, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ptrace$getenv(0x4201, 0x0, 0x0, &(0x7f0000000280))
mount$overlay(0x404000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]})
ioctl$KDGKBMETA(0xffffffffffffffff, 0x4b62, 0x0)
close(0xffffffffffffffff)
sendto(r0, &(0x7f0000000580)="9227303d8a801e20f3c10ebb33ea106cd27e7eb3d67a5f46b5d82865a2b65da1f11a6c0922422ce150e488a8e908e0b26a2318ec76f026b63277a57e010cd01634fbbdc9827272d7f17cf83489a3e9b14b870868b934b2a85eb15701ad125a910e1cd93cbb9855cdf944f8327aa2f8f9454d1e6ec61f9d016ca52250697ba7b65d7749608bc1ce1cfd1663cb9dc88781b7633367954402b3d2419c72fe710946f8f0dff6642f0a4afb2a784ac9829bf0af4aeb9039f4eaad0d7e77b1a82d51d8dcafaf1714888e0851296284f7c6c2dc52d0e9d6d0080f5a4d3e44", 0xdb, 0x20000000, 0x0, 0x0)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, <r1=>0x0})
setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x127)
setxattr$system_posix_acl(&(0x7f0000000180)='./file1\x00', &(0x7f0000000380)='system.posix_acl_default\x00', &(0x7f00000003c0)={{}, {0x1, 0x3}, [{}, {0x2, 0x1}, {0x2, 0x1}], {0x4, 0x7}, [{}, {0x8, 0x4}, {0x8, 0x4}, {0x8, 0x6}, {0x8, 0x7}], {0x10, 0x4}, {0x20, 0x3}}, 0x64, 0x2)
recvmmsg(0xffffffffffffffff, &(0x7f0000004a00)=[{{0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f0000000b80)=""/33, 0x21}, {&(0x7f0000000bc0)=""/130, 0x82}, {0x0}], 0x3, &(0x7f0000001ec0)=""/203, 0xcb}}, {{&(0x7f0000001fc0)=@pppoe={0x18, 0x0, {0x0, @link_local}}, 0x80, &(0x7f00000033c0)=[{&(0x7f0000002080)=""/123, 0x7b}, {0x0}, {&(0x7f0000003180)=""/130, 0x82}, {&(0x7f0000003240)=""/192, 0xc0}], 0x4, &(0x7f0000003440)=""/35, 0x23, 0x3098}, 0x7fffffff}, {{0x0, 0x0, &(0x7f0000004540)=[{&(0x7f0000003480)=""/4096, 0x1000}, {0x0}, {&(0x7f00000044c0)=""/125, 0x7d}], 0x3, &(0x7f0000004580)=""/129, 0x81, 0x1ff}, 0x3}, {{0x0, 0x0, &(0x7f0000004900)=[{&(0x7f0000004640)=""/100, 0x64}, {&(0x7f00000046c0)=""/211, 0xd3}, {&(0x7f0000004880)=""/112, 0x70}], 0x3, &(0x7f0000004940)=""/130, 0x82, 0x5}, 0x8}], 0x4, 0x0, 0x0)

09:18:56 executing program 2:
mmap(&(0x7f0000000000/0xc72000)=nil, 0xc72000, 0x0, 0x32, 0xffffffffffffffff, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)={@initdev, @dev}, 0x10)

09:18:56 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f00000001c0)=""/219, 0xdb}], 0x1}}], 0x1, 0x0, 0x0)
r2 = openat$cgroup_type(r1, &(0x7f00000002c0)='cgroup.type\x00', 0x2, 0x0)
readv(r2, &(0x7f0000000540), 0x10000000000002f4)

09:18:56 executing program 2:
mmap(&(0x7f0000000000/0xc72000)=nil, 0xc72000, 0x0, 0x32, 0xffffffffffffffff, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)={@initdev, @dev}, 0x10)

09:18:56 executing program 3:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendmsg$inet_sctp(r0, &(0x7f00000007c0)={&(0x7f0000000180)=@in={0x2, 0x0, @loopback}, 0x10, &(0x7f0000000640), 0x80, &(0x7f0000000240)=[@prinfo={0x18, 0x84, 0x8}], 0x18}, 0x0)

09:18:56 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f00000001c0)=""/219, 0xdb}], 0x1}}], 0x1, 0x0, 0x0)
r2 = openat$cgroup_type(r1, &(0x7f00000002c0)='cgroup.type\x00', 0x2, 0x0)
readv(r2, &(0x7f0000000540), 0x10000000000002f4)

[  288.077427][T12159] overlayfs: filesystem on './file0' not supported as upperdir
09:18:56 executing program 2:
mmap(&(0x7f0000000000/0xc72000)=nil, 0xc72000, 0x0, 0x32, 0xffffffffffffffff, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)={@initdev, @dev}, 0x10)

09:18:56 executing program 3:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendmsg$inet_sctp(r0, &(0x7f00000007c0)={&(0x7f0000000180)=@in={0x2, 0x0, @loopback}, 0x10, &(0x7f0000000640), 0x80, &(0x7f0000000240)=[@prinfo={0x18, 0x84, 0x8}], 0x18}, 0x0)

09:18:56 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = socket$inet6(0xa, 0x3, 0x4000000000084)
connect$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c)
sendmsg(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="ba02000000000000001c857b02adc2f2", 0x10}], 0x1}, 0x0)

[  288.311938][T12179] dccp_check_seqno: Step 6 failed for RESET packet, (LSWL(249390677988387) <= P.seqno(0) <= S.SWH(249390677988461)) and (P.ackno exists or LAWL(170326472049238) <= P.ackno(170326472049239) <= S.AWH(170326472049239), sending SYNC...
[  288.413334][T12180] dccp_check_seqno: Step 6 failed for RESET packet, (LSWL(198646971430872) <= P.seqno(0) <= S.SWH(198646971430946)) and (P.ackno exists or LAWL(92380779844956) <= P.ackno(92380779844957) <= S.AWH(92380779844957), sending SYNC...
[  288.476466][T12142] dccp_close: ABORT with 1061 bytes unread
09:18:56 executing program 4:
r0 = socket$inet6(0xa, 0x3, 0x8806)
fdatasync(r0)
socket$inet6(0xa, 0x3, 0xb8d)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYRES16=r1], 0x1}, 0x1, 0x0, 0x0, 0x90}, 0xfffffffffffffffd)
r2 = syz_open_procfs(0x0, &(0x7f0000000200)='/exe\x00\x00\xc1\x00\x00\x00\x00\x00\xe9\xff\a\x00\x00\x00\x00\x00\x00T\xfa\aBJ\xde\xe9\x16\xd2\xdau\xaf\xe7\v5\xa0\xfdj\x1f\x02\x00\xf5\xab&\xd7\xa0q\xfb53\x1c\xe3\x9cZehd\x10\x06\xd7\xc0 jt\xe33&S\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00')
fcntl$setstatus(r2, 0x4, 0x800)
r3 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c)
syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x107fe)
r4 = mq_open(&(0x7f0000000000)='..\x00', 0x0, 0x0, &(0x7f0000000040))
r5 = socket$inet_dccp(0x2, 0x6, 0x0)
listen(r3, 0x6)
setsockopt(r5, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1)
connect$inet(r5, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10)
connect$netlink(r2, &(0x7f00000001c0)=@unspec, 0xc)
ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r0)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000440)={'bcsh0\x00', &(0x7f00000002c0)=@ethtool_perm_addr={0x20, 0x69, "3ac6a7be1146f1b82a29b37471c2335f9efe2f6853a7431dadbb66a0a63e7eb8801772f37289412b769e87e04cdea2e149004df07a48aed39bdf1f681271e92dbceff91524497acfe6d5cd22d44e62d88c82211ef49cfd0e7743bc7a055821ff1cfce9728d3390897c"}})
r6 = accept(r3, 0x0, &(0x7f0000000080)=0xfe0f)
connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c)
read(r5, &(0x7f0000000480)=""/144, 0x90)
setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4)
setsockopt$sock_timeval(r0, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x2710}, 0x10)
syz_open_dev$adsp(&(0x7f00000003c0)='/dev/adsp#\x00', 0x101, 0x7fffc)
inotify_add_watch(r5, &(0x7f0000000180)='./file0\x00', 0x9)
write(r4, &(0x7f0000000540)="3428c10fa241de78f3abf5d8c492a3fd240461ee9370f14065ecd9a06f506a705e553820acca7d849c84f09fe855afea21cb43a2d6ba493139ac562239130bc7055f30079d6d7f8806588885fbf2cd16b08279105d29d04cf398b26ef4ed84538c81650ff9158778200f99e1d9ea87eaa7f55bf4450d9fdd1b7411a9461125234f1491d110c77c950ae18337d3de7b5825eb0b27238bc45101731c229e0afdc33e51bb76394806612cd0ee2269cc6b5ba2d74a320e", 0xb5)
socket$inet6(0xa, 0x7, 0x8)
sendmmsg(r5, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x3a6, 0x0)
setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000100)='erspan0\x00', 0xfc)
sendmmsg(r2, &(0x7f000000a080)=[{{&(0x7f0000005440)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2, {0xa, 0x0, 0x0, @ipv4={[], [], @local}}}}, 0x80, &(0x7f0000005640)=[{&(0x7f00000097c0)="bf", 0x1}], 0x1, 0x0, 0x0, 0x1}}], 0x1, 0x0)

09:18:56 executing program 2:
mmap(&(0x7f0000000000/0xc72000)=nil, 0xc72000, 0x0, 0x32, 0xffffffffffffffff, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)={@initdev, @dev}, 0x10)

09:18:56 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f00000001c0)=""/219, 0xdb}], 0x1}}], 0x1, 0x0, 0x0)
r2 = openat$cgroup_type(r1, &(0x7f00000002c0)='cgroup.type\x00', 0x2, 0x0)
readv(r2, &(0x7f0000000540), 0x10000000000002f4)

09:18:56 executing program 1:
r0 = socket$inet6(0xa, 0x3, 0x8806)
fdatasync(r0)
socket$inet6(0xa, 0x3, 0xb8d)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYRES16=r1], 0x1}, 0x1, 0x0, 0x0, 0x90}, 0xfffffffffffffffd)
r2 = syz_open_procfs(0x0, &(0x7f0000000200)='/exe\x00\x00\xc1\x00\x00\x00\x00\x00\xe9\xff\a\x00\x00\x00\x00\x00\x00T\xfa\aBJ\xde\xe9\x16\xd2\xdau\xaf\xe7\v5\xa0\xfdj\x1f\x02\x00\xf5\xab&\xd7\xa0q\xfb53\x1c\xe3\x9cZehd\x10\x06\xd7\xc0 jt\xe33&S\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00')
fcntl$setstatus(r2, 0x4, 0x800)
r3 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c)
syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x107fe)
r4 = mq_open(&(0x7f0000000000)='..\x00', 0x0, 0x0, &(0x7f0000000040))
r5 = socket$inet_dccp(0x2, 0x6, 0x0)
listen(r3, 0x6)
setsockopt(r5, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1)
connect$inet(r5, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10)
connect$netlink(r2, &(0x7f00000001c0)=@unspec, 0xc)
ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r0)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000440)={'bcsh0\x00', &(0x7f00000002c0)=@ethtool_perm_addr={0x20, 0x69, "3ac6a7be1146f1b82a29b37471c2335f9efe2f6853a7431dadbb66a0a63e7eb8801772f37289412b769e87e04cdea2e149004df07a48aed39bdf1f681271e92dbceff91524497acfe6d5cd22d44e62d88c82211ef49cfd0e7743bc7a055821ff1cfce9728d3390897c"}})
r6 = accept(r3, 0x0, &(0x7f0000000080)=0xfe0f)
connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c)
read(r5, &(0x7f0000000480)=""/144, 0x90)
setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4)
setsockopt$sock_timeval(r0, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x2710}, 0x10)
syz_open_dev$adsp(&(0x7f00000003c0)='/dev/adsp#\x00', 0x101, 0x7fffc)
inotify_add_watch(r5, &(0x7f0000000180)='./file0\x00', 0x9)
write(r4, &(0x7f0000000540)="3428c10fa241de78f3abf5d8c492a3fd240461ee9370f14065ecd9a06f506a705e553820acca7d849c84f09fe855afea21cb43a2d6ba493139ac562239130bc7055f30079d6d7f8806588885fbf2cd16b08279105d29d04cf398b26ef4ed84538c81650ff9158778200f99e1d9ea87eaa7f55bf4450d9fdd1b7411a9461125234f1491d110c77c950ae18337d3de7b5825eb0b27238bc45101731c229e0afdc33e51bb76394806612cd0ee2269cc6b5ba2d74a320e", 0xb5)
socket$inet6(0xa, 0x7, 0x8)
sendmmsg(r5, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x3a6, 0x0)
setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000100)='erspan0\x00', 0xfc)
sendmmsg(r2, &(0x7f000000a080)=[{{&(0x7f0000005440)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2, {0xa, 0x0, 0x0, @ipv4={[], [], @local}}}}, 0x80, &(0x7f0000005640)=[{&(0x7f00000097c0)="bf", 0x1}], 0x1, 0x0, 0x0, 0x1}}], 0x1, 0x0)

09:18:56 executing program 3:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendmsg$inet_sctp(r0, &(0x7f00000007c0)={&(0x7f0000000180)=@in={0x2, 0x0, @loopback}, 0x10, &(0x7f0000000640), 0x80, &(0x7f0000000240)=[@prinfo={0x18, 0x84, 0x8}], 0x18}, 0x0)

09:18:56 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = socket$inet6(0xa, 0x3, 0x4000000000084)
connect$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c)
sendmsg(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="ba02000000000000001c857b02adc2f2", 0x10}], 0x1}, 0x0)

[  288.586673][T12143] dccp_close: ABORT with 1061 bytes unread
09:18:56 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
bind$rxrpc(0xffffffffffffffff, &(0x7f0000002300)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev, 0xfffffffffffffffd}}, 0x24)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000002300)=ANY=[], &(0x7f0000000100)=""/4096, 0x230020, 0x1000, 0x1}, 0x20)

09:18:56 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f00000001c0)=""/219, 0xdb}], 0x1}}], 0x1, 0x0, 0x0)
r2 = openat$cgroup_type(r1, &(0x7f00000002c0)='cgroup.type\x00', 0x2, 0x0)
readv(r2, &(0x7f0000000540), 0x10000000000002f4)

09:18:56 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = socket$inet6(0xa, 0x3, 0x4000000000084)
connect$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c)
sendmsg(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="ba02000000000000001c857b02adc2f2", 0x10}], 0x1}, 0x0)

09:18:57 executing program 3:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000050d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timer_create(0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
timer_settime(0x0, 0x0, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)

09:18:57 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
bind$rxrpc(0xffffffffffffffff, &(0x7f0000002300)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev, 0xfffffffffffffffd}}, 0x24)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000002300)=ANY=[], &(0x7f0000000100)=""/4096, 0x230020, 0x1000, 0x1}, 0x20)

