4U\xc0\xf9i\x94*e\x81v\x86\xb6aD\x82\xacIU\x9eo\aY\x84l8\xd4\x18\xb1\x1c\xed?\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00') quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) 10:49:41 executing program 2: r0 = socket$packet(0x11, 0x40800000000003, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x80, 0x1f8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000140)={0x11, 0x800, r2, 0x1, 0x0, 0x6, @random="286e6a8d6980"}, 0x14) r3 = dup2(r0, r0) sendto$inet6(r3, &(0x7f00000002c0)="020400000300603900382b8a5b5aa242b90516db4d23a3bb09f82632e33715d26206cd6b80a7699507938207d9fb3780d88d5375000001000000301e", 0x3c, 0x0, 0x0, 0x0) 10:49:41 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000001680)={0x1, 0x0, [{}]}) 10:49:41 executing program 5: mount(&(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0) syz_mount_image$ntfs(&(0x7f0000000000)='ntfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x400, &(0x7f0000000140)={[{@utf8='utf8'}, {@uid={'uid'}}, {@errors_continue='errors=continue'}]}) 10:49:41 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/uinput\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f00000000c0)) [ 344.825950][T10970] ntfs: (device loop5): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 344.871130][T10970] ntfs: (device loop5): parse_options(): Unrecognized mount option . 10:49:41 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000001680)={0x1, 0x0, [{}]}) 10:49:41 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='loginuid\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x4) fchdir(0xffffffffffffffff) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) 10:49:41 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f000051cff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000943ffc)) read(r0, &(0x7f00003fefff)=""/1, 0x1) readv(r0, &(0x7f00000002c0)=[{&(0x7f0000cd8000)=""/1, 0x2e171c03}], 0x1) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)) 10:49:41 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/uinput\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f00000000c0)) 10:49:41 executing program 2: r0 = socket$packet(0x11, 0x40800000000003, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x80, 0x1f8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000140)={0x11, 0x800, r2, 0x1, 0x0, 0x6, @random="286e6a8d6980"}, 0x14) r3 = dup2(r0, r0) sendto$inet6(r3, &(0x7f00000002c0)="020400000300603900382b8a5b5aa242b90516db4d23a3bb09f82632e33715d26206cd6b80a7699507938207d9fb3780d88d5375000001000000301e", 0x3c, 0x0, 0x0, 0x0) 10:49:41 executing program 5: syz_mount_image$ntfs(&(0x7f0000000000)='ntfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x400, &(0x7f0000000140)={[{@utf8='utf8'}, {@uid={'uid'}}, {@errors_continue='errors=continue'}]}) 10:49:41 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='loginuid\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x4) fchdir(0xffffffffffffffff) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) 10:49:41 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, 0x0) [ 345.462288][T10995] ntfs: (device loop5): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 345.483036][T10995] ntfs: (device loop5): parse_options(): Unrecognized mount option . 10:49:41 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close(r0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000000)=@req3={0x6000000, 0x3, 0x6000000, 0x3}, 0x1c) setsockopt$packet_int(r1, 0x107, 0x9, &(0x7f0000000280), 0x4) close(r0) 10:49:41 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000)=0x80, 0x1f8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000500)={'syz_tun\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x800, r2, 0x1, 0x0, 0x6, @random="286e6a8d6980"}, 0x14) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) sendto$inet6(r3, &(0x7f00000002c0)="020400000300603900382b8a5b5aa242b90516db4d23a3bb09f82632e33715d26206cd6b80a7699507938207d9fb3780d88d5375000001000000301e", 0x3c, 0x0, 0x0, 0x0) 10:49:41 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='loginuid\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x4) fchdir(0xffffffffffffffff) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) 10:49:41 executing program 5: syz_mount_image$ntfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x400, &(0x7f0000000140)={[{@utf8='utf8'}, {@uid={'uid'}}, {@errors_continue='errors=continue'}]}) 10:49:41 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) r1 = dup(r0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000013c0)={0x53, 0xfffffffffffffffc, 0x21, 0x4, @buffer={0x0, 0x3e, &(0x7f00000000c0)=""/62}, &(0x7f0000001280)="905f692ec3798c7deb499768baed4a68f2b17c1868dcd177d0aa0bc6054442ae3f", 0x0, 0x81, 0x6, 0x3, &(0x7f0000001380)}) 10:49:42 executing program 1: syz_open_procfs(0x0, &(0x7f0000000180)='loginuid\x00') r0 = syz_open_procfs(0x0, &(0x7f0000000380)='fdinfo\x00\x92\xbb\v>co\xe8\xf2%\xc57=\xf7\xfd\a\x89\x80\xa5\x84\a\xee\x1f\xbb\xd7j.\xe7?C\"\xbe\vJ$\xb1p7wU\xf1i6\x91\x9f!E\xb0_\x80\x14\a?\xca\xb5CD\x8c\xee\xed\x9c\xb2\xb6\xb6\x97\x00`\x14\xb7\xda\xe2\xab^\xb3\xe3\x0e\xce\x11\xa7\x81\xe6\xc4\x1a\x06\xd7\xbff\xcb\xf9\xb1\xf0 \x00\x00\x00\x00\x00\x00\x03\x96\xd2;\xca?M\xe47\x1ce\x83\x8dK}|\xeb\x86$\x9cN\x01d\xb6\x80:\xa0B\xec\xd7\xa8\x8az.\xba~C\xb4L\xbf\x17\xec\xe9l\xa7\r\x85\xeaS\xe4B\xeb\xe9O\xfa\x12\xa5\xe8Buqe!\x86\x18\x16r\xa7\xd6\x1c\xb2n\xa4T0\xf1\x10\x16\xfe\"\xc3=\x0en|\xc6h\x9d\xe5\xc3]\xf1\xaej+\xfd\xb6\x96r\xe8\x81~LN\xc5L\xd0A-\x1a\xf4fm\b\x1c\xf6\x7f\x148l\xc4\b\x9a-\xb8\xfe\x8a\xe0\x03\x9btv\x1e\xef\xb5\xf1\xcfL-f>\xb4_\rl\x7f\x99d\xc2\xd9\xe8\xc9\xfb\xff\x96\xf0)\x831\x1b\x1cW\xc4\xb1\x1c\xae\x8b\x06\xe8=\xd2\xbe\x06$k\xe7\xdd\xa8z\x91q\x02~\xc2`\xe2\xfd\xcf\xed58\x90\xbb\xf4\x84\x88\x8f\xec\xc4U\xc0\xf9i\x94*e\x81v\x86\xb6aD\x82\xacIU\x9eo\aY\x84l8\xd4\x18\xb1\x1c\xed?\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00') fchdir(r0) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) [ 345.740383][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 345.746259][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 345.980358][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 345.986208][ C1] protocol 88fb is buggy, dev hsr_slave_1 10:49:42 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f000051cff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000943ffc)) read(r0, &(0x7f00003fefff)=""/1, 0x1) readv(r0, &(0x7f00000002c0)=[{&(0x7f0000cd8000)=""/1, 0x2e171c03}], 0x1) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)) 10:49:42 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000)=0x80, 0x1f8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000500)={'syz_tun\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x800, r2, 0x1, 0x0, 0x6, @random="286e6a8d6980"}, 0x14) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) sendto$inet6(r3, &(0x7f00000002c0)="020400000300603900382b8a5b5aa242b90516db4d23a3bb09f82632e33715d26206cd6b80a7699507938207d9fb3780d88d5375000001000000301e", 0x3c, 0x0, 0x0, 0x0) 10:49:42 executing program 0: socketpair$unix(0x1, 0x100000001, 0x0, &(0x7f0000000040)) perf_event_open(&(0x7f0000000580)={0x2, 0x70, 0x5c61, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2103005ff6, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit(0x0) io_setup(0x1, &(0x7f00000000c0)=0x0) eventfd(0x0) io_submit(r0, 0x1, &(0x7f0000000380)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) 10:49:42 executing program 1: syz_open_procfs(0x0, &(0x7f0000000180)='loginuid\x00') r0 = syz_open_procfs(0x0, &(0x7f0000000380)='fdinfo\x00\x92\xbb\v>co\xe8\xf2%\xc57=\xf7\xfd\a\x89\x80\xa5\x84\a\xee\x1f\xbb\xd7j.\xe7?C\"\xbe\vJ$\xb1p7wU\xf1i6\x91\x9f!E\xb0_\x80\x14\a?\xca\xb5CD\x8c\xee\xed\x9c\xb2\xb6\xb6\x97\x00`\x14\xb7\xda\xe2\xab^\xb3\xe3\x0e\xce\x11\xa7\x81\xe6\xc4\x1a\x06\xd7\xbff\xcb\xf9\xb1\xf0 \x00\x00\x00\x00\x00\x00\x03\x96\xd2;\xca?M\xe47\x1ce\x83\x8dK}|\xeb\x86$\x9cN\x01d\xb6\x80:\xa0B\xec\xd7\xa8\x8az.\xba~C\xb4L\xbf\x17\xec\xe9l\xa7\r\x85\xeaS\xe4B\xeb\xe9O\xfa\x12\xa5\xe8Buqe!\x86\x18\x16r\xa7\xd6\x1c\xb2n\xa4T0\xf1\x10\x16\xfe\"\xc3=\x0en|\xc6h\x9d\xe5\xc3]\xf1\xaej+\xfd\xb6\x96r\xe8\x81~LN\xc5L\xd0A-\x1a\xf4fm\b\x1c\xf6\x7f\x148l\xc4\b\x9a-\xb8\xfe\x8a\xe0\x03\x9btv\x1e\xef\xb5\xf1\xcfL-f>\xb4_\rl\x7f\x99d\xc2\xd9\xe8\xc9\xfb\xff\x96\xf0)\x831\x1b\x1cW\xc4\xb1\x1c\xae\x8b\x06\xe8=\xd2\xbe\x06$k\xe7\xdd\xa8z\x91q\x02~\xc2`\xe2\xfd\xcf\xed58\x90\xbb\xf4\x84\x88\x8f\xec\xc4U\xc0\xf9i\x94*e\x81v\x86\xb6aD\x82\xacIU\x9eo\aY\x84l8\xd4\x18\xb1\x1c\xed?\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00') fchdir(r0) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) 10:49:42 executing program 5: syz_mount_image$ntfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x400, &(0x7f0000000140)={[{@utf8='utf8'}, {@uid={'uid'}}, {@errors_continue='errors=continue'}]}) 10:49:42 executing program 1: syz_open_procfs(0x0, &(0x7f0000000180)='loginuid\x00') r0 = syz_open_procfs(0x0, &(0x7f0000000380)='fdinfo\x00\x92\xbb\v>co\xe8\xf2%\xc57=\xf7\xfd\a\x89\x80\xa5\x84\a\xee\x1f\xbb\xd7j.\xe7?C\"\xbe\vJ$\xb1p7wU\xf1i6\x91\x9f!E\xb0_\x80\x14\a?\xca\xb5CD\x8c\xee\xed\x9c\xb2\xb6\xb6\x97\x00`\x14\xb7\xda\xe2\xab^\xb3\xe3\x0e\xce\x11\xa7\x81\xe6\xc4\x1a\x06\xd7\xbff\xcb\xf9\xb1\xf0 \x00\x00\x00\x00\x00\x00\x03\x96\xd2;\xca?M\xe47\x1ce\x83\x8dK}|\xeb\x86$\x9cN\x01d\xb6\x80:\xa0B\xec\xd7\xa8\x8az.\xba~C\xb4L\xbf\x17\xec\xe9l\xa7\r\x85\xeaS\xe4B\xeb\xe9O\xfa\x12\xa5\xe8Buqe!\x86\x18\x16r\xa7\xd6\x1c\xb2n\xa4T0\xf1\x10\x16\xfe\"\xc3=\x0en|\xc6h\x9d\xe5\xc3]\xf1\xaej+\xfd\xb6\x96r\xe8\x81~LN\xc5L\xd0A-\x1a\xf4fm\b\x1c\xf6\x7f\x148l\xc4\b\x9a-\xb8\xfe\x8a\xe0\x03\x9btv\x1e\xef\xb5\xf1\xcfL-f>\xb4_\rl\x7f\x99d\xc2\xd9\xe8\xc9\xfb\xff\x96\xf0)\x831\x1b\x1cW\xc4\xb1\x1c\xae\x8b\x06\xe8=\xd2\xbe\x06$k\xe7\xdd\xa8z\x91q\x02~\xc2`\xe2\xfd\xcf\xed58\x90\xbb\xf4\x84\x88\x8f\xec\xc4U\xc0\xf9i\x94*e\x81v\x86\xb6aD\x82\xacIU\x9eo\aY\x84l8\xd4\x18\xb1\x1c\xed?\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00') fchdir(r0) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) [ 346.860366][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 346.866217][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 346.940395][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 346.946189][ C1] protocol 88fb is buggy, dev hsr_slave_1 10:49:43 executing program 3: 10:49:43 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000)=0x80, 0x1f8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000500)={'syz_tun\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x800, r2, 0x1, 0x0, 0x6, @random="286e6a8d6980"}, 0x14) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) sendto$inet6(r3, &(0x7f00000002c0)="020400000300603900382b8a5b5aa242b90516db4d23a3bb09f82632e33715d26206cd6b80a7699507938207d9fb3780d88d5375000001000000301e", 0x3c, 0x0, 0x0, 0x0) 10:49:43 executing program 0: io_setup(0x3, &(0x7f0000000100)=0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x800000000000002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'\x00\x00\x02\x00\x00\xf9\xff\xff\xff\x00', 0x20000005005}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="030000000000000008001b0000000000"], 0x1}}, 0x0) io_submit(r0, 0x1, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r1, &(0x7f0000000080), 0x14d}]) 10:49:43 executing program 5: syz_mount_image$ntfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x400, &(0x7f0000000140)={[{@utf8='utf8'}, {@uid={'uid'}}, {@errors_continue='errors=continue'}]}) 10:49:43 executing program 1: preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x4) r0 = syz_open_procfs(0x0, &(0x7f0000000380)='fdinfo\x00\x92\xbb\v>co\xe8\xf2%\xc57=\xf7\xfd\a\x89\x80\xa5\x84\a\xee\x1f\xbb\xd7j.\xe7?C\"\xbe\vJ$\xb1p7wU\xf1i6\x91\x9f!E\xb0_\x80\x14\a?\xca\xb5CD\x8c\xee\xed\x9c\xb2\xb6\xb6\x97\x00`\x14\xb7\xda\xe2\xab^\xb3\xe3\x0e\xce\x11\xa7\x81\xe6\xc4\x1a\x06\xd7\xbff\xcb\xf9\xb1\xf0 \x00\x00\x00\x00\x00\x00\x03\x96\xd2;\xca?M\xe47\x1ce\x83\x8dK}|\xeb\x86$\x9cN\x01d\xb6\x80:\xa0B\xec\xd7\xa8\x8az.\xba~C\xb4L\xbf\x17\xec\xe9l\xa7\r\x85\xeaS\xe4B\xeb\xe9O\xfa\x12\xa5\xe8Buqe!\x86\x18\x16r\xa7\xd6\x1c\xb2n\xa4T0\xf1\x10\x16\xfe\"\xc3=\x0en|\xc6h\x9d\xe5\xc3]\xf1\xaej+\xfd\xb6\x96r\xe8\x81~LN\xc5L\xd0A-\x1a\xf4fm\b\x1c\xf6\x7f\x148l\xc4\b\x9a-\xb8\xfe\x8a\xe0\x03\x9btv\x1e\xef\xb5\xf1\xcfL-f>\xb4_\rl\x7f\x99d\xc2\xd9\xe8\xc9\xfb\xff\x96\xf0)\x831\x1b\x1cW\xc4\xb1\x1c\xae\x8b\x06\xe8=\xd2\xbe\x06$k\xe7\xdd\xa8z\x91q\x02~\xc2`\xe2\xfd\xcf\xed58\x90\xbb\xf4\x84\x88\x8f\xec\xc4U\xc0\xf9i\x94*e\x81v\x86\xb6aD\x82\xacIU\x9eo\aY\x84l8\xd4\x18\xb1\x1c\xed?\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00') fchdir(r0) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) 10:49:43 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f000051cff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000943ffc)=0x7) read(0xffffffffffffffff, &(0x7f00003fefff)=""/1, 0x1) readv(r0, &(0x7f00000002c0)=[{&(0x7f0000cd8000)=""/1, 0x2e171c03}], 0x1) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)) 10:49:43 executing program 1: preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x4) r0 = syz_open_procfs(0x0, &(0x7f0000000380)='fdinfo\x00\x92\xbb\v>co\xe8\xf2%\xc57=\xf7\xfd\a\x89\x80\xa5\x84\a\xee\x1f\xbb\xd7j.\xe7?C\"\xbe\vJ$\xb1p7wU\xf1i6\x91\x9f!E\xb0_\x80\x14\a?\xca\xb5CD\x8c\xee\xed\x9c\xb2\xb6\xb6\x97\x00`\x14\xb7\xda\xe2\xab^\xb3\xe3\x0e\xce\x11\xa7\x81\xe6\xc4\x1a\x06\xd7\xbff\xcb\xf9\xb1\xf0 \x00\x00\x00\x00\x00\x00\x03\x96\xd2;\xca?M\xe47\x1ce\x83\x8dK}|\xeb\x86$\x9cN\x01d\xb6\x80:\xa0B\xec\xd7\xa8\x8az.\xba~C\xb4L\xbf\x17\xec\xe9l\xa7\r\x85\xeaS\xe4B\xeb\xe9O\xfa\x12\xa5\xe8Buqe!\x86\x18\x16r\xa7\xd6\x1c\xb2n\xa4T0\xf1\x10\x16\xfe\"\xc3=\x0en|\xc6h\x9d\xe5\xc3]\xf1\xaej+\xfd\xb6\x96r\xe8\x81~LN\xc5L\xd0A-\x1a\xf4fm\b\x1c\xf6\x7f\x148l\xc4\b\x9a-\xb8\xfe\x8a\xe0\x03\x9btv\x1e\xef\xb5\xf1\xcfL-f>\xb4_\rl\x7f\x99d\xc2\xd9\xe8\xc9\xfb\xff\x96\xf0)\x831\x1b\x1cW\xc4\xb1\x1c\xae\x8b\x06\xe8=\xd2\xbe\x06$k\xe7\xdd\xa8z\x91q\x02~\xc2`\xe2\xfd\xcf\xed58\x90\xbb\xf4\x84\x88\x8f\xec\xc4U\xc0\xf9i\x94*e\x81v\x86\xb6aD\x82\xacIU\x9eo\aY\x84l8\xd4\x18\xb1\x1c\xed?\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00') fchdir(r0) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) 10:49:43 executing program 3: 10:49:43 executing program 2: r0 = socket$packet(0x11, 0x0, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x80, 0x1f8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000500)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000140)={0x11, 0x800, r3, 0x1, 0x0, 0x6, @random="286e6a8d6980"}, 0x14) r4 = dup2(r0, r0) sendto$inet6(r4, &(0x7f00000002c0)="020400000300603900382b8a5b5aa242b90516db4d23a3bb09f82632e33715d26206cd6b80a7699507938207d9fb3780d88d5375000001000000301e", 0x3c, 0x0, 0x0, 0x0) 10:49:43 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f000051cff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000943ffc)=0x7) read(0xffffffffffffffff, &(0x7f00003fefff)=""/1, 0x1) readv(r0, &(0x7f00000002c0)=[{&(0x7f0000cd8000)=""/1, 0x2e171c03}], 0x1) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)) 10:49:43 executing program 5: syz_mount_image$ntfs(&(0x7f0000000000)='ntfs\x00', 0x0, 0x0, 0x0, 0x0, 0x400, &(0x7f0000000140)={[{@utf8='utf8'}, {@uid={'uid'}}, {@errors_continue='errors=continue'}]}) 10:49:43 executing program 1: preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x4) r0 = syz_open_procfs(0x0, &(0x7f0000000380)='fdinfo\x00\x92\xbb\v>co\xe8\xf2%\xc57=\xf7\xfd\a\x89\x80\xa5\x84\a\xee\x1f\xbb\xd7j.\xe7?C\"\xbe\vJ$\xb1p7wU\xf1i6\x91\x9f!E\xb0_\x80\x14\a?\xca\xb5CD\x8c\xee\xed\x9c\xb2\xb6\xb6\x97\x00`\x14\xb7\xda\xe2\xab^\xb3\xe3\x0e\xce\x11\xa7\x81\xe6\xc4\x1a\x06\xd7\xbff\xcb\xf9\xb1\xf0 \x00\x00\x00\x00\x00\x00\x03\x96\xd2;\xca?M\xe47\x1ce\x83\x8dK}|\xeb\x86$\x9cN\x01d\xb6\x80:\xa0B\xec\xd7\xa8\x8az.\xba~C\xb4L\xbf\x17\xec\xe9l\xa7\r\x85\xeaS\xe4B\xeb\xe9O\xfa\x12\xa5\xe8Buqe!\x86\x18\x16r\xa7\xd6\x1c\xb2n\xa4T0\xf1\x10\x16\xfe\"\xc3=\x0en|\xc6h\x9d\xe5\xc3]\xf1\xaej+\xfd\xb6\x96r\xe8\x81~LN\xc5L\xd0A-\x1a\xf4fm\b\x1c\xf6\x7f\x148l\xc4\b\x9a-\xb8\xfe\x8a\xe0\x03\x9btv\x1e\xef\xb5\xf1\xcfL-f>\xb4_\rl\x7f\x99d\xc2\xd9\xe8\xc9\xfb\xff\x96\xf0)\x831\x1b\x1cW\xc4\xb1\x1c\xae\x8b\x06\xe8=\xd2\xbe\x06$k\xe7\xdd\xa8z\x91q\x02~\xc2`\xe2\xfd\xcf\xed58\x90\xbb\xf4\x84\x88\x8f\xec\xc4U\xc0\xf9i\x94*e\x81v\x86\xb6aD\x82\xacIU\x9eo\aY\x84l8\xd4\x18\xb1\x1c\xed?\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00') fchdir(r0) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) 10:49:43 executing program 0: 10:49:43 executing program 3: 10:49:44 executing program 2: r0 = socket$packet(0x11, 0x0, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x80, 0x1f8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000500)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000140)={0x11, 0x800, r3, 0x1, 0x0, 0x6, @random="286e6a8d6980"}, 0x14) r4 = dup2(r0, r0) sendto$inet6(r4, &(0x7f00000002c0)="020400000300603900382b8a5b5aa242b90516db4d23a3bb09f82632e33715d26206cd6b80a7699507938207d9fb3780d88d5375000001000000301e", 0x3c, 0x0, 0x0, 0x0) 10:49:44 executing program 5: syz_mount_image$ntfs(&(0x7f0000000000)='ntfs\x00', 0x0, 0x0, 0x0, 0x0, 0x400, &(0x7f0000000140)={[{@utf8='utf8'}, {@uid={'uid'}}, {@errors_continue='errors=continue'}]}) 10:49:44 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f000051cff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000943ffc)=0x7) read(0xffffffffffffffff, &(0x7f00003fefff)=""/1, 0x1) readv(r0, &(0x7f00000002c0)=[{&(0x7f0000cd8000)=""/1, 0x2e171c03}], 0x1) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)) 10:49:44 executing program 0: 10:49:44 executing program 1: r0 = syz_open_procfs(0x0, 0x0) preadv(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x4) r1 = syz_open_procfs(0x0, &(0x7f0000000380)='fdinfo\x00\x92\xbb\v>co\xe8\xf2%\xc57=\xf7\xfd\a\x89\x80\xa5\x84\a\xee\x1f\xbb\xd7j.\xe7?C\"\xbe\vJ$\xb1p7wU\xf1i6\x91\x9f!E\xb0_\x80\x14\a?\xca\xb5CD\x8c\xee\xed\x9c\xb2\xb6\xb6\x97\x00`\x14\xb7\xda\xe2\xab^\xb3\xe3\x0e\xce\x11\xa7\x81\xe6\xc4\x1a\x06\xd7\xbff\xcb\xf9\xb1\xf0 \x00\x00\x00\x00\x00\x00\x03\x96\xd2;\xca?M\xe47\x1ce\x83\x8dK}|\xeb\x86$\x9cN\x01d\xb6\x80:\xa0B\xec\xd7\xa8\x8az.\xba~C\xb4L\xbf\x17\xec\xe9l\xa7\r\x85\xeaS\xe4B\xeb\xe9O\xfa\x12\xa5\xe8Buqe!\x86\x18\x16r\xa7\xd6\x1c\xb2n\xa4T0\xf1\x10\x16\xfe\"\xc3=\x0en|\xc6h\x9d\xe5\xc3]\xf1\xaej+\xfd\xb6\x96r\xe8\x81~LN\xc5L\xd0A-\x1a\xf4fm\b\x1c\xf6\x7f\x148l\xc4\b\x9a-\xb8\xfe\x8a\xe0\x03\x9btv\x1e\xef\xb5\xf1\xcfL-f>\xb4_\rl\x7f\x99d\xc2\xd9\xe8\xc9\xfb\xff\x96\xf0)\x831\x1b\x1cW\xc4\xb1\x1c\xae\x8b\x06\xe8=\xd2\xbe\x06$k\xe7\xdd\xa8z\x91q\x02~\xc2`\xe2\xfd\xcf\xed58\x90\xbb\xf4\x84\x88\x8f\xec\xc4U\xc0\xf9i\x94*e\x81v\x86\xb6aD\x82\xacIU\x9eo\aY\x84l8\xd4\x18\xb1\x1c\xed?\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00') fchdir(r1) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) 10:49:44 executing program 3: 10:49:44 executing program 0: mremap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil) munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f00000003c0)) 10:49:44 executing program 2: r0 = socket$packet(0x11, 0x0, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x80, 0x1f8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000500)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000140)={0x11, 0x800, r3, 0x1, 0x0, 0x6, @random="286e6a8d6980"}, 0x14) r4 = dup2(r0, r0) sendto$inet6(r4, &(0x7f00000002c0)="020400000300603900382b8a5b5aa242b90516db4d23a3bb09f82632e33715d26206cd6b80a7699507938207d9fb3780d88d5375000001000000301e", 0x3c, 0x0, 0x0, 0x0) 10:49:44 executing program 5: syz_mount_image$ntfs(&(0x7f0000000000)='ntfs\x00', 0x0, 0x0, 0x0, 0x0, 0x400, &(0x7f0000000140)={[{@utf8='utf8'}, {@uid={'uid'}}, {@errors_continue='errors=continue'}]}) 10:49:44 executing program 1: r0 = syz_open_procfs(0x0, 0x0) preadv(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x4) r1 = syz_open_procfs(0x0, &(0x7f0000000380)='fdinfo\x00\x92\xbb\v>co\xe8\xf2%\xc57=\xf7\xfd\a\x89\x80\xa5\x84\a\xee\x1f\xbb\xd7j.\xe7?C\"\xbe\vJ$\xb1p7wU\xf1i6\x91\x9f!E\xb0_\x80\x14\a?\xca\xb5CD\x8c\xee\xed\x9c\xb2\xb6\xb6\x97\x00`\x14\xb7\xda\xe2\xab^\xb3\xe3\x0e\xce\x11\xa7\x81\xe6\xc4\x1a\x06\xd7\xbff\xcb\xf9\xb1\xf0 \x00\x00\x00\x00\x00\x00\x03\x96\xd2;\xca?M\xe47\x1ce\x83\x8dK}|\xeb\x86$\x9cN\x01d\xb6\x80:\xa0B\xec\xd7\xa8\x8az.\xba~C\xb4L\xbf\x17\xec\xe9l\xa7\r\x85\xeaS\xe4B\xeb\xe9O\xfa\x12\xa5\xe8Buqe!\x86\x18\x16r\xa7\xd6\x1c\xb2n\xa4T0\xf1\x10\x16\xfe\"\xc3=\x0en|\xc6h\x9d\xe5\xc3]\xf1\xaej+\xfd\xb6\x96r\xe8\x81~LN\xc5L\xd0A-\x1a\xf4fm\b\x1c\xf6\x7f\x148l\xc4\b\x9a-\xb8\xfe\x8a\xe0\x03\x9btv\x1e\xef\xb5\xf1\xcfL-f>\xb4_\rl\x7f\x99d\xc2\xd9\xe8\xc9\xfb\xff\x96\xf0)\x831\x1b\x1cW\xc4\xb1\x1c\xae\x8b\x06\xe8=\xd2\xbe\x06$k\xe7\xdd\xa8z\x91q\x02~\xc2`\xe2\xfd\xcf\xed58\x90\xbb\xf4\x84\x88\x8f\xec\xc4U\xc0\xf9i\x94*e\x81v\x86\xb6aD\x82\xacIU\x9eo\aY\x84l8\xd4\x18\xb1\x1c\xed?