09:18:57 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)=ANY=[@ANYBLOB="f2c3"], 0x1}}, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x119000})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x6c)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  289.229499][T12248] dccp_check_seqno: Step 6 failed for RESET packet, (LSWL(178204811038638) <= P.seqno(0) <= S.SWH(178204811038712)) and (P.ackno exists or LAWL(39549892884634) <= P.ackno(39549892884635) <= S.AWH(39549892884635), sending SYNC...
[  289.263286][T12230] dccp_check_seqno: Step 6 failed for RESET packet, (LSWL(14291497820654) <= P.seqno(0) <= S.SWH(14291497820728)) and (P.ackno exists or LAWL(22442272863896) <= P.ackno(22442272863897) <= S.AWH(22442272863897), sending SYNC...
09:18:57 executing program 4:
r0 = socket$inet6(0xa, 0x3, 0x8806)
fdatasync(r0)
socket$inet6(0xa, 0x3, 0xb8d)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYRES16=r1], 0x1}, 0x1, 0x0, 0x0, 0x90}, 0xfffffffffffffffd)
r2 = syz_open_procfs(0x0, &(0x7f0000000200)='/exe\x00\x00\xc1\x00\x00\x00\x00\x00\xe9\xff\a\x00\x00\x00\x00\x00\x00T\xfa\aBJ\xde\xe9\x16\xd2\xdau\xaf\xe7\v5\xa0\xfdj\x1f\x02\x00\xf5\xab&\xd7\xa0q\xfb53\x1c\xe3\x9cZehd\x10\x06\xd7\xc0 jt\xe33&S\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00')
fcntl$setstatus(r2, 0x4, 0x800)
r3 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c)
syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x107fe)
r4 = mq_open(&(0x7f0000000000)='..\x00', 0x0, 0x0, &(0x7f0000000040))
r5 = socket$inet_dccp(0x2, 0x6, 0x0)
listen(r3, 0x6)
setsockopt(r5, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1)
connect$inet(r5, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10)
connect$netlink(r2, &(0x7f00000001c0)=@unspec, 0xc)
ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r0)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000440)={'bcsh0\x00', &(0x7f00000002c0)=@ethtool_perm_addr={0x20, 0x69, "3ac6a7be1146f1b82a29b37471c2335f9efe2f6853a7431dadbb66a0a63e7eb8801772f37289412b769e87e04cdea2e149004df07a48aed39bdf1f681271e92dbceff91524497acfe6d5cd22d44e62d88c82211ef49cfd0e7743bc7a055821ff1cfce9728d3390897c"}})
r6 = accept(r3, 0x0, &(0x7f0000000080)=0xfe0f)
connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c)
read(r5, &(0x7f0000000480)=""/144, 0x90)
setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4)
setsockopt$sock_timeval(r0, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x2710}, 0x10)
syz_open_dev$adsp(&(0x7f00000003c0)='/dev/adsp#\x00', 0x101, 0x7fffc)
inotify_add_watch(r5, &(0x7f0000000180)='./file0\x00', 0x9)
write(r4, &(0x7f0000000540)="3428c10fa241de78f3abf5d8c492a3fd240461ee9370f14065ecd9a06f506a705e553820acca7d849c84f09fe855afea21cb43a2d6ba493139ac562239130bc7055f30079d6d7f8806588885fbf2cd16b08279105d29d04cf398b26ef4ed84538c81650ff9158778200f99e1d9ea87eaa7f55bf4450d9fdd1b7411a9461125234f1491d110c77c950ae18337d3de7b5825eb0b27238bc45101731c229e0afdc33e51bb76394806612cd0ee2269cc6b5ba2d74a320e", 0xb5)
socket$inet6(0xa, 0x7, 0x8)
sendmmsg(r5, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x3a6, 0x0)
setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000100)='erspan0\x00', 0xfc)
sendmmsg(r2, &(0x7f000000a080)=[{{&(0x7f0000005440)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2, {0xa, 0x0, 0x0, @ipv4={[], [], @local}}}}, 0x80, &(0x7f0000005640)=[{&(0x7f00000097c0)="bf", 0x1}], 0x1, 0x0, 0x0, 0x1}}], 0x1, 0x0)

09:18:57 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = socket$inet6(0xa, 0x3, 0x4000000000084)
connect$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c)
sendmsg(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="ba02000000000000001c857b02adc2f2", 0x10}], 0x1}, 0x0)

[  289.329412][T12209] dccp_close: ABORT with 1061 bytes unread
[  289.336185][T12220] dccp_close: ABORT with 1061 bytes unread
09:18:57 executing program 1:
r0 = socket$inet6(0xa, 0x3, 0x8806)
fdatasync(r0)
socket$inet6(0xa, 0x3, 0xb8d)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYRES16=r1], 0x1}, 0x1, 0x0, 0x0, 0x90}, 0xfffffffffffffffd)
r2 = syz_open_procfs(0x0, &(0x7f0000000200)='/exe\x00\x00\xc1\x00\x00\x00\x00\x00\xe9\xff\a\x00\x00\x00\x00\x00\x00T\xfa\aBJ\xde\xe9\x16\xd2\xdau\xaf\xe7\v5\xa0\xfdj\x1f\x02\x00\xf5\xab&\xd7\xa0q\xfb53\x1c\xe3\x9cZehd\x10\x06\xd7\xc0 jt\xe33&S\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00')
fcntl$setstatus(r2, 0x4, 0x800)
r3 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c)
syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x107fe)
r4 = mq_open(&(0x7f0000000000)='..\x00', 0x0, 0x0, &(0x7f0000000040))
r5 = socket$inet_dccp(0x2, 0x6, 0x0)
listen(r3, 0x6)
setsockopt(r5, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1)
connect$inet(r5, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10)
connect$netlink(r2, &(0x7f00000001c0)=@unspec, 0xc)
ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r0)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000440)={'bcsh0\x00', &(0x7f00000002c0)=@ethtool_perm_addr={0x20, 0x69, "3ac6a7be1146f1b82a29b37471c2335f9efe2f6853a7431dadbb66a0a63e7eb8801772f37289412b769e87e04cdea2e149004df07a48aed39bdf1f681271e92dbceff91524497acfe6d5cd22d44e62d88c82211ef49cfd0e7743bc7a055821ff1cfce9728d3390897c"}})
r6 = accept(r3, 0x0, &(0x7f0000000080)=0xfe0f)
connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c)
read(r5, &(0x7f0000000480)=""/144, 0x90)
setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4)
setsockopt$sock_timeval(r0, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x2710}, 0x10)
syz_open_dev$adsp(&(0x7f00000003c0)='/dev/adsp#\x00', 0x101, 0x7fffc)
inotify_add_watch(r5, &(0x7f0000000180)='./file0\x00', 0x9)
write(r4, &(0x7f0000000540)="3428c10fa241de78f3abf5d8c492a3fd240461ee9370f14065ecd9a06f506a705e553820acca7d849c84f09fe855afea21cb43a2d6ba493139ac562239130bc7055f30079d6d7f8806588885fbf2cd16b08279105d29d04cf398b26ef4ed84538c81650ff9158778200f99e1d9ea87eaa7f55bf4450d9fdd1b7411a9461125234f1491d110c77c950ae18337d3de7b5825eb0b27238bc45101731c229e0afdc33e51bb76394806612cd0ee2269cc6b5ba2d74a320e", 0xb5)
socket$inet6(0xa, 0x7, 0x8)
sendmmsg(r5, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x3a6, 0x0)
setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000100)='erspan0\x00', 0xfc)
sendmmsg(r2, &(0x7f000000a080)=[{{&(0x7f0000005440)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2, {0xa, 0x0, 0x0, @ipv4={[], [], @local}}}}, 0x80, &(0x7f0000005640)=[{&(0x7f00000097c0)="bf", 0x1}], 0x1, 0x0, 0x0, 0x1}}], 0x1, 0x0)

09:18:57 executing program 0:
clone(0x4007ff8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfeedcafe}})

09:18:57 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
bind$rxrpc(0xffffffffffffffff, &(0x7f0000002300)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev, 0xfffffffffffffffd}}, 0x24)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000002300)=ANY=[], &(0x7f0000000100)=""/4096, 0x230020, 0x1000, 0x1}, 0x20)

09:18:57 executing program 5:
socketpair$unix(0x1, 0x2000000000003, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket(0x11, 0x400000003, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000f6bffb)}, 0x48)
ioctl$sock_ifreq(r1, 0x800000089f3, &(0x7f0000000080)={'ip6_vti0\x00', @ifru_flags})

09:18:57 executing program 0:
clone(0x4007ff8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfeedcafe}})

09:18:57 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
bind$rxrpc(0xffffffffffffffff, &(0x7f0000002300)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev, 0xfffffffffffffffd}}, 0x24)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000002300)=ANY=[], &(0x7f0000000100)=""/4096, 0x230020, 0x1000, 0x1}, 0x20)

09:18:57 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x6, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040))
r1 = syz_open_pts(r0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x5)
write$binfmt_misc(r0, &(0x7f00000000c0)=ANY=[], 0xffa8)
ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000000))

09:18:57 executing program 5:
socketpair$unix(0x1, 0x2000000000003, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket(0x11, 0x400000003, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000f6bffb)}, 0x48)
ioctl$sock_ifreq(r1, 0x800000089f3, &(0x7f0000000080)={'ip6_vti0\x00', @ifru_flags})

09:18:57 executing program 0:
clone(0x4007ff8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfeedcafe}})

[  289.865480][T12294] mkiss: ax0: crc mode is auto.
[  290.058018][T12295] dccp_check_seqno: Step 6 failed for RESET packet, (LSWL(171100102087048) <= P.seqno(0) <= S.SWH(171100102087122)) and (P.ackno exists or LAWL(214373680924626) <= P.ackno(214373680924627) <= S.AWH(214373680924627), sending SYNC...
09:18:58 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)=ANY=[@ANYBLOB="f2c3"], 0x1}}, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x119000})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x6c)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  290.211040][T12294] mkiss: ax1: crc mode is auto.
[  290.288923][T12269] dccp_close: ABORT with 1061 bytes unread
09:18:58 executing program 0:
clone(0x4007ff8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfeedcafe}})

09:18:58 executing program 5:
socketpair$unix(0x1, 0x2000000000003, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket(0x11, 0x400000003, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000f6bffb)}, 0x48)
ioctl$sock_ifreq(r1, 0x800000089f3, &(0x7f0000000080)={'ip6_vti0\x00', @ifru_flags})

09:18:58 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x6, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040))
r1 = syz_open_pts(r0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x5)
write$binfmt_misc(r0, &(0x7f00000000c0)=ANY=[], 0xffa8)
ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000000))

09:18:58 executing program 1:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x9}, 0x2c)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0xd, 0x23, 0x4, 0x1, 0x0, r1}, 0x2c)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000001c0)={r2, &(0x7f0000000040)}, 0x10)

09:18:58 executing program 4:
unshare(0x400)
pipe(&(0x7f0000000ac0)={<r0=>0xffffffffffffffff})
syncfs(r0)

[  290.712787][T12336] mkiss: ax0: crc mode is auto.
09:18:58 executing program 0:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c)
r1 = socket$l2tp(0x18, 0x1, 0x1)
connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x2e)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0)
socket$key(0xf, 0x3, 0x2)
setsockopt$inet6_udp_int(r0, 0x11, 0x66, &(0x7f0000000040), 0x4)

09:18:58 executing program 5:
socketpair$unix(0x1, 0x2000000000003, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket(0x11, 0x400000003, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000f6bffb)}, 0x48)
ioctl$sock_ifreq(r1, 0x800000089f3, &(0x7f0000000080)={'ip6_vti0\x00', @ifru_flags})

09:18:59 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@ipv4_newroute={0x24, 0x18, 0x403, 0x0, 0x0, {}, [@RTA_ENCAP_TYPE={0x8}]}, 0x24}}, 0x0)
sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x3e481b92a7e6de5, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)

09:18:59 executing program 1:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x9}, 0x2c)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0xd, 0x23, 0x4, 0x1, 0x0, r1}, 0x2c)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000001c0)={r2, &(0x7f0000000040)}, 0x10)

[  290.987603][T12363] netlink: 'syz-executor4': attribute type 21 has an invalid length.
09:18:59 executing program 5:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/fib_triestat\x00')
preadv(r0, &(0x7f0000000700), 0xf3, 0x0)

09:18:59 executing program 0:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c)
r1 = socket$l2tp(0x18, 0x1, 0x1)
connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x2e)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0)
socket$key(0xf, 0x3, 0x2)
setsockopt$inet6_udp_int(r0, 0x11, 0x66, &(0x7f0000000040), 0x4)

09:18:59 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)=ANY=[@ANYBLOB="f2c3"], 0x1}}, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x119000})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x6c)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

09:18:59 executing program 1:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x9}, 0x2c)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0xd, 0x23, 0x4, 0x1, 0x0, r1}, 0x2c)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000001c0)={r2, &(0x7f0000000040)}, 0x10)

09:18:59 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x6, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040))
r1 = syz_open_pts(r0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x5)
write$binfmt_misc(r0, &(0x7f00000000c0)=ANY=[], 0xffa8)
ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000000))

09:18:59 executing program 0:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c)
r1 = socket$l2tp(0x18, 0x1, 0x1)
connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x2e)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0)
socket$key(0xf, 0x3, 0x2)
setsockopt$inet6_udp_int(r0, 0x11, 0x66, &(0x7f0000000040), 0x4)

[  291.623537][T12382] mkiss: ax0: crc mode is auto.
09:18:59 executing program 1:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x9}, 0x2c)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0xd, 0x23, 0x4, 0x1, 0x0, r1}, 0x2c)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000001c0)={r2, &(0x7f0000000040)}, 0x10)

[  291.730972][T12366] netlink: 'syz-executor4': attribute type 21 has an invalid length.
09:19:00 executing program 0:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c)
r1 = socket$l2tp(0x18, 0x1, 0x1)
connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x2e)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0)
socket$key(0xf, 0x3, 0x2)
setsockopt$inet6_udp_int(r0, 0x11, 0x66, &(0x7f0000000040), 0x4)

09:19:00 executing program 1:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c)
r1 = socket$l2tp(0x18, 0x1, 0x1)
connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x2e)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0)
socket$key(0xf, 0x3, 0x2)
setsockopt$inet6_udp_int(r0, 0x11, 0x66, &(0x7f0000000040), 0x4)

09:19:00 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$TIOCGETD(r1, 0x541f, &(0x7f0000000180))

[  292.257612][T12415] tty_tiocsserial: 'syz-executor0' is using deprecated serial flags (with no effect): 00000100
09:19:00 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@ipv4_newroute={0x24, 0x18, 0x403, 0x0, 0x0, {}, [@RTA_ENCAP_TYPE={0x8}]}, 0x24}}, 0x0)
sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x3e481b92a7e6de5, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)

09:19:00 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c12a41d88b070")
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0)
setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0)
r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x20601, 0x0)
prctl$PR_GET_NAME(0x10, &(0x7f0000000240)=""/96)
openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$P9_RREADDIR(r1, 0x0, 0x0)
lstat(0x0, 0x0)

09:19:00 executing program 1:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c)
r1 = socket$l2tp(0x18, 0x1, 0x1)
connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x2e)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0)
socket$key(0xf, 0x3, 0x2)
setsockopt$inet6_udp_int(r0, 0x11, 0x66, &(0x7f0000000040), 0x4)

09:19:00 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x6, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040))
r1 = syz_open_pts(r0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x5)
write$binfmt_misc(r0, &(0x7f00000000c0)=ANY=[], 0xffa8)
ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000000))

[  292.462102][T12433] mkiss: ax0: crc mode is auto.
[  292.505967][T12438] netlink: 'syz-executor4': attribute type 21 has an invalid length.
09:19:00 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)=ANY=[@ANYBLOB="f2c3"], 0x1}}, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x119000})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x6c)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

09:19:00 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$TIOCGETD(r1, 0x541f, &(0x7f0000000180))

09:19:00 executing program 1:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c)
r1 = socket$l2tp(0x18, 0x1, 0x1)
connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x2e)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0)
socket$key(0xf, 0x3, 0x2)
setsockopt$inet6_udp_int(r0, 0x11, 0x66, &(0x7f0000000040), 0x4)

09:19:00 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c12a41d88b070")
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0)
setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0)
r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x20601, 0x0)
prctl$PR_GET_NAME(0x10, &(0x7f0000000240)=""/96)
openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$P9_RREADDIR(r1, 0x0, 0x0)
lstat(0x0, 0x0)

[  292.853911][T12452] tty_tiocsserial: 'syz-executor0' is using deprecated serial flags (with no effect): 00000100
09:19:01 executing program 1:
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0)

09:19:01 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$TIOCGETD(r1, 0x541f, &(0x7f0000000180))

09:19:01 executing program 2:
r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000008c0)={0x50, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1163484000000000000000000000f530ee6e0000000000000000000000000000000000000000000000000000000000000000000000fc0000000000000000000000000000000000000000000000634040"], 0x0, 0x0, 0x0})

[  293.073992][T12465] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  293.135048][T12465] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
09:19:01 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@ipv4_newroute={0x24, 0x18, 0x403, 0x0, 0x0, {}, [@RTA_ENCAP_TYPE={0x8}]}, 0x24}}, 0x0)
sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x3e481b92a7e6de5, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)

[  293.187514][T12474] binder: 12473:12474 got new transaction with bad transaction stack, transaction 14 has target 12473:0
09:19:01 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c12a41d88b070")
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0)
setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0)
r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x20601, 0x0)
prctl$PR_GET_NAME(0x10, &(0x7f0000000240)=""/96)
openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$P9_RREADDIR(r1, 0x0, 0x0)
lstat(0x0, 0x0)

[  293.290108][T12474] binder: 12473:12474 transaction failed 29201/-71, size 0-0 line 2953
[  293.294690][T12478] tty_tiocsserial: 'syz-executor0' is using deprecated serial flags (with no effect): 00000100
[  293.345350][T12465] net_ratelimit: 2 callbacks suppressed
[  293.345359][T12465] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  293.377431][T12485] binder_alloc: binder_alloc_mmap_handler: 12473 20001000-20004000 already mapped failed -16
[  293.422191][T12481] netlink: 'syz-executor4': attribute type 21 has an invalid length.
[  293.440550][T12485] binder_alloc: 12473: binder_alloc_buf, no vma
[  293.440616][T12488] binder: BINDER_SET_CONTEXT_MGR already set
09:19:01 executing program 1:
r0 = syz_open_dev$sg(0x0, 0x0, 0x15)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x7)
r1 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
sysinfo(&(0x7f00000007c0)=""/154)
r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x11b400, 0x0)
ioctl$DRM_IOCTL_WAIT_VBLANK(r2, 0xc018643a, &(0x7f00000001c0)={0x0, 0x6})
ioctl$BLKPG(r1, 0x1269, &(0x7f00000006c0)={0x1, 0x0, 0x0, &(0x7f0000000800)})
connect$unix(0xffffffffffffffff, &(0x7f0000000240)=@abs={0x1}, 0x6e)
r3 = accept$inet6(0xffffffffffffffff, &(0x7f00000004c0)={0xa, 0x0, 0x0, @local}, &(0x7f0000000340)=0x3d8)
ioctl$IOC_PR_PREEMPT(r2, 0x401870cb, &(0x7f0000000040)={0x18b5, 0xcd, 0x5, 0x42fc})
getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000380)=ANY=[@ANYBLOB="73656375726974790000000000000000000000000000000000000000000000009f00000018029ea690858bfb92c4925e59511d2128a26cae33f48d67b991621df681c0e5e56f5704d56fb1cf1f353403e8df243529848fc1c7e807f2889a8aeda146e9c9a8ce6ad1a0a4b9de624c47f7837459c49f9f888d2705c886dc49d79c50731b87fb47babed83fbad8ac5119c18f5909e69eeb39a623e4b9c7e95df08502364c64f024ad67e0fd9d1ecdc1eaa681ef0ce5bf93a03c5f9cc2d545da96849f1caa"], 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x13, 0xffffffffffffffff, 0x0)
write$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)=0x101, 0x12)
request_key(0x0, &(0x7f0000000180)={'sy.'}, &(0x7f0000000240)='syz', 0xffffffffffffffff)
r4 = socket$inet6(0xa, 0x3, 0x3a)
getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000000), 0x0)
connect$inet6(r4, &(0x7f0000002fe4), 0x1c)
keyctl$get_persistent(0x16, 0x0, 0x0)
r5 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000070607031dfffd946fa2830020200a0009000100061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)

09:19:01 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$TIOCGETD(r1, 0x541f, &(0x7f0000000180))

[  293.547414][   T22] binder: release 12473:12474 transaction 14 out, still active
[  293.557321][T12488] binder: 12473:12488 ioctl 40046207 0 returned -16
[  293.569943][   T22] binder: undelivered TRANSACTION_COMPLETE
[  293.594761][T12485] binder: 12473:12485 transaction failed 29189/-3, size 0-0 line 3056
[  293.625088][   T22] binder: undelivered TRANSACTION_ERROR: 29201
[  293.659317][   T22] binder: undelivered TRANSACTION_ERROR: 29189
09:19:01 executing program 2:
r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000008c0)={0x50, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1163484000000000000000000000f530ee6e0000000000000000000000000000000000000000000000000000000000000000000000fc0000000000000000000000000000000000000000000000634040"], 0x0, 0x0, 0x0})

[  293.696273][T12494] netlink: 'syz-executor1': attribute type 1 has an invalid length.
[  293.714446][   T22] binder: send failed reply for transaction 14, target dead
[  293.772302][T12494] netlink: 'syz-executor1': attribute type 1 has an invalid length.
[  293.798615][T12496] tty_tiocsserial: 'syz-executor0' is using deprecated serial flags (with no effect): 00000100
[  293.883842][T12504] netlink: 'syz-executor1': attribute type 1 has an invalid length.
[  293.901199][T12505] binder: 12502:12505 got new transaction with bad transaction stack, transaction 18 has target 12502:0
[  293.915125][T12504] netlink: 'syz-executor1': attribute type 1 has an invalid length.
09:19:02 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c12a41d88b070")
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0)
setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0)
r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x20601, 0x0)
prctl$PR_GET_NAME(0x10, &(0x7f0000000240)=""/96)
openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$P9_RREADDIR(r1, 0x0, 0x0)
lstat(0x0, 0x0)

09:19:02 executing program 0:
r0 = socket$inet(0x2, 0x2000000080002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000003c0)=@broute={'broute\x00', 0x20, 0x2, 0x218, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000040], 0x0, &(0x7f0000000000), &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x11, 0x0, 0x0, 'veth1_to_team\x00', 'sit0 \x00\x00\x00\x00\x00\x04\x00', 'bridge0\x00', 'veth0_to_bridge\x00', @link_local, [], @dev, [], 0xb0, 0xb0, 0xe8, [@devgroup={'devgroup\x00', 0x18, {{0x5}}}]}}, @common=@mark={'mark\x00', 0x10}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe, 0x1, [{{{0x11, 0x0, 0x0, 'teql0\x00', 'syz_tu~\x00', 'ip6gre0\x00', 'vcan0\x00', @broadcast, [], @local, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}, {0x0, '\x00', 0x2, 0xffffffffffffffff}]}, 0x290)

[  293.969162][T12505] binder: 12502:12505 transaction failed 29201/-71, size 0-0 line 2953
09:19:02 executing program 1:
r0 = syz_open_dev$sg(0x0, 0x0, 0x15)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x7)
r1 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
sysinfo(&(0x7f00000007c0)=""/154)
r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x11b400, 0x0)
ioctl$DRM_IOCTL_WAIT_VBLANK(r2, 0xc018643a, &(0x7f00000001c0)={0x0, 0x6})
ioctl$BLKPG(r1, 0x1269, &(0x7f00000006c0)={0x1, 0x0, 0x0, &(0x7f0000000800)})
connect$unix(0xffffffffffffffff, &(0x7f0000000240)=@abs={0x1}, 0x6e)
r3 = accept$inet6(0xffffffffffffffff, &(0x7f00000004c0)={0xa, 0x0, 0x0, @local}, &(0x7f0000000340)=0x3d8)
ioctl$IOC_PR_PREEMPT(r2, 0x401870cb, &(0x7f0000000040)={0x18b5, 0xcd, 0x5, 0x42fc})
getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000380)=ANY=[@ANYBLOB="73656375726974790000000000000000000000000000000000000000000000009f00000018029ea690858bfb92c4925e59511d2128a26cae33f48d67b991621df681c0e5e56f5704d56fb1cf1f353403e8df243529848fc1c7e807f2889a8aeda146e9c9a8ce6ad1a0a4b9de624c47f7837459c49f9f888d2705c886dc49d79c50731b87fb47babed83fbad8ac5119c18f5909e69eeb39a623e4b9c7e95df08502364c64f024ad67e0fd9d1ecdc1eaa681ef0ce5bf93a03c5f9cc2d545da96849f1caa"], 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x13, 0xffffffffffffffff, 0x0)
write$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)=0x101, 0x12)
request_key(0x0, &(0x7f0000000180)={'sy.'}, &(0x7f0000000240)='syz', 0xffffffffffffffff)
r4 = socket$inet6(0xa, 0x3, 0x3a)
getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000000), 0x0)
connect$inet6(r4, &(0x7f0000002fe4), 0x1c)
keyctl$get_persistent(0x16, 0x0, 0x0)
r5 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000070607031dfffd946fa2830020200a0009000100061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)

09:19:02 executing program 3:
r0 = syz_open_dev$sg(0x0, 0x0, 0x15)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x7)
r1 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
sysinfo(&(0x7f00000007c0)=""/154)
r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x11b400, 0x0)
ioctl$DRM_IOCTL_WAIT_VBLANK(r2, 0xc018643a, &(0x7f00000001c0)={0x0, 0x6})
ioctl$BLKPG(r1, 0x1269, &(0x7f00000006c0)={0x1, 0x0, 0x0, &(0x7f0000000800)})
connect$unix(0xffffffffffffffff, &(0x7f0000000240)=@abs={0x1}, 0x6e)
r3 = accept$inet6(0xffffffffffffffff, &(0x7f00000004c0)={0xa, 0x0, 0x0, @local}, &(0x7f0000000340)=0x3d8)
ioctl$IOC_PR_PREEMPT(r2, 0x401870cb, &(0x7f0000000040)={0x18b5, 0xcd, 0x5, 0x42fc})
getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000380)=ANY=[@ANYBLOB="73656375726974790000000000000000000000000000000000000000000000009f00000018029ea690858bfb92c4925e59511d2128a26cae33f48d67b991621df681c0e5e56f5704d56fb1cf1f353403e8df243529848fc1c7e807f2889a8aeda146e9c9a8ce6ad1a0a4b9de624c47f7837459c49f9f888d2705c886dc49d79c50731b87fb47babed83fbad8ac5119c18f5909e69eeb39a623e4b9c7e95df08502364c64f024ad67e0fd9d1ecdc1eaa681ef0ce5bf93a03c5f9cc2d545da96849f1caa"], 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x13, 0xffffffffffffffff, 0x0)
write$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)=0x101, 0x12)
request_key(0x0, &(0x7f0000000180)={'sy.'}, &(0x7f0000000240)='syz', 0xffffffffffffffff)
r4 = socket$inet6(0xa, 0x3, 0x3a)
getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000000), 0x0)
connect$inet6(r4, &(0x7f0000002fe4), 0x1c)
keyctl$get_persistent(0x16, 0x0, 0x0)
r5 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000070607031dfffd946fa2830020200a0009000100061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)

09:19:02 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@ipv4_newroute={0x24, 0x18, 0x403, 0x0, 0x0, {}, [@RTA_ENCAP_TYPE={0x8}]}, 0x24}}, 0x0)
sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x3e481b92a7e6de5, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)

[  294.112380][   T22] binder: release 12502:12505 transaction 18 out, still active
[  294.150231][   T22] binder: undelivered TRANSACTION_COMPLETE
[  294.172233][   T22] binder: undelivered TRANSACTION_ERROR: 29201
[  294.200279][T12516] netlink: 'syz-executor3': attribute type 1 has an invalid length.
09:19:02 executing program 0:
r0 = socket$inet(0x2, 0x2000000080002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000003c0)=@broute={'broute\x00', 0x20, 0x2, 0x218, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000040], 0x0, &(0x7f0000000000), &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x11, 0x0, 0x0, 'veth1_to_team\x00', 'sit0 \x00\x00\x00\x00\x00\x04\x00', 'bridge0\x00', 'veth0_to_bridge\x00', @link_local, [], @dev, [], 0xb0, 0xb0, 0xe8, [@devgroup={'devgroup\x00', 0x18, {{0x5}}}]}}, @common=@mark={'mark\x00', 0x10}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe, 0x1, [{{{0x11, 0x0, 0x0, 'teql0\x00', 'syz_tu~\x00', 'ip6gre0\x00', 'vcan0\x00', @broadcast, [], @local, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}, {0x0, '\x00', 0x2, 0xffffffffffffffff}]}, 0x290)

09:19:02 executing program 2:
r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000008c0)={0x50, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1163484000000000000000000000f530ee6e0000000000000000000000000000000000000000000000000000000000000000000000fc0000000000000000000000000000000000000000000000634040"], 0x0, 0x0, 0x0})