\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00') fchdir(r1) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) 10:49:44 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f000051cff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000943ffc)=0x7) read(r0, 0x0, 0x0) readv(r0, &(0x7f00000002c0)=[{&(0x7f0000cd8000)=""/1, 0x2e171c03}], 0x1) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)) 10:49:44 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) connect$unix(r0, 0x0, 0x0) 10:49:44 executing program 0: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) write$P9_RSTAT(r0, 0x0, 0x0) 10:49:44 executing program 2: r0 = socket$packet(0x11, 0x40800000000003, 0x300) r1 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x80, 0x1f8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000500)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000140)={0x11, 0x800, r3, 0x1, 0x0, 0x6, @random="286e6a8d6980"}, 0x14) r4 = dup2(r0, r0) sendto$inet6(r4, &(0x7f00000002c0)="020400000300603900382b8a5b5aa242b90516db4d23a3bb09f82632e33715d26206cd6b80a7699507938207d9fb3780d88d5375000001000000301e", 0x3c, 0x0, 0x0, 0x0) 10:49:44 executing program 1: r0 = syz_open_procfs(0x0, 0x0) preadv(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x4) r1 = syz_open_procfs(0x0, &(0x7f0000000380)='fdinfo\x00\x92\xbb\v>co\xe8\xf2%\xc57=\xf7\xfd\a\x89\x80\xa5\x84\a\xee\x1f\xbb\xd7j.\xe7?C\"\xbe\vJ$\xb1p7wU\xf1i6\x91\x9f!E\xb0_\x80\x14\a?\xca\xb5CD\x8c\xee\xed\x9c\xb2\xb6\xb6\x97\x00`\x14\xb7\xda\xe2\xab^\xb3\xe3\x0e\xce\x11\xa7\x81\xe6\xc4\x1a\x06\xd7\xbff\xcb\xf9\xb1\xf0 \x00\x00\x00\x00\x00\x00\x03\x96\xd2;\xca?M\xe47\x1ce\x83\x8dK}|\xeb\x86$\x9cN\x01d\xb6\x80:\xa0B\xec\xd7\xa8\x8az.\xba~C\xb4L\xbf\x17\xec\xe9l\xa7\r\x85\xeaS\xe4B\xeb\xe9O\xfa\x12\xa5\xe8Buqe!\x86\x18\x16r\xa7\xd6\x1c\xb2n\xa4T0\xf1\x10\x16\xfe\"\xc3=\x0en|\xc6h\x9d\xe5\xc3]\xf1\xaej+\xfd\xb6\x96r\xe8\x81~LN\xc5L\xd0A-\x1a\xf4fm\b\x1c\xf6\x7f\x148l\xc4\b\x9a-\xb8\xfe\x8a\xe0\x03\x9btv\x1e\xef\xb5\xf1\xcfL-f>\xb4_\rl\x7f\x99d\xc2\xd9\xe8\xc9\xfb\xff\x96\xf0)\x831\x1b\x1cW\xc4\xb1\x1c\xae\x8b\x06\xe8=\xd2\xbe\x06$k\xe7\xdd\xa8z\x91q\x02~\xc2`\xe2\xfd\xcf\xed58\x90\xbb\xf4\x84\x88\x8f\xec\xc4U\xc0\xf9i\x94*e\x81v\x86\xb6aD\x82\xacIU\x9eo\aY\x84l8\xd4\x18\xb1\x1c\xed?\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00') fchdir(r1) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) 10:49:44 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, 0x0) ioctl$PIO_FONTX(0xffffffffffffffff, 0x4b6c, 0x0) write$P9_RLCREATE(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet6_mtu(r0, 0x29, 0x17, 0x0, 0x0) 10:49:44 executing program 3: bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)=""/1}, 0x18) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f2, &(0x7f0000000140)='sit0\x00') 10:49:44 executing program 5: syz_mount_image$ntfs(&(0x7f0000000000)='ntfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={[{@utf8='utf8'}, {@uid={'uid'}}, {@errors_continue='errors=continue'}]}) 10:49:44 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f000051cff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000943ffc)=0x7) read(r0, 0x0, 0x0) readv(r0, &(0x7f00000002c0)=[{&(0x7f0000cd8000)=""/1, 0x2e171c03}], 0x1) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)) 10:49:44 executing program 1: syz_open_procfs(0x0, &(0x7f0000000180)='loginuid\x00') preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x4) r0 = syz_open_procfs(0x0, &(0x7f0000000380)='fdinfo\x00\x92\xbb\v>co\xe8\xf2%\xc57=\xf7\xfd\a\x89\x80\xa5\x84\a\xee\x1f\xbb\xd7j.\xe7?C\"\xbe\vJ$\xb1p7wU\xf1i6\x91\x9f!E\xb0_\x80\x14\a?\xca\xb5CD\x8c\xee\xed\x9c\xb2\xb6\xb6\x97\x00`\x14\xb7\xda\xe2\xab^\xb3\xe3\x0e\xce\x11\xa7\x81\xe6\xc4\x1a\x06\xd7\xbff\xcb\xf9\xb1\xf0 \x00\x00\x00\x00\x00\x00\x03\x96\xd2;\xca?M\xe47\x1ce\x83\x8dK}|\xeb\x86$\x9cN\x01d\xb6\x80:\xa0B\xec\xd7\xa8\x8az.\xba~C\xb4L\xbf\x17\xec\xe9l\xa7\r\x85\xeaS\xe4B\xeb\xe9O\xfa\x12\xa5\xe8Buqe!\x86\x18\x16r\xa7\xd6\x1c\xb2n\xa4T0\xf1\x10\x16\xfe\"\xc3=\x0en|\xc6h\x9d\xe5\xc3]\xf1\xaej+\xfd\xb6\x96r\xe8\x81~LN\xc5L\xd0A-\x1a\xf4fm\b\x1c\xf6\x7f\x148l\xc4\b\x9a-\xb8\xfe\x8a\xe0\x03\x9btv\x1e\xef\xb5\xf1\xcfL-f>\xb4_\rl\x7f\x99d\xc2\xd9\xe8\xc9\xfb\xff\x96\xf0)\x831\x1b\x1cW\xc4\xb1\x1c\xae\x8b\x06\xe8=\xd2\xbe\x06$k\xe7\xdd\xa8z\x91q\x02~\xc2`\xe2\xfd\xcf\xed58\x90\xbb\xf4\x84\x88\x8f\xec\xc4U\xc0\xf9i\x94*e\x81v\x86\xb6aD\x82\xacIU\x9eo\aY\x84l8\xd4\x18\xb1\x1c\xed?\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00') fchdir(r0) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) 10:49:44 executing program 3: ioctl$TIOCLINUX7(0xffffffffffffffff, 0x541c, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) clone(0x10002102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f00000000c0)) 10:49:44 executing program 2: r0 = socket$packet(0x11, 0x40800000000003, 0x300) r1 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x80, 0x1f8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000500)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000140)={0x11, 0x800, r3, 0x1, 0x0, 0x6, @random="286e6a8d6980"}, 0x14) r4 = dup2(r0, r0) sendto$inet6(r4, &(0x7f00000002c0)="020400000300603900382b8a5b5aa242b90516db4d23a3bb09f82632e33715d26206cd6b80a7699507938207d9fb3780d88d5375000001000000301e", 0x3c, 0x0, 0x0, 0x0) [ 348.388634][T11179] ntfs: (device loop5): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. 10:49:44 executing program 3: ioctl$TIOCLINUX7(0xffffffffffffffff, 0x541c, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) clone(0x10002102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f00000000c0)) 10:49:44 executing program 0: ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003b9fdc)) socket$inet(0x2, 0xa, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) syz_genetlink_get_family_id$tipc(0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x800c6613, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000680)='memory.events\x00', 0x7a05, 0x1700) sendto$packet(r1, &(0x7f0000000a80)="c5c3660e956872cd1aa632be07d87078af29dec1d00b284a55f2c51a53e8dd71351ce18018104477b461005df4cfa5671e2f396a3ccab009b0e56c999bb270b76345eb498041efcef77e34329d205d64b98a555282f3854a4c5ef5b9a8ffc4993caf89cdee92c8504a2308a6242e580777cced95ea95b74025b4e62358c32830b7836ac6470cf61ce7d534cf4b0ceddd3a7cb3bf3d24456306f629d5787ac9f982ccbb71d6b309326e8324b7e11071ae4aa4b5e2291ef993f91051672a8ad1e5ea152ff0d4b2fb01df47f22998907a82123ff3bf04ae08d860a43d1c5ea78b531b22817acf208b5d96b91098882eefed6498fac734aa140d16707b6ffa6969edfda5bfeb281c03556e5f5b1e1b985367ee320a5a8b75483e54e5612f8b98e8f1b4c4ba91d279e545bd1d97db3ea54c4ed9101af81064189aebbaa3653dcbc86b794922afd2af0713f2b28d252127797510cadaa8ed22f6c42b9604a5589bc8323678d24c061412ad8d77604ff42eae336bebd8ce6c1c8d9b5c4919e5c2680c77432034ae77a349e19caf9524a12c1a8f4a3a47538c9fac25ae66f85b31bd193af6b682cac47105b14d201911e52c88ce53dd980503e0ad37c20362ac659f4137e36bdbac6c54bc01b95fd336dfca92d419970b46207c7f66c6d622e31147af230cf5c5ebf29f42f949e7c896e7c03c7dea56e518fb2940e3cc4b353884e113921535b025ad6fffbc3ddfbd2cfef937cb5218f09c9d6d56e7e16178a6a7ec94caf02bb6d95e2325575afe17262a9108db442834d9a3bca3a28d7a69ff488d0e40c2061610dbfdde7dd9b505c2742f9e6ba2db1d7500884568901de7571998533e3876d96f105ff0106a5d550c7dc814775b1539a3572f5f679f5292b338d29fe34f4c6cf0deb09342fc5da70db568cf2ba67c8a707928adf9c7094930d612e37dd53584c8957c6ea3a4e299967c8e21d3c44c0905be49bb510f43d9c110aac5c57ddcaa8698cc30f75bcaaa87dabda7b903d001c5412394e2b59f822cfa08fb4a58845e53531798663bfba56df0fe24e99fc0b50210380349f072bc4011b1b9bf4aa6c8bccc055cae66f0021748f6905e37ca17d944a702f9cd8f47e7b6cfde22e08208c54e996f362ed38a1037216fa709e4ebbb8767fb85fb971b75cdb6e524fec6a304f92f193a5c9d12f12d377b73d8bdce4abaf00af5ee5424002bdd1c9b1061c6459104deb3c7ec3b03ef6cff417143d064e5599e44f6cb8ce1a466bac83c16a70c1c3d741c85372dd059852079f46a457c54f74a7ffc9fc3e4d97dd34874c82c5c20803b9fab542f6a585087f348afde72ea8b40993aa887f13244c1584b9698101ad0f648c87093cdf0bedd30b155ab17a226678d4175b06defe635ebd9387f78698b0531914bc4245814984585a0d8ebf2ff3d46cd3457d62a09391ba0228b797315e950690983a26c997f0c9ce3accb9d793d1eb2c99c67b78a2e73c91376832d00a8bb58a1c627b249a4f8b9ecc82941ceff360c50b79c57e6447c9dcecfdd5aca61446cc42d03360934d07ae3de9e2e3a12e58592d697d341ca90a889e37cbabaad48d5ab8022f963a96fb400fd64b3e7ebbf154093e2f08436f06d271c2f870ab1f8430df1b772ad42fef170ef4ac8c0e00296ee36755e67c6e3800a7a217a337424340262371378e87524913d2ce565e8cbbc93ac4802ac8ebf69211eeed1da9baaf78fb505ba46bc1c6d8539ef3f7938969b5a24cb9f90a12d7d1d4689c8366863ebe88265d5be11db6764a8f9a01784cc3ada7c9b363b926d7b0a686d6761a2e12867cad3654cddfd68aa274ac32f66f99442cb934d325ffde947694497ce7198e95d5077255f433144cbd9b8a7c2e25e5bdacdc030ad93fc7d17401c41d9343a31b1bda79b7ccfe43d52d0df155d1351b729053eb5efc97f7643a0aaa48ae979d687a91e8d639f025abf622723bdb37bd81c9237f2d8858af2bcc54cfd221e1a93a050ca03602c3fd458e2a4978390ac905e83be6e58d140c49574e879e2fa3c9fa9df64add9da9fa14e5535118428637858028d153013f9d6ebd7cf30c319b0b7f8969bb402eeff033a8604486f1e927684715a6b740ff8331491562db396bdcdc82b7d51c00a9697c29a9a8013b56503aecc5ce3a80786a493c1c879dcb630216944d5ebbd2fda1c597c53f9a8fbdc8ab059fd1826a4289400ba411aba782f692710bc522a631053945f0c6bff5bb20d99ca3f5e5a4a1d69c4444243acf373a920fe25d4c8f3199c5503331b7e20026f8988e8b1d4987006c9cc44f4ffae7c5b3acc72d834fc6562220f3d24e1a99c4273ef60a9bcd76915d1428f27cc790b1c9e44448096d03e77bbe5071afd582a6a4a3ca8b048ddc90da4363c6ef8c8fc71bd62b9c8a3284c24a334a2238bc880ce7640b3a57869832884ca0ff0becdfd0ef97bfcf1bea0c8f9d44f8ab71c832ef14bda8720eaf25b26206a0d0ef968619f673ce307ae730169225e5a160db52dab043e89e517a48aa012e314cdf537e96765e5e0d4cc1e2c17e2c0a62e62a773c3cdb247817a7d99fc3b484d2d9453f26c3fb51343d54311aecdf0f9bb5251138a8ef3b04cf457e02e991e2742d363469a90fe9ffe6f36b28112bde55ac8792e4e25bb356167356f2305c26b94be5f49693a5ded348ed1001a2d1390745bf842bf27ce19a43832e6adcb67a70b957993f993ea14bfeded1c34ee8aea52092bd5e6ea5e74f214934e56b8d727e14f388adb28f2d825802c1a1cde844b9a81497f2676fc17a891229e90c44ed82d0c049e087795cd16447bc4428aaceecca33aa51aa1316ed476499284bf204dacd53616cf4115dee74d29c7b409c401919ea6f8c02226aa3cd9ef3896de0bd73c114955d68b68ec62c0b645d9f547f499f658b0426af3fa11e8c5f517eeb1f16a47135f6c5a6966496f7a80d3823f90bd4c27c977dd99218853cd762540241dad51101fdcb50c4470568aefa2c8339f3af83866f567ede24806f5da4642db37c110f89b9893faa6f2904252c89f58bb138f9be9f9c2377613d8b76601d56f2e4aec8b626acfe320440748857a0cd7d2a66748872cc3d3486f0a0b57e07931ce97457dd4f5e510333ce62d2fa35aebf3a50151a7136310a4acbdf132e4e823794a49fea5b9f3e8d54ca4f785c19f0273b9d7a84712f7d83e8aeead9096851ad3bb45af56435ee6b204a5b5c14d6ac73a4b05ffa0610ceac627c416376bea4532fa599b17b623dbef4e642614dcca812e63059218cc173e0d65cc43decaa40537b366f467aabd66e4b9b1b0bfc96779680ded7604ab47e189503ccba0a13e904e8926aec630b3c1a1cffc543798849a3a2a637fbb231b3ef15c15e12a0185dd019471e2a0ccda48c1ae67320dbd06e9099a6984bb694ada7c2170293e8e11ed865066820829aed67b4b57ea6634f1ce2b819c0015f05d802f149ce7771e99331aa509ade3182b63d1b8a5bc8c6a9e5e8b961174cbfab01a719b7255513466c580b1054abbe2715144337ebd0c60f77897d4438bbecc880c8d0d7e8aa45128460d08336aa2dafc0c982b770ae17f206f6cdde61a9541a2d2d8c798f30c792491a88a8390dbc954e40f4753df3215ef35e0b444d8c18db33b84807103b6d92aa2ae3b68a49a9061e55552e09086697693d2dbed0c0e08db2b3b5b0343357feab5263e43044546c025c8d67a037fa9654021ec2f1f6ee9575efd7bbf34ea15a45cd64c74b856468c07a1b2125abb20497a77f8ed22240bbfd559aa735c49fc6ef75451adc9f015d2b024eb9bf0fdc0cda1abd27730f9e5c3cf5fce19cd0fa6580f7b7d91bbddcafca2f0859f8b8a4052386e12de70a24a050dacd7ae8002cf46d5209c8fac0c5ef5570d02ddc51ef18d21d9104def437e19e7651debe4bfe1d026c3845fa5f68eafa85095560305b029faed7451bb9666ad457ba236cfeb5bb0ef07b25bbb107b51d50fbef5c79666651837aadb2ba43fd9f990cc3886c31b39688029b3e992b47688872978f6c455db9d5c85e4b0b692689f6f43ff70260b834a4e188a444f6dee8e30e011c4919f4625002b3de3655130874d8dedb16e69ef983a7b8846d592c546ac62a1d311b496d3bfdcde8c846d85996d6df5f1245f26812dddec55cce272a48f0a5b3226b175d70442c8b27437f75c0160b73c923c501c2bd2813e61aca7659f5b2250669440923adffc4cdff809eefe0667c98c0f1e54cde0f47f3d7d93c7bb1309bc3d08b94f7089214b15563971787d2b1b532fdf13723f935518f2549533bc075118b1affba75f857595530edfbded7dce229fe443a0f72234d3c2ca7ffe205ec33a89b93c85182627b5c096c371811446fcfc2ce5c93cf4970d15901e2c0e8a44e7bb93d13dc3b571b61bc1039605b41d47ec9ce8a690ef878bb39e01cbe64de1ef477bef2835332085f23fc755c9d31d3eb531eeaf84bc19adb9363fcea16c20c75e9ed04d7e534ad488cd49c71d6557ac3b57450e2880781ce552daec4dfe7b5a9bf3f85c1be9fb5da80ead00924e90b110669b1647460ef8345dbf337b6336e6f77c72095bf1f027b80aa5e05e900d660af017dfaf9752936b00aba0116022ead68a954cbb02198afd53ec722f6f53b8ac000da11d521261e8075d5d136e29dc21d18ae6ea708c3adbc2b4634c8917f870c02b78381b624092f6ff655c78070e74d852567f68c57ed9d07657ada06093805fd9d814c43286aa18a4c54e4632378a1e05f6162b381527fdf53c18f34925b8e157559d69abff65c31298ed09bacd70e68a5df74b86ed39f91aa301b6393ca03682a183f0439cd7c84f864a916a84a4cd69988bb0605886b3c60c0627303c00c71ffa0167e6ff4a1155723f1429ad87d9b4caf3d8360b8585c11debbd2587dee54211e76039684c363e8e1157df2ff83567c7532bac6028bbab4c212dd29fd590b6ed91a2c782ecfeb7078231a1c2fcdeb0f3bd3b1cc018056d18960385821157b8723910cffbfda1e2f6cd6296042d84055069d0c649584508bd144f00652d3dfc5d6728d139e240610f869df0ab3803fb0a7585fa5a4980f505cc2605172cc9a5324bfea54211a18c896069de694cd0cf63f95fda89bf1c9021f16a9a61169d9145896b442b6abc30b1436a0bfad5b388b6da13ffff0e4581ff15bb2c59b2b487817f2b1f49b7b8f73b02c5f1c2f6dcbc9ac8aaa604329a39d19a918d67b08997a58d22be75e8a5dfd5964b0febcfd105e2af721d01c04ea85a275c5b154a708044ba7a64eaaa8650a86bcdad6d03ce0d774408e62ba8138c07612e969561e7e5ec836dd86696688a4cb942f4303ea6dd3441db764f4f36c5d46cd9dddd1941ecd87336580212f2f1ba17125e21750ab4d45c346e7709aaa274455d14a66bc99a4d9677c8fba7177884214a35f8e1a046584e575089448721c0a09403fb9c50e2aaa2c718655bf5210766ef11dba1c11561346489a295fe13bbf9b4218a6a5a71edb50cc0c2901d79a3901a46bb33a1847bb516a61fed1e207d3b5b627cbb012cc1d23c5391f60daade781cc9a131040a06e945aaf8192d0fa4dc62587122d0b5d15ffa31511cd65f8717ccc91785b580aed1c638e572dee1f8c9e071c7cc2727a34b5b7283c5d3e79564e12accfcd4cd788f41679de3c42a525fa4094ea48670906887a5bdf3f899d798", 0xfcd, 0x4004000, 0x0, 0x0) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r0, &(0x7f0000000480)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10020}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, 0x0, 0x202, 0x70bd28}, 0x1c}}, 0x1) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0xff4a) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x200327da) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, 0x0, 0x0) ioctl$UI_SET_PROPBIT(r2, 0x4004556e, 0x12) 10:49:44 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f000051cff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000943ffc)=0x7) read(r0, 0x0, 0x0) readv(r0, &(0x7f00000002c0)=[{&(0x7f0000cd8000)=""/1, 0x2e171c03}], 0x1) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)) 10:49:44 executing program 1: syz_open_procfs(0x0, &(0x7f0000000180)='loginuid\x00') preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x4) r0 = syz_open_procfs(0x0, &(0x7f0000000380)='fdinfo\x00\x92\xbb\v>co\xe8\xf2%\xc57=\xf7\xfd\a\x89\x80\xa5\x84\a\xee\x1f\xbb\xd7j.\xe7?C\"\xbe\vJ$\xb1p7wU\xf1i6\x91\x9f!E\xb0_\x80\x14\a?\xca\xb5CD\x8c\xee\xed\x9c\xb2\xb6\xb6\x97\x00`\x14\xb7\xda\xe2\xab^\xb3\xe3\x0e\xce\x11\xa7\x81\xe6\xc4\x1a\x06\xd7\xbff\xcb\xf9\xb1\xf0 \x00\x00\x00\x00\x00\x00\x03\x96\xd2;\xca?M\xe47\x1ce\x83\x8dK}|\xeb\x86$\x9cN\x01d\xb6\x80:\xa0B\xec\xd7\xa8\x8az.\xba~C\xb4L\xbf\x17\xec\xe9l\xa7\r\x85\xeaS\xe4B\xeb\xe9O\xfa\x12\xa5\xe8Buqe!\x86\x18\x16r\xa7\xd6\x1c\xb2n\xa4T0\xf1\x10\x16\xfe\"\xc3=\x0en|\xc6h\x9d\xe5\xc3]\xf1\xaej+\xfd\xb6\x96r\xe8\x81~LN\xc5L\xd0A-\x1a\xf4fm\b\x1c\xf6\x7f\x148l\xc4\b\x9a-\xb8\xfe\x8a\xe0\x03\x9btv\x1e\xef\xb5\xf1\xcfL-f>\xb4_\rl\x7f\x99d\xc2\xd9\xe8\xc9\xfb\xff\x96\xf0)\x831\x1b\x1cW\xc4\xb1\x1c\xae\x8b\x06\xe8=\xd2\xbe\x06$k\xe7\xdd\xa8z\x91q\x02~\xc2`\xe2\xfd\xcf\xed58\x90\xbb\xf4\x84\x88\x8f\xec\xc4U\xc0\xf9i\x94*e\x81v\x86\xb6aD\x82\xacIU\x9eo\aY\x84l8\xd4\x18\xb1\x1c\xed?\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00') fchdir(r0) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) [ 348.452062][T11188] EXT4-fs warning (device sda1): ext4_group_add:1636: No reserved GDT blocks, can't resize [ 348.477492][T11179] ntfs: (device loop5): parse_options(): Unrecognized mount option . 10:49:44 executing program 2: r0 = socket$packet(0x11, 0x40800000000003, 0x300) r1 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x80, 0x1f8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000500)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000140)={0x11, 0x800, r3, 0x1, 0x0, 0x6, @random="286e6a8d6980"}, 0x14) r4 = dup2(r0, r0) sendto$inet6(r4, &(0x7f00000002c0)="020400000300603900382b8a5b5aa242b90516db4d23a3bb09f82632e33715d26206cd6b80a7699507938207d9fb3780d88d5375000001000000301e", 0x3c, 0x0, 0x0, 0x0) [ 348.598239][T11203] syz-executor.0 uses obsolete (PF_INET,SOCK_PACKET) [ 348.643510][T11208] EXT4-fs warning (device sda1): ext4_group_add:1636: No reserved GDT blocks, can't resize 10:49:44 executing program 5: syz_mount_image$ntfs(&(0x7f0000000000)='ntfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 10:49:44 executing program 1: syz_open_procfs(0x0, &(0x7f0000000180)='loginuid\x00') preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x4) r0 = syz_open_procfs(0x0, &(0x7f0000000380)='fdinfo\x00\x92\xbb\v>co\xe8\xf2%\xc57=\xf7\xfd\a\x89\x80\xa5\x84\a\xee\x1f\xbb\xd7j.\xe7?C\"\xbe\vJ$\xb1p7wU\xf1i6\x91\x9f!E\xb0_\x80\x14\a?\xca\xb5CD\x8c\xee\xed\x9c\xb2\xb6\xb6\x97\x00`\x14\xb7\xda\xe2\xab^\xb3\xe3\x0e\xce\x11\xa7\x81\xe6\xc4\x1a\x06\xd7\xbff\xcb\xf9\xb1\xf0 \x00\x00\x00\x00\x00\x00\x03\x96\xd2;\xca?M\xe47\x1ce\x83\x8dK}|\xeb\x86$\x9cN\x01d\xb6\x80:\xa0B\xec\xd7\xa8\x8az.\xba~C\xb4L\xbf\x17\xec\xe9l\xa7\r\x85\xeaS\xe4B\xeb\xe9O\xfa\x12\xa5\xe8Buqe!\x86\x18\x16r\xa7\xd6\x1c\xb2n\xa4T0\xf1\x10\x16\xfe\"\xc3=\x0en|\xc6h\x9d\xe5\xc3]\xf1\xaej+\xfd\xb6\x96r\xe8\x81~LN\xc5L\xd0A-\x1a\xf4fm\b\x1c\xf6\x7f\x148l\xc4\b\x9a-\xb8\xfe\x8a\xe0\x03\x9btv\x1e\xef\xb5\xf1\xcfL-f>\xb4_\rl\x7f\x99d\xc2\xd9\xe8\xc9\xfb\xff\x96\xf0)\x831\x1b\x1cW\xc4\xb1\x1c\xae\x8b\x06\xe8=\xd2\xbe\x06$k\xe7\xdd\xa8z\x91q\x02~\xc2`\xe2\xfd\xcf\xed58\x90\xbb\xf4\x84\x88\x8f\xec\xc4U\xc0\xf9i\x94*e\x81v\x86\xb6aD\x82\xacIU\x9eo\aY\x84l8\xd4\x18\xb1\x1c\xed?\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00') fchdir(r0) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) 10:49:44 executing program 3: ioctl$TIOCLINUX7(0xffffffffffffffff, 0x541c, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) clone(0x10002102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f00000000c0)) 10:49:45 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f000051cff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000943ffc)=0x7) read(r0, &(0x7f00003fefff)=""/1, 0x1) readv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000cd8000)=""/1, 0x2e171c03}], 0x1) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)) 10:49:45 executing program 2: r0 = socket$packet(0x11, 0x40800000000003, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000)=0x80, 0x1f8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000500)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000140)={0x11, 0x800, r3, 0x1, 0x0, 0x6, @random="286e6a8d6980"}, 0x14) r4 = dup2(r0, r0) sendto$inet6(r4, &(0x7f00000002c0)="020400000300603900382b8a5b5aa242b90516db4d23a3bb09f82632e33715d26206cd6b80a7699507938207d9fb3780d88d5375000001000000301e", 0x3c, 0x0, 0x0, 0x0) 10:49:45 executing program 3: ioctl$TIOCLINUX7(0xffffffffffffffff, 0x541c, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) clone(0x10002102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f00000000c0)) 10:49:45 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='loginuid\x00') preadv(r0, 0x0, 0x0, 0x4) r1 = syz_open_procfs(0x0, &(0x7f0000000380)='fdinfo\x00\x92\xbb\v>co\xe8\xf2%\xc57=\xf7\xfd\a\x89\x80\xa5\x84\a\xee\x1f\xbb\xd7j.\xe7?C\"\xbe\vJ$\xb1p7wU\xf1i6\x91\x9f!E\xb0_\x80\x14\a?\xca\xb5CD\x8c\xee\xed\x9c\xb2\xb6\xb6\x97\x00`\x14\xb7\xda\xe2\xab^\xb3\xe3\x0e\xce\x11\xa7\x81\xe6\xc4\x1a\x06\xd7\xbff\xcb\xf9\xb1\xf0 \x00\x00\x00\x00\x00\x00\x03\x96\xd2;\xca?M\xe47\x1ce\x83\x8dK}|\xeb\x86$\x9cN\x01d\xb6\x80:\xa0B\xec\xd7\xa8\x8az.\xba~C\xb4L\xbf\x17\xec\xe9l\xa7\r\x85\xeaS\xe4B\xeb\xe9O\xfa\x12\xa5\xe8Buqe!\x86\x18\x16r\xa7\xd6\x1c\xb2n\xa4T0\xf1\x10\x16\xfe\"\xc3=\x0en|\xc6h\x9d\xe5\xc3]\xf1\xaej+\xfd\xb6\x96r\xe8\x81~LN\xc5L\xd0A-\x1a\xf4fm\b\x1c\xf6\x7f\x148l\xc4\b\x9a-\xb8\xfe\x8a\xe0\x03\x9btv\x1e\xef\xb5\xf1\xcfL-f>\xb4_\rl\x7f\x99d\xc2\xd9\xe8\xc9\xfb\xff\x96\xf0)\x831\x1b\x1cW\xc4\xb1\x1c\xae\x8b\x06\xe8=\xd2\xbe\x06$k\xe7\xdd\xa8z\x91q\x02~\xc2`\xe2\xfd\xcf\xed58\x90\xbb\xf4\x84\x88\x8f\xec\xc4U\xc0\xf9i\x94*e\x81v\x86\xb6aD\x82\xacIU\x9eo\aY\x84l8\xd4\x18\xb1\x1c\xed?