[  294.220581][T12521] netlink: 'syz-executor4': attribute type 21 has an invalid length.
[  294.247777][   T22] binder: send failed reply for transaction 18, target dead
09:19:02 executing program 5:
r0 = syz_open_dev$sg(0x0, 0x0, 0x15)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x7)
r1 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
sysinfo(&(0x7f00000007c0)=""/154)
r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x11b400, 0x0)
ioctl$DRM_IOCTL_WAIT_VBLANK(r2, 0xc018643a, &(0x7f00000001c0)={0x0, 0x6})
ioctl$BLKPG(r1, 0x1269, &(0x7f00000006c0)={0x1, 0x0, 0x0, &(0x7f0000000800)})
connect$unix(0xffffffffffffffff, &(0x7f0000000240)=@abs={0x1}, 0x6e)
r3 = accept$inet6(0xffffffffffffffff, &(0x7f00000004c0)={0xa, 0x0, 0x0, @local}, &(0x7f0000000340)=0x3d8)
ioctl$IOC_PR_PREEMPT(r2, 0x401870cb, &(0x7f0000000040)={0x18b5, 0xcd, 0x5, 0x42fc})
getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000380)=ANY=[@ANYBLOB="73656375726974790000000000000000000000000000000000000000000000009f00000018029ea690858bfb92c4925e59511d2128a26cae33f48d67b991621df681c0e5e56f5704d56fb1cf1f353403e8df243529848fc1c7e807f2889a8aeda146e9c9a8ce6ad1a0a4b9de624c47f7837459c49f9f888d2705c886dc49d79c50731b87fb47babed83fbad8ac5119c18f5909e69eeb39a623e4b9c7e95df08502364c64f024ad67e0fd9d1ecdc1eaa681ef0ce5bf93a03c5f9cc2d545da96849f1caa"], 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x13, 0xffffffffffffffff, 0x0)
write$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)=0x101, 0x12)
request_key(0x0, &(0x7f0000000180)={'sy.'}, &(0x7f0000000240)='syz', 0xffffffffffffffff)
r4 = socket$inet6(0xa, 0x3, 0x3a)
getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000000), 0x0)
connect$inet6(r4, &(0x7f0000002fe4), 0x1c)
keyctl$get_persistent(0x16, 0x0, 0x0)
r5 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000070607031dfffd946fa2830020200a0009000100061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)

09:19:02 executing program 3:
r0 = syz_open_dev$sg(0x0, 0x0, 0x15)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x7)
r1 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
sysinfo(&(0x7f00000007c0)=""/154)
r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x11b400, 0x0)
ioctl$DRM_IOCTL_WAIT_VBLANK(r2, 0xc018643a, &(0x7f00000001c0)={0x0, 0x6})
ioctl$BLKPG(r1, 0x1269, &(0x7f00000006c0)={0x1, 0x0, 0x0, &(0x7f0000000800)})
connect$unix(0xffffffffffffffff, &(0x7f0000000240)=@abs={0x1}, 0x6e)
r3 = accept$inet6(0xffffffffffffffff, &(0x7f00000004c0)={0xa, 0x0, 0x0, @local}, &(0x7f0000000340)=0x3d8)
ioctl$IOC_PR_PREEMPT(r2, 0x401870cb, &(0x7f0000000040)={0x18b5, 0xcd, 0x5, 0x42fc})
getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000380)=ANY=[@ANYBLOB="73656375726974790000000000000000000000000000000000000000000000009f00000018029ea690858bfb92c4925e59511d2128a26cae33f48d67b991621df681c0e5e56f5704d56fb1cf1f353403e8df243529848fc1c7e807f2889a8aeda146e9c9a8ce6ad1a0a4b9de624c47f7837459c49f9f888d2705c886dc49d79c50731b87fb47babed83fbad8ac5119c18f5909e69eeb39a623e4b9c7e95df08502364c64f024ad67e0fd9d1ecdc1eaa681ef0ce5bf93a03c5f9cc2d545da96849f1caa"], 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x13, 0xffffffffffffffff, 0x0)
write$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)=0x101, 0x12)
request_key(0x0, &(0x7f0000000180)={'sy.'}, &(0x7f0000000240)='syz', 0xffffffffffffffff)
r4 = socket$inet6(0xa, 0x3, 0x3a)
getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000000), 0x0)
connect$inet6(r4, &(0x7f0000002fe4), 0x1c)
keyctl$get_persistent(0x16, 0x0, 0x0)
r5 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000070607031dfffd946fa2830020200a0009000100061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)

[  294.351773][T12530] binder: 12527:12530 got new transaction with bad transaction stack, transaction 21 has target 12527:0
09:19:02 executing program 1:
r0 = syz_open_dev$sg(0x0, 0x0, 0x15)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x7)
r1 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
sysinfo(&(0x7f00000007c0)=""/154)
r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x11b400, 0x0)
ioctl$DRM_IOCTL_WAIT_VBLANK(r2, 0xc018643a, &(0x7f00000001c0)={0x0, 0x6})
ioctl$BLKPG(r1, 0x1269, &(0x7f00000006c0)={0x1, 0x0, 0x0, &(0x7f0000000800)})
connect$unix(0xffffffffffffffff, &(0x7f0000000240)=@abs={0x1}, 0x6e)
r3 = accept$inet6(0xffffffffffffffff, &(0x7f00000004c0)={0xa, 0x0, 0x0, @local}, &(0x7f0000000340)=0x3d8)
ioctl$IOC_PR_PREEMPT(r2, 0x401870cb, &(0x7f0000000040)={0x18b5, 0xcd, 0x5, 0x42fc})
getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000380)=ANY=[@ANYBLOB="73656375726974790000000000000000000000000000000000000000000000009f00000018029ea690858bfb92c4925e59511d2128a26cae33f48d67b991621df681c0e5e56f5704d56fb1cf1f353403e8df243529848fc1c7e807f2889a8aeda146e9c9a8ce6ad1a0a4b9de624c47f7837459c49f9f888d2705c886dc49d79c50731b87fb47babed83fbad8ac5119c18f5909e69eeb39a623e4b9c7e95df08502364c64f024ad67e0fd9d1ecdc1eaa681ef0ce5bf93a03c5f9cc2d545da96849f1caa"], 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x13, 0xffffffffffffffff, 0x0)
write$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)=0x101, 0x12)
request_key(0x0, &(0x7f0000000180)={'sy.'}, &(0x7f0000000240)='syz', 0xffffffffffffffff)
r4 = socket$inet6(0xa, 0x3, 0x3a)
getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000000), 0x0)
connect$inet6(r4, &(0x7f0000002fe4), 0x1c)
keyctl$get_persistent(0x16, 0x0, 0x0)
r5 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000070607031dfffd946fa2830020200a0009000100061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)

09:19:02 executing program 0:
r0 = socket$inet(0x2, 0x2000000080002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000003c0)=@broute={'broute\x00', 0x20, 0x2, 0x218, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000040], 0x0, &(0x7f0000000000), &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x11, 0x0, 0x0, 'veth1_to_team\x00', 'sit0 \x00\x00\x00\x00\x00\x04\x00', 'bridge0\x00', 'veth0_to_bridge\x00', @link_local, [], @dev, [], 0xb0, 0xb0, 0xe8, [@devgroup={'devgroup\x00', 0x18, {{0x5}}}]}}, @common=@mark={'mark\x00', 0x10}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe, 0x1, [{{{0x11, 0x0, 0x0, 'teql0\x00', 'syz_tu~\x00', 'ip6gre0\x00', 'vcan0\x00', @broadcast, [], @local, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}, {0x0, '\x00', 0x2, 0xffffffffffffffff}]}, 0x290)

[  294.413050][T12530] binder: 12527:12530 transaction failed 29201/-71, size 0-0 line 2953
[  294.531298][ T2650] binder: release 12527:12530 transaction 21 out, still active
[  294.544251][ T2650] binder: undelivered TRANSACTION_COMPLETE
[  294.584816][ T2650] binder: undelivered TRANSACTION_ERROR: 29201
09:19:02 executing program 1:
r0 = syz_open_dev$sg(0x0, 0x0, 0x15)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x7)
r1 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
sysinfo(&(0x7f00000007c0)=""/154)
r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x11b400, 0x0)
ioctl$DRM_IOCTL_WAIT_VBLANK(r2, 0xc018643a, &(0x7f00000001c0)={0x0, 0x6})
ioctl$BLKPG(r1, 0x1269, &(0x7f00000006c0)={0x1, 0x0, 0x0, &(0x7f0000000800)})
connect$unix(0xffffffffffffffff, &(0x7f0000000240)=@abs={0x1}, 0x6e)
r3 = accept$inet6(0xffffffffffffffff, &(0x7f00000004c0)={0xa, 0x0, 0x0, @local}, &(0x7f0000000340)=0x3d8)
ioctl$IOC_PR_PREEMPT(r2, 0x401870cb, &(0x7f0000000040)={0x18b5, 0xcd, 0x5, 0x42fc})
getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000380)=ANY=[@ANYBLOB="73656375726974790000000000000000000000000000000000000000000000009f00000018029ea690858bfb92c4925e59511d2128a26cae33f48d67b991621df681c0e5e56f5704d56fb1cf1f353403e8df243529848fc1c7e807f2889a8aeda146e9c9a8ce6ad1a0a4b9de624c47f7837459c49f9f888d2705c886dc49d79c50731b87fb47babed83fbad8ac5119c18f5909e69eeb39a623e4b9c7e95df08502364c64f024ad67e0fd9d1ecdc1eaa681ef0ce5bf93a03c5f9cc2d545da96849f1caa"], 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x13, 0xffffffffffffffff, 0x0)
write$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)=0x101, 0x12)
request_key(0x0, &(0x7f0000000180)={'sy.'}, &(0x7f0000000240)='syz', 0xffffffffffffffff)
r4 = socket$inet6(0xa, 0x3, 0x3a)
getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000000), 0x0)
connect$inet6(r4, &(0x7f0000002fe4), 0x1c)
keyctl$get_persistent(0x16, 0x0, 0x0)
r5 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000070607031dfffd946fa2830020200a0009000100061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)

09:19:02 executing program 2:
r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000008c0)={0x50, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1163484000000000000000000000f530ee6e0000000000000000000000000000000000000000000000000000000000000000000000fc0000000000000000000000000000000000000000000000634040"], 0x0, 0x0, 0x0})

[  294.635842][ T2650] binder: send failed reply for transaction 21, target dead
09:19:02 executing program 5:
r0 = syz_open_dev$sg(0x0, 0x0, 0x15)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x7)
r1 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
sysinfo(&(0x7f00000007c0)=""/154)
r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x11b400, 0x0)
ioctl$DRM_IOCTL_WAIT_VBLANK(r2, 0xc018643a, &(0x7f00000001c0)={0x0, 0x6})
ioctl$BLKPG(r1, 0x1269, &(0x7f00000006c0)={0x1, 0x0, 0x0, &(0x7f0000000800)})
connect$unix(0xffffffffffffffff, &(0x7f0000000240)=@abs={0x1}, 0x6e)
r3 = accept$inet6(0xffffffffffffffff, &(0x7f00000004c0)={0xa, 0x0, 0x0, @local}, &(0x7f0000000340)=0x3d8)
ioctl$IOC_PR_PREEMPT(r2, 0x401870cb, &(0x7f0000000040)={0x18b5, 0xcd, 0x5, 0x42fc})
getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000380)=ANY=[@ANYBLOB="73656375726974790000000000000000000000000000000000000000000000009f00000018029ea690858bfb92c4925e59511d2128a26cae33f48d67b991621df681c0e5e56f5704d56fb1cf1f353403e8df243529848fc1c7e807f2889a8aeda146e9c9a8ce6ad1a0a4b9de624c47f7837459c49f9f888d2705c886dc49d79c50731b87fb47babed83fbad8ac5119c18f5909e69eeb39a623e4b9c7e95df08502364c64f024ad67e0fd9d1ecdc1eaa681ef0ce5bf93a03c5f9cc2d545da96849f1caa"], 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x13, 0xffffffffffffffff, 0x0)
write$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)=0x101, 0x12)
request_key(0x0, &(0x7f0000000180)={'sy.'}, &(0x7f0000000240)='syz', 0xffffffffffffffff)
r4 = socket$inet6(0xa, 0x3, 0x3a)
getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000000), 0x0)
connect$inet6(r4, &(0x7f0000002fe4), 0x1c)
keyctl$get_persistent(0x16, 0x0, 0x0)
r5 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000070607031dfffd946fa2830020200a0009000100061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)

09:19:02 executing program 3:
r0 = syz_open_dev$sg(0x0, 0x0, 0x15)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x7)
r1 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
sysinfo(&(0x7f00000007c0)=""/154)
r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x11b400, 0x0)
ioctl$DRM_IOCTL_WAIT_VBLANK(r2, 0xc018643a, &(0x7f00000001c0)={0x0, 0x6})
ioctl$BLKPG(r1, 0x1269, &(0x7f00000006c0)={0x1, 0x0, 0x0, &(0x7f0000000800)})
connect$unix(0xffffffffffffffff, &(0x7f0000000240)=@abs={0x1}, 0x6e)
r3 = accept$inet6(0xffffffffffffffff, &(0x7f00000004c0)={0xa, 0x0, 0x0, @local}, &(0x7f0000000340)=0x3d8)
ioctl$IOC_PR_PREEMPT(r2, 0x401870cb, &(0x7f0000000040)={0x18b5, 0xcd, 0x5, 0x42fc})
getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000380)=ANY=[@ANYBLOB="73656375726974790000000000000000000000000000000000000000000000009f00000018029ea690858bfb92c4925e59511d2128a26cae33f48d67b991621df681c0e5e56f5704d56fb1cf1f353403e8df243529848fc1c7e807f2889a8aeda146e9c9a8ce6ad1a0a4b9de624c47f7837459c49f9f888d2705c886dc49d79c50731b87fb47babed83fbad8ac5119c18f5909e69eeb39a623e4b9c7e95df08502364c64f024ad67e0fd9d1ecdc1eaa681ef0ce5bf93a03c5f9cc2d545da96849f1caa"], 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x13, 0xffffffffffffffff, 0x0)
write$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)=0x101, 0x12)
request_key(0x0, &(0x7f0000000180)={'sy.'}, &(0x7f0000000240)='syz', 0xffffffffffffffff)
r4 = socket$inet6(0xa, 0x3, 0x3a)
getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000000), 0x0)
connect$inet6(r4, &(0x7f0000002fe4), 0x1c)
keyctl$get_persistent(0x16, 0x0, 0x0)
r5 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000070607031dfffd946fa2830020200a0009000100061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)

09:19:02 executing program 0:
r0 = socket$inet(0x2, 0x2000000080002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000003c0)=@broute={'broute\x00', 0x20, 0x2, 0x218, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000040], 0x0, &(0x7f0000000000), &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x11, 0x0, 0x0, 'veth1_to_team\x00', 'sit0 \x00\x00\x00\x00\x00\x04\x00', 'bridge0\x00', 'veth0_to_bridge\x00', @link_local, [], @dev, [], 0xb0, 0xb0, 0xe8, [@devgroup={'devgroup\x00', 0x18, {{0x5}}}]}}, @common=@mark={'mark\x00', 0x10}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe, 0x1, [{{{0x11, 0x0, 0x0, 'teql0\x00', 'syz_tu~\x00', 'ip6gre0\x00', 'vcan0\x00', @broadcast, [], @local, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}, {0x0, '\x00', 0x2, 0xffffffffffffffff}]}, 0x290)