\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00') fchdir(r1) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) [ 348.829854][T11224] ntfs: (device loop5): ntfs_fill_super(): Unable to determine device size. [ 348.860219][T11228] EXT4-fs warning (device sda1): ext4_group_add:1636: No reserved GDT blocks, can't resize 10:49:45 executing program 3: ioctl$TIOCLINUX7(0xffffffffffffffff, 0x541c, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f00000000c0)) [ 349.020366][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 349.026228][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 349.070385][T11247] EXT4-fs warning (device sda1): ext4_group_add:1636: No reserved GDT blocks, can't resize 10:49:45 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f000051cff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000943ffc)=0x7) read(r0, &(0x7f00003fefff)=""/1, 0x1) readv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000cd8000)=""/1, 0x2e171c03}], 0x1) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)) 10:49:45 executing program 5: syz_mount_image$ntfs(&(0x7f0000000000)='ntfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 10:49:45 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='loginuid\x00') preadv(r0, 0x0, 0x0, 0x4) r1 = syz_open_procfs(0x0, &(0x7f0000000380)='fdinfo\x00\x92\xbb\v>co\xe8\xf2%\xc57=\xf7\xfd\a\x89\x80\xa5\x84\a\xee\x1f\xbb\xd7j.\xe7?C\"\xbe\vJ$\xb1p7wU\xf1i6\x91\x9f!E\xb0_\x80\x14\a?\xca\xb5CD\x8c\xee\xed\x9c\xb2\xb6\xb6\x97\x00`\x14\xb7\xda\xe2\xab^\xb3\xe3\x0e\xce\x11\xa7\x81\xe6\xc4\x1a\x06\xd7\xbff\xcb\xf9\xb1\xf0 \x00\x00\x00\x00\x00\x00\x03\x96\xd2;\xca?M\xe47\x1ce\x83\x8dK}|\xeb\x86$\x9cN\x01d\xb6\x80:\xa0B\xec\xd7\xa8\x8az.\xba~C\xb4L\xbf\x17\xec\xe9l\xa7\r\x85\xeaS\xe4B\xeb\xe9O\xfa\x12\xa5\xe8Buqe!\x86\x18\x16r\xa7\xd6\x1c\xb2n\xa4T0\xf1\x10\x16\xfe\"\xc3=\x0en|\xc6h\x9d\xe5\xc3]\xf1\xaej+\xfd\xb6\x96r\xe8\x81~LN\xc5L\xd0A-\x1a\xf4fm\b\x1c\xf6\x7f\x148l\xc4\b\x9a-\xb8\xfe\x8a\xe0\x03\x9btv\x1e\xef\xb5\xf1\xcfL-f>\xb4_\rl\x7f\x99d\xc2\xd9\xe8\xc9\xfb\xff\x96\xf0)\x831\x1b\x1cW\xc4\xb1\x1c\xae\x8b\x06\xe8=\xd2\xbe\x06$k\xe7\xdd\xa8z\x91q\x02~\xc2`\xe2\xfd\xcf\xed58\x90\xbb\xf4\x84\x88\x8f\xec\xc4U\xc0\xf9i\x94*e\x81v\x86\xb6aD\x82\xacIU\x9eo\aY\x84l8\xd4\x18\xb1\x1c\xed?\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00') fchdir(r1) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) 10:49:45 executing program 3: ioctl$TIOCLINUX7(0xffffffffffffffff, 0x541c, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f00000000c0)) 10:49:45 executing program 2: r0 = socket$packet(0x11, 0x40800000000003, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000)=0x80, 0x1f8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000500)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000140)={0x11, 0x800, r3, 0x1, 0x0, 0x6, @random="286e6a8d6980"}, 0x14) r4 = dup2(r0, r0) sendto$inet6(r4, &(0x7f00000002c0)="020400000300603900382b8a5b5aa242b90516db4d23a3bb09f82632e33715d26206cd6b80a7699507938207d9fb3780d88d5375000001000000301e", 0x3c, 0x0, 0x0, 0x0) 10:49:45 executing program 0: ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003b9fdc)) socket$inet(0x2, 0xa, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) syz_genetlink_get_family_id$tipc(0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x800c6613, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000680)='memory.events\x00', 0x7a05, 0x1700) sendto$packet(r1, &(0x7f0000000a80)="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", 0xfcd, 0x4004000, 0x0, 0x0) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r0, &(0x7f0000000480)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10020}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, 0x0, 0x202, 0x70bd28}, 0x1c}}, 0x1) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0xff4a) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x200327da) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, 0x0, 0x0) ioctl$UI_SET_PROPBIT(r2, 0x4004556e, 0x12) 10:49:45 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='loginuid\x00') preadv(r0, 0x0, 0x0, 0x4) r1 = syz_open_procfs(0x0, &(0x7f0000000380)='fdinfo\x00\x92\xbb\v>co\xe8\xf2%\xc57=\xf7\xfd\a\x89\x80\xa5\x84\a\xee\x1f\xbb\xd7j.\xe7?C\"\xbe\vJ$\xb1p7wU\xf1i6\x91\x9f!E\xb0_\x80\x14\a?\xca\xb5CD\x8c\xee\xed\x9c\xb2\xb6\xb6\x97\x00`\x14\xb7\xda\xe2\xab^\xb3\xe3\x0e\xce\x11\xa7\x81\xe6\xc4\x1a\x06\xd7\xbff\xcb\xf9\xb1\xf0 \x00\x00\x00\x00\x00\x00\x03\x96\xd2;\xca?M\xe47\x1ce\x83\x8dK}|\xeb\x86$\x9cN\x01d\xb6\x80:\xa0B\xec\xd7\xa8\x8az.\xba~C\xb4L\xbf\x17\xec\xe9l\xa7\r\x85\xeaS\xe4B\xeb\xe9O\xfa\x12\xa5\xe8Buqe!\x86\x18\x16r\xa7\xd6\x1c\xb2n\xa4T0\xf1\x10\x16\xfe\"\xc3=\x0en|\xc6h\x9d\xe5\xc3]\xf1\xaej+\xfd\xb6\x96r\xe8\x81~LN\xc5L\xd0A-\x1a\xf4fm\b\x1c\xf6\x7f\x148l\xc4\b\x9a-\xb8\xfe\x8a\xe0\x03\x9btv\x1e\xef\xb5\xf1\xcfL-f>\xb4_\rl\x7f\x99d\xc2\xd9\xe8\xc9\xfb\xff\x96\xf0)\x831\x1b\x1cW\xc4\xb1\x1c\xae\x8b\x06\xe8=\xd2\xbe\x06$k\xe7\xdd\xa8z\x91q\x02~\xc2`\xe2\xfd\xcf\xed58\x90\xbb\xf4\x84\x88\x8f\xec\xc4U\xc0\xf9i\x94*e\x81v\x86\xb6aD\x82\xacIU\x9eo\aY\x84l8\xd4\x18\xb1\x1c\xed?\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00') fchdir(r1) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) 10:49:45 executing program 3: ioctl$TIOCLINUX7(0xffffffffffffffff, 0x541c, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f00000000c0)) [ 349.561098][T11258] ntfs: (device loop5): ntfs_fill_super(): Unable to determine device size. [ 349.595113][T11265] EXT4-fs warning (device sda1): ext4_group_add:1636: No reserved GDT blocks, can't resize 10:49:45 executing program 5: syz_mount_image$ntfs(&(0x7f0000000000)='ntfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 10:49:46 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f000051cff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000943ffc)=0x7) read(r0, &(0x7f00003fefff)=""/1, 0x1) readv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000cd8000)=""/1, 0x2e171c03}], 0x1) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)) 10:49:46 executing program 2: r0 = socket$packet(0x11, 0x40800000000003, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000)=0x80, 0x1f8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000500)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000140)={0x11, 0x800, r3, 0x1, 0x0, 0x6, @random="286e6a8d6980"}, 0x14) r4 = dup2(r0, r0) sendto$inet6(r4, &(0x7f00000002c0)="020400000300603900382b8a5b5aa242b90516db4d23a3bb09f82632e33715d26206cd6b80a7699507938207d9fb3780d88d5375000001000000301e", 0x3c, 0x0, 0x0, 0x0) 10:49:46 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='loginuid\x00') preadv(r0, &(0x7f0000000000), 0x0, 0x4) r1 = syz_open_procfs(0x0, &(0x7f0000000380)='fdinfo\x00\x92\xbb\v>co\xe8\xf2%\xc57=\xf7\xfd\a\x89\x80\xa5\x84\a\xee\x1f\xbb\xd7j.\xe7?C\"\xbe\vJ$\xb1p7wU\xf1i6\x91\x9f!E\xb0_\x80\x14\a?\xca\xb5CD\x8c\xee\xed\x9c\xb2\xb6\xb6\x97\x00`\x14\xb7\xda\xe2\xab^\xb3\xe3\x0e\xce\x11\xa7\x81\xe6\xc4\x1a\x06\xd7\xbff\xcb\xf9\xb1\xf0 \x00\x00\x00\x00\x00\x00\x03\x96\xd2;\xca?M\xe47\x1ce\x83\x8dK}|\xeb\x86$\x9cN\x01d\xb6\x80:\xa0B\xec\xd7\xa8\x8az.\xba~C\xb4L\xbf\x17\xec\xe9l\xa7\r\x85\xeaS\xe4B\xeb\xe9O\xfa\x12\xa5\xe8Buqe!\x86\x18\x16r\xa7\xd6\x1c\xb2n\xa4T0\xf1\x10\x16\xfe\"\xc3=\x0en|\xc6h\x9d\xe5\xc3]\xf1\xaej+\xfd\xb6\x96r\xe8\x81~LN\xc5L\xd0A-\x1a\xf4fm\b\x1c\xf6\x7f\x148l\xc4\b\x9a-\xb8\xfe\x8a\xe0\x03\x9btv\x1e\xef\xb5\xf1\xcfL-f>\xb4_\rl\x7f\x99d\xc2\xd9\xe8\xc9\xfb\xff\x96\xf0)\x831\x1b\x1cW\xc4\xb1\x1c\xae\x8b\x06\xe8=\xd2\xbe\x06$k\xe7\xdd\xa8z\x91q\x02~\xc2`\xe2\xfd\xcf\xed58\x90\xbb\xf4\x84\x88\x8f\xec\xc4U\xc0\xf9i\x94*e\x81v\x86\xb6aD\x82\xacIU\x9eo\aY\x84l8\xd4\x18\xb1\x1c\xed?\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00') fchdir(r1) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) [ 349.732857][T11279] EXT4-fs warning (device sda1): ext4_group_add:1636: No reserved GDT blocks, can't resize 10:49:46 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='loginuid\x00') preadv(r0, &(0x7f0000000000), 0x0, 0x4) r1 = syz_open_procfs(0x0, &(0x7f0000000380)='fdinfo\x00\x92\xbb\v>co\xe8\xf2%\xc57=\xf7\xfd\a\x89\x80\xa5\x84\a\xee\x1f\xbb\xd7j.\xe7?C\"\xbe\vJ$\xb1p7wU\xf1i6\x91\x9f!E\xb0_\x80\x14\a?\xca\xb5CD\x8c\xee\xed\x9c\xb2\xb6\xb6\x97\x00`\x14\xb7\xda\xe2\xab^\xb3\xe3\x0e\xce\x11\xa7\x81\xe6\xc4\x1a\x06\xd7\xbff\xcb\xf9\xb1\xf0 \x00\x00\x00\x00\x00\x00\x03\x96\xd2;\xca?M\xe47\x1ce\x83\x8dK}|\xeb\x86$\x9cN\x01d\xb6\x80:\xa0B\xec\xd7\xa8\x8az.\xba~C\xb4L\xbf\x17\xec\xe9l\xa7\r\x85\xeaS\xe4B\xeb\xe9O\xfa\x12\xa5\xe8Buqe!\x86\x18\x16r\xa7\xd6\x1c\xb2n\xa4T0\xf1\x10\x16\xfe\"\xc3=\x0en|\xc6h\x9d\xe5\xc3]\xf1\xaej+\xfd\xb6\x96r\xe8\x81~LN\xc5L\xd0A-\x1a\xf4fm\b\x1c\xf6\x7f\x148l\xc4\b\x9a-\xb8\xfe\x8a\xe0\x03\x9btv\x1e\xef\xb5\xf1\xcfL-f>\xb4_\rl\x7f\x99d\xc2\xd9\xe8\xc9\xfb\xff\x96\xf0)\x831\x1b\x1cW\xc4\xb1\x1c\xae\x8b\x06\xe8=\xd2\xbe\x06$k\xe7\xdd\xa8z\x91q\x02~\xc2`\xe2\xfd\xcf\xed58\x90\xbb\xf4\x84\x88\x8f\xec\xc4U\xc0\xf9i\x94*e\x81v\x86\xb6aD\x82\xacIU\x9eo\aY\x84l8\xd4\x18\xb1\x1c\xed?\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00') fchdir(r1) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) [ 349.818893][T11282] ntfs: (device loop5): ntfs_fill_super(): Unable to determine device size. 10:49:46 executing program 3: ioctl$TIOCLINUX7(0xffffffffffffffff, 0x541c, 0x0) clone(0x10002102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f00000000c0)) 10:49:46 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f000051cff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000943ffc)=0x7) read(r0, &(0x7f00003fefff)=""/1, 0x1) readv(r0, 0x0, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)) 10:49:46 executing program 3: ioctl$TIOCLINUX7(0xffffffffffffffff, 0x541c, 0x0) clone(0x10002102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f00000000c0)) 10:49:46 executing program 2: r0 = socket$packet(0x11, 0x40800000000003, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x0, &(0x7f0000000000)=0x80, 0x1f8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000500)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000140)={0x11, 0x800, r3, 0x1, 0x0, 0x6, @random="286e6a8d6980"}, 0x14) r4 = dup2(r0, r0) sendto$inet6(r4, &(0x7f00000002c0)="020400000300603900382b8a5b5aa242b90516db4d23a3bb09f82632e33715d26206cd6b80a7699507938207d9fb3780d88d5375000001000000301e", 0x3c, 0x0, 0x0, 0x0) 10:49:46 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(0xffffffffffffffff) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x8000, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000240)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}) socket$nl_route(0x10, 0x3, 0x0) r2 = open(0x0, 0x141042, 0x0) write$P9_RSTAT(r2, &(0x7f0000000580)=ANY=[@ANYBLOB="4e63d9004d1f5a241a12845b82446400ea34798e4cdf6e6cf75b3f7e0e876d97afb3b2b6a812cc1f63466a671154b915c3c3106c0000650d2b9d75450ff765905f7083718018996b6df8fff0ff775e0110a434d53aca9012ce5fb421602ff9050440036c58b425b09e2a2e6278b36cde1b5cb43ce0c9b59b440663f6d28ea4d0d9b41125d9d93d5536a66a47"], 0x8c) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) setsockopt$IP_VS_SO_SET_DEL(0xffffffffffffffff, 0x0, 0x484, &(0x7f0000000280)={0x6, @multicast1, 0x0, 0x1, 'fo\x00', 0x1d, 0x100, 0x2e}, 0x2c) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) mmap(&(0x7f00008da000/0x1000)=nil, 0x1000, 0x0, 0xb4972, 0xffffffffffffffff, 0x0) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x44000) io_setup(0x4ed4, &(0x7f0000000100)=0x0) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000380)='TIPC\x00') ftruncate(r5, 0xbb1) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f00000003c0)={[], 0x387, 0x5, 0xfffffffffffffffe, 0x0, 0x2}) sendfile(r0, r2, &(0x7f0000d83ff8), 0x800000000024) 10:49:46 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(0xffffffffffffffff) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x8000, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000240)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}) socket$nl_route(0x10, 0x3, 0x0) r2 = open(0x0, 0x141042, 0x0) write$P9_RSTAT(r2, 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) setsockopt$IP_VS_SO_SET_DEL(0xffffffffffffffff, 0x0, 0x484, &(0x7f0000000280)={0x6, @multicast1, 0x0, 0x1, 'fo\x00', 0x1d, 0x100, 0x2e}, 0x2c) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) mmap(&(0x7f00008da000/0x1000)=nil, 0x1000, 0x0, 0xb4972, 0xffffffffffffffff, 0x0) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x44000) io_setup(0x4ed4, &(0x7f0000000100)=0x0) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) syz_genetlink_get_family_id$tipc(0x0) ftruncate(r5, 0xbb1) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f00000003c0)={[], 0x387, 0x5, 0x0, 0x0, 0x2}) sendfile(r0, r2, &(0x7f0000d83ff8), 0x800000000024) 10:49:46 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='loginuid\x00') preadv(r0, &(0x7f0000000000), 0x0, 0x4) r1 = syz_open_procfs(0x0, &(0x7f0000000380)='fdinfo\x00\x92\xbb\v>co\xe8\xf2%\xc57=\xf7\xfd\a\x89\x80\xa5\x84\a\xee\x1f\xbb\xd7j.\xe7?C\"\xbe\vJ$\xb1p7wU\xf1i6\x91\x9f!E\xb0_\x80\x14\a?\xca\xb5CD\x8c\xee\xed\x9c\xb2\xb6\xb6\x97\x00`\x14\xb7\xda\xe2\xab^\xb3\xe3\x0e\xce\x11\xa7\x81\xe6\xc4\x1a\x06\xd7\xbff\xcb\xf9\xb1\xf0 \x00\x00\x00\x00\x00\x00\x03\x96\xd2;\xca?M\xe47\x1ce\x83\x8dK}|\xeb\x86$\x9cN\x01d\xb6\x80:\xa0B\xec\xd7\xa8\x8az.\xba~C\xb4L\xbf\x17\xec\xe9l\xa7\r\x85\xeaS\xe4B\xeb\xe9O\xfa\x12\xa5\xe8Buqe!\x86\x18\x16r\xa7\xd6\x1c\xb2n\xa4T0\xf1\x10\x16\xfe\"\xc3=\x0en|\xc6h\x9d\xe5\xc3]\xf1\xaej+\xfd\xb6\x96r\xe8\x81~LN\xc5L\xd0A-\x1a\xf4fm\b\x1c\xf6\x7f\x148l\xc4\b\x9a-\xb8\xfe\x8a\xe0\x03\x9btv\x1e\xef\xb5\xf1\xcfL-f>\xb4_\rl\x7f\x99d\xc2\xd9\xe8\xc9\xfb\xff\x96\xf0)\x831\x1b\x1cW\xc4\xb1\x1c\xae\x8b\x06\xe8=\xd2\xbe\x06$k\xe7\xdd\xa8z\x91q\x02~\xc2`\xe2\xfd\xcf\xed58\x90\xbb\xf4\x84\x88\x8f\xec\xc4U\xc0\xf9i\x94*e\x81v\x86\xb6aD\x82\xacIU\x9eo\aY\x84l8\xd4\x18\xb1\x1c\xed?\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00') fchdir(r1) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) 10:49:46 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f000051cff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000943ffc)=0x7) read(r0, &(0x7f00003fefff)=""/1, 0x1) readv(r0, 0x0, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)) 10:49:46 executing program 3: ioctl$TIOCLINUX7(0xffffffffffffffff, 0x541c, 0x0) clone(0x10002102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f00000000c0)) 10:49:46 executing program 2: r0 = socket$packet(0x11, 0x40800000000003, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x0, &(0x7f0000000000)=0x80, 0x1f8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000500)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000140)={0x11, 0x800, r3, 0x1, 0x0, 0x6, @random="286e6a8d6980"}, 0x14) r4 = dup2(r0, r0) sendto$inet6(r4, &(0x7f00000002c0)="020400000300603900382b8a5b5aa242b90516db4d23a3bb09f82632e33715d26206cd6b80a7699507938207d9fb3780d88d5375000001000000301e", 0x3c, 0x0, 0x0, 0x0) 10:49:46 executing program 3: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) clone(0x10002102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f00000000c0)) 10:49:46 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='loginuid\x00') preadv(r0, &(0x7f0000000000)=[{0x0}], 0x1, 0x4) r1 = syz_open_procfs(0x0, &(0x7f0000000380)='fdinfo\x00\x92\xbb\v>co\xe8\xf2%\xc57=\xf7\xfd\a\x89\x80\xa5\x84\a\xee\x1f\xbb\xd7j.\xe7?C\"\xbe\vJ$\xb1p7wU\xf1i6\x91\x9f!E\xb0_\x80\x14\a?\xca\xb5CD\x8c\xee\xed\x9c\xb2\xb6\xb6\x97\x00`\x14\xb7\xda\xe2\xab^\xb3\xe3\x0e\xce\x11\xa7\x81\xe6\xc4\x1a\x06\xd7\xbff\xcb\xf9\xb1\xf0 \x00\x00\x00\x00\x00\x00\x03\x96\xd2;\xca?M\xe47\x1ce\x83\x8dK}|\xeb\x86$\x9cN\x01d\xb6\x80:\xa0B\xec\xd7\xa8\x8az.\xba~C\xb4L\xbf\x17\xec\xe9l\xa7\r\x85\xeaS\xe4B\xeb\xe9O\xfa\x12\xa5\xe8Buqe!\x86\x18\x16r\xa7\xd6\x1c\xb2n\xa4T0\xf1\x10\x16\xfe\"\xc3=\x0en|\xc6h\x9d\xe5\xc3]\xf1\xaej+\xfd\xb6\x96r\xe8\x81~LN\xc5L\xd0A-\x1a\xf4fm\b\x1c\xf6\x7f\x148l\xc4\b\x9a-\xb8\xfe\x8a\xe0\x03\x9btv\x1e\xef\xb5\xf1\xcfL-f>\xb4_\rl\x7f\x99d\xc2\xd9\xe8\xc9\xfb\xff\x96\xf0)\x831\x1b\x1cW\xc4\xb1\x1c\xae\x8b\x06\xe8=\xd2\xbe\x06$k\xe7\xdd\xa8z\x91q\x02~\xc2`\xe2\xfd\xcf\xed58\x90\xbb\xf4\x84\x88\x8f\xec\xc4U\xc0\xf9i\x94*e\x81v\x86\xb6aD\x82\xacIU\x9eo\aY\x84l8\xd4\x18\xb1\x1c\xed?\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00') fchdir(r1) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) 10:49:46 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f000051cff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000943ffc)=0x7) read(r0, &(0x7f00003fefff)=""/1, 0x1) readv(r0, 0x0, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)) 10:49:46 executing program 2: r0 = socket$packet(0x11, 0x40800000000003, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x0, &(0x7f0000000000)=0x80, 0x1f8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000500)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000140)={0x11, 0x800, r3, 0x1, 0x0, 0x6, @random="286e6a8d6980"}, 0x14) r4 = dup2(r0, r0) sendto$inet6(r4, &(0x7f00000002c0)="020400000300603900382b8a5b5aa242b90516db4d23a3bb09f82632e33715d26206cd6b80a7699507938207d9fb3780d88d5375000001000000301e", 0x3c, 0x0, 0x0, 0x0) [ 350.554783][T11341] EXT4-fs warning (device sda1): ext4_group_add:1636: No reserved GDT blocks, can't resize 10:49:46 executing program 3: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) clone(0x10002102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f00000000c0)) 10:49:46 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='loginuid\x00') preadv(r0, &(0x7f0000000000)=[{0x0}], 0x1, 0x4) r1 = syz_open_procfs(0x0, &(0x7f0000000380)='fdinfo\x00\x92\xbb\v>co\xe8\xf2%\xc57=\xf7\xfd\a\x89\x80\xa5\x84\a\xee\x1f\xbb\xd7j.\xe7?C\"\xbe\vJ$\xb1p7wU\xf1i6\x91\x9f!E\xb0_\x80\x14\a?\xca\xb5CD\x8c\xee\xed\x9c\xb2\xb6\xb6\x97\x00`\x14\xb7\xda\xe2\xab^\xb3\xe3\x0e\xce\x11\xa7\x81\xe6\xc4\x1a\x06\xd7\xbff\xcb\xf9\xb1\xf0 \x00\x00\x00\x00\x00\x00\x03\x96\xd2;\xca?M\xe47\x1ce\x83\x8dK}|\xeb\x86$\x9cN\x01d\xb6\x80:\xa0B\xec\xd7\xa8\x8az.\xba~C\xb4L\xbf\x17\xec\xe9l\xa7\r\x85\xeaS\xe4B\xeb\xe9O\xfa\x12\xa5\xe8Buqe!\x86\x18\x16r\xa7\xd6\x1c\xb2n\xa4T0\xf1\x10\x16\xfe\"\xc3=\x0en|\xc6h\x9d\xe5\xc3]\xf1\xaej+\xfd\xb6\x96r\xe8\x81~LN\xc5L\xd0A-\x1a\xf4fm\b\x1c\xf6\x7f\x148l\xc4\b\x9a-\xb8\xfe\x8a\xe0\x03\x9btv\x1e\xef\xb5\xf1\xcfL-f>\xb4_\rl\x7f\x99d\xc2\xd9\xe8\xc9\xfb\xff\x96\xf0)\x831\x1b\x1cW\xc4\xb1\x1c\xae\x8b\x06\xe8=\xd2\xbe\x06$k\xe7\xdd\xa8z\x91q\x02~\xc2`\xe2\xfd\xcf\xed58\x90\xbb\xf4\x84\x88\x8f\xec\xc4U\xc0\xf9i\x94*e\x81v\x86\xb6aD\x82\xacIU\x9eo\aY\x84l8\xd4\x18\xb1\x1c\xed?\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00') fchdir(r1) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) [ 350.724232][T11358] EXT4-fs warning (device sda1): ext4_group_add:1636: No reserved GDT blocks, can't resize 10:49:47 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(0xffffffffffffffff) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x8000, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000240)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}) socket$nl_route(0x10, 0x3, 0x0) r2 = open(0x0, 0x141042, 0x0) write$P9_RSTAT(r2, &(0x7f0000000580)=ANY=[@ANYBLOB="4e63d9004d1f5a241a12845b82446400ea34798e4cdf6e6cf75b3f7e0e876d97afb3b2b6a812cc1f63466a671154b915c3c3106c0000650d2b9d75450ff765905f7083718018996b6df8fff0ff775e0110a434d53aca9012ce5fb421602ff9050440036c58b425b09e2a2e6278b36cde1b5cb43ce0c9b59b440663f6d28ea4d0d9b41125d9d93d5536a66a47"], 0x8c) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) setsockopt$IP_VS_SO_SET_DEL(0xffffffffffffffff, 0x0, 0x484, &(0x7f0000000280)={0x6, @multicast1, 0x0, 0x1, 'fo\x00', 0x1d, 0x100, 0x2e}, 0x2c) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) mmap(&(0x7f00008da000/0x1000)=nil, 0x1000, 0x0, 0xb4972, 0xffffffffffffffff, 0x0) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x44000) io_setup(0x4ed4, &(0x7f0000000100)=0x0) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000380)='TIPC\x00') ftruncate(r5, 0xbb1) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f00000003c0)={[], 0x387, 0x5, 0xfffffffffffffffe, 0x0, 0x2}) sendfile(r0, r2, &(0x7f0000d83ff8), 0x800000000024) 10:49:47 executing program 3: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) clone(0x10002102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f00000000c0)) 10:49:47 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f000051cff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000943ffc)=0x7) read(r0, &(0x7f00003fefff)=""/1, 0x1) readv(r0, &(0x7f00000002c0), 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)) 10:49:47 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='loginuid\x00') preadv(r0, &(0x7f0000000000)=[{0x0}], 0x1, 0x4) r1 = syz_open_procfs(0x0, &(0x7f0000000380)='fdinfo\x00\x92\xbb\v>co\xe8\xf2%\xc57=\xf7\xfd\a\x89\x80\xa5\x84\a\xee\x1f\xbb\xd7j.