[  294.760422][T12550] binder: 12546:12550 got new transaction with bad transaction stack, transaction 24 has target 12546:0
[  294.879894][T12550] binder: 12546:12550 transaction failed 29201/-71, size 0-0 line 2953
09:19:03 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="285474dae6badf3ab85f04000000d2eb", 0x10)
r1 = accept(r0, 0x0, 0x0)
sendmsg$TIPC_CMD_GET_BEARER_NAMES(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x1c, 0x0, 0x8dffffff00000000, 0x0, 0x0, {{0x1, 0xffffff7f}}}, 0xff49}}, 0x0)

09:19:03 executing program 5:
r0 = syz_open_dev$sg(0x0, 0x0, 0x15)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x7)
r1 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0)
sysinfo(&(0x7f00000007c0)=""/154)
r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x11b400, 0x0)
ioctl$DRM_IOCTL_WAIT_VBLANK(r2, 0xc018643a, &(0x7f00000001c0)={0x0, 0x6})
ioctl$BLKPG(r1, 0x1269, &(0x7f00000006c0)={0x1, 0x0, 0x0, &(0x7f0000000800)})
connect$unix(0xffffffffffffffff, &(0x7f0000000240)=@abs={0x1}, 0x6e)
r3 = accept$inet6(0xffffffffffffffff, &(0x7f00000004c0)={0xa, 0x0, 0x0, @local}, &(0x7f0000000340)=0x3d8)
ioctl$IOC_PR_PREEMPT(r2, 0x401870cb, &(0x7f0000000040)={0x18b5, 0xcd, 0x5, 0x42fc})
getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000380)=ANY=[@ANYBLOB="73656375726974790000000000000000000000000000000000000000000000009f00000018029ea690858bfb92c4925e59511d2128a26cae33f48d67b991621df681c0e5e56f5704d56fb1cf1f353403e8df243529848fc1c7e807f2889a8aeda146e9c9a8ce6ad1a0a4b9de624c47f7837459c49f9f888d2705c886dc49d79c50731b87fb47babed83fbad8ac5119c18f5909e69eeb39a623e4b9c7e95df08502364c64f024ad67e0fd9d1ecdc1eaa681ef0ce5bf93a03c5f9cc2d545da96849f1caa"], 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x13, 0xffffffffffffffff, 0x0)
write$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)=0x101, 0x12)
request_key(0x0, &(0x7f0000000180)={'sy.'}, &(0x7f0000000240)='syz', 0xffffffffffffffff)
r4 = socket$inet6(0xa, 0x3, 0x3a)
getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000000), 0x0)
connect$inet6(r4, &(0x7f0000002fe4), 0x1c)
keyctl$get_persistent(0x16, 0x0, 0x0)
r5 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000070607031dfffd946fa2830020200a0009000100061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)

09:19:03 executing program 0:
r0 = add_key(&(0x7f0000000000)='rxrpc\x00', &(0x7f0000000040)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$read(0xb, r0, 0x0, 0x0)

[  295.049464][   T22] binder: release 12546:12550 transaction 24 out, still active
[  295.069502][   T22] binder: undelivered TRANSACTION_COMPLETE
[  295.093502][   T22] binder: undelivered TRANSACTION_ERROR: 29201
09:19:03 executing program 2:
eventfd2(0x0, 0x0)
recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000440)=@pppol2tpv3={0x18, 0x1, {0x0, <r0=>0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, 0x0}, 0x0)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00\xe6\xd6\xaa\x00\xc7\xf4\\.\xf3\xd3\xa6\xb0(I\xc4\x85\xcb\xe7\x84\x00\xf2\xc8\xd4\x99\x8bP`-iU\x83\r\x94\xe6l\x87\f\xea1\xc2', 0x200002, 0x0)
getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f00000000c0)={0x0, 0x2, 0x10000, 0x4, 0x9, 0x6, 0x3, 0x0, {<r2=>0x0, @in6={{0xa, 0x4e21, 0x81, @dev={0xfe, 0x80, [], 0x1b}, 0x3}}, 0x3, 0x6, 0x8001, 0x4, 0xb74}}, &(0x7f0000000000)=0xb0)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000180)={r2, @in={{0x2, 0x4e20, @local}}, 0xffffffffffffff4e, 0x4}, &(0x7f0000000240)=0x90)
r3 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0)
writev(r3, &(0x7f0000000700), 0x1000000000000103)

09:19:03 executing program 1:
syz_mount_image$reiserfs(&(0x7f0000000140)='reiserfs\x00', &(0x7f0000000000)='./file0\x00', 0x4000000, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000240)="21004002998681ff130200001204100000030100000206000001000084811f4ce10000001e001e00000000000010ec0302008100526549734572334673", 0x3d, 0x10000}], 0x0, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0)

[  295.145497][   T22] binder: send failed reply for transaction 24, target dead
09:19:03 executing program 3:
r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(r0)
socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000080))
ioctl$KVM_RUN(r4, 0xae80, 0x0)

09:19:03 executing program 0:
r0 = add_key(&(0x7f0000000000)='rxrpc\x00', &(0x7f0000000040)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$read(0xb, r0, 0x0, 0x0)

09:19:03 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000ffc000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000280)={0x7b, 0x0, [0x4b564d01, 0x5]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

09:19:03 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="285474dae6badf3ab85f04000000d2eb", 0x10)
r1 = accept(r0, 0x0, 0x0)
sendmsg$TIPC_CMD_GET_BEARER_NAMES(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x1c, 0x0, 0x8dffffff00000000, 0x0, 0x0, {{0x1, 0xffffff7f}}}, 0xff49}}, 0x0)

[  295.302954][T12579] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal
[  295.374909][T12579] REISERFS (device loop1): using ordered data mode
[  295.404361][T12579] reiserfs: using flush barriers
[  295.413729][T12588] syz-executor2 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), order=0, oom_score_adj=1000
09:19:03 executing program 0:
r0 = add_key(&(0x7f0000000000)='rxrpc\x00', &(0x7f0000000040)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$read(0xb, r0, 0x0, 0x0)

[  295.440900][T12579] REISERFS warning (device loop1): sh-458 journal_init_dev: cannot init journal device 'unknown-block(259,0)': -6
[  295.485716][T12588] CPU: 0 PID: 12588 Comm: syz-executor2 Not tainted 5.0.0-rc4-next-20190130 #22
[  295.494773][T12588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  295.504834][T12588] Call Trace:
[  295.508133][T12588]  dump_stack+0x1db/0x2d0
[  295.512488][T12588]  ? dump_stack_print_info.cold+0x20/0x20
[  295.517363][T12579] REISERFS warning (device loop1): sh-462 journal_init: unable to initialize journal device
[  295.518207][T12588]  ? __switch_to_asm+0x40/0x70
[  295.518246][T12588]  ? __switch_to_asm+0x34/0x70
[  295.518260][T12588]  ? __switch_to_asm+0x34/0x70
[  295.518274][T12588]  ? __switch_to_asm+0x40/0x70
[  295.518294][T12588]  dump_header+0x1e6/0x11a6
[  295.518311][T12588]  ? __schedule+0x89f/0x1e60
[  295.518329][T12588]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[  295.518351][T12588]  ? pagefault_out_of_memory+0x1a1/0x1a1
[  295.518368][T12588]  ? __bpf_trace_preemptirq_template+0x30/0x30
[  295.518383][T12588]  ? ___ratelimit+0x37c/0x686
[  295.518400][T12588]  ? find_held_lock+0x35/0x120
[  295.518421][T12588]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[  295.518442][T12588]  ? preempt_schedule+0x4b/0x60
[  295.518457][T12588]  ? preempt_schedule_common+0x4f/0xe0
[  295.518475][T12588]  ? preempt_schedule+0x4b/0x60
[  295.518490][T12588]  ? ___preempt_schedule+0x16/0x18
[  295.518511][T12588]  ? _raw_spin_unlock_irqrestore+0xbd/0xe0
[  295.518526][T12588]  ? ___ratelimit+0xac/0x686
[  295.518543][T12588]  ? idr_get_free+0xee0/0xee0
[  295.518559][T12588]  ? lockdep_hardirqs_on+0x418/0x5d0
[  295.518581][T12588]  oom_kill_process.cold+0x10/0x9ca
09:19:03 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="285474dae6badf3ab85f04000000d2eb", 0x10)
r1 = accept(r0, 0x0, 0x0)
sendmsg$TIPC_CMD_GET_BEARER_NAMES(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x1c, 0x0, 0x8dffffff00000000, 0x0, 0x0, {{0x1, 0xffffff7f}}}, 0xff49}}, 0x0)

[  295.518602][T12588]  ? cgroup_procs_next+0x70/0x70
[  295.518620][T12588]  ? _raw_spin_unlock_irq+0x5e/0x90
[  295.518633][T12588]  ? oom_badness+0xa50/0xa50
[  295.518651][T12588]  ? oom_evaluate_task+0x540/0x540
[  295.518670][T12588]  ? mem_cgroup_iter_break+0x30/0x30
[  295.518685][T12588]  ? mutex_trylock+0x2d0/0x2d0
[  295.518715][T12588]  ? cgroup_file_notify+0x217/0x2e0
[  295.518735][T12588]  out_of_memory+0x885/0x1420
[  295.518752][T12588]  ? _raw_spin_unlock_irqrestore+0x6b/0xe0
[  295.518765][T12588]  ? _raw_spin_unlock_irqrestore+0x6b/0xe0
[  295.518783][T12588]  ? oom_killer_disable+0x340/0x340
[  295.518799][T12588]  ? kasan_check_read+0x11/0x20
[  295.518813][T12588]  ? cgroup_file_notify+0x217/0x2e0
[  295.518835][T12588]  ? trace_hardirqs_off_caller+0x300/0x300
[  295.557086][T12579] REISERFS warning (device loop1): sh-2022 reiserfs_fill_super: unable to initialize journal space
[  295.562396][T12588]  ? do_raw_spin_trylock+0x270/0x270
[  295.562427][T12588]  mem_cgroup_out_of_memory+0x21a/0x2a0
[  295.562444][T12588]  ? memory_oom_group_write+0x160/0x160
09:19:03 executing program 0:
r0 = add_key(&(0x7f0000000000)='rxrpc\x00', &(0x7f0000000040)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$read(0xb, r0, 0x0, 0x0)

[  295.562475][T12588]  memory_max_write+0x1b0/0x3e0
[  295.664726][T12588]  ? lock_acquire+0x1db/0x570
[  295.664753][T12588]  ? mem_cgroup_write+0x440/0x440
[  295.664767][T12588]  ? lock_release+0xc40/0xc40
[  295.664786][T12588]  ? add_lock_to_list.isra.0+0x450/0x450
[  295.664802][T12588]  ? lock_downgrade+0xc40/0xc40
[  295.664823][T12588]  cgroup_file_write+0x252/0x830
[  295.696306][T12588]  ? mem_cgroup_write+0x440/0x440
[  295.696339][T12588]  ? cgroup_migrate_add_task+0xcb0/0xcb0
[  295.696366][T12588]  ? cgroup_migrate_add_task+0xcb0/0xcb0
[  295.696385][T12588]  kernfs_fop_write+0x2ba/0x480
[  295.696407][T12588]  do_iter_write+0x4a5/0x610
[  295.696436][T12588]  vfs_writev+0x1ee/0x370
[  295.696455][T12588]  ? vfs_iter_write+0xb0/0xb0
[  295.696477][T12588]  ? trace_hardirqs_off_caller+0x300/0x300
[  295.774497][T12588]  ? mutex_lock_nested+0x16/0x20
[  295.774512][T12588]  ? mutex_lock_nested+0x16/0x20
[  295.774529][T12588]  ? __fdget_pos+0xdc/0x1f0
[  295.774548][T12588]  ? __fdget_raw+0x20/0x20
[  295.785823][T12588]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  295.785840][T12588]  ? put_timespec64+0x115/0x1b0
[  295.785863][T12588]  do_writev+0x11a/0x300
[  295.785884][T12588]  ? vfs_writev+0x370/0x370
[  295.785902][T12588]  ? trace_hardirqs_off_caller+0x300/0x300
[  295.785922][T12588]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[  295.785945][T12588]  __x64_sys_writev+0x75/0xb0
[  295.864810][T12588]  do_syscall_64+0x1a3/0x800
[  295.869396][T12588]  ? syscall_return_slowpath+0x5f0/0x5f0
[  295.875024][T12588]  ? prepare_exit_to_usermode+0x232/0x3b0
[  295.880742][T12588]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  295.886278][T12588]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  295.892173][T12588] RIP: 0033:0x458089
[  295.896084][T12588] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  295.915691][T12588] RSP: 002b:00007f95029d2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000014
[  295.924113][T12588] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000458089
09:19:04 executing program 5:
rseq(&(0x7f0000000000), 0x20, 0x0, 0x0)
rseq(&(0x7f0000000000), 0x2, 0x0, 0x0)

[  295.932080][T12588] RDX: 1000000000000103 RSI: 0000000020000700 RDI: 0000000000000005
[  295.940040][T12588] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000
[  295.948002][T12588] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f95029d36d4
[  295.955958][T12588] R13: 00000000004c4b74 R14: 00000000004dd108 R15: 00000000ffffffff
[  295.967543][T12588] memory: usage 11348kB, limit 0kB, failcnt 0
[  295.973654][T12588] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[  296.044997][T12588] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0
[  296.051888][T12588] Memory cgroup stats for /syz2: cache:64KB rss:6500KB rss_huge:6144KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:6500KB inactive_file:24KB active_file:4KB unevictable:0KB
09:19:04 executing program 3:
r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(r0)
socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000080))
ioctl$KVM_RUN(r4, 0xae80, 0x0)

09:19:04 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
pipe(&(0x7f0000000180)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r2, &(0x7f0000e11ff0)=[{&(0x7f0000000140)="580000001400ad", 0x7}], 0x1)
close(r3)
socket$netlink(0x10, 0x3, 0xf)
write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x4240a2a0)
splice(r1, 0x0, r3, 0x0, 0x10005, 0x0)