\xe7?C\"\xbe\vJ$\xb1p7wU\xf1i6\x91\x9f!E\xb0_\x80\x14\a?\xca\xb5CD\x8c\xee\xed\x9c\xb2\xb6\xb6\x97\x00`\x14\xb7\xda\xe2\xab^\xb3\xe3\x0e\xce\x11\xa7\x81\xe6\xc4\x1a\x06\xd7\xbff\xcb\xf9\xb1\xf0 \x00\x00\x00\x00\x00\x00\x03\x96\xd2;\xca?M\xe47\x1ce\x83\x8dK}|\xeb\x86$\x9cN\x01d\xb6\x80:\xa0B\xec\xd7\xa8\x8az.\xba~C\xb4L\xbf\x17\xec\xe9l\xa7\r\x85\xeaS\xe4B\xeb\xe9O\xfa\x12\xa5\xe8Buqe!\x86\x18\x16r\xa7\xd6\x1c\xb2n\xa4T0\xf1\x10\x16\xfe\"\xc3=\x0en|\xc6h\x9d\xe5\xc3]\xf1\xaej+\xfd\xb6\x96r\xe8\x81~LN\xc5L\xd0A-\x1a\xf4fm\b\x1c\xf6\x7f\x148l\xc4\b\x9a-\xb8\xfe\x8a\xe0\x03\x9btv\x1e\xef\xb5\xf1\xcfL-f>\xb4_\rl\x7f\x99d\xc2\xd9\xe8\xc9\xfb\xff\x96\xf0)\x831\x1b\x1cW\xc4\xb1\x1c\xae\x8b\x06\xe8=\xd2\xbe\x06$k\xe7\xdd\xa8z\x91q\x02~\xc2`\xe2\xfd\xcf\xed58\x90\xbb\xf4\x84\x88\x8f\xec\xc4U\xc0\xf9i\x94*e\x81v\x86\xb6aD\x82\xacIU\x9eo\aY\x84l8\xd4\x18\xb1\x1c\xed?\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00') fchdir(r1) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) 10:49:47 executing program 2: r0 = socket$packet(0x11, 0x40800000000003, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000500)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000140)={0x11, 0x800, r3, 0x1, 0x0, 0x6, @random="286e6a8d6980"}, 0x14) r4 = dup2(r0, r0) sendto$inet6(r4, &(0x7f00000002c0)="020400000300603900382b8a5b5aa242b90516db4d23a3bb09f82632e33715d26206cd6b80a7699507938207d9fb3780d88d5375000001000000301e", 0x3c, 0x0, 0x0, 0x0) 10:49:47 executing program 5: socket$inet6(0xa, 0x400000000001, 0x0) close(0xffffffffffffffff) openat$tun(0xffffffffffffff9c, 0x0, 0x8000, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) open(0x0, 0x0, 0x0) write$P9_RSTAT(0xffffffffffffffff, 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) setsockopt$IP_VS_SO_SET_DEL(0xffffffffffffffff, 0x0, 0x484, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) mmap(&(0x7f00008da000/0x1000)=nil, 0x1000, 0x0, 0xb4972, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x4ed4, &(0x7f0000000100)=0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000380)='TIPC\x00') ftruncate(r2, 0xbb1) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 351.073298][T11375] EXT4-fs warning (device sda1): ext4_group_add:1636: No reserved GDT blocks, can't resize 10:49:47 executing program 3: ioctl$TIOCLINUX7(0xffffffffffffffff, 0x541c, 0x0) r0 = creat(0x0, 0x0) clone(0x10002102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f00000000c0)) 10:49:47 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='loginuid\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000380)='fdinfo\x00\x92\xbb\v>co\xe8\xf2%\xc57=\xf7\xfd\a\x89\x80\xa5\x84\a\xee\x1f\xbb\xd7j.\xe7?C\"\xbe\vJ$\xb1p7wU\xf1i6\x91\x9f!E\xb0_\x80\x14\a?\xca\xb5CD\x8c\xee\xed\x9c\xb2\xb6\xb6\x97\x00`\x14\xb7\xda\xe2\xab^\xb3\xe3\x0e\xce\x11\xa7\x81\xe6\xc4\x1a\x06\xd7\xbff\xcb\xf9\xb1\xf0 \x00\x00\x00\x00\x00\x00\x03\x96\xd2;\xca?M\xe47\x1ce\x83\x8dK}|\xeb\x86$\x9cN\x01d\xb6\x80:\xa0B\xec\xd7\xa8\x8az.\xba~C\xb4L\xbf\x17\xec\xe9l\xa7\r\x85\xeaS\xe4B\xeb\xe9O\xfa\x12\xa5\xe8Buqe!\x86\x18\x16r\xa7\xd6\x1c\xb2n\xa4T0\xf1\x10\x16\xfe\"\xc3=\x0en|\xc6h\x9d\xe5\xc3]\xf1\xaej+\xfd\xb6\x96r\xe8\x81~LN\xc5L\xd0A-\x1a\xf4fm\b\x1c\xf6\x7f\x148l\xc4\b\x9a-\xb8\xfe\x8a\xe0\x03\x9btv\x1e\xef\xb5\xf1\xcfL-f>\xb4_\rl\x7f\x99d\xc2\xd9\xe8\xc9\xfb\xff\x96\xf0)\x831\x1b\x1cW\xc4\xb1\x1c\xae\x8b\x06\xe8=\xd2\xbe\x06$k\xe7\xdd\xa8z\x91q\x02~\xc2`\xe2\xfd\xcf\xed58\x90\xbb\xf4\x84\x88\x8f\xec\xc4U\xc0\xf9i\x94*e\x81v\x86\xb6aD\x82\xacIU\x9eo\aY\x84l8\xd4\x18\xb1\x1c\xed?\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00') fchdir(r1) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) 10:49:47 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f000051cff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000943ffc)=0x7) read(r0, &(0x7f00003fefff)=""/1, 0x1) readv(r0, &(0x7f00000002c0), 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)) 10:49:47 executing program 3: ioctl$TIOCLINUX7(0xffffffffffffffff, 0x541c, 0x0) r0 = creat(0x0, 0x0) clone(0x10002102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f00000000c0)) 10:49:47 executing program 2: r0 = socket$packet(0x11, 0x40800000000003, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000500)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000140)={0x11, 0x800, r3, 0x1, 0x0, 0x6, @random="286e6a8d6980"}, 0x14) r4 = dup2(r0, r0) sendto$inet6(r4, &(0x7f00000002c0)="020400000300603900382b8a5b5aa242b90516db4d23a3bb09f82632e33715d26206cd6b80a7699507938207d9fb3780d88d5375000001000000301e", 0x3c, 0x0, 0x0, 0x0) 10:49:47 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='loginuid\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000380)='fdinfo\x00\x92\xbb\v>co\xe8\xf2%\xc57=\xf7\xfd\a\x89\x80\xa5\x84\a\xee\x1f\xbb\xd7j.\xe7?C\"\xbe\vJ$\xb1p7wU\xf1i6\x91\x9f!E\xb0_\x80\x14\a?\xca\xb5CD\x8c\xee\xed\x9c\xb2\xb6\xb6\x97\x00`\x14\xb7\xda\xe2\xab^\xb3\xe3\x0e\xce\x11\xa7\x81\xe6\xc4\x1a\x06\xd7\xbff\xcb\xf9\xb1\xf0 \x00\x00\x00\x00\x00\x00\x03\x96\xd2;\xca?M\xe47\x1ce\x83\x8dK}|\xeb\x86$\x9cN\x01d\xb6\x80:\xa0B\xec\xd7\xa8\x8az.\xba~C\xb4L\xbf\x17\xec\xe9l\xa7\r\x85\xeaS\xe4B\xeb\xe9O\xfa\x12\xa5\xe8Buqe!\x86\x18\x16r\xa7\xd6\x1c\xb2n\xa4T0\xf1\x10\x16\xfe\"\xc3=\x0en|\xc6h\x9d\xe5\xc3]\xf1\xaej+\xfd\xb6\x96r\xe8\x81~LN\xc5L\xd0A-\x1a\xf4fm\b\x1c\xf6\x7f\x148l\xc4\b\x9a-\xb8\xfe\x8a\xe0\x03\x9btv\x1e\xef\xb5\xf1\xcfL-f>\xb4_\rl\x7f\x99d\xc2\xd9\xe8\xc9\xfb\xff\x96\xf0)\x831\x1b\x1cW\xc4\xb1\x1c\xae\x8b\x06\xe8=\xd2\xbe\x06$k\xe7\xdd\xa8z\x91q\x02~\xc2`\xe2\xfd\xcf\xed58\x90\xbb\xf4\x84\x88\x8f\xec\xc4U\xc0\xf9i\x94*e\x81v\x86\xb6aD\x82\xacIU\x9eo\aY\x84l8\xd4\x18\xb1\x1c\xed?\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00') fchdir(r1) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) 10:49:47 executing program 0: socket$inet6(0xa, 0x400000000001, 0x0) close(0xffffffffffffffff) openat$tun(0xffffffffffffff9c, 0x0, 0x8000, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) open(0x0, 0x0, 0x0) write$P9_RSTAT(0xffffffffffffffff, 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) setsockopt$IP_VS_SO_SET_DEL(0xffffffffffffffff, 0x0, 0x484, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) mmap(&(0x7f00008da000/0x1000)=nil, 0x1000, 0x0, 0xb4972, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x4ed4, &(0x7f0000000100)=0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000380)='TIPC\x00') ftruncate(r2, 0xbb1) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 10:49:47 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='loginuid\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000380)='fdinfo\x00\x92\xbb\v>co\xe8\xf2%\xc57=\xf7\xfd\a\x89\x80\xa5\x84\a\xee\x1f\xbb\xd7j.\xe7?C\"\xbe\vJ$\xb1p7wU\xf1i6\x91\x9f!E\xb0_\x80\x14\a?\xca\xb5CD\x8c\xee\xed\x9c\xb2\xb6\xb6\x97\x00`\x14\xb7\xda\xe2\xab^\xb3\xe3\x0e\xce\x11\xa7\x81\xe6\xc4\x1a\x06\xd7\xbff\xcb\xf9\xb1\xf0 \x00\x00\x00\x00\x00\x00\x03\x96\xd2;\xca?M\xe47\x1ce\x83\x8dK}|\xeb\x86$\x9cN\x01d\xb6\x80:\xa0B\xec\xd7\xa8\x8az.\xba~C\xb4L\xbf\x17\xec\xe9l\xa7\r\x85\xeaS\xe4B\xeb\xe9O\xfa\x12\xa5\xe8Buqe!\x86\x18\x16r\xa7\xd6\x1c\xb2n\xa4T0\xf1\x10\x16\xfe\"\xc3=\x0en|\xc6h\x9d\xe5\xc3]\xf1\xaej+\xfd\xb6\x96r\xe8\x81~LN\xc5L\xd0A-\x1a\xf4fm\b\x1c\xf6\x7f\x148l\xc4\b\x9a-\xb8\xfe\x8a\xe0\x03\x9btv\x1e\xef\xb5\xf1\xcfL-f>\xb4_\rl\x7f\x99d\xc2\xd9\xe8\xc9\xfb\xff\x96\xf0)\x831\x1b\x1cW\xc4\xb1\x1c\xae\x8b\x06\xe8=\xd2\xbe\x06$k\xe7\xdd\xa8z\x91q\x02~\xc2`\xe2\xfd\xcf\xed58\x90\xbb\xf4\x84\x88\x8f\xec\xc4U\xc0\xf9i\x94*e\x81v\x86\xb6aD\x82\xacIU\x9eo\aY\x84l8\xd4\x18\xb1\x1c\xed?\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00') fchdir(r1) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) 10:49:47 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f000051cff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000943ffc)=0x7) read(r0, &(0x7f00003fefff)=""/1, 0x1) readv(r0, &(0x7f00000002c0), 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)) 10:49:47 executing program 2: r0 = socket$packet(0x11, 0x40800000000003, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000500)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000140)={0x11, 0x800, r3, 0x1, 0x0, 0x6, @random="286e6a8d6980"}, 0x14) r4 = dup2(r0, r0) sendto$inet6(r4, &(0x7f00000002c0)="020400000300603900382b8a5b5aa242b90516db4d23a3bb09f82632e33715d26206cd6b80a7699507938207d9fb3780d88d5375000001000000301e", 0x3c, 0x0, 0x0, 0x0) 10:49:47 executing program 5: socket$inet6(0xa, 0x400000000001, 0x0) close(0xffffffffffffffff) openat$tun(0xffffffffffffff9c, 0x0, 0x8000, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) open(0x0, 0x0, 0x0) write$P9_RSTAT(0xffffffffffffffff, 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) setsockopt$IP_VS_SO_SET_DEL(0xffffffffffffffff, 0x0, 0x484, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) mmap(&(0x7f00008da000/0x1000)=nil, 0x1000, 0x0, 0xb4972, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x4ed4, &(0x7f0000000100)=0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000380)='TIPC\x00') ftruncate(r2, 0xbb1) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 10:49:47 executing program 3: ioctl$TIOCLINUX7(0xffffffffffffffff, 0x541c, 0x0) r0 = creat(0x0, 0x0) clone(0x10002102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f00000000c0)) 10:49:47 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='loginuid\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x4) r1 = syz_open_procfs(0x0, 0x0) fchdir(r1) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) 10:49:48 executing program 3: ioctl$TIOCLINUX7(0xffffffffffffffff, 0x541c, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f00000000c0)) 10:49:48 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='loginuid\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x4) r1 = syz_open_procfs(0x0, 0x0) fchdir(r1) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) 10:49:48 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f000051cff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000943ffc)=0x7) read(r0, &(0x7f00003fefff)=""/1, 0x1) readv(r0, &(0x7f00000002c0)=[{0x0}], 0x1) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)) 10:49:48 executing program 2: r0 = socket$packet(0x11, 0x40800000000003, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000), 0x1f8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000500)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000140)={0x11, 0x800, r3, 0x1, 0x0, 0x6, @random="286e6a8d6980"}, 0x14) r4 = dup2(r0, r0) sendto$inet6(r4, &(0x7f00000002c0)="020400000300603900382b8a5b5aa242b90516db4d23a3bb09f82632e33715d26206cd6b80a7699507938207d9fb3780d88d5375000001000000301e", 0x3c, 0x0, 0x0, 0x0) 10:49:48 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='loginuid\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x4) r1 = syz_open_procfs(0x0, 0x0) fchdir(r1) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) [ 351.994669][T11436] EXT4-fs warning (device sda1): ext4_group_add:1636: No reserved GDT blocks, can't resize 10:49:48 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000001240)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote, 0x0, 0xff}, 0x0, @in6}}, 0xe8) r1 = socket$key(0xf, 0x3, 0x2) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000000)=ANY=[@ANYBLOB="020d0000140000000000000000000000080012000000030020000000000000000600000000000000000000000000000000000000000000000000000000000000ff02000000000000000000000000000105000500000000000a0000000000000000000000000000000000ffffac141400000000000000000005000600000000000a00000000000000fe8000000000000000000000000000ff0000000000000000"], 0xa0}}, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0xfa) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="0212000002000000e7ffffffff036a00"], 0x10}}, 0x0) dup2(r0, r1) 10:49:48 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f000051cff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000943ffc)=0x7) read(r0, &(0x7f00003fefff)=""/1, 0x1) readv(r0, &(0x7f00000002c0)=[{0x0}], 0x1) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)) 10:49:48 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='loginuid\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x4) syz_open_procfs(0x0, &(0x7f0000000380)='fdinfo\x00\x92\xbb\v>co\xe8\xf2%\xc57=\xf7\xfd\a\x89\x80\xa5\x84\a\xee\x1f\xbb\xd7j.\xe7?C\"\xbe\vJ$\xb1p7wU\xf1i6\x91\x9f!E\xb0_\x80\x14\a?\xca\xb5CD\x8c\xee\xed\x9c\xb2\xb6\xb6\x97\x00`\x14\xb7\xda\xe2\xab^\xb3\xe3\x0e\xce\x11\xa7\x81\xe6\xc4\x1a\x06\xd7\xbff\xcb\xf9\xb1\xf0 \x00\x00\x00\x00\x00\x00\x03\x96\xd2;\xca?M\xe47\x1ce\x83\x8dK}|\xeb\x86$\x9cN\x01d\xb6\x80:\xa0B\xec\xd7\xa8\x8az.\xba~C\xb4L\xbf\x17\xec\xe9l\xa7\r\x85\xeaS\xe4B\xeb\xe9O\xfa\x12\xa5\xe8Buqe!\x86\x18\x16r\xa7\xd6\x1c\xb2n\xa4T0\xf1\x10\x16\xfe\"\xc3=\x0en|\xc6h\x9d\xe5\xc3]\xf1\xaej+\xfd\xb6\x96r\xe8\x81~LN\xc5L\xd0A-\x1a\xf4fm\b\x1c\xf6\x7f\x148l\xc4\b\x9a-\xb8\xfe\x8a\xe0\x03\x9btv\x1e\xef\xb5\xf1\xcfL-f>\xb4_\rl\x7f\x99d\xc2\xd9\xe8\xc9\xfb\xff\x96\xf0)\x831\x1b\x1cW\xc4\xb1\x1c\xae\x8b\x06\xe8=\xd2\xbe\x06$k\xe7\xdd\xa8z\x91q\x02~\xc2`\xe2\xfd\xcf\xed58\x90\xbb\xf4\x84\x88\x8f\xec\xc4U\xc0\xf9i\x94*e\x81v\x86\xb6aD\x82\xacIU\x9eo\aY\x84l8\xd4\x18\xb1\x1c\xed?\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00') fchdir(0xffffffffffffffff) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) 10:49:48 executing program 3: ioctl$TIOCLINUX7(0xffffffffffffffff, 0x541c, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f00000000c0)) 10:49:48 executing program 2: r0 = socket$packet(0x11, 0x40800000000003, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000), 0x1f8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000500)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000140)={0x11, 0x800, r3, 0x1, 0x0, 0x6, @random="286e6a8d6980"}, 0x14) r4 = dup2(r0, r0) sendto$inet6(r4, &(0x7f00000002c0)="020400000300603900382b8a5b5aa242b90516db4d23a3bb09f82632e33715d26206cd6b80a7699507938207d9fb3780d88d5375000001000000301e", 0x3c, 0x0, 0x0, 0x0) 10:49:48 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(0xffffffffffffffff) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x8000, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000240)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}) socket$nl_route(0x10, 0x3, 0x0) r2 = open(0x0, 0x141042, 0x0) write$P9_RSTAT(r2, &(0x7f0000000580)=ANY=[@ANYBLOB="4e63d9004d1f5a241a12845b82446400ea34798e4cdf6e6cf75b3f7e0e876d97afb3b2b6a812cc1f63466a671154b915c3c3106c0000650d2b9d75450ff765905f7083718018996b6df8fff0ff775e0110a434d53aca9012ce5fb421602ff9050440036c58b425b09e2a2e6278b36cde1b5cb43ce0c9b59b440663f6d28ea4d0d9b41125d9d93d5536a66a47"], 0x8c) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) setsockopt$IP_VS_SO_SET_DEL(0xffffffffffffffff, 0x0, 0x484, &(0x7f0000000280)={0x6, @multicast1, 0x0, 0x1, 'fo\x00', 0x1d, 0x100, 0x2e}, 0x2c) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) mmap(&(0x7f00008da000/0x1000)=nil, 0x1000, 0x0, 0xb4972, 0xffffffffffffffff, 0x0) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x44000) io_setup(0x4ed4, &(0x7f0000000100)=0x0) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000380)='TIPC\x00') ftruncate(r5, 0xbb1) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f00000003c0)={[], 0x387, 0x5, 0xfffffffffffffffe, 0x0, 0x2}) sendfile(r0, r2, &(0x7f0000d83ff8), 0x800000000024) 10:49:48 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='loginuid\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x4) syz_open_procfs(0x0, &(0x7f0000000380)='fdinfo\x00\x92\xbb\v>co\xe8\xf2%\xc57=\xf7\xfd\a\x89\x80\xa5\x84\a\xee\x1f\xbb\xd7j.\xe7?C\"\xbe\vJ$\xb1p7wU\xf1i6\x91\x9f!E\xb0_\x80\x14\a?\xca\xb5CD\x8c\xee\xed\x9c\xb2\xb6\xb6\x97\x00`\x14\xb7\xda\xe2\xab^\xb3\xe3\x0e\xce\x11\xa7\x81\xe6\xc4\x1a\x06\xd7\xbff\xcb\xf9\xb1\xf0 \x00\x00\x00\x00\x00\x00\x03\x96\xd2;\xca?M\xe47\x1ce\x83\x8dK}|\xeb\x86$\x9cN\x01d\xb6\x80:\xa0B\xec\xd7\xa8\x8az.\xba~C\xb4L\xbf\x17\xec\xe9l\xa7\r\x85\xeaS\xe4B\xeb\xe9O\xfa\x12\xa5\xe8Buqe!\x86\x18\x16r\xa7\xd6\x1c\xb2n\xa4T0\xf1\x10\x16\xfe\"\xc3=\x0en|\xc6h\x9d\xe5\xc3]\xf1\xaej+\xfd\xb6\x96r\xe8\x81~LN\xc5L\xd0A-\x1a\xf4fm\b\x1c\xf6\x7f\x148l\xc4\b\x9a-\xb8\xfe\x8a\xe0\x03\x9btv\x1e\xef\xb5\xf1\xcfL-f>\xb4_\rl\x7f\x99d\xc2\xd9\xe8\xc9\xfb\xff\x96\xf0)\x831\x1b\x1cW\xc4\xb1\x1c\xae\x8b\x06\xe8=\xd2\xbe\x06$k\xe7\xdd\xa8z\x91q\x02~\xc2`\xe2\xfd\xcf\xed58\x90\xbb\xf4\x84\x88\x8f\xec\xc4U\xc0\xf9i\x94*e\x81v\x86\xb6aD\x82\xacIU\x9eo\aY\x84l8\xd4\x18\xb1\x1c\xed?\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00') fchdir(0xffffffffffffffff) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) 10:49:48 executing program 3: ioctl$TIOCLINUX7(0xffffffffffffffff, 0x541c, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f00000000c0)) 10:49:48 executing program 2: r0 = socket$packet(0x11, 0x40800000000003, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000), 0x1f8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000500)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000140)={0x11, 0x800, r3, 0x1, 0x0, 0x6, @random="286e6a8d6980"}, 0x14) r4 = dup2(r0, r0) sendto$inet6(r4, &(0x7f00000002c0)="020400000300603900382b8a5b5aa242b90516db4d23a3bb09f82632e33715d26206cd6b80a7699507938207d9fb3780d88d5375000001000000301e", 0x3c, 0x0, 0x0, 0x0) 10:49:48 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f000051cff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000943ffc)=0x7) read(r0, &(0x7f00003fefff)=""/1, 0x1) readv(r0, &(0x7f00000002c0)=[{0x0}], 0x1) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)) 10:49:48 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(0xffffffffffffffff) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x8000, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000240)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}) socket$nl_route(0x10, 0x3, 0x0) r2 = open(0x0, 0x141042, 0x0) write$P9_RSTAT(r2, &(0x7f0000000580)=ANY=[@ANYBLOB="4e63d9004d1f5a241a12845b82446400ea34798e4cdf6e6cf75b3f7e0e876d97afb3b2b6a812cc1f63466a671154b915c3c3106c0000650d2b9d75450ff765905f7083718018996b6df8fff0ff775e0110a434d53aca9012ce5fb421602ff9050440036c58b425b09e2a2e6278b36cde1b5cb43ce0c9b59b440663f6d28ea4d0d9b41125d9d93d5536a66a47c7dd8482744e3719b742da4aa2e5b69ce0851da770e8a8a3f4f1403ae213c0432fbffc9ebe12952e16698069882fdcc59aa4b4caac08faa81d8a4c53e376a1df1c795c516971"], 0xd2) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) setsockopt$IP_VS_SO_SET_DEL(0xffffffffffffffff, 0x0, 0x484, &(0x7f0000000280)={0x6, @multicast1, 0x0, 0x1, 'fo\x00', 0x1d, 0x100, 0x2e}, 0x2c) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x44000) io_setup(0x4ed4, &(0x7f0000000100)=0x0) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000380)='TIPC\x00') ftruncate(r5, 0xbb1) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f00000003c0)={[], 0x387, 0x5, 0xfffffffffffffffe, 0x0, 0x2}) sendfile(r0, r2, &(0x7f0000d83ff8), 0x800000000024) 10:49:48 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='loginuid\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x4) syz_open_procfs(0x0, &(0x7f0000000380)='fdinfo\x00\x92\xbb\v>co\xe8\xf2%\xc57=\xf7\xfd\a\x89\x80\xa5\x84\a\xee\x1f\xbb\xd7j.\xe7?C\"\xbe\vJ$\xb1p7wU\xf1i6\x91\x9f!E\xb0_\x80\x14\a?\xca\xb5CD\x8c\xee\xed\x9c\xb2\xb6\xb6\x97\x00`\x14\xb7\xda\xe2\xab^\xb3\xe3\x0e\xce\x11\xa7\x81\xe6\xc4\x1a\x06\xd7\xbff\xcb\xf9\xb1\xf0 \x00\x00\x00\x00\x00\x00\x03\x96\xd2;\xca?M\xe47\x1ce\x83\x8dK}|\xeb\x86$\x9cN\x01d\xb6\x80:\xa0B\xec\xd7\xa8\x8az.\xba~C\xb4L\xbf\x17\xec\xe9l\xa7\r\x85\xeaS\xe4B\xeb\xe9O\xfa\x12\xa5\xe8Buqe!\x86\x18\x16r\xa7\xd6\x1c\xb2n\xa4T0\xf1\x10\x16\xfe\"\xc3=\x0en|\xc6h\x9d\xe5\xc3]\xf1\xaej+\xfd\xb6\x96r\xe8\x81~LN\xc5L\xd0A-\x1a\xf4fm\b\x1c\xf6\x7f\x148l\xc4\b\x9a-\xb8\xfe\x8a\xe0\x03\x9btv\x1e\xef\xb5\xf1\xcfL-f>\xb4_\rl\x7f\x99d\xc2\xd9\xe8\xc9\xfb\xff\x96\xf0)\x831\x1b\x1cW\xc4\xb1\x1c\xae\x8b\x06\xe8=\xd2\xbe\x06$k\xe7\xdd\xa8z\x91q\x02~\xc2`\xe2\xfd\xcf\xed58\x90\xbb\xf4\x84\x88\x8f\xec\xc4U\xc0\xf9i\x94*e\x81v\x86\xb6aD\x82\xacIU\x9eo\aY\x84l8\xd4\x18\xb1\x1c\xed?\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00') fchdir(0xffffffffffffffff) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) 10:49:48 executing program 2: r0 = socket$packet(0x11, 0x40800000000003, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x80, 0x1f8) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000500)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000140)={0x11, 0x800, r3, 0x1, 0x0, 0x6, @random="286e6a8d6980"}, 0x14) r4 = dup2(r0, r0) sendto$inet6(r4, &(0x7f00000002c0)="020400000300603900382b8a5b5aa242b90516db4d23a3bb09f82632e33715d26206cd6b80a7699507938207d9fb3780d88d5375000001000000301e", 0x3c, 0x0, 0x0, 0x0) 10:49:48 executing program 3: ioctl$TIOCLINUX7(0xffffffffffffffff, 0x541c, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) clone(0x10002102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f00000000c0)) 10:49:48 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='loginuid\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x4) r1 = syz_open_procfs(0x0, &(0x7f0000000380)='fdinfo\x00\x92\xbb\v>co\xe8\xf2%\xc57=\xf7\xfd\a\x89\x80\xa5\x84\a\xee\x1f\xbb\xd7j.\xe7?C\"\xbe\vJ$\xb1p7wU\xf1i6\x91\x9f!E\xb0_\x80\x14\a?\xca\xb5CD\x8c\xee\xed\x9c\xb2\xb6\xb6\x97\x00`\x14\xb7\xda\xe2\xab^\xb3\xe3\x0e\xce\x11\xa7\x81\xe6\xc4\x1a\x06\xd7\xbff\xcb\xf9\xb1\xf0 \x00\x00\x00\x00\x00\x00\x03\x96\xd2;\xca?M\xe47\x1ce\x83\x8dK}|\xeb\x86$\x9cN\x01d\xb6\x80:\xa0B\xec\xd7\xa8\x8az.\xba~C\xb4L\xbf\x17\xec\xe9l\xa7\r\x85\xeaS\xe4B\xeb\xe9O\xfa\x12\xa5\xe8Buqe!\x86\x18\x16r\xa7\xd6\x1c\xb2n\xa4T0\xf1\x10\x16\xfe\"\xc3=\x0en|\xc6h\x9d\xe5\xc3]\xf1\xaej+\xfd\xb6\x96r\xe8\x81~LN\xc5L\xd0A-\x1a\xf4fm\b\x1c\xf6\x7f\x148l\xc4\b\x9a-\xb8\xfe\x8a\xe0\x03\x9btv\x1e\xef\xb5\xf1\xcfL-f>\xb4_\rl\x7f\x99d\xc2\xd9\xe8\xc9\xfb\xff\x96\xf0)\x831\x1b\x1cW\xc4\xb1\x1c\xae\x8b\x06\xe8=\xd2\xbe\x06$k\xe7\xdd\xa8z\x91q\x02~\xc2`\xe2\xfd\xcf\xed58\x90\xbb\xf4\x84\x88\x8f\xec\xc4U\xc0\xf9i\x94*e\x81v\x86\xb6aD\x82\xacIU\x9eo\aY\x84l8\xd4\x18\xb1\x1c\xed?\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00') fchdir(r1) quotactl(0x0, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) 10:49:48 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f000051cff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000943ffc)=0x7) read(r0, &(0x7f00003fefff)=""/1, 0x1) readv(r0, &(0x7f00000002c0)=[{&(0x7f0000cd8000)=""/1, 0x2e171c03}], 0x1) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)) 10:49:49 executing program 3: ioctl$TIOCLINUX7(0xffffffffffffffff, 0x541c, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) clone(0x10002102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f00000000c0)) 10:49:49 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_sco(r0, &(0x7f0000000040), 0x8) listen(r0, 0x0) ioctl$sock_TIOCINQ(r0, 0x541b, 0x0) 10:49:49 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='loginuid\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x4) r1 = syz_open_procfs(0x0, &(0x7f0000000380)='fdinfo\x00\x92\xbb\v>co\xe8\xf2%\xc57=\xf7\xfd\a\x89\x80\xa5\x84\a\xee\x1f\xbb\xd7j.\xe7?C\"\xbe\vJ$\xb1p7wU\xf1i6\x91\x9f!E\xb0_\x80\x14\a?\xca\xb5CD\x8c\xee\xed\x9c\xb2\xb6\xb6\x97\x00`\x14\xb7\xda\xe2\xab^\xb3\xe3\x0e\xce\x11\xa7\x81\xe6\xc4\x1a\x06\xd7\xbff\xcb\xf9\xb1\xf0 \x00\x00\x00\x00\x00\x00\x03\x96\xd2;\xca?M\xe47\x1ce\x83\x8dK}|\xeb\x86$\x9cN\x01d\xb6\x80:\xa0B\xec\xd7\xa8\x8az.\xba~C\xb4L\xbf\x17\xec\xe9l\xa7\r\x85\xeaS\xe4B\xeb\xe9O\xfa\x12\xa5\xe8Buqe!\x86\x18\x16r\xa7\xd6\x1c\xb2n\xa4T0\xf1\x10\x16\xfe\"\xc3=\x0en|\xc6h\x9d\xe5\xc3]\xf1\xaej+\xfd\xb6\x96r\xe8\x81~LN\xc5L\xd0A-\x1a\xf4fm\b\x1c\xf6\x7f\x148l\xc4\b\x9a-\xb8\xfe\x8a\xe0\x03\x9btv\x1e\xef\xb5\xf1\xcfL-f>\xb4_\rl\x7f\x99d\xc2\xd9\xe8\xc9\xfb\xff\x96\xf0)\x831\x1b\x1cW\xc4\xb1\x1c\xae\x8b\x06\xe8=\xd2\xbe\x06$k\xe7\xdd\xa8z\x91q\x02~\xc2`\xe2\xfd\xcf\xed58\x90\xbb\xf4\x84\x88\x8f\xec\xc4U\xc0\xf9i\x94*e\x81v\x86\xb6aD\x82\xacIU\x9eo\aY\x84l8\xd4\x18\xb1\x1c\xed?\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00') fchdir(r1) quotactl(0x0, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) 10:49:49 executing program 3: ioctl$TIOCLINUX7(0xffffffffffffffff, 0x541c, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) clone(0x10002102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f00000000c0)) 10:49:49 executing program 2: r0 = socket$packet(0x11, 0x40800000000003, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x80, 0x1f8) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000500)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000140)={0x11, 0x800, r3, 0x1, 0x0, 0x6, @random="286e6a8d6980"}, 0x14) r4 = dup2(r0, r0) sendto$inet6(r4, &(0x7f00000002c0)="020400000300603900382b8a5b5aa242b90516db4d23a3bb09f82632e33715d26206cd6b80a7699507938207d9fb3780d88d5375000001000000301e", 0x3c, 0x0, 0x0, 0x0) 10:49:49 executing program 5: bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240), 0x10) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000600)='/dev/ppp\x00', 0x2, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000500)=""/246) ioctl$EVIOCGREP(r0, 0x40047459, &(0x7f0000000240)=""/174) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x100) write$binfmt_elf32(r0, 0x0, 0x0) 10:49:49 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(0xffffffffffffffff) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x8000, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000240)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}) socket$nl_route(0x10, 0x3, 0x0) r2 = open(0x0, 0x141042, 0x0) write$P9_RSTAT(r2, &(0x7f0000000580)=ANY=[@ANYBLOB="4e63d9004d1f5a241a12845b82446400ea34798e4cdf6e6cf75b3f7e0e876d97afb3b2b6a812cc1f63466a671154b915c3c3106c0000650d2b9d75450ff765905f7083718018996b6df8fff0ff775e0110a434d53aca9012ce5fb421602ff9050440036c58b425b09e2a2e6278b36cde1b5cb43ce0c9b59b440663f6d28ea4d0d9b41125d9d93d5536a66a47c7dd8482744e3719b742da4aa2e5b69ce0851da770e8a8a3f4f1403ae213c0432fbffc9ebe12952e16698069882fdcc59aa4b4caac08faa81d8a4c53e376a1df1c795c516971"], 0xd2) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) setsockopt$IP_VS_SO_SET_DEL(0xffffffffffffffff, 0x0, 0x484, &(0x7f0000000280)={0x6, @multicast1, 0x0, 0x1, 'fo\x00', 0x1d, 0x100, 0x2e}, 0x2c) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x44000) io_setup(0x4ed4, &(0x7f0000000100)=0x0) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000380)='TIPC\x00') ftruncate(r5, 0xbb1) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f00000003c0)={[], 0x387, 0x5, 0xfffffffffffffffe, 0x0, 0x2}) sendfile(r0, r2, &(0x7f0000d83ff8), 0x800000000024) 10:49:49 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='loginuid\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x4) r1 = syz_open_procfs(0x0, &(0x7f0000000380)='fdinfo\x00\x92\xbb\v>co\xe8\xf2%\xc57=\xf7\xfd\a\x89\x80\xa5\x84\a\xee\x1f\xbb\xd7j.\xe7?C\"\xbe\vJ$\xb1p7wU\xf1i6\x91\x9f!E\xb0_\x80\x14\a?\xca\xb5CD\x8c\xee\xed\x9c\xb2\xb6\xb6\x97\x00`\x14\xb7\xda\xe2\xab^\xb3\xe3\x0e\xce\x11\xa7\x81\xe6\xc4\x1a\x06\xd7\xbff\xcb\xf9\xb1\xf0 \x00\x00\x00\x00\x00\x00\x03\x96\xd2;\xca?M\xe47\x1ce\x83\x8dK}|\xeb\x86$\x9cN\x01d\xb6\x80:\xa0B\xec\xd7\xa8\x8az.\xba~C\xb4L\xbf\x17\xec\xe9l\xa7\r\x85\xeaS\xe4B\xeb\xe9O\xfa\x12\xa5\xe8Buqe!\x86\x18\x16r\xa7\xd6\x1c\xb2n\xa4T0\xf1\x10\x16\xfe\"\xc3=\x0en|\xc6h\x9d\xe5\xc3]\xf1\xaej+\xfd\xb6\x96r\xe8\x81~LN\xc5L\xd0A-\x1a\xf4fm\b\x1c\xf6\x7f\x148l\xc4\b\x9a-\xb8\xfe\x8a\xe0\x03\x9btv\x1e\xef\xb5\xf1\xcfL-f>\xb4_\rl\x7f\x99d\xc2\xd9\xe8\xc9\xfb\xff\x96\xf0)\x831\x1b\x1cW\xc4\xb1\x1c\xae\x8b\x06\xe8=\xd2\xbe\x06$k\xe7\xdd\xa8z\x91q\x02~\xc2`\xe2\xfd\xcf\xed58\x90\xbb\xf4\x84\x88\x8f\xec\xc4U\xc0\xf9i\x94*e\x81v\x86\xb6aD\x82\xacIU\x9eo\aY\x84l8\xd4\x18\xb1\x1c\xed?\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00') fchdir(r1) quotactl(0x0, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) 10:49:49 executing program 3: ioctl$TIOCLINUX7(0xffffffffffffffff, 0x541c, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) clone(0x10002102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, 0x0) 10:49:49 executing program 2: r0 = socket$packet(0x11, 0x40800000000003, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x80, 0x1f8) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000500)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000140)={0x11, 0x800, r3, 0x1, 0x0, 0x6, @random="286e6a8d6980"}, 0x14) r4 = dup2(r0, r0) sendto$inet6(r4, &(0x7f00000002c0)="020400000300603900382b8a5b5aa242b90516db4d23a3bb09f82632e33715d26206cd6b80a7699507938207d9fb3780d88d5375000001000000301e", 0x3c, 0x0, 0x0, 0x0) 10:49:49 executing program 3: ioctl$TIOCLINUX7(0xffffffffffffffff, 0x541c, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) clone(0x10002102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, 0x0) [ 353.180347][ C1] net_ratelimit: 4 callbacks suppressed [ 353.180355][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 353.191793][ C1] protocol 88fb is buggy, dev hsr_slave_1 10:49:49 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f000051cff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000943ffc)=0x7) read(r0, &(0x7f00003fefff)=""/1, 0x1) readv(r0, &(0x7f00000002c0)=[{&(0x7f0000cd8000)=""/1, 0x2e171c03}], 0x1) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)) 10:49:49 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='loginuid\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x4) r1 = syz_open_procfs(0x0, &(0x7f0000000380)='fdinfo\x00\x92\xbb\v>co\xe8\xf2%\xc57=\xf7\xfd\a\x89\x80\xa5\x84\a\xee\x1f\xbb\xd7j.\xe7?C\"\xbe\vJ$\xb1p7wU\xf1i6\x91\x9f!E\xb0_\x80\x14\a?\xca\xb5CD\x8c\xee\xed\x9c\xb2\xb6\xb6\x97\x00`\x14\xb7\xda\xe2\xab^\xb3\xe3\x0e\xce\x11\xa7\x81\xe6\xc4\x1a\x06\xd7\xbff\xcb\xf9\xb1\xf0 \x00\x00\x00\x00\x00\x00\x03\x96\xd2;\xca?M\xe47\x1ce\x83\x8dK}|\xeb\x86$\x9cN\x01d\xb6\x80:\xa0B\xec\xd7\xa8\x8az.\xba~C\xb4L\xbf\x17\xec\xe9l\xa7\r\x85\xeaS\xe4B\xeb\xe9O\xfa\x12\xa5\xe8Buqe!\x86\x18\x16r\xa7\xd6\x1c\xb2n\xa4T0\xf1\x10\x16\xfe\"\xc3=\x0en|\xc6h\x9d\xe5\xc3]\xf1\xaej+\xfd\xb6\x96r\xe8\x81~LN\xc5L\xd0A-\x1a\xf4fm\b\x1c\xf6\x7f\x148l\xc4\b\x9a-\xb8\xfe\x8a\xe0\x03\x9btv\x1e\xef\xb5\xf1\xcfL-f>\xb4_\rl\x7f\x99d\xc2\xd9\xe8\xc9\xfb\xff\x96\xf0)\x831\x1b\x1cW\xc4\xb1\x1c\xae\x8b\x06\xe8=\xd2\xbe\x06$k\xe7\xdd\xa8z\x91q\x02~\xc2`\xe2\xfd\xcf\xed58\x90\xbb\xf4\x84\x88\x8f\xec\xc4U\xc0\xf9i\x94*e\x81v\x86\xb6aD\x82\xacIU\x9eo\aY\x84l8\xd4\x18\xb1\x1c\xed?\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00') fchdir(r1) quotactl(0x2080000201, 0x0, 0x0, &(0x7f00000002c0)) 10:49:49 executing program 3: ioctl$TIOCLINUX7(0xffffffffffffffff, 0x541c, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) clone(0x10002102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, 0x0) 10:49:49 executing program 2: r0 = socket$packet(0x11, 0x40800000000003, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x80, 0x1f8) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000500)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000140)={0x11, 0x800, r2, 0x1, 0x0, 0x6, @random="286e6a8d6980"}, 0x14) r3 = dup2(r0, r0) sendto$inet6(r3, &(0x7f00000002c0)="020400000300603900382b8a5b5aa242b90516db4d23a3bb09f82632e33715d26206cd6b80a7699507938207d9fb3780d88d5375000001000000301e", 0x3c, 0x0, 0x0, 0x0) 10:49:49 executing program 5: bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240), 0x10) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000600)='/dev/ppp\x00', 0x2, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000500)=""/246) ioctl$EVIOCGREP(r0, 0x40047459, &(0x7f0000000240)=""/174) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x100) write$binfmt_elf32(r0, 0x0, 0x0) 10:49:49 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0xc0505510, &(0x7f0000000080)={0x758, 0x0, 0x0, 0x0, 0x0}) 10:49:49 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000380)='io\x00[\xfcW\x16\x9b\xab\xeeT\xed\x16\xe3\x9ez\x8f\xe4\xb9\x00\x16\xad\xae>\xc8\xf3B\xc7q\xd5E\xff\xff=\xe3\b\x9b\xf2f\xe3\xf60x0}) bind$packet(r0, &(0x7f0000000140)={0x11, 0x800, r2, 0x1, 0x0, 0x6, @random="286e6a8d6980"}, 0x14) r3 = dup2(r0, r0) sendto$inet6(r3, &(0x7f00000002c0)="020400000300603900382b8a5b5aa242b90516db4d23a3bb09f82632e33715d26206cd6b80a7699507938207d9fb3780d88d5375000001000000301e", 0x3c, 0x0, 0x0, 0x0) [ 353.913558][T11593] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 353.925727][T11594] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 10:49:50 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f000051cff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000943ffc)=0x7) read(r0, &(0x7f00003fefff)=""/1, 0x1) readv(r0, &(0x7f00000002c0)=[{&(0x7f0000cd8000)=""/1, 0x2e171c03}], 0x1) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)) 10:49:50 executing program 0: 10:49:50 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='loginuid\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x4) r1 = syz_open_procfs(0x0, &(0x7f0000000380)='fdinfo\x00\x92\xbb\v>co\xe8\xf2%\xc57=\xf7\xfd\a\x89\x80\xa5\x84\a\xee\x1f\xbb\xd7j.\xe7?C\"\xbe\vJ$\xb1p7wU\xf1i6\x91\x9f!E\xb0_\x80\x14\a?\xca\xb5CD\x8c\xee\xed\x9c\xb2\xb6\xb6\x97\x00`\x14\xb7\xda\xe2\xab^\xb3\xe3\x0e\xce\x11\xa7\x81\xe6\xc4\x1a\x06\xd7\xbff\xcb\xf9\xb1\xf0 \x00\x00\x00\x00\x00\x00\x03\x96\xd2;\xca?M\xe47\x1ce\x83\x8dK}|\xeb\x86$\x9cN\x01d\xb6\x80:\xa0B\xec\xd7\xa8\x8az.\xba~C\xb4L\xbf\x17\xec\xe9l\xa7\r\x85\xeaS\xe4B\xeb\xe9O\xfa\x12\xa5\xe8Buqe!\x86\x18\x16r\xa7\xd6\x1c\xb2n\xa4T0\xf1\x10\x16\xfe\"\xc3=\x0en|\xc6h\x9d\xe5\xc3]\xf1\xaej+\xfd\xb6\x96r\xe8\x81~LN\xc5L\xd0A-\x1a\xf4fm\b\x1c\xf6\x7f\x148l\xc4\b\x9a-\xb8\xfe\x8a\xe0\x03\x9btv\x1e\xef\xb5\xf1\xcfL-f>\xb4_\rl\x7f\x99d\xc2\xd9\xe8\xc9\xfb\xff\x96\xf0)\x831\x1b\x1cW\xc4\xb1\x1c\xae\x8b\x06\xe8=\xd2\xbe\x06$k\xe7\xdd\xa8z\x91q\x02~\xc2`\xe2\xfd\xcf\xed58\x90\xbb\xf4\x84\x88\x8f\xec\xc4U\xc0\xf9i\x94*e\x81v\x86\xb6aD\x82\xacIU\x9eo\aY\x84l8\xd4\x18\xb1\x1c\xed?\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00') fchdir(r1) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) 10:49:50 executing program 3: 10:49:50 executing program 5: bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240), 0x10) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000600)='/dev/ppp\x00', 0x2, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000500)=""/246) ioctl$EVIOCGREP(r0, 0x40047459, &(0x7f0000000240)=""/174) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x100) write$binfmt_elf32(r0, 0x0, 0x0) 10:49:50 executing program 2: r0 = socket$packet(0x11, 0x40800000000003, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x80, 0x1f8) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000500)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000140)={0x11, 0x800, r2, 0x1, 0x0, 0x6, @random="286e6a8d6980"}, 0x14) r3 = dup2(r0, r0) sendto$inet6(r3, &(0x7f00000002c0)="020400000300603900382b8a5b5aa242b90516db4d23a3bb09f82632e33715d26206cd6b80a7699507938207d9fb3780d88d5375000001000000301e", 0x3c, 0x0, 0x0, 0x0) 10:49:50 executing program 0: r0 = socket$inet6(0xa, 0x0, 0x0) r1 = getpgid(0xffffffffffffffff) fcntl$setownex(r0, 0xf, &(0x7f0000000000)={0x2, r1}) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r2) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(r3, &(0x7f00000009c0)='threaded\x00', 0xfffffd5f) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) lseek(r4, 0xffffffffffffffff, 0x3) close(r4) syz_emit_ethernet(0x74, &(0x7f0000000100)={@local, @link_local={0x1, 0x80, 0xc2, 0x2}, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @local, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) 10:49:50 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070") r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006}]}, 0x10) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000deb000)={0x2, 0x3, @broadcast}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fc, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10) 10:49:50 executing program 2: r0 = socket$packet(0x11, 0x40800000000003, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x80, 0x1f8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000500)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000140)={0x11, 0x800, r2, 0x1, 0x0, 0x6, @random="286e6a8d6980"}, 0x14) r3 = dup2(r0, r0) sendto$inet6(r3, &(0x7f00000002c0)="020400000300603900382b8a5b5aa242b90516db4d23a3bb09f82632e33715d26206cd6b80a7699507938207d9fb3780d88d5375000001000000301e", 0x3c, 0x0, 0x0, 0x0) 10:49:50 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='loginuid\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x4) r1 = syz_open_procfs(0x0, &(0x7f0000000380)='fdinfo\x00\x92\xbb\v>co\xe8\xf2%\xc57=\xf7\xfd\a\x89\x80\xa5\x84\a\xee\x1f\xbb\xd7j.\xe7?C\"\xbe\vJ$\xb1p7wU\xf1i6\x91\x9f!E\xb0_\x80\x14\a?\xca\xb5CD\x8c\xee\xed\x9c\xb2\xb6\xb6\x97\x00`\x14\xb7\xda\xe2\xab^\xb3\xe3\x0e\xce\x11\xa7\x81\xe6\xc4\x1a\x06\xd7\xbff\xcb\xf9\xb1\xf0 \x00\x00\x00\x00\x00\x00\x03\x96\xd2;\xca?M\xe47\x1ce\x83\x8dK}|\xeb\x86$\x9cN\x01d\xb6\x80:\xa0B\xec\xd7\xa8\x8az.\xba~C\xb4L\xbf\x17\xec\xe9l\xa7\r\x85\xeaS\xe4B\xeb\xe9O\xfa\x12\xa5\xe8Buqe!\x86\x18\x16r\xa7\xd6\x1c\xb2n\xa4T0\xf1\x10\x16\xfe\"\xc3=\x0en|\xc6h\x9d\xe5\xc3]\xf1\xaej+\xfd\xb6\x96r\xe8\x81~LN\xc5L\xd0A-\x1a\xf4fm\b\x1c\xf6\x7f\x148l\xc4\b\x9a-\xb8\xfe\x8a\xe0\x03\x9btv\x1e\xef\xb5\xf1\xcfL-f>\xb4_\rl\x7f\x99d\xc2\xd9\xe8\xc9\xfb\xff\x96\xf0)\x831\x1b\x1cW\xc4\xb1\x1c\xae\x8b\x06\xe8=\xd2\xbe\x06$k\xe7\xdd\xa8z\x91q\x02~\xc2`\xe2\xfd\xcf\xed58\x90\xbb\xf4\x84\x88\x8f\xec\xc4U\xc0\xf9i\x94*e\x81v\x86\xb6aD\x82\xacIU\x9eo\aY\x84l8\xd4\x18\xb1\x1c\xed?\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00') fchdir(r1) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) [ 354.700344][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 354.706262][ C1] protocol 88fb is buggy, dev hsr_slave_1 10:49:51 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='loginuid\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x4) r1 = syz_open_procfs(0x0, &(0x7f0000000380)='fdinfo\x00\x92\xbb\v>co\xe8\xf2%\xc57=\xf7\xfd\a\x89\x80\xa5\x84\a\xee\x1f\xbb\xd7j.\xe7?C\"\xbe\vJ$\xb1p7wU\xf1i6\x91\x9f!E\xb0_\x80\x14\a?\xca\xb5CD\x8c\xee\xed\x9c\xb2\xb6\xb6\x97\x00`\x14\xb7\xda\xe2\xab^\xb3\xe3\x0e\xce\x11\xa7\x81\xe6\xc4\x1a\x06\xd7\xbff\xcb\xf9\xb1\xf0 \x00\x00\x00\x00\x00\x00\x03\x96\xd2;\xca?M\xe47\x1ce\x83\x8dK}|\xeb\x86$\x9cN\x01d\xb6\x80:\xa0B\xec\xd7\xa8\x8az.\xba~C\xb4L\xbf\x17\xec\xe9l\xa7\r\x85\xeaS\xe4B\xeb\xe9O\xfa\x12\xa5\xe8Buqe!\x86\x18\x16r\xa7\xd6\x1c\xb2n\xa4T0\xf1\x10\x16\xfe\"\xc3=\x0en|\xc6h\x9d\xe5\xc3]\xf1\xaej+\xfd\xb6\x96r\xe8\x81~LN\xc5L\xd0A-\x1a\xf4fm\b\x1c\xf6\x7f\x148l\xc4\b\x9a-\xb8\xfe\x8a\xe0\x03\x9btv\x1e\xef\xb5\xf1\xcfL-f>\xb4_\rl\x7f\x99d\xc2\xd9\xe8\xc9\xfb\xff\x96\xf0)\x831\x1b\x1cW\xc4\xb1\x1c\xae\x8b\x06\xe8=\xd2\xbe\x06$k\xe7\xdd\xa8z\x91q\x02~\xc2`\xe2\xfd\xcf\xed58\x90\xbb\xf4\x84\x88\x8f\xec\xc4U\xc0\xf9i\x94*e\x81v\x86\xb6aD\x82\xacIU\x9eo\aY\x84l8\xd4\x18\xb1\x1c\xed?