[  296.202548][T12588] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor2,pid=10390,uid=0
[  296.243472][T12588] Memory cgroup out of memory: Kill process 10390 (syz-executor2) score 9531000 or sacrifice child
[  296.341711][T12588] Killed process 10390 (syz-executor2) total-vm:72444kB, anon-rss:2192kB, file-rss:35804kB, shmem-rss:0kB
[  296.405098][T12581] syz-executor2 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), order=0, oom_score_adj=1000
[  296.416599][T12581] CPU: 0 PID: 12581 Comm: syz-executor2 Not tainted 5.0.0-rc4-next-20190130 #22
[  296.425619][T12581] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  296.435672][T12581] Call Trace:
[  296.435766][T12581]  dump_stack+0x1db/0x2d0
[  296.435787][T12581]  ? dump_stack_print_info.cold+0x20/0x20
[  296.435811][T12581]  dump_header+0x1e6/0x11a6
[  296.435832][T12581]  ? add_lock_to_list.isra.0+0x450/0x450
[  296.449149][T12581]  ? pagefault_out_of_memory+0x1a1/0x1a1
[  296.449167][T12581]  ? ___ratelimit+0x37c/0x686
[  296.449183][T12581]  ? find_held_lock+0x35/0x120
[  296.449205][T12581]  ? mark_held_locks+0xa4/0xf0
[  296.479114][T12581]  ? lock_acquire+0x1db/0x570
[  296.483824][T12581]  ? _raw_spin_unlock_irqrestore+0x6b/0xe0
[  296.489638][T12581]  ? _raw_spin_unlock_irqrestore+0x6b/0xe0
[  296.495450][T12581]  ? lockdep_hardirqs_on+0x418/0x5d0
[  296.500736][T12581]  ? trace_hardirqs_on+0xbd/0x310
[  296.505763][T12581]  ? kasan_check_read+0x11/0x20
[  296.510612][T12581]  ? ___ratelimit+0x37c/0x686
[  296.515287][T12581]  ? trace_hardirqs_off_caller+0x300/0x300
[  296.521096][T12581]  ? do_raw_spin_trylock+0x270/0x270
[  296.526388][T12581]  ? trace_hardirqs_on_caller+0x310/0x310
[  296.532110][T12581]  ? lock_acquire+0x1db/0x570
[  296.536795][T12581]  ? _raw_spin_unlock_irqrestore+0xa4/0xe0
[  296.542590][T12581]  ? ___ratelimit+0xac/0x686
[  296.547157][T12581]  ? idr_get_free+0xee0/0xee0
[  296.551861][T12581]  ? lockdep_hardirqs_on+0x418/0x5d0
[  296.557145][T12581]  oom_kill_process.cold+0x10/0x9ca
[  296.562336][T12581]  ? cgroup_procs_next+0x70/0x70
[  296.567258][T12581]  ? _raw_spin_unlock_irq+0x5e/0x90
[  296.572460][T12581]  ? oom_badness+0xa50/0xa50
[  296.577039][T12581]  ? oom_evaluate_task+0x540/0x540
[  296.582144][T12581]  ? mem_cgroup_iter_break+0x30/0x30
[  296.587418][T12581]  ? mutex_trylock+0x2d0/0x2d0
[  296.592178][T12581]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  296.598425][T12581]  ? rcu_read_unlock_special+0x380/0x380
[  296.604085][T12581]  out_of_memory+0x885/0x1420
[  296.608760][T12581]  ? mem_cgroup_iter+0x4f4/0xf50
[  296.613695][T12581]  ? oom_killer_disable+0x340/0x340
[  296.618884][T12581]  ? mem_cgroup_unmark_under_oom+0x8d/0xb0
[  296.624713][T12581]  ? lock_acquire+0x1db/0x570
[  296.629391][T12581]  mem_cgroup_out_of_memory+0x21a/0x2a0
[  296.634923][T12581]  ? do_raw_spin_unlock+0xa0/0x330
[  296.640062][T12581]  ? memory_oom_group_write+0x160/0x160
[  296.645599][T12581]  ? do_raw_spin_trylock+0x270/0x270
[  296.650890][T12581]  ? _raw_spin_unlock+0x2d/0x50
[  296.655761][T12581]  try_charge+0x1407/0x1d30
[  296.660273][T12581]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  296.666534][T12581]  ? mem_cgroup_oom_trylock+0x1a0/0x1a0
[  296.672068][T12581]  ? rcu_read_unlock_special+0x380/0x380
[  296.677707][T12581]  ? get_mem_cgroup_from_mm+0x1ea/0x420
[  296.683264][T12581]  ? get_mem_cgroup_from_page+0x190/0x190
[  296.688986][T12581]  ? rcu_read_lock_sched_held+0x110/0x130
[  296.694717][T12581]  mem_cgroup_try_charge+0x43a/0xdb0
[  296.700018][T12581]  ? mem_cgroup_protected+0xa10/0xa10
[  296.705385][T12581]  ? __anon_vma_prepare+0x36d/0x760
[  296.710578][T12581]  ? anon_vma_fork+0x880/0x880
[  296.715339][T12581]  ? __sanitizer_cov_trace_const_cmp2+0x18/0x20
[  296.721575][T12581]  ? __sanitizer_cov_trace_const_cmp2+0x18/0x20
[  296.727808][T12581]  mem_cgroup_try_charge_delay+0x1f/0xa0
[  296.733440][T12581]  __handle_mm_fault+0x25ed/0x5610
[  296.738640][T12581]  ? vmf_insert_mixed_mkwrite+0x40/0x40
[  296.744176][T12581]  ? check_preemption_disabled+0x48/0x290
[  296.749875][T12581]  ? handle_mm_fault+0x3cc/0xc80
[  296.754819][T12581]  ? lock_downgrade+0xc40/0xc40
[  296.759670][T12581]  ? kasan_check_read+0x11/0x20
[  296.764517][T12581]  ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170
[  296.770491][T12581]  ? rcu_read_unlock_special+0x380/0x380
[  296.776113][T12581]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  296.782360][T12581]  ? check_preemption_disabled+0x48/0x290
[  296.788073][T12581]  handle_mm_fault+0x4ec/0xc80
[  296.792820][T12581]  ? __handle_mm_fault+0x5610/0x5610
[  296.798105][T12581]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  296.804358][T12581]  ? vmacache_update+0x114/0x140
[  296.809322][T12581]  __do_page_fault+0x5ef/0xda0
[  296.814163][T12581]  ? do_futex+0x2910/0x2910
[  296.818676][T12581]  do_page_fault+0xe6/0x7d8
[  296.823182][T12581]  ? trace_hardirqs_on_caller+0xc0/0x310
[  296.828798][T12581]  ? vmalloc_sync_all+0x30/0x30
[  296.833642][T12581]  ? __bpf_trace_preemptirq_template+0x30/0x30
[  296.839832][T12581]  ? syscall_return_slowpath+0x5f0/0x5f0
[  296.845453][T12581]  ? prepare_exit_to_usermode+0x232/0x3b0
[  296.851152][T12581]  ? page_fault+0x8/0x30
[  296.855394][T12581]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  296.860961][T12581]  ? page_fault+0x8/0x30
[  296.865233][T12581]  page_fault+0x1e/0x30
[  296.869391][T12581] RIP: 0033:0x40faaf
[  296.873287][T12581] Code: 0f 84 c8 02 00 00 48 83 bd 78 ff ff ff 00 0f 84 f9 04 00 00 48 8b 95 68 ff ff ff 44 89 95 38 ff ff ff 4c 8d ac 10 00 f7 ff ff <49> 89 85 90 06 00 00 49 8d 85 10 03 00 00 49 89 95 98 06 00 00 41
[  296.893112][T12581] RSP: 002b:00007ffe6a0f95a0 EFLAGS: 00010206
[  296.899188][T12581] RAX: 00007f9502992000 RBX: 0000000000020000 RCX: 00000000004580da
[  296.907168][T12581] RDX: 0000000000021000 RSI: 0000000000021000 RDI: 0000000000000000
[  296.915126][T12581] RBP: 00007ffe6a0f9680 R08: ffffffffffffffff R09: 0000000000000000
[  296.923084][T12581] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe6a0f9760
[  296.931034][T12581] R13: 00007f95029b2700 R14: 0000000000000002 R15: 0000000000000001
[  296.944730][T12581] memory: usage 8992kB, limit 0kB, failcnt 10
[  296.951115][T12581] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[  296.959786][T12581] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0
[  296.966801][T12581] Memory cgroup stats for /syz2: cache:64KB rss:4372KB rss_huge:4096KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:4352KB inactive_file:0KB active_file:0KB unevictable:0KB
[  296.988103][T12581] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor2,pid=10407,uid=0
[  297.003465][T12581] Memory cgroup out of memory: Kill process 10407 (syz-executor2) score 9531000 or sacrifice child
[  297.015543][T12581] Killed process 10407 (syz-executor2) total-vm:72444kB, anon-rss:2192kB, file-rss:35804kB, shmem-rss:0kB
[  297.033780][T12588] syz-executor2 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), order=0, oom_score_adj=1000
[  297.045934][T12588] CPU: 0 PID: 12588 Comm: syz-executor2 Not tainted 5.0.0-rc4-next-20190130 #22
[  297.054960][T12588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  297.065009][T12588] Call Trace:
[  297.068303][T12588]  dump_stack+0x1db/0x2d0
[  297.072638][T12588]  ? dump_stack_print_info.cold+0x20/0x20
[  297.078364][T12588]  dump_header+0x1e6/0x11a6
[  297.082867][T12588]  ? add_lock_to_list.isra.0+0x450/0x450
[  297.088502][T12588]  ? pagefault_out_of_memory+0x1a1/0x1a1
[  297.094132][T12588]  ? ___ratelimit+0x37c/0x686
[  297.098806][T12588]  ? find_held_lock+0x35/0x120
[  297.103569][T12588]  ? mark_held_locks+0xa4/0xf0
[  297.108328][T12588]  ? lock_acquire+0x1db/0x570
[  297.113025][T12588]  ? _raw_spin_unlock_irqrestore+0x6b/0xe0
[  297.118845][T12588]  ? _raw_spin_unlock_irqrestore+0x6b/0xe0
[  297.124651][T12588]  ? lockdep_hardirqs_on+0x418/0x5d0
[  297.129934][T12588]  ? trace_hardirqs_on+0xbd/0x310
[  297.134955][T12588]  ? kasan_check_read+0x11/0x20
[  297.139802][T12588]  ? ___ratelimit+0x37c/0x686
[  297.144474][T12588]  ? trace_hardirqs_off_caller+0x300/0x300
[  297.150275][T12588]  ? do_raw_spin_trylock+0x270/0x270
[  297.155556][T12588]  ? trace_hardirqs_on_caller+0x310/0x310
[  297.161271][T12588]  ? lock_acquire+0x1db/0x570
[  297.165949][T12588]  ? _raw_spin_unlock_irqrestore+0xa4/0xe0
[  297.171793][T12588]  ? ___ratelimit+0xac/0x686
[  297.176420][T12588]  ? idr_get_free+0xee0/0xee0
[  297.181091][T12588]  ? lockdep_hardirqs_on+0x418/0x5d0
[  297.186384][T12588]  oom_kill_process.cold+0x10/0x9ca
[  297.191582][T12588]  ? cgroup_procs_next+0x70/0x70
[  297.196543][T12588]  ? _raw_spin_unlock_irq+0x5e/0x90
[  297.201749][T12588]  ? oom_badness+0xa50/0xa50
[  297.206351][T12588]  ? oom_evaluate_task+0x540/0x540
[  297.211471][T12588]  ? mem_cgroup_iter_break+0x30/0x30
[  297.216750][T12588]  ? mutex_trylock+0x2d0/0x2d0
[  297.221525][T12588]  ? __bpf_trace_preemptirq_template+0x30/0x30
[  297.227681][T12588]  ? cgroup_file_notify+0x217/0x2e0
[  297.232873][T12588]  out_of_memory+0x885/0x1420
[  297.237552][T12588]  ? oom_killer_disable+0x340/0x340
[  297.242770][T12588]  ? preempt_schedule+0x4b/0x60
[  297.247621][T12588]  ? ___preempt_schedule+0x16/0x18
[  297.252738][T12588]  mem_cgroup_out_of_memory+0x21a/0x2a0
[  297.258282][T12588]  ? memory_oom_group_write+0x160/0x160
[  297.263836][T12588]  memory_max_write+0x1b0/0x3e0
[  297.268687][T12588]  ? lock_acquire+0x1db/0x570
[  297.273383][T12588]  ? mem_cgroup_write+0x440/0x440
[  297.278404][T12588]  ? lock_release+0xc40/0xc40
[  297.283082][T12588]  ? add_lock_to_list.isra.0+0x450/0x450
[  297.288723][T12588]  ? lock_downgrade+0xc40/0xc40
[  297.293573][T12588]  cgroup_file_write+0x252/0x830
[  297.298511][T12588]  ? mem_cgroup_write+0x440/0x440
[  297.303530][T12588]  ? cgroup_migrate_add_task+0xcb0/0xcb0
[  297.309170][T12588]  ? cgroup_migrate_add_task+0xcb0/0xcb0
[  297.314817][T12588]  kernfs_fop_write+0x2ba/0x480
[  297.319668][T12588]  do_iter_write+0x4a5/0x610
[  297.324329][T12588]  vfs_writev+0x1ee/0x370
[  297.328673][T12588]  ? vfs_iter_write+0xb0/0xb0
[  297.333368][T12588]  ? trace_hardirqs_off_caller+0x300/0x300
[  297.339182][T12588]  ? mutex_lock_nested+0x16/0x20
[  297.344138][T12588]  ? mutex_lock_nested+0x16/0x20
[  297.349072][T12588]  ? __fdget_pos+0xdc/0x1f0
[  297.353576][T12588]  ? __fdget_raw+0x20/0x20
[  297.358005][T12588]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  297.364248][T12588]  ? put_timespec64+0x115/0x1b0
[  297.369119][T12588]  do_writev+0x11a/0x300
[  297.373364][T12588]  ? vfs_writev+0x370/0x370
[  297.377870][T12588]  ? trace_hardirqs_off_caller+0x300/0x300
[  297.383674][T12588]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[  297.389146][T12588]  __x64_sys_writev+0x75/0xb0
[  297.393824][T12588]  do_syscall_64+0x1a3/0x800
[  297.398432][T12588]  ? syscall_return_slowpath+0x5f0/0x5f0
[  297.404061][T12588]  ? prepare_exit_to_usermode+0x232/0x3b0
[  297.409797][T12588]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  297.415349][T12588]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  297.421262][T12588] RIP: 0033:0x458089
[  297.425162][T12588] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  297.444764][T12588] RSP: 002b:00007f95029d2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000014
[  297.453184][T12588] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000458089
[  297.461155][T12588] RDX: 1000000000000103 RSI: 0000000020000700 RDI: 0000000000000005
[  297.469116][T12588] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000
[  297.477081][T12588] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f95029d36d4
[  297.485043][T12588] R13: 00000000004c4b74 R14: 00000000004dd108 R15: 00000000ffffffff
[  297.496839][T12588] memory: usage 6668kB, limit 0kB, failcnt 16
[  297.504663][T12588] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[  297.512310][T12588] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0
[  297.519416][T12588] Memory cgroup stats for /syz2: cache:64KB rss:2228KB rss_huge:2048KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:2188KB inactive_file:0KB active_file:0KB unevictable:0KB
09:19:05 executing program 2:
eventfd2(0x0, 0x0)
recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000440)=@pppol2tpv3={0x18, 0x1, {0x0, <r0=>0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, 0x0}, 0x0)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00\xe6\xd6\xaa\x00\xc7\xf4\\.\xf3\xd3\xa6\xb0(I\xc4\x85\xcb\xe7\x84\x00\xf2\xc8\xd4\x99\x8bP`-iU\x83\r\x94\xe6l\x87\f\xea1\xc2', 0x200002, 0x0)
getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f00000000c0)={0x0, 0x2, 0x10000, 0x4, 0x9, 0x6, 0x3, 0x0, {<r2=>0x0, @in6={{0xa, 0x4e21, 0x81, @dev={0xfe, 0x80, [], 0x1b}, 0x3}}, 0x3, 0x6, 0x8001, 0x4, 0xb74}}, &(0x7f0000000000)=0xb0)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000180)={r2, @in={{0x2, 0x4e20, @local}}, 0xffffffffffffff4e, 0x4}, &(0x7f0000000240)=0x90)
r3 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0)
writev(r3, &(0x7f0000000700), 0x1000000000000103)

09:19:05 executing program 1:
memfd_create(0x0, 0x0)
openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket(0x2, 0x1, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x3000000000000000, 0x80, &(0x7f0000000040)=@broute={'broute\x00', 0x20, 0x1, 0x178, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000c0], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0x0, 0x0, 'ip6gre0\x00', 'syzkaller1\x00', 'ip6tnl0\x00', '\x01ama\x00\x00\x00\x00J\xb2\xce\xc8\x00', @remote, [], @remote, [], 0x70, 0x70, 0xe8}}, @common=@nflog={'nflog\x00', 0x50, {{0x0, 0x0, 0x0, 0x0, 0x0, "339ebc4bb0c0fba43162d5c302d891b307544d821a0dcb492ba4aa23baaca6e53f392b79c58e0581db804208237c3df1c60b6b34da2747cd3200fbb384511226"}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}, {0x0, '\x00', 0x1, 0xffffffdffffffffc}]}, 0x1f0)
ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, 0x0)

09:19:05 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="285474dae6badf3ab85f04000000d2eb", 0x10)
r1 = accept(r0, 0x0, 0x0)
sendmsg$TIPC_CMD_GET_BEARER_NAMES(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x1c, 0x0, 0x8dffffff00000000, 0x0, 0x0, {{0x1, 0xffffff7f}}}, 0xff49}}, 0x0)

09:19:05 executing program 3:
r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(r0)
socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000080))
ioctl$KVM_RUN(r4, 0xae80, 0x0)

09:19:05 executing program 5:
rseq(&(0x7f0000000000), 0x20, 0x0, 0x0)
rseq(&(0x7f0000000000), 0x2, 0x0, 0x0)

09:19:05 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
pipe(&(0x7f0000000180)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r2, &(0x7f0000e11ff0)=[{&(0x7f0000000140)="580000001400ad", 0x7}], 0x1)
close(r3)
socket$netlink(0x10, 0x3, 0xf)
write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x4240a2a0)
splice(r1, 0x0, r3, 0x0, 0x10005, 0x0)

[  297.546362][T12588] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor2,pid=12581,uid=0
[  297.561888][T12588] Memory cgroup out of memory: Kill process 12581 (syz-executor2) score 9273000 or sacrifice child
[  297.572800][T12588] Killed process 12581 (syz-executor2) total-vm:72576kB, anon-rss:2148kB, file-rss:34816kB, shmem-rss:0kB
[  297.585921][ T1039] oom_reaper: reaped process 12581 (syz-executor2), now anon-rss:0kB, file-rss:34048kB, shmem-rss:0kB
[  297.666530][ T8252] syz-executor2 invoked oom-killer: gfp_mask=0x7080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0
[  297.704925][ T8252] CPU: 0 PID: 8252 Comm: syz-executor2 Not tainted 5.0.0-rc4-next-20190130 #22
[  297.713903][ T8252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  297.723973][ T8252] Call Trace:
[  297.727282][ T8252]  dump_stack+0x1db/0x2d0
[  297.731633][ T8252]  ? dump_stack_print_info.cold+0x20/0x20
[  297.737383][ T8252]  dump_header+0x1e6/0x11a6
[  297.741892][ T8252]  ? add_lock_to_list.isra.0+0x450/0x450
[  297.747528][ T8252]  ? pagefault_out_of_memory+0x1a1/0x1a1
[  297.753595][ T8252]  ? ___ratelimit+0x37c/0x686
[  297.758284][ T8252]  ? find_held_lock+0x35/0x120
[  297.763059][ T8252]  ? mark_held_locks+0xa4/0xf0
[  297.767814][ T8252]  ? lock_acquire+0x1db/0x570
[  297.772488][ T8252]  ? _raw_spin_unlock_irqrestore+0x6b/0xe0
[  297.778294][ T8252]  ? _raw_spin_unlock_irqrestore+0x6b/0xe0
[  297.784109][ T8252]  ? lockdep_hardirqs_on+0x418/0x5d0
[  297.789389][ T8252]  ? trace_hardirqs_on+0xbd/0x310
[  297.794436][ T8252]  ? kasan_check_read+0x11/0x20
[  297.799296][ T8252]  ? ___ratelimit+0x37c/0x686
[  297.803982][ T8252]  ? trace_hardirqs_off_caller+0x300/0x300
[  297.809778][ T8252]  ? do_raw_spin_trylock+0x270/0x270
[  297.815069][ T8252]  ? trace_hardirqs_on_caller+0x310/0x310
[  297.820797][ T8252]  ? lock_acquire+0x1db/0x570
[  297.825473][ T8252]  ? _raw_spin_unlock_irqrestore+0xa4/0xe0
[  297.831388][ T8252]  ? ___ratelimit+0xac/0x686
[  297.835972][ T8252]  ? idr_get_free+0xee0/0xee0
[  297.840641][ T8252]  ? lockdep_hardirqs_on+0x418/0x5d0
[  297.845926][ T8252]  oom_kill_process.cold+0x10/0x9ca
[  297.851140][ T8252]  ? cgroup_procs_next+0x70/0x70
[  297.856086][ T8252]  ? _raw_spin_unlock_irq+0x5e/0x90
[  297.861294][ T8252]  ? oom_badness+0xa50/0xa50
[  297.865877][ T8252]  ? oom_evaluate_task+0x540/0x540
[  297.870980][ T8252]  ? mem_cgroup_iter_break+0x30/0x30
[  297.876315][ T8252]  ? mutex_trylock+0x2d0/0x2d0
[  297.881076][ T8252]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  297.887337][ T8252]  ? rcu_read_unlock_special+0x380/0x380
[  297.892965][ T8252]  out_of_memory+0x885/0x1420
[  297.897637][ T8252]  ? mem_cgroup_iter+0x4f4/0xf50
[  297.902570][ T8252]  ? oom_killer_disable+0x340/0x340
[  297.907761][ T8252]  ? mem_cgroup_unmark_under_oom+0x8d/0xb0
[  297.913574][ T8252]  ? lock_acquire+0x1db/0x570
[  297.918264][ T8252]  mem_cgroup_out_of_memory+0x21a/0x2a0
[  297.923807][ T8252]  ? do_raw_spin_unlock+0xa0/0x330
[  297.928910][ T8252]  ? memory_oom_group_write+0x160/0x160
[  297.934464][ T8252]  ? do_raw_spin_trylock+0x270/0x270
[  297.939751][ T8252]  ? _raw_spin_unlock+0x2d/0x50
[  297.944601][ T8252]  try_charge+0x1407/0x1d30
[  297.949101][ T8252]  ? lock_downgrade+0xc40/0xc40
[  297.953943][ T8252]  ? kasan_check_read+0x11/0x20
[  297.958795][ T8252]  ? mem_cgroup_oom_trylock+0x1a0/0x1a0
[  297.964335][ T8252]  ? get_mem_cgroup_from_mm+0x1cd/0x420
[  297.969878][ T8252]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  297.976112][ T8252]  ? lock_downgrade+0xc40/0xc40
[  297.980967][ T8252]  ? kasan_check_read+0x11/0x20
[  297.985816][ T8252]  ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170
[  297.991790][ T8252]  ? rcu_read_unlock_special+0x380/0x380
[  297.997443][ T8252]  ? get_mem_cgroup_from_mm+0x1ea/0x420
[  298.002990][ T8252]  __memcg_kmem_charge_memcg+0x7c/0x130
[  298.008531][ T8252]  ? memcg_kmem_put_cache+0xb0/0xb0
[  298.013719][ T8252]  ? lock_release+0xc40/0xc40
[  298.018402][ T8252]  __memcg_kmem_charge+0x136/0x300
[  298.023514][ T8252]  __alloc_pages_nodemask+0x7b8/0xdc0
[  298.028886][ T8252]  ? __alloc_pages_slowpath+0x2c50/0x2c50
[  298.034598][ T8252]  ? rcu_pm_notify+0xd0/0xd0
[  298.039192][ T8252]  ? rcu_read_lock_sched_held+0x110/0x130
[  298.044912][ T8252]  ? kmem_cache_alloc_node+0x347/0x710
[  298.050360][ T8252]  ? check_preemption_disabled+0x48/0x290
[  298.056086][ T8252]  copy_process+0x847/0x8890
[  298.060670][ T8252]  ? mark_held_locks+0xf0/0xf0
[  298.065451][ T8252]  ? _raw_spin_unlock_irq+0x28/0x90
[  298.070649][ T8252]  ? mark_held_locks+0xf0/0xf0
[  298.075410][ T8252]  ? trace_hardirqs_off_caller+0x300/0x300
[  298.081207][ T8252]  ? do_raw_spin_trylock+0x270/0x270
[  298.086511][ T8252]  ? __cleanup_sighand+0x70/0x70
[  298.091442][ T8252]  ? swp_swapcount+0x540/0x540
[  298.096204][ T8252]  ? __lock_acquire+0x572/0x4a10
[  298.101161][ T8252]  ? wp_page_reuse+0x159/0x1d0
[  298.105938][ T8252]  ? find_held_lock+0x35/0x120
[  298.110694][ T8252]  ? wp_page_reuse+0x159/0x1d0
[  298.115482][ T8252]  ? kasan_check_read+0x11/0x20
[  298.120326][ T8252]  ? do_raw_spin_unlock+0xa0/0x330
[  298.125437][ T8252]  ? do_raw_spin_trylock+0x270/0x270
[  298.130753][ T8252]  ? print_usage_bug+0xd0/0xd0
[  298.135523][ T8252]  ? _raw_spin_unlock+0x2d/0x50
[  298.140374][ T8252]  ? __lock_acquire+0x572/0x4a10
[  298.145317][ T8252]  ? finish_mkwrite_fault+0x4f0/0x4f0
[  298.150687][ T8252]  ? mark_held_locks+0xf0/0xf0
[  298.155443][ T8252]  ? __handle_mm_fault+0x1dac/0x5610
[  298.160724][ T8252]  ? kasan_check_write+0x14/0x20
[  298.165679][ T8252]  ? do_raw_spin_lock+0x156/0x360
[  298.170692][ T8252]  ? lock_release+0xc40/0xc40
[  298.175387][ T8252]  ? rwlock_bug.part.0+0x90/0x90
[  298.180319][ T8252]  ? pmd_devmap_trans_unstable+0x1d0/0x1d0
[  298.186118][ T8252]  ? add_mm_counter_fast.part.0+0x40/0x40
[  298.191834][ T8252]  ? add_lock_to_list.isra.0+0x450/0x450
[  298.197471][ T8252]  ? add_lock_to_list.isra.0+0x450/0x450
[  298.203097][ T8252]  ? __handle_mm_fault+0x955/0x5610
[  298.208331][ T8252]  ? __might_fault+0x12b/0x1e0
[  298.213094][ T8252]  ? find_held_lock+0x35/0x120
[  298.217849][ T8252]  ? __might_fault+0x12b/0x1e0
[  298.222639][ T8252]  ? lock_acquire+0x1db/0x570
[  298.227327][ T8252]  ? lock_downgrade+0xc40/0xc40
[  298.232183][ T8252]  ? lock_release+0xc40/0xc40
[  298.236907][ T8252]  ? trace_hardirqs_off_caller+0x300/0x300
[  298.242709][ T8252]  _do_fork+0x1a9/0x1170
[  298.246979][ T8252]  ? fork_idle+0x1d0/0x1d0
[  298.251390][ T8252]  ? kasan_check_read+0x11/0x20
[  298.256246][ T8252]  ? _copy_to_user+0xc9/0x120
[  298.260923][ T8252]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  298.267419][ T8252]  ? put_timespec64+0x115/0x1b0
[  298.272266][ T8252]  ? nsecs_to_jiffies+0x30/0x30
[  298.277116][ T8252]  ? do_syscall_64+0x8c/0x800
[  298.281786][ T8252]  ? do_syscall_64+0x8c/0x800
[  298.286476][ T8252]  ? lockdep_hardirqs_on+0x418/0x5d0
[  298.291754][ T8252]  ? trace_hardirqs_on+0xbd/0x310
[  298.296769][ T8252]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  298.303020][ T8252]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  298.309080][ T8252]  ? trace_hardirqs_off_caller+0x300/0x300
[  298.314884][ T8252]  __x64_sys_clone+0xbf/0x150
[  298.319590][ T8252]  do_syscall_64+0x1a3/0x800
[  298.324191][ T8252]  ? syscall_return_slowpath+0x5f0/0x5f0
[  298.329842][ T8252]  ? prepare_exit_to_usermode+0x232/0x3b0
[  298.335561][ T8252]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  298.341106][ T8252]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  298.346993][ T8252] RIP: 0033:0x45665a
[  298.350891][ T8252] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00
[  298.370839][ T8252] RSP: 002b:00007ffe6a0f97e0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[  298.379252][ T8252] RAX: ffffffffffffffda RBX: 00007ffe6a0f97e0 RCX: 000000000045665a
[  298.387223][ T8252] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011
[  298.395195][ T8252] RBP: 00007ffe6a0f9820 R08: 0000000000000001 R09: 0000000000f4d940
[  298.403171][ T8252] R10: 0000000000f4dc10 R11: 0000000000000246 R12: 0000000000000001
[  298.411133][ T8252] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000002
09:19:06 executing program 5:
rseq(&(0x7f0000000000), 0x20, 0x0, 0x0)
rseq(&(0x7f0000000000), 0x2, 0x0, 0x0)

09:19:06 executing program 1:
memfd_create(0x0, 0x0)
openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket(0x2, 0x1, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x3000000000000000, 0x80, &(0x7f0000000040)=@broute={'broute\x00', 0x20, 0x1, 0x178, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000c0], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0x0, 0x0, 'ip6gre0\x00', 'syzkaller1\x00', 'ip6tnl0\x00', '\x01ama\x00\x00\x00\x00J\xb2\xce\xc8\x00', @remote, [], @remote, [], 0x70, 0x70, 0xe8}}, @common=@nflog={'nflog\x00', 0x50, {{0x0, 0x0, 0x0, 0x0, 0x0, "339ebc4bb0c0fba43162d5c302d891b307544d821a0dcb492ba4aa23baaca6e53f392b79c58e0581db804208237c3df1c60b6b34da2747cd3200fbb384511226"}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}, {0x0, '\x00', 0x1, 0xffffffdffffffffc}]}, 0x1f0)
ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, 0x0)

[  298.454470][ T8252] memory: usage 4312kB, limit 0kB, failcnt 41
[  298.484762][ T8252] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[  298.497613][ T8252] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0
09:19:06 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000580)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20)
r2 = accept$alg(r1, 0x0, 0x0)
write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa)
recvmmsg(r2, &(0x7f0000008a00)=[{{0x0, 0xffffffffffffff2d, &(0x7f0000000000)=[{&(0x7f0000000680)=""/120, 0x78}, {&(0x7f0000000300)=""/230, 0xe6}], 0x2}}], 0x1d, 0x0, 0x0)

09:19:06 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
pipe(&(0x7f0000000180)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r2, &(0x7f0000e11ff0)=[{&(0x7f0000000140)="580000001400ad", 0x7}], 0x1)
close(r3)
socket$netlink(0x10, 0x3, 0xf)
write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x4240a2a0)
splice(r1, 0x0, r3, 0x0, 0x10005, 0x0)

09:19:06 executing program 5:
rseq(&(0x7f0000000000), 0x20, 0x0, 0x0)
rseq(&(0x7f0000000000), 0x2, 0x0, 0x0)

[  298.528135][ T8252] Memory cgroup stats for /syz2: cache:64KB rss:88KB rss_huge:0KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:52KB inactive_file:4KB active_file:0KB unevictable:0KB
[  298.609476][ T8252] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor2,pid=8252,uid=0
[  298.633963][ T8252] Memory cgroup out of memory: Kill process 8252 (syz-executor2) score 8983000 or sacrifice child
[  298.646338][ T8252] Killed process 8252 (syz-executor2) total-vm:72312kB, anon-rss:100kB, file-rss:35712kB, shmem-rss:0kB
09:19:06 executing program 1:
memfd_create(0x0, 0x0)
openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket(0x2, 0x1, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x3000000000000000, 0x80, &(0x7f0000000040)=@broute={'broute\x00', 0x20, 0x1, 0x178, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000c0], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0x0, 0x0, 'ip6gre0\x00', 'syzkaller1\x00', 'ip6tnl0\x00', '\x01ama\x00\x00\x00\x00J\xb2\xce\xc8\x00', @remote, [], @remote, [], 0x70, 0x70, 0xe8}}, @common=@nflog={'nflog\x00', 0x50, {{0x0, 0x0, 0x0, 0x0, 0x0, "339ebc4bb0c0fba43162d5c302d891b307544d821a0dcb492ba4aa23baaca6e53f392b79c58e0581db804208237c3df1c60b6b34da2747cd3200fbb384511226"}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}, {0x0, '\x00', 0x1, 0xffffffdffffffffc}]}, 0x1f0)
ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, 0x0)

[  298.659638][ T1039] oom_reaper: reaped process 8252 (syz-executor2), now anon-rss:0kB, file-rss:34880kB, shmem-rss:0kB
09:19:07 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000000)=ANY=[@ANYBLOB="758c"])
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000013000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

09:19:07 executing program 1:
memfd_create(0x0, 0x0)
openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket(0x2, 0x1, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x3000000000000000, 0x80, &(0x7f0000000040)=@broute={'broute\x00', 0x20, 0x1, 0x178, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000c0], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0x0, 0x0, 'ip6gre0\x00', 'syzkaller1\x00', 'ip6tnl0\x00', '\x01ama\x00\x00\x00\x00J\xb2\xce\xc8\x00', @remote, [], @remote, [], 0x70, 0x70, 0xe8}}, @common=@nflog={'nflog\x00', 0x50, {{0x0, 0x0, 0x0, 0x0, 0x0, "339ebc4bb0c0fba43162d5c302d891b307544d821a0dcb492ba4aa23baaca6e53f392b79c58e0581db804208237c3df1c60b6b34da2747cd3200fbb384511226"}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}, {0x0, '\x00', 0x1, 0xffffffdffffffffc}]}, 0x1f0)
ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, 0x0)

09:19:07 executing program 2:
eventfd2(0x0, 0x0)
recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000440)=@pppol2tpv3={0x18, 0x1, {0x0, <r0=>0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, 0x0}, 0x0)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00\xe6\xd6\xaa\x00\xc7\xf4\\.\xf3\xd3\xa6\xb0(I\xc4\x85\xcb\xe7\x84\x00\xf2\xc8\xd4\x99\x8bP`-iU\x83\r\x94\xe6l\x87\f\xea1\xc2', 0x200002, 0x0)
getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f00000000c0)={0x0, 0x2, 0x10000, 0x4, 0x9, 0x6, 0x3, 0x0, {<r2=>0x0, @in6={{0xa, 0x4e21, 0x81, @dev={0xfe, 0x80, [], 0x1b}, 0x3}}, 0x3, 0x6, 0x8001, 0x4, 0xb74}}, &(0x7f0000000000)=0xb0)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000180)={r2, @in={{0x2, 0x4e20, @local}}, 0xffffffffffffff4e, 0x4}, &(0x7f0000000240)=0x90)
r3 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0)
writev(r3, &(0x7f0000000700), 0x1000000000000103)

09:19:07 executing program 3:
r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(r0)
socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000080))
ioctl$KVM_RUN(r4, 0xae80, 0x0)

09:19:07 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0xffffffffffff7310})

09:19:07 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000000)=ANY=[@ANYBLOB="758c"])
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000013000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

09:19:07 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
pipe(&(0x7f0000000180)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r2, &(0x7f0000e11ff0)=[{&(0x7f0000000140)="580000001400ad", 0x7}], 0x1)
close(r3)
socket$netlink(0x10, 0x3, 0xf)
write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x4240a2a0)
splice(r1, 0x0, r3, 0x0, 0x10005, 0x0)

09:19:07 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000000)=ANY=[@ANYBLOB="758c"])
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000013000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

09:19:08 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000580)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20)
r2 = accept$alg(r1, 0x0, 0x0)
write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa)
recvmmsg(r2, &(0x7f0000008a00)=[{{0x0, 0xffffffffffffff2d, &(0x7f0000000000)=[{&(0x7f0000000680)=""/120, 0x78}, {&(0x7f0000000300)=""/230, 0xe6}], 0x2}}], 0x1d, 0x0, 0x0)

09:19:08 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000000)=ANY=[@ANYBLOB="758c"])
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000013000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  299.917102][T12689] IPVS: ftp: loaded support on port[0] = 21
09:19:08 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0xffffffffffff7310})

09:19:08 executing program 3:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4003}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000700)='/dev/fuse\x00', 0x2, 0x0)
ioctl$FUSE_DEV_IOC_CLONE(r2, 0x8004e500, &(0x7f0000000600)=r0)

[  300.742903][T12689] chnl_net:caif_netlink_parms(): no params data found
[  300.776910][T12689] bridge0: port 1(bridge_slave_0) entered blocking state
[  300.784018][T12689] bridge0: port 1(bridge_slave_0) entered disabled state
[  300.792163][T12689] device bridge_slave_0 entered promiscuous mode
[  300.972645][T12689] bridge0: port 2(bridge_slave_1) entered blocking state
[  300.980097][T12689] bridge0: port 2(bridge_slave_1) entered disabled state
[  300.991476][T12689] device bridge_slave_1 entered promiscuous mode
[  301.138855][T12689] bond0: Enslaving bond_slave_0 as an active interface with an up link
[  301.149018][T12689] bond0: Enslaving bond_slave_1 as an active interface with an up link
[  301.168832][T12689] team0: Port device team_slave_0 added
[  301.175887][T12689] team0: Port device team_slave_1 added
[  301.367844][T12689] device hsr_slave_0 entered promiscuous mode
[  301.405878][T12689] device hsr_slave_1 entered promiscuous mode
[  301.588049][T12689] bridge0: port 2(bridge_slave_1) entered blocking state
[  301.595157][T12689] bridge0: port 2(bridge_slave_1) entered forwarding state
[  301.602417][T12689] bridge0: port 1(bridge_slave_0) entered blocking state
[  301.609550][T12689] bridge0: port 1(bridge_slave_0) entered forwarding state
[  301.618887][   T22] bridge0: port 1(bridge_slave_0) entered disabled state
[  301.626635][   T22] bridge0: port 2(bridge_slave_1) entered disabled state
[  301.804511][T12689] 8021q: adding VLAN 0 to HW filter on device bond0
[  301.819017][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  301.827191][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  301.838177][T12689] 8021q: adding VLAN 0 to HW filter on device team0
[  301.848486][    T7] device bridge_slave_1 left promiscuous mode
[  301.859264][    T7] bridge0: port 2(bridge_slave_1) entered disabled state
[  301.919204][    T7] device bridge_slave_0 left promiscuous mode
[  301.926104][    T7] bridge0: port 1(bridge_slave_0) entered disabled state
[  305.618171][    T7] device hsr_slave_1 left promiscuous mode
[  305.660814][    T7] device hsr_slave_0 left promiscuous mode
[  305.729806][    T7] team0 (unregistering): Port device team_slave_1 removed
[  305.744984][    T7] team0 (unregistering): Port device team_slave_0 removed
[  305.762050][    T7] bond0 (unregistering): Releasing backup interface bond_slave_0
[  305.859916][    T7] bond0 (unregistering): Released all slaves
[  305.974997][ T8266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  305.983530][ T8266] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  305.991954][ T8266] bridge0: port 1(bridge_slave_0) entered blocking state
[  305.999052][ T8266] bridge0: port 1(bridge_slave_0) entered forwarding state
[  306.006723][ T8266] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  306.016239][ T8266] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  306.024667][ T8266] bridge0: port 2(bridge_slave_1) entered blocking state
[  306.031695][ T8266] bridge0: port 2(bridge_slave_1) entered forwarding state
[  306.041958][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  306.052443][ T2650] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  306.074033][T12689] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  306.088777][T12689] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  306.101258][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  306.110347][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  306.119094][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  306.128004][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  306.136566][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  306.144890][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  306.153013][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  306.161297][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  306.169696][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  306.177770][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  306.202114][T12689] 8021q: adding VLAN 0 to HW filter on device batadv0
[  306.273740][T12730] syz-executor2 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), order=0, oom_score_adj=1000
[  306.285114][T12730] CPU: 0 PID: 12730 Comm: syz-executor2 Not tainted 5.0.0-rc4-next-20190130 #22
[  306.294147][T12730] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  306.304228][T12730] Call Trace:
[  306.307533][T12730]  dump_stack+0x1db/0x2d0
[  306.311858][T12730]  ? dump_stack_print_info.cold+0x20/0x20
[  306.317581][T12730]  dump_header+0x1e6/0x11a6
[  306.322081][T12730]  ? add_lock_to_list.isra.0+0x450/0x450
[  306.327717][T12730]  ? pagefault_out_of_memory+0x1a1/0x1a1
[  306.333354][T12730]  ? ___ratelimit+0x37c/0x686
[  306.338029][T12730]  ? find_held_lock+0x35/0x120
[  306.342809][T12730]  ? mark_held_locks+0xa4/0xf0
[  306.347567][T12730]  ? lock_acquire+0x1db/0x570
[  306.352251][T12730]  ? _raw_spin_unlock_irqrestore+0x6b/0xe0
[  306.358084][T12730]  ? _raw_spin_unlock_irqrestore+0x6b/0xe0
[  306.363888][T12730]  ? lockdep_hardirqs_on+0x418/0x5d0
[  306.369171][T12730]  ? trace_hardirqs_on+0xbd/0x310
[  306.374193][T12730]  ? kasan_check_read+0x11/0x20
[  306.379046][T12730]  ? ___ratelimit+0x37c/0x686
[  306.383720][T12730]  ? trace_hardirqs_off_caller+0x300/0x300
[  306.389552][T12730]  ? do_raw_spin_trylock+0x270/0x270
[  306.394832][T12730]  ? trace_hardirqs_on_caller+0x310/0x310
[  306.400543][T12730]  ? lock_acquire+0x1db/0x570
[  306.405235][T12730]  ? _raw_spin_unlock_irqrestore+0xa4/0xe0
[  306.411049][T12730]  ? ___ratelimit+0xac/0x686
[  306.415641][T12730]  ? idr_get_free+0xee0/0xee0
[  306.420312][T12730]  ? lockdep_hardirqs_on+0x418/0x5d0
[  306.425599][T12730]  oom_kill_process.cold+0x10/0x9ca
[  306.430803][T12730]  ? cgroup_procs_next+0x70/0x70
[  306.435771][T12730]  ? _raw_spin_unlock_irq+0x5e/0x90
[  306.440963][T12730]  ? oom_badness+0xa50/0xa50
[  306.445556][T12730]  ? oom_evaluate_task+0x540/0x540
[  306.450667][T12730]  ? mem_cgroup_iter_break+0x30/0x30
[  306.455960][T12730]  ? mutex_trylock+0x2d0/0x2d0
[  306.460736][T12730]  ? cgroup_file_notify+0x217/0x2e0
[  306.465933][T12730]  out_of_memory+0x885/0x1420
[  306.470606][T12730]  ? _raw_spin_unlock_irqrestore+0x6b/0xe0
[  306.476409][T12730]  ? _raw_spin_unlock_irqrestore+0x6b/0xe0
[  306.482213][T12730]  ? oom_killer_disable+0x340/0x340
[  306.487490][T12730]  ? preempt_schedule+0x4b/0x60
[  306.492343][T12730]  ? ___preempt_schedule+0x16/0x18
[  306.497476][T12730]  mem_cgroup_out_of_memory+0x21a/0x2a0
[  306.503044][T12730]  ? memory_oom_group_write+0x160/0x160
[  306.508662][T12730]  memory_max_write+0x1b0/0x3e0
[  306.513501][T12730]  ? lock_acquire+0x1db/0x570
[  306.518192][T12730]  ? mem_cgroup_write+0x440/0x440
[  306.523208][T12730]  ? lock_release+0xc40/0xc40
[  306.527903][T12730]  ? add_lock_to_list.isra.0+0x450/0x450
[  306.533529][T12730]  ? lock_downgrade+0xc40/0xc40
[  306.538384][T12730]  cgroup_file_write+0x252/0x830
[  306.543318][T12730]  ? mem_cgroup_write+0x440/0x440
[  306.548337][T12730]  ? cgroup_migrate_add_task+0xcb0/0xcb0
[  306.554020][T12730]  ? cgroup_migrate_add_task+0xcb0/0xcb0
[  306.559691][T12730]  kernfs_fop_write+0x2ba/0x480
[  306.564557][T12730]  do_iter_write+0x4a5/0x610
[  306.569166][T12730]  vfs_writev+0x1ee/0x370
[  306.573521][T12730]  ? vfs_iter_write+0xb0/0xb0
[  306.578192][T12730]  ? trace_hardirqs_off_caller+0x300/0x300
[  306.584011][T12730]  ? mutex_lock_nested+0x16/0x20
[  306.588960][T12730]  ? mutex_lock_nested+0x16/0x20
[  306.593939][T12730]  ? __fdget_pos+0xdc/0x1f0
[  306.598451][T12730]  ? __fdget_raw+0x20/0x20
[  306.602861][T12730]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  306.609097][T12730]  ? put_timespec64+0x115/0x1b0
[  306.613945][T12730]  do_writev+0x11a/0x300
[  306.618187][T12730]  ? vfs_writev+0x370/0x370
[  306.622709][T12730]  ? trace_hardirqs_off_caller+0x300/0x