\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00') fchdir(r1) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) [ 354.738031][T11628] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 10:49:51 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) syncfs(r1) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000300)=0x73, 0xff55) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e22, @multicast1}, 0x10) setsockopt$sock_int(r1, 0x1, 0x2f, &(0x7f0000000040), 0x4) clone(0x20003ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r2) r3 = syz_open_dev$loop(&(0x7f0000000540)='/dev/loop#\x00', 0x0, 0x105082) r4 = memfd_create(&(0x7f0000000180)='}#*nodevem2N,\x00', 0x0) pwritev(r4, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81000) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000580)={0x0, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xc}}, {0x2, 0x4e20, @local}, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x8, 0x0, 0x0, 0x0, 0x9, &(0x7f00000001c0)='bcsf0\x00', 0x1, 0x8000, 0x2}) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) ioctl$EVIOCGPROP(r2, 0x80404509, &(0x7f0000000840)=""/238) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x360) fcntl$setstatus(r0, 0x4, 0x4000042800) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f00000001c0), 0x526987c9) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x0) read(r5, &(0x7f0000000200)=""/250, 0x50c7e3e3) ioctl$sock_inet_SIOCRTMSG(r1, 0x890d, &(0x7f0000000780)={0x0, {0x2, 0x4e22, @multicast1}, {0x2, 0x4e23, @loopback}, {0x2, 0x4e22, @remote}, 0x83, 0x0, 0x0, 0x0, 0x9802, 0x0, 0x80000001, 0x0, 0x5}) sendfile(r3, r4, 0x0, 0x80005) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f00000003c0)={0x0}, &(0x7f0000000400)=0xc) syz_open_procfs(r7, &(0x7f0000000380)='envh&on\x00') ioctl$sock_SIOCGIFBR(r2, 0x8940, &(0x7f0000000800)=@add_del={0x2, &(0x7f0000000140)='vcan0\x00'}) syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_mcast\x00') openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) [ 355.088755][T11649] BUG: Bad page state in process syz-executor.3 pfn:77059 [ 355.096314][T11649] page:ffffea0001dc1640 count:0 mapcount:0 mapping:ffff888093229d40 index:0x0 [ 355.106243][T11649] shmem_aops [ 355.106251][T11649] name:"memfd:}#*nodevem2N," [ 355.109690][T11649] flags: 0x1fffc000008000e(referenced|uptodate|dirty|swapbacked) [ 355.122342][T11649] raw: 01fffc000008000e dead000000000100 dead000000000200 ffff888093229d40 [ 355.132390][T11649] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 355.145799][T11649] page dumped because: non-NULL mapping [ 355.151542][T11649] Modules linked in: [ 355.155554][T11649] CPU: 0 PID: 11649 Comm: syz-executor.3 Not tainted 5.0.0-rc7-next-20190220 #39 [ 355.164652][T11649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 355.174695][T11649] Call Trace: [ 355.177969][T11649] dump_stack+0x172/0x1f0 [ 355.182303][T11649] bad_page.cold+0xda/0xff [ 355.186718][T11649] ? si_mem_available+0x320/0x320 [ 355.191725][T11649] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 355.197953][T11649] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 355.204211][T11649] free_pages_check_bad+0x142/0x1a0 [ 355.209404][T11649] free_unref_page+0x3c6/0x600 [ 355.214151][T11649] __put_page+0x8d/0xd0 [ 355.218304][T11649] page_cache_pipe_buf_release+0x12b/0x180 [ 355.224214][T11649] iter_file_splice_write+0x7d1/0xbe0 [ 355.229586][T11649] ? atime_needs_update+0x5f0/0x5f0 [ 355.234768][T11649] ? page_cache_pipe_buf_confirm+0x2b0/0x2b0 [ 355.240754][T11649] ? rw_verify_area+0x118/0x360 [ 355.245613][T11649] ? page_cache_pipe_buf_confirm+0x2b0/0x2b0 [ 355.251585][T11649] direct_splice_actor+0x126/0x1a0 [ 355.256677][T11649] splice_direct_to_actor+0x369/0x970 [ 355.262044][T11649] ? generic_pipe_buf_nosteal+0x10/0x10 [ 355.267588][T11649] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 355.273809][T11649] ? do_splice_to+0x190/0x190 [ 355.278476][T11649] ? rw_verify_area+0x118/0x360 [ 355.283320][T11649] do_splice_direct+0x1da/0x2a0 [ 355.288164][T11649] ? splice_direct_to_actor+0x970/0x970 [ 355.293714][T11649] ? rw_verify_area+0x118/0x360 [ 355.298562][T11649] do_sendfile+0x597/0xd00 [ 355.302981][T11649] ? do_compat_pwritev64+0x1c0/0x1c0 [ 355.308262][T11649] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 355.314500][T11649] ? put_timespec64+0xda/0x140 [ 355.319266][T11649] __x64_sys_sendfile64+0x1dd/0x220 [ 355.324460][T11649] ? __ia32_sys_sendfile+0x230/0x230 [ 355.329744][T11649] ? do_syscall_64+0x26/0x610 [ 355.334405][T11649] ? lockdep_hardirqs_on+0x418/0x5d0 [ 355.339674][T11649] ? trace_hardirqs_on+0x67/0x230 [ 355.344695][T11649] do_syscall_64+0x103/0x610 [ 355.349322][T11649] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 355.355216][T11649] RIP: 0033:0x457e29 [ 355.359115][T11649] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 355.378709][T11649] RSP: 002b:00007f0883b0dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 10:49:51 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f000051cff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000943ffc)=0x7) read(r0, &(0x7f00003fefff)=""/1, 0x1) readv(r0, &(0x7f00000002c0)=[{&(0x7f0000cd8000)=""/1, 0x2e171c03}], 0x1) ioctl$TCSETSF(r0, 0x5404, 0x0) 10:49:51 executing program 2: r0 = socket$packet(0x11, 0x40800000000003, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x80, 0x1f8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000500)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000140)={0x11, 0x800, r2, 0x1, 0x0, 0x6, @random="286e6a8d6980"}, 0x14) r3 = dup2(r0, r0) sendto$inet6(r3, &(0x7f00000002c0)="020400000300603900382b8a5b5aa242b90516db4d23a3bb09f82632e33715d26206cd6b80a7699507938207d9fb3780d88d5375000001000000301e", 0x3c, 0x0, 0x0, 0x0) 10:49:51 executing program 0: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xffffff67) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) lseek(r1, 0xffffffffffffffff, 0x3) 10:49:51 executing program 5: bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240), 0x10) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000600)='/dev/ppp\x00', 0x2, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000500)=""/246) ioctl$EVIOCGREP(r0, 0x40047459, &(0x7f0000000240)=""/174) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x100) write$binfmt_elf32(r0, 0x0, 0x0) 10:49:51 executing program 1: [ 355.387097][T11649] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000457e29 [ 355.395046][T11649] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 355.403003][T11649] RBP: 000000000073c0e0 R08: 0000000000000000 R09: 0000000000000000 [ 355.410964][T11649] R10: 0000000000080005 R11: 0000000000000246 R12: 00007f0883b0e6d4 [ 355.418916][T11649] R13: 00000000004c4dce R14: 00000000004d8a58 R15: 00000000ffffffff 10:49:51 executing program 1: [ 355.461676][T11649] Disabling lock debugging due to kernel taint [ 355.467864][T11649] BUG: Bad page state in process syz-executor.3 pfn:7c30c [ 355.489298][T11649] page:ffffea0001f0c300 count:0 mapcount:0 mapping:ffff888093229d40 index:0x1 [ 355.508662][T11649] shmem_aops 10:49:51 executing program 1: [ 355.508669][T11649] name:"memfd:}#*nodevem2N," [ 355.515812][T11649] flags: 0x1fffc000008000e(referenced|uptodate|dirty|swapbacked) [ 355.538773][T11649] raw: 01fffc000008000e dead000000000100 dead000000000200 ffff888093229d40 [ 355.550336][T11649] raw: 0000000000000001 0000000000000000 00000000ffffffff 0000000000000000 [ 355.573051][T11649] page dumped because: non-NULL mapping [ 355.583033][T11649] Modules linked in: [ 355.587090][T11649] CPU: 0 PID: 11649 Comm: syz-executor.3 Tainted: G B 5.0.0-rc7-next-20190220 #39 [ 355.597730][T11649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 355.607784][T11649] Call Trace: [ 355.611523][T11649] dump_stack+0x172/0x1f0 [ 355.615861][T11649] bad_page.cold+0xda/0xff [ 355.620280][T11649] ? si_mem_available+0x320/0x320 [ 355.625314][T11649] ? trace_hardirqs_on+0x67/0x230 [ 355.630343][T11649] ? kasan_check_read+0x11/0x20 [ 355.635210][T11649] free_pages_check_bad+0x142/0x1a0 [ 355.640415][T11649] free_unref_page+0x3c6/0x600 [ 355.645182][T11649] __put_page+0x8d/0xd0 [ 355.649355][T11649] page_cache_pipe_buf_release+0x12b/0x180 [ 355.655167][T11649] iter_file_splice_write+0x7d1/0xbe0 [ 355.660556][T11649] ? atime_needs_update+0x5f0/0x5f0 [ 355.665764][T11649] ? page_cache_pipe_buf_confirm+0x2b0/0x2b0 [ 355.671786][T11649] ? rw_verify_area+0x118/0x360 [ 355.676645][T11649] ? page_cache_pipe_buf_confirm+0x2b0/0x2b0 [ 355.682645][T11649] direct_splice_actor+0x126/0x1a0 [ 355.687766][T11649] splice_direct_to_actor+0x369/0x970 [ 355.693146][T11649] ? generic_pipe_buf_nosteal+0x10/0x10 [ 355.698698][T11649] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 355.704944][T11649] ? do_splice_to+0x190/0x190 [ 355.709626][T11649] ? rw_verify_area+0x118/0x360 [ 355.714492][T11649] do_splice_direct+0x1da/0x2a0 [ 355.719351][T11649] ? splice_direct_to_actor+0x970/0x970 [ 355.724904][T11649] ? rw_verify_area+0x118/0x360 [ 355.729772][T11649] do_sendfile+0x597/0xd00 [ 355.732969][ T26] audit: type=1804 audit(1550659791.991:39): pid=11663 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir280820719/syzkaller.kxL0Ib/173/file0" dev="sda1" ino=16596 res=1 [ 355.734188][T11649] ? do_compat_pwritev64+0x1c0/0x1c0 [ 355.734213][T11649] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 355.734251][T11649] ? put_timespec64+0xda/0x140 [ 355.775069][T11649] __x64_sys_sendfile64+0x1dd/0x220 [ 355.780274][T11649] ? __ia32_sys_sendfile+0x230/0x230 [ 355.785559][T11649] ? do_syscall_64+0x26/0x610 [ 355.790236][T11649] ? lockdep_hardirqs_on+0x418/0x5d0 [ 355.795534][T11649] ? trace_hardirqs_on+0x67/0x230 [ 355.800561][T11649] do_syscall_64+0x103/0x610 [ 355.805159][T11649] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 355.811057][T11649] RIP: 0033:0x457e29 [ 355.814950][T11649] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 355.834553][T11649] RSP: 002b:00007f0883b0dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 355.842963][T11649] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000457e29 [ 355.850940][T11649] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 355.858909][T11649] RBP: 000000000073c0e0 R08: 0000000000000000 R09: 0000000000000000 10:49:52 executing program 1: 10:49:52 executing program 2: r0 = socket$packet(0x11, 0x40800000000003, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x80, 0x1f8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000500)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000140)={0x11, 0x800, r2, 0x1, 0x0, 0x6, @random="286e6a8d6980"}, 0x14) r3 = dup2(r0, r0) sendto$inet6(r3, &(0x7f00000002c0)="020400000300603900382b8a5b5aa242b90516db4d23a3bb09f82632e33715d26206cd6b80a7699507938207d9fb3780d88d5375000001000000301e", 0x3c, 0x0, 0x0, 0x0) 10:49:52 executing program 1: [ 355.866968][T11649] R10: 0000000000080005 R11: 0000000000000246 R12: 00007f0883b0e6d4 [ 355.874936][T11649] R13: 00000000004c4dce R14: 00000000004d8a58 R15: 00000000ffffffff [ 355.897138][T11649] BUG: Bad page state in process syz-executor.3 pfn:82971 [ 355.911174][T11649] page:ffffea00020a5c40 count:0 mapcount:0 mapping:ffff888093229d40 index:0x2 10:49:52 executing program 5: bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240), 0x10) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000600)='/dev/ppp\x00', 0x2, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000500)=""/246) ioctl$EVIOCGREP(r0, 0x40047459, &(0x7f0000000240)=""/174) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x100) [ 355.966246][T11649] shmem_aops [ 355.966252][T11649] name:"memfd:}#*nodevem2N," [ 355.974689][T11649] flags: 0x1fffc000008000e(referenced|uptodate|dirty|swapbacked) [ 356.002004][T11649] raw: 01fffc000008000e dead000000000100 dead000000000200 ffff888093229d40 [ 356.022573][ T26] audit: type=1804 audit(1550659792.281:40): pid=11657 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir280820719/syzkaller.kxL0Ib/173/file0" dev="sda1" ino=16596 res=1 [ 356.029099][T11649] raw: 0000000000000002 0000000000000000 00000000ffffffff 0000000000000000 [ 356.064943][T11649] page dumped because: non-NULL mapping [ 356.070714][T11649] Modules linked in: [ 356.074735][T11649] CPU: 0 PID: 11649 Comm: syz-executor.3 Tainted: G B 5.0.0-rc7-next-20190220 #39 [ 356.085227][T11649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 356.095271][T11649] Call Trace: [ 356.098568][T11649] dump_stack+0x172/0x1f0 [ 356.102900][T11649] bad_page.cold+0xda/0xff [ 356.107318][T11649] ? si_mem_available+0x320/0x320 [ 356.112346][T11649] ? trace_hardirqs_on+0x67/0x230 [ 356.117377][T11649] ? kasan_check_read+0x11/0x20 [ 356.122239][T11649] free_pages_check_bad+0x142/0x1a0 [ 356.127439][T11649] free_unref_page+0x3c6/0x600 [ 356.132216][T11649] __put_page+0x8d/0xd0 [ 356.136376][T11649] page_cache_pipe_buf_release+0x12b/0x180 [ 356.142185][T11649] iter_file_splice_write+0x7d1/0xbe0 [ 356.147344][ T26] audit: type=1804 audit(1550659792.401:41): pid=11666 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir280820719/syzkaller.kxL0Ib/173/file0" dev="sda1" ino=16596 res=1 [ 356.147575][T11649] ? atime_needs_update+0x5f0/0x5f0 [ 356.177318][T11649] ? page_cache_pipe_buf_confirm+0x2b0/0x2b0 [ 356.183310][T11649] ? rw_verify_area+0x118/0x360 [ 356.188202][T11649] ? page_cache_pipe_buf_confirm+0x2b0/0x2b0 [ 356.194174][T11649] direct_splice_actor+0x126/0x1a0 [ 356.199272][T11649] splice_direct_to_actor+0x369/0x970 [ 356.204620][T11649] ? generic_pipe_buf_nosteal+0x10/0x10 [ 356.210146][T11649] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 356.216360][T11649] ? do_splice_to+0x190/0x190 [ 356.221018][T11649] ? rw_verify_area+0x118/0x360 [ 356.225849][T11649] do_splice_direct+0x1da/0x2a0 [ 356.230687][T11649] ? splice_direct_to_actor+0x970/0x970 [ 356.236229][T11649] ? rw_verify_area+0x118/0x360 [ 356.241057][T11649] do_sendfile+0x597/0xd00 [ 356.245455][T11649] ? do_compat_pwritev64+0x1c0/0x1c0 [ 356.250731][T11649] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 356.256960][T11649] ? put_timespec64+0xda/0x140 [ 356.261720][T11649] __x64_sys_sendfile64+0x1dd/0x220 [ 356.266895][T11649] ? __ia32_sys_sendfile+0x230/0x230 [ 356.272165][T11649] ? do_syscall_64+0x26/0x610 [ 356.276843][T11649] ? lockdep_hardirqs_on+0x418/0x5d0 [ 356.282120][T11649] ? trace_hardirqs_on+0x67/0x230 [ 356.287153][T11649] do_syscall_64+0x103/0x610 [ 356.291749][T11649] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 356.297638][T11649] RIP: 0033:0x457e29 [ 356.301534][T11649] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 356.301543][T11649] RSP: 002b:00007f0883b0dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 356.301557][T11649] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000457e29 [ 356.301565][T11649] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 356.301574][T11649] RBP: 000000000073c0e0 R08: 0000000000000000 R09: 0000000000000000 [ 356.301591][T11649] R10: 0000000000080005 R11: 0000000000000246 R12: 00007f0883b0e6d4 [ 356.329592][T11649] R13: 00000000004c4dce R14: 00000000004d8a58 R15: 00000000ffffffff [ 356.372972][T11649] BUG: Bad page state in process syz-executor.3 pfn:7d2fa [ 356.380235][T11649] page:ffffea0001f4be80 count:0 mapcount:0 mapping:ffff888093229d40 index:0x3 [ 356.389590][T11649] shmem_aops [ 356.389596][T11682] name:"memfd:}#*nodevem2N," [ 356.392959][T11649] flags: 0x1fffc000008000e(referenced|uptodate|dirty|swapbacked) [ 356.405394][T11649] raw: 01fffc000008000e dead000000000100 dead000000000200 ffff888093229d40 [ 356.414143][T11649] raw: 0000000000000003 0000000000000000 00000000ffffffff 0000000000000000 [ 356.423649][T11649] page dumped because: non-NULL mapping [ 356.423660][T11649] Modules linked in: [ 356.433248][T11649] CPU: 0 PID: 11649 Comm: syz-executor.3 Tainted: G B 5.0.0-rc7-next-20190220 #39 [ 356.443742][T11649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 356.443748][T11649] Call Trace: [ 356.443769][T11649] dump_stack+0x172/0x1f0 [ 356.443791][T11649] bad_page.cold+0xda/0xff [ 356.443807][T11649] ? si_mem_available+0x320/0x320 [ 356.443825][T11649] ? trace_hardirqs_on+0x67/0x230 [ 356.443849][T11649] ? kasan_check_read+0x11/0x20 [ 356.457173][T11649] free_pages_check_bad+0x142/0x1a0 [ 356.465957][T11649] free_unref_page+0x3c6/0x600 [ 356.465986][T11649] __put_page+0x8d/0xd0 [ 356.475999][T11649] page_cache_pipe_buf_release+0x12b/0x180 [ 356.476020][T11649] iter_file_splice_write+0x7d1/0xbe0 [ 356.486032][T11649] ? atime_needs_update+0x5f0/0x5f0 [ 356.486056][T11649] ? page_cache_pipe_buf_confirm+0x2b0/0x2b0 [ 356.494951][T11649] ? rw_verify_area+0x118/0x360 [ 356.494972][T11649] ? page_cache_pipe_buf_confirm+0x2b0/0x2b0 [ 356.506114][T11649] direct_splice_actor+0x126/0x1a0 [ 356.506135][T11649] splice_direct_to_actor+0x369/0x970 [ 356.517289][T11649] ? generic_pipe_buf_nosteal+0x10/0x10 [ 356.517333][T11649] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 356.550331][T11649] ? do_splice_to+0x190/0x190 [ 356.555012][T11649] ? rw_verify_area+0x118/0x360 [ 356.559872][T11649] do_splice_direct+0x1da/0x2a0 [ 356.564737][T11649] ? splice_direct_to_actor+0x970/0x970 [ 356.570286][T11649] ? rw_verify_area+0x118/0x360 [ 356.575134][T11649] do_sendfile+0x597/0xd00 [ 356.579550][T11649] ? do_compat_pwritev64+0x1c0/0x1c0 [ 356.584829][T11649] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 356.591082][T11649] ? put_timespec64+0xda/0x140 [ 356.595871][T11649] __x64_sys_sendfile64+0x1dd/0x220 [ 356.601069][T11649] ? __ia32_sys_sendfile+0x230/0x230 [ 356.606360][T11649] ? do_syscall_64+0x26/0x610 [ 356.611033][T11649] ? lockdep_hardirqs_on+0x418/0x5d0 [ 356.616335][T11649] ? trace_hardirqs_on+0x67/0x230 [ 356.621363][T11649] do_syscall_64+0x103/0x610 [ 356.625958][T11649] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 356.631842][T11649] RIP: 0033:0x457e29 [ 356.635733][T11649] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 356.655329][T11649] RSP: 002b:00007f0883b0dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 356.663743][T11649] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000457e29 [ 356.671707][T11649] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 356.679671][T11649] RBP: 000000000073c0e0 R08: 0000000000000000 R09: 0000000000000000 [ 356.687639][T11649] R10: 0000000000080005 R11: 0000000000000246 R12: 00007f0883b0e6d4 [ 356.695603][T11649] R13: 00000000004c4dce R14: 00000000004d8a58 R15: 00000000ffffffff [ 356.706537][T11649] BUG: Bad page state in process syz-executor.3 pfn:7c178 [ 356.713843][T11649] page:ffffea0001f05e00 count:0 mapcount:0 mapping:ffff888093229d40 index:0x4 [ 356.725267][T11649] shmem_aops [ 356.725274][T11649] name:"memfd:}#*nodevem2N," [ 356.728640][T11649] flags: 0x1fffc000008000e(referenced|uptodate|dirty|swapbacked) [ 356.743804][T11649] raw: 01fffc000008000e dead000000000100 dead000000000200 ffff888093229d40 [ 356.752508][T11649] raw: 0000000000000004 0000000000000000 00000000ffffffff 0000000000000000 [ 356.763687][T11649] page dumped because: non-NULL mapping [ 356.769304][T11649] Modules linked in: [ 356.773377][T11649] CPU: 0 PID: 11649 Comm: syz-executor.3 Tainted: G B 5.0.0-rc7-next-20190220 #39 [ 356.783869][T11649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 356.793913][T11649] Call Trace: [ 356.797220][T11649] dump_stack+0x172/0x1f0 [ 356.801558][T11649] bad_page.cold+0xda/0xff [ 356.805975][T11649] ? si_mem_available+0x320/0x320 [ 356.810996][T11649] ? trace_hardirqs_on+0x67/0x230 [ 356.816017][T11649] ? kasan_check_read+0x11/0x20 [ 356.820871][T11649] free_pages_check_bad+0x142/0x1a0 [ 356.826065][T11649] free_unref_page+0x3c6/0x600 [ 356.830826][T11649] __put_page+0x8d/0xd0 [ 356.834980][T11649] page_cache_pipe_buf_release+0x12b/0x180 [ 356.840784][T11649] iter_file_splice_write+0x7d1/0xbe0 [ 356.846249][T11649] ? atime_needs_update+0x5f0/0x5f0 [ 356.851452][T11649] ? page_cache_pipe_buf_confirm+0x2b0/0x2b0 [ 356.857448][T11649] ? rw_verify_area+0x118/0x360 [ 356.862300][T11649] ? page_cache_pipe_buf_confirm+0x2b0/0x2b0 [ 356.868275][T11649] direct_splice_actor+0x126/0x1a0 [ 356.873382][T11649] splice_direct_to_actor+0x369/0x970 [ 356.878754][T11649] ? generic_pipe_buf_nosteal+0x10/0x10 [ 356.884300][T11649] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 356.890576][T11649] ? do_splice_to+0x190/0x190 [ 356.895265][T11649] ? rw_verify_area+0x118/0x360 [ 356.900113][T11649] do_splice_direct+0x1da/0x2a0 [ 356.904961][T11649] ? splice_direct_to_actor+0x970/0x970 [ 356.910508][T11649] ? rw_verify_area+0x118/0x360 [ 356.915364][T11649] do_sendfile+0x597/0xd00 [ 356.919785][T11649] ? do_compat_pwritev64+0x1c0/0x1c0 [ 356.925070][T11649] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 356.931304][T11649] ? put_timespec64+0xda/0x140 [ 356.936072][T11649] __x64_sys_sendfile64+0x1dd/0x220 [ 356.941270][T11649] ? __ia32_sys_sendfile+0x230/0x230 [ 356.946550][T11649] ? do_syscall_64+0x26/0x610 [ 356.951234][T11649] ? lockdep_hardirqs_on+0x418/0x5d0 [ 356.956519][T11649] ? trace_hardirqs_on+0x67/0x230 [ 356.961545][T11649] do_syscall_64+0x103/0x610 [ 356.966139][T11649] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 356.972031][T11649] RIP: 0033:0x457e29 [ 356.975926][T11649] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 356.995534][T11649] RSP: 002b:00007f0883b0dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 357.003946][T11649] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000457e29 [ 357.011914][T11649] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 357.019882][T11649] RBP: 000000000073c0e0 R08: 0000000000000000 R09: 0000000000000000 [ 357.027856][T11649] R10: 0000000000080005 R11: 0000000000000246 R12: 00007f0883b0e6d4 [ 357.035825][T11649] R13: 00000000004c4dce R14: 00000000004d8a58 R15: 00000000ffffffff [ 357.047728][T11649] BUG: Bad page state in process syz-executor.3 pfn:80cfb [ 357.055033][T11649] page:ffffea0002033ec0 count:0 mapcount:0 mapping:ffff888093229d40 index:0x5 [ 357.066423][T11649] shmem_aops [ 357.066430][T11649] name:"memfd:}#*nodevem2N," [ 357.069793][T11649] flags: 0x1fffc000008000e(referenced|uptodate|dirty|swapbacked) [ 357.084768][T11649] raw: 01fffc000008000e dead000000000100 dead000000000200 ffff888093229d40 [ 357.093473][T11649] raw: 0000000000000005 0000000000000000 00000000ffffffff 0000000000000000 [ 357.104605][T11649] page dumped because: non-NULL mapping [ 357.110218][T11649] Modules linked in: [ 357.115362][T11649] CPU: 1 PID: 11649 Comm: syz-executor.3 Tainted: G B 5.0.0-rc7-next-20190220 #39 [ 357.125870][T11649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 357.135916][T11649] Call Trace: [ 357.139216][T11649] dump_stack+0x172/0x1f0 [ 357.143565][T11649] bad_page.cold+0xda/0xff [ 357.147984][T11649] ? si_mem_available+0x320/0x320 [ 357.153005][T11649] ? trace_hardirqs_on+0x67/0x230 [ 357.158028][T11649] ? kasan_check_read+0x11/0x20 [ 357.162881][T11649] free_pages_check_bad+0x142/0x1a0 [ 357.168077][T11649] free_unref_page+0x3c6/0x600 [ 357.172837][T11649] __put_page+0x8d/0xd0 [ 357.176997][T11649] page_cache_pipe_buf_release+0x12b/0x180 [ 357.182801][T11649] iter_file_splice_write+0x7d1/0xbe0 [ 357.188166][T11649] ? atime_needs_update+0x5f0/0x5f0 [ 357.193376][T11649] ? page_cache_pipe_buf_confirm+0x2b0/0x2b0 [ 357.199372][T11649] ? rw_verify_area+0x118/0x360 [ 357.204224][T11649] ? page_cache_pipe_buf_confirm+0x2b0/0x2b0 [ 357.210209][T11649] direct_splice_actor+0x126/0x1a0 [ 357.215319][T11649] splice_direct_to_actor+0x369/0x970 [ 357.220686][T11649] ? generic_pipe_buf_nosteal+0x10/0x10 [ 357.226232][T11649] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 357.232466][T11649] ? do_splice_to+0x190/0x190 [ 357.237139][T11649] ? rw_verify_area+0x118/0x360 [ 357.241998][T11649] do_splice_direct+0x1da/0x2a0 [ 357.246844][T11649] ? splice_direct_to_actor+0x970/0x970 [ 357.252390][T11649] ? rw_verify_area+0x118/0x360 [ 357.257239][T11649] do_sendfile+0x597/0xd00 [ 357.261655][T11649] ? do_compat_pwritev64+0x1c0/0x1c0 [ 357.266935][T11649] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 357.273178][T11649] ? put_timespec64+0xda/0x140 [ 357.277952][T11649] __x64_sys_sendfile64+0x1dd/0x220 [ 357.283154][T11649] ? __ia32_sys_sendfile+0x230/0x230 [ 357.288432][T11649] ? do_syscall_64+0x26/0x610 [ 357.293102][T11649] ? lockdep_hardirqs_on+0x418/0x5d0 [ 357.298384][T11649] ? trace_hardirqs_on+0x67/0x230 [ 357.303409][T11649] do_syscall_64+0x103/0x610 [ 357.308006][T11649] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 357.313889][T11649] RIP: 0033:0x457e29 [ 357.317779][T11649] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 357.337378][T11649] RSP: 002b:00007f0883b0dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 357.345786][T11649] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000457e29 [ 357.353748][T11649] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 357.361713][T11649] RBP: 000000000073c0e0 R08: 0000000000000000 R09: 0000000000000000 [ 357.369678][T11649] R10: 0000000000080005 R11: 0000000000000246 R12: 00007f0883b0e6d4 [ 357.377641][T11649] R13: 00000000004c4dce R14: 00000000004d8a58 R15: 00000000ffffffff [ 357.387706][T11649] BUG: Bad page state in process syz-executor.3 pfn:784d3 [ 357.395008][T11649] page:ffffea0001e134c0 count:0 mapcount:0 mapping:ffff888093229d40 index:0x6 [ 357.404220][T11649] shmem_aops [ 357.404227][T11649] name:"memfd:}#*nodevem2N," [ 357.407589][T11649] flags: 0x1fffc000008000e(referenced|uptodate|dirty|swapbacked) [ 357.420401][T11649] raw: 01fffc000008000e dead000000000100 dead000000000200 ffff888093229d40 [ 357.429072][T11649] raw: 0000000000000006 0000000000000000 00000000ffffffff 0000000000000000 [ 357.438029][T11649] page dumped because: non-NULL mapping [ 357.443829][T11649] Modules linked in: [ 357.447810][T11649] CPU: 1 PID: 11649 Comm: syz-executor.3 Tainted: G B 5.0.0-rc7-next-20190220 #39 [ 357.458297][T11649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 357.468673][T11649] Call Trace: [ 357.471969][T11649] dump_stack+0x172/0x1f0 [ 357.476304][T11649] bad_page.cold+0xda/0xff [ 357.480714][T11649] ? si_mem_available+0x320/0x320 [ 357.485735][T11649] ? trace_hardirqs_on+0x67/0x230 [ 357.490753][T11649] ? kasan_check_read+0x11/0x20 [ 357.495603][T11649] free_pages_check_bad+0x142/0x1a0 [ 357.500795][T11649] free_unref_page+0x3c6/0x600 [ 357.505555][T11649] __put_page+0x8d/0xd0 [ 357.509717][T11649] page_cache_pipe_buf_release+0x12b/0x180 [ 357.515518][T11649] iter_file_splice_write+0x7d1/0xbe0 [ 357.520891][T11649] ? atime_needs_update+0x5f0/0x5f0 [ 357.526094][T11649] ? page_cache_pipe_buf_confirm+0x2b0/0x2b0 [ 357.532081][T11649] ? rw_verify_area+0x118/0x360 [ 357.537367][T11649] ? page_cache_pipe_buf_confirm+0x2b0/0x2b0 [ 357.543349][T11649] direct_splice_actor+0x126/0x1a0 [ 357.548458][T11649] splice_direct_to_actor+0x369/0x970 [ 357.553827][T11649] ? generic_pipe_buf_nosteal+0x10/0x10 [ 357.559371][T11649] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 357.565626][T11649] ? do_splice_to+0x190/0x190 [ 357.570306][T11649] ? rw_verify_area+0x118/0x360 [ 357.575152][T11649] do_splice_direct+0x1da/0x2a0 [ 357.580005][T11649] ? splice_direct_to_actor+0x970/0x970 [ 357.585553][T11649] ? rw_verify_area+0x118/0x360 [ 357.590401][T11649] do_sendfile+0x597/0xd00 [ 357.595385][T11649] ? do_compat_pwritev64+0x1c0/0x1c0 [ 357.600671][T11649] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 357.606911][T11649] ? put_timespec64+0xda/0x140 [ 357.611679][T11649] __x64_sys_sendfile64+0x1dd/0x220 [ 357.616879][T11649] ? __ia32_sys_sendfile+0x230/0x230 [ 357.622165][T11649] ? do_syscall_64+0x26/0x610 [ 357.626845][T11649] ? lockdep_hardirqs_on+0x418/0x5d0 [ 357.632128][T11649] ? trace_hardirqs_on+0x67/0x230 [ 357.637149][T11649] do_syscall_64+0x103/0x610 [ 357.641741][T11649] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 357.647626][T11649] RIP: 0033:0x457e29 [ 357.651516][T11649] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 357.671114][T11649] RSP: 002b:00007f0883b0dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 357.679521][T11649] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000457e29 [ 357.687487][T11649] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 357.695450][T11649] RBP: 000000000073c0e0 R08: 0000000000000000 R09: 0000000000000000 [ 357.703414][T11649] R10: 0000000000080005 R11: 0000000000000246 R12: 00007f0883b0e6d4 [ 357.711378][T11649] R13: 00000000004c4dce R14: 00000000004d8a58 R15: 00000000ffffffff [ 357.722534][T11649] BUG: Bad page state in process syz-executor.3 pfn:771b6 [ 357.733247][T11649] page:ffffea0001dc6d80 count:0 mapcount:0 mapping:ffff888093229d40 index:0x7 [ 357.742567][T11649] shmem_aops [ 357.742574][T11649] name:"memfd:}#*nodevem2N," [ 357.745941][T11649] flags: 0x1fffc000008000e(referenced|uptodate|dirty|swapbacked) [ 357.761102][T11649] raw: 01fffc000008000e dead000000000100 dead000000000200 ffff888093229d40 [ 357.769756][T11649] raw: 0000000000000007 0000000000000000 00000000ffffffff 0000000000000000 [ 357.781163][T11649] page dumped because: non-NULL mapping [ 357.786779][T11649] Modules linked in: [ 357.792631][T11649] CPU: 1 PID: 11649 Comm: syz-executor.3 Tainted: G B 5.0.0-rc7-next-20190220 #39 [ 357.803472][T11649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 357.813540][T11649] Call Trace: [ 357.816833][T11649] dump_stack+0x172/0x1f0 [ 357.821165][T11649] bad_page.cold+0xda/0xff [ 357.825583][T11649] ? si_mem_available+0x320/0x320 [ 357.830605][T11649] ? trace_hardirqs_on+0x67/0x230 [ 357.835624][T11649] ? kasan_check_read+0x11/0x20 [ 357.840475][T11649] free_pages_check_bad+0x142/0x1a0 [ 357.845670][T11649] free_unref_page+0x3c6/0x600 [ 357.850436][T11649] __put_page+0x8d/0xd0 [ 357.854591][T11649] page_cache_pipe_buf_release+0x12b/0x180 [ 357.860391][T11649] iter_file_splice_write+0x7d1/0xbe0 [ 357.865757][T11649] ? atime_needs_update+0x5f0/0x5f0 [ 357.870957][T11649] ? page_cache_pipe_buf_confirm+0x2b0/0x2b0 [ 357.876947][T11649] ? rw_verify_area+0x118/0x360 [ 357.881793][T11649] ? page_cache_pipe_buf_confirm+0x2b0/0x2b0 [ 357.887770][T11649] direct_splice_actor+0x126/0x1a0 [ 357.892880][T11649] splice_direct_to_actor+0x369/0x970 [ 357.898245][T11649] ? generic_pipe_buf_nosteal+0x10/0x10 [ 357.903786][T11649] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 357.910017][T11649] ? do_splice_to+0x190/0x190 [ 357.914693][T11649] ? rw_verify_area+0x118/0x360 [ 357.919543][T11649] do_splice_direct+0x1da/0x2a0 [ 357.924390][T11649] ? splice_direct_to_actor+0x970/0x970 [ 357.929934][T11649] ? rw_verify_area+0x118/0x360 [ 357.934786][T11649] do_sendfile+0x597/0xd00 [ 357.939213][T11649] ? do_compat_pwritev64+0x1c0/0x1c0 [ 357.944497][T11649] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 357.950730][T11649] ? put_timespec64+0xda/0x140 [ 357.955496][T11649] __x64_sys_sendfile64+0x1dd/0x220 [ 357.960693][T11649] ? __ia32_sys_sendfile+0x230/0x230 [ 357.965978][T11649] ? do_syscall_64+0x26/0x610 [ 357.970652][T11649] ? lockdep_hardirqs_on+0x418/0x5d0 [ 357.975932][T11649] ? trace_hardirqs_on+0x67/0x230 [ 357.980957][T11649] do_syscall_64+0x103/0x610 [ 357.985560][T11649] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 357.991444][T11649] RIP: 0033:0x457e29 [ 357.995334][T11649] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 358.014929][T11649] RSP: 002b:00007f0883b0dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 358.023340][T11649] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000457e29 [ 358.031308][T11649] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 358.039271][T11649] RBP: 000000000073c0e0 R08: 0000000000000000 R09: 0000000000000000 [ 358.047236][T11649] R10: 0000000000080005 R11: 0000000000000246 R12: 00007f0883b0e6d4 [ 358.055210][T11649] R13: 00000000004c4dce R14: 00000000004d8a58 R15: 00000000ffffffff [ 358.068529][T11649] BUG: Bad page state in process syz-executor.3 pfn:81eba [ 358.076994][T11649] page:ffffea000207ae80 count:0 mapcount:0 mapping:ffff888093229d40 index:0x8 [ 358.088654][T11649] shmem_aops [ 358.088660][T11649] name:"memfd:}#*nodevem2N," [ 358.092178][T11649] flags: 0x1fffc000008000e(referenced|uptodate|dirty|swapbacked) [ 358.107358][T11649] raw: 01fffc000008000e dead000000000100 dead000000000200 ffff888093229d40 [ 358.116207][T11649] raw: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 358.127509][T11649] page dumped because: non-NULL mapping [ 358.138655][T11649] Modules linked in: [ 358.142752][T11649] CPU: 0 PID: 11649 Comm: syz-executor.3 Tainted: G B 5.0.0-rc7-next-20190220 #39 [ 358.153247][T11649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 358.163291][T11649] Call Trace: [ 358.166585][T11649] dump_stack+0x172/0x1f0 [ 358.170917][T11649] bad_page.cold+0xda/0xff [ 358.175328][T11649] ? si_mem_available+0x320/0x320 [ 358.180360][T11649] ? trace_hardirqs_on+0x67/0x230 [ 358.185385][T11649] ? kasan_check_read+0x11/0x20 [ 358.190237][T11649] free_pages_check_bad+0x142/0x1a0 [ 358.195442][T11649] free_unref_page+0x3c6/0x600 [ 358.200216][T11649] __put_page+0x8d/0xd0 [ 358.204373][T11649] page_cache_pipe_buf_release+0x12b/0x180 [ 358.210178][T11649] iter_file_splice_write+0x7d1/0xbe0 [ 358.215555][T11649] ? atime_needs_update+0x5f0/0x5f0 [ 358.220754][T11649] ? page_cache_pipe_buf_confirm+0x2b0/0x2b0 [ 358.226739][T11649] ? rw_verify_area+0x118/0x360 [ 358.231584][T11649] ? page_cache_pipe_buf_confirm+0x2b0/0x2b0 [ 358.237561][T11649] direct_splice_actor+0x126/0x1a0 [ 358.242668][T11649] splice_direct_to_actor+0x369/0x970 [ 358.248037][T11649] ? generic_pipe_buf_nosteal+0x10/0x10 [ 358.253581][T11649] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 358.259817][T11649] ? do_splice_to+0x190/0x190 [ 358.264501][T11649] ? rw_verify_area+0x118/0x360 [ 358.269351][T11649] do_splice_direct+0x1da/0x2a0 [ 358.274210][T11649] ? splice_direct_to_actor+0x970/0x970 [ 358.279761][T11649] ? rw_verify_area+0x118/0x360 [ 358.284609][T11649] do_sendfile+0x597/0xd00 [ 358.289027][T11649] ? do_compat_pwritev64+0x1c0/0x1c0 [ 358.294308][T11649] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 358.300546][T11649] ? put_timespec64+0xda/0x140 [ 358.305312][T11649] __x64_sys_sendfile64+0x1dd/0x220 [ 358.310511][T11649] ? __ia32_sys_sendfile+0x230/0x230 [ 358.315801][T11649] ? do_syscall_64+0x26/0x610 [ 358.320480][T11649] ? lockdep_hardirqs_on+0x418/0x5d0 [ 358.325761][T11649] ? trace_hardirqs_on+0x67/0x230 [ 358.330782][T11649] do_syscall_64+0x103/0x610 [ 358.335473][T11649] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 358.341356][T11649] RIP: 0033:0x457e29 [ 358.345248][T11649] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 358.364845][T11649] RSP: 002b:00007f0883b0dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 358.373248][T11649] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000457e29 [ 358.381225][T11649] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 358.389196][T11649] RBP: 000000000073c0e0 R08: 0000000000000000 R09: 0000000000000000 [ 358.397164][T11649] R10: 0000000000080005 R11: 0000000000000246 R12: 00007f0883b0e6d4 [ 358.405140][T11649] R13: 00000000004c4dce R14: 00000000004d8a58 R15: 00000000ffffffff [ 358.413427][T11649] BUG: Bad page state in process syz-executor.3 pfn:7806e [ 358.423832][T11649] page:ffffea0001e01b80 count:0 mapcount:0 mapping:ffff888093229d40 index:0x9 [ 358.432962][T11649] shmem_aops [ 358.432968][T11649] name:"memfd:}#*nodevem2N," [ 358.436330][T11649] flags: 0x1fffc000008000e(referenced|uptodate|dirty|swapbacked) [ 358.451386][T11649] raw: 01fffc000008000e dead000000000100 dead000000000200 ffff888093229d40 [ 358.460035][T11649] raw: 0000000000000009 0000000000000000 00000000ffffffff 0000000000000000 [ 358.471779][T11649] page dumped because: non-NULL mapping [ 358.477388][T11649] Modules linked in: [ 358.482908][T11649] CPU: 0 PID: 11649 Comm: syz-executor.3 Tainted: G B 5.0.0-rc7-next-20190220 #39 [ 358.493405][T11649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 358.503491][T11649] Call Trace: [ 358.506781][T11649] dump_stack+0x172/0x1f0 [ 358.511114][T11649] bad_page.cold+0xda/0xff [ 358.515527][T11649] ? si_mem_available+0x320/0x320 [ 358.520547][T11649] ? trace_hardirqs_on+0x67/0x230 [ 358.525568][T11649] ? kasan_check_read+0x11/0x20 [ 358.530421][T11649] free_pages_check_bad+0x142/0x1a0 [ 358.535614][T11649] free_unref_page+0x3c6/0x600 [ 358.540379][T11649] __put_page+0x8d/0xd0 [ 358.544536][T11649] page_cache_pipe_buf_release+0x12b/0x180 [ 358.550337][T11649] iter_file_splice_write+0x7d1/0xbe0 [ 358.555704][T11649] ? atime_needs_update+0x5f0/0x5f0 [ 358.560905][T11649] ? page_cache_pipe_buf_confirm+0x2b0/0x2b0 [ 358.566893][T11649] ? rw_verify_area+0x118/0x360 [ 358.571740][T11649] ? page_cache_pipe_buf_confirm+0x2b0/0x2b0 [ 358.577714][T11649] direct_splice_actor+0x126/0x1a0 [ 358.582825][T11649] splice_direct_to_actor+0x369/0x970 [ 358.588200][T11649] ? generic_pipe_buf_nosteal+0x10/0x10 [ 358.593745][T11649] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 358.599987][T11649] ? do_splice_to+0x190/0x190 [ 358.604665][T11649] ? rw_verify_area+0x118/0x360 [ 358.609513][T11649] do_splice_direct+0x1da/0x2a0 [ 358.614362][T11649] ? splice_direct_to_actor+0x970/0x970 [ 358.619907][T11649] ? rw_verify_area+0x118/0x360 [ 358.624754][T11649] do_sendfile+0x597/0xd00 [ 358.629171][T11649] ? do_compat_pwritev64+0x1c0/0x1c0 [ 358.634468][T11649] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 358.640702][T11649] ? put_timespec64+0xda/0x140 [ 358.645475][T11649] __x64_sys_sendfile64+0x1dd/0x220 [ 358.650675][T11649] ? __ia32_sys_sendfile+0x230/0x230 [ 358.655961][T11649] ? do_syscall_64+0x26/0x610 [ 358.660638][T11649] ? lockdep_hardirqs_on+0x418/0x5d0 [ 358.665917][T11649] ? trace_hardirqs_on+0x67/0x230 [ 358.670942][T11649] do_syscall_64+0x103/0x610 [ 358.675533][T11649] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 358.681415][T11649] RIP: 0033:0x457e29 [ 358.685308][T11649] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 358.704905][T11649] RSP: 002b:00007f0883b0dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 358.713307][T11649] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000457e29 [ 358.721273][T11649] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 358.729235][T11649] RBP: 000000000073c0e0 R08: 0000000000000000 R09: 0000000000000000 [ 358.737205][T11649] R10: 0000000000080005 R11: 0000000000000246 R12: 00007f0883b0e6d4 [ 358.745174][T11649] R13: 00000000004c4dce R14: 00000000004d8a58 R15: 00000000ffffffff [ 358.756451][T11649] BUG: Bad page state in process syz-executor.3 pfn:78512 [ 358.763694][T11649] page:ffffea0001e14480 count:0 mapcount:0 mapping:ffff888093229d40 index:0xa [ 358.775312][T11649] shmem_aops [ 358.775319][T11649] name:"memfd:}#*nodevem2N," [ 358.778607][T11649] flags: 0x1fffc000008000e(referenced|uptodate|dirty|swapbacked) [ 358.794311][T11649] raw: 01fffc000008000e dead000000000100 dead000000000200 ffff888093229d40 [ 358.802943][T11649] raw: 000000000000000a 0000000000000000 00000000ffffffff 0000000000000000 [ 358.814261][T11649] page dumped because: non-NULL mapping [ 358.819798][T11649] Modules linked in: [ 358.823917][T11649] CPU: 0 PID: 11649 Comm: syz-executor.3 Tainted: G B 5.0.0-rc7-next-20190220 #39 [ 358.834412][T11649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 358.844457][T11649] Call Trace: [ 358.847751][T11649] dump_stack+0x172/0x1f0 [ 358.852085][T11649] bad_page.cold+0xda/0xff [ 358.856503][T11649] ? si_mem_available+0x320/0x320 [ 358.861527][T11649] ? trace_hardirqs_on+0x67/0x230 [ 358.866547][T11649] ? kasan_check_read+0x11/0x20 [ 358.871400][T11649] free_pages_check_bad+0x142/0x1a0 [ 358.876596][T11649] free_unref_page+0x3c6/0x600 [ 358.881360][T11649] __put_page+0x8d/0xd0 [ 358.885516][T11649] page_cache_pipe_buf_release+0x12b/0x180 [ 358.891319][T11649] iter_file_splice_write+0x7d1/0xbe0 [ 358.896684][T11649] ? atime_needs_update+0x5f0/0x5f0 [ 358.901892][T11649] ? page_cache_pipe_buf_confirm+0x2b0/0x2b0 [ 358.907884][T11649] ? rw_verify_area+0x118/0x360 [ 358.912732][T11649] ? page_cache_pipe_buf_confirm+0x2b0/0x2b0 [ 358.918703][T11649] direct_splice_actor+0x126/0x1a0 [ 358.923809][T11649] splice_direct_to_actor+0x369/0x970 [ 358.929178][T11649] ? generic_pipe_buf_nosteal+0x10/0x10 [ 358.934731][T11649] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 358.940963][T11649] ? do_splice_to+0x190/0x190 [ 358.945667][T11649] ? rw_verify_area+0x118/0x360 [ 358.950516][T11649] do_splice_direct+0x1da/0x2a0 [ 358.955361][T11649] ? splice_direct_to_actor+0x970/0x970 [ 358.960905][T11649] ? rw_verify_area+0x118/0x360 [ 358.965752][T11649] do_sendfile+0x597/0xd00 [ 358.970167][T11649] ? do_compat_pwritev64+0x1c0/0x1c0 [ 358.975457][T11649] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 358.981698][T11649] ? put_timespec64+0xda/0x140 [ 358.986470][T11649] __x64_sys_sendfile64+0x1dd/0x220 [ 358.991664][T11649] ? __ia32_sys_sendfile+0x230/0x230 [ 358.996943][T11649] ? do_syscall_64+0x26/0x610 [ 359.001619][T11649] ? lockdep_hardirqs_on+0x418/0x5d0 [ 359.006898][T11649] ? trace_hardirqs_on+0x67/0x230 [ 359.011918][T11649] do_syscall_64+0x103/0x610 [ 359.016507][T11649] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 359.022392][T11649] RIP: 0033:0x457e29 [ 359.026285][T11649] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 359.045879][T11649] RSP: 002b:00007f0883b0dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 359.054282][T11649] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000457e29 [ 359.062246][T11649] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 359.070216][T11649] RBP: 000000000073c0e0 R08: 0000000000000000 R09: 0000000000000000 [ 359.078178][T11649] R10: 0000000000080005 R11: 0000000000000246 R12: 00007f0883b0e6d4 [ 359.086152][T11649] R13: 00000000004c4dce R14: 00000000004d8a58 R15: 00000000ffffffff [ 359.098892][T11649] BUG: Bad page state in process syz-executor.3 pfn:7bf30 [ 359.107339][T11649] page:ffffea0001efcc00 count:0 mapcount:0 mapping:ffff888093229d40 index:0xb [ 359.118919][T11649] shmem_aops [ 359.118925][T11649] name:"memfd:}#*nodevem2N," [ 359.122423][T11649] flags: 0x1fffc000008000e(referenced|uptodate|dirty|swapbacked) [ 359.137535][T11649] raw: 01fffc000008000e dead000000000100 dead000000000200 ffff888093229d40 [ 359.146331][T11649] raw: 000000000000000b 0000000000000000 00000000ffffffff 0000000000000000 [ 359.157624][T11649] page dumped because: non-NULL mapping [ 359.163395][T11649] Modules linked in: [ 359.167352][T11649] CPU: 0 PID: 11649 Comm: syz-executor.3 Tainted: G B 5.0.0-rc7-next-20190220 #39 [ 359.177838][T11649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 359.187885][T11649] Call Trace: [ 359.191176][T11649] dump_stack+0x172/0x1f0 [ 359.195522][T11649] bad_page.cold+0xda/0xff [ 359.199935][T11649] ? si_mem_available+0x320/0x320 [ 359.204957][T11649] ? trace_hardirqs_on+0x67/0x230 [ 359.209977][T11649] ? kasan_check_read+0x11/0x20 [ 359.214830][T11649] free_pages_check_bad+0x142/0x1a0 [ 359.220033][T11649] free_unref_page+0x3c6/0x600 [ 359.224792][T11649] __put_page+0x8d/0xd0 [ 359.228958][T11649] page_cache_pipe_buf_release+0x12b/0x180 [ 359.234762][T11649] iter_file_splice_write+0x7d1/0xbe0 [ 359.240132][T11649] ? atime_needs_update+0x5f0/0x5f0 [ 359.245334][T11649] ? page_cache_pipe_buf_confirm+0x2b0/0x2b0 [ 359.251324][T11649] ? rw_verify_area+0x118/0x360 [ 359.256171][T11649] ? page_cache_pipe_buf_confirm+0x2b0/0x2b0 [ 359.262152][T11649] direct_splice_actor+0x126/0x1a0 [ 359.267264][T11649] splice_direct_to_actor+0x369/0x970 [ 359.272632][T11649] ? generic_pipe_buf_nosteal+0x10/0x10 [ 359.278174][T11649] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 359.284417][T11649] ? do_splice_to+0x190/0x190 [ 359.289095][T11649] ? rw_verify_area+0x118/0x360 [ 359.293944][T11649] do_splice_direct+0x1da/0x2a0 [ 359.298794][T11649] ? splice_direct_to_actor+0x970/0x970 [ 359.304341][T11649] ? rw_verify_area+0x118/0x360 [ 359.309187][T11649] do_sendfile+0x597/0xd00 [ 359.313619][T11649] ? do_compat_pwritev64+0x1c0/0x1c0 [ 359.318899][T11649] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 359.325135][T11649] ? put_timespec64+0xda/0x140 [ 359.329903][T11649] __x64_sys_sendfile64+0x1dd/0x220 [ 359.335106][T11649] ? __ia32_sys_sendfile+0x230/0x230 [ 359.340393][T11649] ? do_syscall_64+0x26/0x610 [ 359.345069][T11649] ? lockdep_hardirqs_on+0x418/0x5d0 [ 359.350350][T11649] ? trace_hardirqs_on+0x67/0x230 [ 359.355372][T11649] do_syscall_64+0x103/0x610 [ 359.359964][T11649] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 359.365849][T11649] RIP: 0033:0x457e29 [ 359.369742][T11649] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 359.389336][T11649] RSP: 002b:00007f0883b0dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 359.397745][T11649] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000457e29 [ 359.405709][T11649] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 359.413671][T11649] RBP: 000000000073c0e0 R08: 0000000000000000 R09: 0000000000000000 [ 359.421638][T11649] R10: 0000000000080005 R11: 0000000000000246 R12: 00007f0883b0e6d4 [ 359.429606][T11649] R13: 00000000004c4dce R14: 00000000004d8a58 R15: 00000000ffffffff [ 359.445503][T11649] BUG: Bad page state in process syz-executor.3 pfn:7d3f7 [ 359.453640][T11649] page:ffffea0001f4fdc0 count:0 mapcount:0 mapping:ffff888093229d40 index:0xc [ 359.464919][T11649] shmem_aops [ 359.464926][T11649] name:"memfd:}#*nodevem2N," [ 359.468354][T11649] flags: 0x1fffc000008000e(referenced|uptodate|dirty|swapbacked) [ 359.483511][T11649] raw: 01fffc000008000e dead000000000100 dead000000000200 ffff888093229d40 [ 359.492312][T11649] raw: 000000000000000c 0000000000000000 00000000ffffffff 0000000000000000 [ 359.505306][T11649] page dumped because: non-NULL mapping [ 359.511039][T11649] Modules linked in: [ 359.515015][T11649] CPU: 0 PID: 11649 Comm: syz-executor.3 Tainted: G B 5.0.0-rc7-next-20190220 #39 [ 359.525505][T11649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 359.535548][T11649] Call Trace: [ 359.538841][T11649] dump_stack+0x172/0x1f0 [ 359.543173][T11649] bad_page.cold+0xda/0xff [ 359.547593][T11649] ? si_mem_available+0x320/0x320 [ 359.552615][T11649] ? trace_hardirqs_on+0x67/0x230 [ 359.557636][T11649] ? kasan_check_read+0x11/0x20 [ 359.562489][T11649] free_pages_check_bad+0x142/0x1a0 [ 359.567686][T11649] free_unref_page+0x3c6/0x600 [ 359.572448][T11649] __put_page+0x8d/0xd0 [ 359.576607][T11649] page_cache_pipe_buf_release+0x12b/0x180 [ 359.582408][T11649] iter_file_splice_write+0x7d1/0xbe0 [ 359.587773][T11649] ? atime_needs_update+0x5f0/0x5f0 [ 359.593158][T11649] ? page_cache_pipe_buf_confirm+0x2b0/0x2b0 [ 359.599237][T11649] ? rw_verify_area+0x118/0x360 [ 359.604083][T11649] ? page_cache_pipe_buf_confirm+0x2b0/0x2b0 [ 359.610055][T11649] direct_splice_actor+0x126/0x1a0 [ 359.615161][T11649] splice_direct_to_actor+0x369/0x970 [ 359.620534][T11649] ? generic_pipe_buf_nosteal+0x10/0x10 [ 359.626095][T11649] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 359.632331][T11649] ? do_splice_to+0x190/0x190 [ 359.637005][T11649] ? rw_verify_area+0x118/0x360 [ 359.641880][T11649] do_splice_direct+0x1da/0x2a0 [ 359.646754][T11649] ? splice_direct_to_actor+0x970/0x970 [ 359.652298][T11649] ? rw_verify_area+0x118/0x360 [ 359.657147][T11649] do_sendfile+0x597/0xd00 [ 359.661565][T11649] ? do_compat_pwritev64+0x1c0/0x1c0 [ 359.666844][T11649] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 359.673079][T11649] ? put_timespec64+0xda/0x140 [ 359.677848][T11649] __x64_sys_sendfile64+0x1dd/0x220 [ 359.683045][T11649] ? __ia32_sys_sendfile+0x230/0x230 [ 359.688326][T11649] ? do_syscall_64+0x26/0x610 [ 359.692997][T11649] ? lockdep_hardirqs_on+0x418/0x5d0 [ 359.698279][T11649] ? trace_hardirqs_on+0x67/0x230 [ 359.703304][T11649] do_syscall_64+0x103/0x610 [ 359.707899][T11649] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 359.713784][T11649] RIP: 0033:0x457e29 [ 359.717675][T11649] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 359.737269][T11649] RSP: 002b:00007f0883b0dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 359.745673][T11649] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000457e29 [ 359.753636][T11649] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 359.761599][T11649] RBP: 000000000073c0e0 R08: 0000000000000000 R09: 0000000000000000 [ 359.769563][T11649] R10: 0000000000080005 R11: 0000000000000246 R12: 00007f0883b0e6d4 [ 359.777530][T11649] R13: 00000000004c4dce R14: 00000000004d8a58 R15: 00000000ffffffff [ 359.786770][T11649] BUG: Bad page state in process syz-executor.3 pfn:780ab [ 359.794020][T11649] page:ffffea0001e02ac0 count:0 mapcount:0 mapping:ffff888093229d40 index:0xd [ 359.803110][T11649] shmem_aops [ 359.803116][T11649] name:"memfd:}#*nodevem2N," [ 359.806405][T11649] flags: 0x1fffc000008000e(referenced|uptodate|dirty|swapbacked) [ 359.818955][T11649] raw: 01fffc000008000e dead000000000100 dead000000000200 ffff888093229d40 [ 359.828387][T11649] raw: 000000000000000d 0000000000000000 00000000ffffffff 0000000000000000 [ 359.837201][T11649] page dumped because: non-NULL mapping [ 359.842968][T11649] Modules linked in: [ 359.846921][T11649] CPU: 1 PID: 11649 Comm: syz-executor.3 Tainted: G B 5.0.0-rc7-next-20190220 #39 [ 359.857413][T11649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 359.867455][T11649] Call Trace: [ 359.870749][T11649] dump_stack+0x172/0x1f0 [ 359.875082][T11649] bad_page.cold+0xda/0xff [ 359.879497][T11649] ? si_mem_available+0x320/0x320 [ 359.884518][T11649] ? trace_hardirqs_on+0x67/0x230 [ 359.889535][T11649] ? kasan_check_read+0x11/0x20 [ 359.894469][T11649] free_pages_check_bad+0x142/0x1a0 [ 359.899664][T11649] free_unref_page+0x3c6/0x600 [ 359.904426][T11649] __put_page+0x8d/0xd0 [ 359.908582][T11649] page_cache_pipe_buf_release+0x12b/0x180 [ 359.914382][T11649] iter_file_splice_write+0x7d1/0xbe0 [ 359.919749][T11649] ? atime_needs_update+0x5f0/0x5f0 [ 359.924952][T11649] ? page_cache_pipe_buf_confirm+0x2b0/0x2b0 [ 359.930944][T11649] ? rw_verify_area+0x118/0x360 [ 359.935792][T11649] ? page_cache_pipe_buf_confirm+0x2b0/0x2b0 [ 359.941766][T11649] direct_splice_actor+0x126/0x1a0 [ 359.946877][T11649] splice_direct_to_actor+0x369/0x970 [ 359.952248][T11649] ? generic_pipe_buf_nosteal+0x10/0x10 [ 359.957790][T11649] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 359.964022][T11649] ? do_splice_to+0x190/0x190 [ 359.968695][T11649] ? rw_verify_area+0x118/0x360 [ 359.973542][T11649] do_splice_direct+0x1da/0x2a0 [ 359.978388][T11649] ? splice_direct_to_actor+0x970/0x970 [ 359.983933][T11649] ? rw_verify_area+0x118/0x360 [ 359.988787][T11649] do_sendfile+0x597/0xd00 [ 359.993210][T11649] ? do_compat_pwritev64+0x1c0/0x1c0 [ 359.998495][T11649] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 360.004732][T11649] ? put_timespec64+0xda/0x140 [ 360.009498][T11649] __x64_sys_sendfile64+0x1dd/0x220 [ 360.014696][T11649] ? __ia32_sys_sendfile+0x230/0x230 [ 360.019985][T11649] ? do_syscall_64+0x26/0x610 [ 360.024659][T11649] ? lockdep_hardirqs_on+0x418/0x5d0 [ 360.029974][T11649] ? trace_hardirqs_on+0x67/0x230 [ 360.034997][T11649] do_syscall_64+0x103/0x610 [ 360.039586][T11649] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 360.045472][T11649] RIP: 0033:0x457e29 [ 360.049367][T11649] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 360.068968][T11649] RSP: 002b:00007f0883b0dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 360.077375][T11649] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000457e29 [ 360.085337][T11649] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 360.093300][T11649] RBP: 000000000073c0e0 R08: 0000000000000000 R09: 0000000000000000 [ 360.101292][T11649] R10: 0000000000080005 R11: 0000000000000246 R12: 00007f0883b0e6d4 [ 360.109255][T11649] R13: 00000000004c4dce R14: 00000000004d8a58 R15: 00000000ffffffff [ 360.120158][T11649] BUG: Bad page state in process syz-executor.3 pfn:78513 [ 360.130130][T11649] page:ffffea0001e144c0 count:0 mapcount:0 mapping:ffff888093229d40 index:0xe [ 360.139401][T11649] shmem_aops [ 360.139407][T11649] name:"memfd:}#*nodevem2N," [ 360.145433][T11649] flags: 0x1fffc000008000e(referenced|uptodate|dirty|swapbacked) [ 360.159257][T11649] raw: 01fffc000008000e dead000000000100 dead000000000200 ffff888093229d40 [ 360.170844][T11649] raw: 000000000000000e 0000000000000000 00000000ffffffff 0000000000000000 [ 360.179484][T11649] page dumped because: non-NULL mapping [ 360.187388][T11649] Modules linked in: [ 360.191955][T11649] CPU: 1 PID: 11649 Comm: syz-executor.3 Tainted: G B 5.0.0-rc7-next-20190220 #39 [ 360.202450][T11649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 360.212496][T11649] Call Trace: [ 360.215783][T11649] dump_stack+0x172/0x1f0 [ 360.220119][T11649] bad_page.cold+0xda/0xff [ 360.224531][T11649] ? si_mem_available+0x320/0x320 [ 360.229554][T11649] ? trace_hardirqs_on+0x67/0x230 [ 360.234573][T11649] ? kasan_check_read+0x11/0x20 [ 360.239420][T11649] free_pages_check_bad+0x142/0x1a0 [ 360.244614][T11649] free_unref_page+0x3c6/0x600 [ 360.249375][T11649] __put_page+0x8d/0xd0 [ 360.253529][T11649] page_cache_pipe_buf_release+0x12b/0x180 [ 360.259330][T11649] iter_file_splice_write+0x7d1/0xbe0 [ 360.264698][T11649] ? atime_needs_update+0x5f0/0x5f0 [ 360.269899][T11649] ? page_cache_pipe_buf_confirm+0x2b0/0x2b0 [ 360.275884][T11649] ? rw_verify_area+0x118/0x360 [ 360.280727][T11649] ? page_cache_pipe_buf_confirm+0x2b0/0x2b0 [ 360.286700][T11649] direct_splice_actor+0x126/0x1a0 [ 360.291809][T11649] splice_direct_to_actor+0x369/0x970 [ 360.297174][T11649] ? generic_pipe_buf_nosteal+0x10/0x10 [ 360.302720][T11649] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 360.308951][T11649] ? do_splice_to+0x190/0x190 [ 360.313641][T11649] ? rw_verify_area+0x118/0x360 [ 360.318486][T11649] do_splice_direct+0x1da/0x2a0 [ 360.323337][T11649] ? splice_direct_to_actor+0x970/0x970 [ 360.328879][T11649] ? rw_verify_area+0x118/0x360 [ 360.333730][T11649] do_sendfile+0x597/0xd00 [ 360.338147][T11649] ? do_compat_pwritev64+0x1c0/0x1c0 [ 360.343429][T11649] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 360.349662][T11649] ? put_timespec64+0xda/0x140 [ 360.354429][T11649] __x64_sys_sendfile64+0x1dd/0x220 [ 360.359622][T11649] ? __ia32_sys_sendfile+0x230/0x230 [ 360.364918][T11649] ? do_syscall_64+0x26/0x610 [ 360.369605][T11649] ? lockdep_hardirqs_on+0x418/0x5d0 [ 360.374899][T11649] ? trace_hardirqs_on+0x67/0x230 [ 360.379923][T11649] do_syscall_64+0x103/0x610 [ 360.384535][T11649] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 360.390422][T11649] RIP: 0033:0x457e29 [ 360.394314][T11649] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 360.413913][T11649] RSP: 002b:00007f0883b0dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 360.422318][T11649] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000457e29 [ 360.430286][T11649] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 360.438250][T11649] RBP: 000000000073c0e0 R08: 0000000000000000 R09: 0000000000000000 [ 360.446223][T11649] R10: 0000000000080005 R11: 0000000000000246 R12: 00007f0883b0e6d4 [ 360.454185][T11649] R13: 00000000004c4dce R14: 00000000004d8a58 R15: 00000000ffffffff [ 360.466805][T11649] BUG: Bad page state in process syz-executor.3 pfn:77106 [ 360.474267][T11649] page:ffffea0001dc4180 count:0 mapcount:0 mapping:ffff888093229d40 index:0xf [ 360.485838][T11649] shmem_aops [ 360.485844][T11649] name:"memfd:}#*nodevem2N," [ 360.489179][T11649] flags: 0x1fffc000008000e(referenced|uptodate|dirty|swapbacked) [ 360.504279][T11649] raw: 01fffc000008000e dead000000000100 dead000000000200 ffff888093229d40 [ 360.513092][T11649] raw: 000000000000000f 0000000000000000 00000000ffffffff 0000000000000000 [ 360.524319][T11649] page dumped because: non-NULL mapping [ 360.529897][T11649] Modules linked in: [ 360.534032][T11649] CPU: 1 PID: 11649 Comm: syz-executor.3 Tainted: G B 5.0.0-rc7-next-20190220 #39 [ 360.544525][T11649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 360.554571][T11649] Call Trace: [ 360.557858][T11649] dump_stack+0x172/0x1f0 [ 360.562201][T11649] bad_page.cold+0xda/0xff [ 360.566613][T11649] ? si_mem_available+0x320/0x320 [ 360.571637][T11649] ? trace_hardirqs_on+0x67/0x230 [ 360.576655][T11649] ? kasan_check_read+0x11/0x20 [ 360.581504][T11649] free_pages_check_bad+0x142/0x1a0 [ 360.586698][T11649] free_unref_page+0x3c6/0x600 [ 360.591457][T11649] __put_page+0x8d/0xd0 [ 360.595613][T11649] page_cache_pipe_buf_release+0x12b/0x180 [ 360.601422][T11649] iter_file_splice_write+0x7d1/0xbe0 [ 360.606790][T11649] ? atime_needs_update+0x5f0/0x5f0 [ 360.611998][T11649] ? page_cache_pipe_buf_confirm+0x2b0/0x2b0 [ 360.617992][T11649] ? rw_verify_area+0x118/0x360 [ 360.622838][T11649] ? page_cache_pipe_buf_confirm+0x2b0/0x2b0 [ 360.628812][T11649] direct_splice_actor+0x126/0x1a0 [ 360.633923][T11649] splice_direct_to_actor+0x369/0x970 [ 360.639291][T11649] ? generic_pipe_buf_nosteal+0x10/0x10 [ 360.644836][T11649] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 360.651070][T11649] ? do_splice_to+0x190/0x190 [ 360.655742][T11649] ? rw_verify_area+0x118/0x360 [ 360.660586][T11649] do_splice_direct+0x1da/0x2a0 [ 360.665435][T11649] ? splice_direct_to_actor+0x970/0x970 [ 360.670988][T11649] ? rw_verify_area+0x118/0x360 [ 360.675838][T11649] do_sendfile+0x597/0xd00 [ 360.680258][T11649] ? do_compat_pwritev64+0x1c0/0x1c0 [ 360.685550][T11649] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 360.691912][T11649] ? put_timespec64+0xda/0x140 [ 360.696675][T11649] __x64_sys_sendfile64+0x1dd/0x220 [ 360.701873][T11649] ? __ia32_sys_sendfile+0x230/0x230 [ 360.707152][T11649] ? do_syscall_64+0x26/0x610 [ 360.711825][T11649] ? lockdep_hardirqs_on+0x418/0x5d0 [ 360.717102][T11649] ? trace_hardirqs_on+0x67/0x230 [ 360.722133][T11649] do_syscall_64+0x103/0x610 [ 360.726736][T11649] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 360.732618][T11649] RIP: 0033:0x457e29 [ 360.736510][T11649] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 10:49:57 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) syncfs(r1) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000300)=0x73, 0xff55) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e22, @multicast1}, 0x10) setsockopt$sock_int(r1, 0x1, 0x2f, &(0x7f0000000040), 0x4) clone(0x20003ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r2) r3 = syz_open_dev$loop(&(0x7f0000000540)='/dev/loop#\x00', 0x0, 0x105082) r4 = memfd_create(&(0x7f0000000180)='}#*nodevem2N,\x00', 0x0) pwritev(r4, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81000) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000580)={0x0, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xc}}, {0x2, 0x4e20, @local}, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x8, 0x0, 0x0, 0x0, 0x9, &(0x7f00000001c0)='bcsf0\x00', 0x1, 0x8000, 0x2}) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) ioctl$EVIOCGPROP(r2, 0x80404509, &(0x7f0000000840)=""/238) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x360) fcntl$setstatus(r0, 0x4, 0x4000042800) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f00000001c0), 0x526987c9) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x0) read(r5, &(0x7f0000000200)=""/250, 0x50c7e3e3) ioctl$sock_inet_SIOCRTMSG(r1, 0x890d, &(0x7f0000000780)={0x0, {0x2, 0x4e22, @multicast1}, {0x2, 0x4e23, @loopback}, {0x2, 0x4e22, @remote}, 0x83, 0x0, 0x0, 0x0, 0x9802, 0x0, 0x80000001, 0x0, 0x5}) sendfile(r3, r4, 0x0, 0x80005) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f00000003c0)={0x0}, &(0x7f0000000400)=0xc) syz_open_procfs(r7, &(0x7f0000000380)='envh&on\x00') ioctl$sock_SIOCGIFBR(r2, 0x8940, &(0x7f0000000800)=@add_del={0x2, &(0x7f0000000140)='vcan0\x00'}) syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_mcast\x00') openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) [ 360.756105][T11649] RSP: 002b:00007f0883b0dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 360.764510][T11649] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000457e29 [ 360.772476][T11649] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 360.780443][T11649] RBP: 000000000073c0e0 R08: 0000000000000000 R09: 0000000000000000 [ 360.788407][T11649] R10: 0000000000080005 R11: 0000000000000246 R12: 00007f0883b0e6d4 [ 360.796370][T11649] R13: 00000000004c4dce R14: 00000000004d8a58 R15: 00000000ffffffff 10:49:57 executing program 1: 10:49:57 executing program 2: r0 = socket$packet(0x11, 0x40800000000003, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x80, 0x1f8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000500)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000140)={0x11, 0x800, r3, 0x1, 0x0, 0x6, @random="286e6a8d6980"}, 0x14) r4 = dup2(r0, r0) sendto$inet6(r4, &(0x7f00000002c0)="020400000300603900382b8a5b5aa242b90516db4d23a3bb09f82632e33715d26206cd6b80a7699507938207d9fb3780d88d5375000001000000301e", 0x3c, 0x0, 0x0, 0x0) 10:49:57 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f000051cff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000943ffc)=0x7) read(r0, &(0x7f00003fefff)=""/1, 0x1) readv(r0, &(0x7f00000002c0)=[{&(0x7f0000cd8000)=""/1, 0x2e171c03}], 0x1) ioctl$TCSETSF(r0, 0x5404, 0x0) 10:49:57 executing program 0: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xffffff67) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) lseek(r1, 0xffffffffffffffff, 0x3) 10:49:57 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) syncfs(r1) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000300)=0x73, 0xff55) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e22, @multicast1}, 0x10) setsockopt$sock_int(r1, 0x1, 0x2f, &(0x7f0000000040), 0x4) clone(0x20003ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r2) r3 = syz_open_dev$loop(&(0x7f0000000540)='/dev/loop#\x00', 0x0, 0x105082) r4 = memfd_create(&(0x7f0000000180)='}#*nodevem2N,\x00', 0x0) pwritev(r4, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81000) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000580)={0x0, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xc}}, {0x2, 0x4e20, @local}, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x8, 0x0, 0x0, 0x0, 0x9, &(0x7f00000001c0)='bcsf0\x00', 0x1, 0x8000, 0x2}) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) ioctl$EVIOCGPROP(r2, 0x80404509, &(0x7f0000000840)=""/238) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x360) fcntl$setstatus(r0, 0x4, 0x4000042800) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f00000001c0), 0x526987c9) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x0) read(r5, &(0x7f0000000200)=""/250, 0x50c7e3e3) ioctl$sock_inet_SIOCRTMSG(r1, 0x890d, &(0x7f0000000780)={0x0, {0x2, 0x4e22, @multicast1}, {0x2, 0x4e23, @loopback}, {0x2, 0x4e22, @remote}, 0x83, 0x0, 0x0, 0x0, 0x9802, 0x0, 0x80000001, 0x0, 0x5}) sendfile(r3, r4, 0x0, 0x80005) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f00000003c0)={0x0}, &(0x7f0000000400)=0xc) syz_open_procfs(r7, &(0x7f0000000380)='envh&on\x00') ioctl$sock_SIOCGIFBR(r2, 0x8940, &(0x7f0000000800)=@add_del={0x2, &(0x7f0000000140)='vcan0\x00'}) syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_mcast\x00') openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) [ 360.940324][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 360.946153][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 361.309431][ T26] audit: type=1804 audit(1550659797.561:42): pid=11699 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir280820719/syzkaller.kxL0Ib/174/file0" dev="sda1" ino=16532 res=1 [ 361.500337][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 361.506209][ C1] protocol 88fb is buggy, dev hsr_slave_1 10:49:57 executing program 0: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xffffff67) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) lseek(r1, 0xffffffffffffffff, 0x3) 10:49:57 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f000051cff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000943ffc)=0x7) read(r0, &(0x7f00003fefff)=""/1, 0x1) readv(r0, &(0x7f00000002c0)=[{&(0x7f0000cd8000)=""/1, 0x2e171c03}], 0x1) ioctl$TCSETSF(r0, 0x5404, 0x0) 10:49:58 executing program 1: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xffffff67) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) lseek(r1, 0xffffffffffffffff, 0x3) [ 362.248856][ T26] audit: type=1804 audit(1550659798.501:43): pid=11726 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir703738804/syzkaller.mLJ1Nt/247/file0" dev="sda1" ino=16577 res=1 [ 362.328231][ T26] audit: type=1804 audit(1550659798.561:44): pid=11720 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir280820719/syzkaller.kxL0Ib/175/file0" dev="sda1" ino=16641 res=1 10:49:58 executing program 4: 10:49:58 executing program 4: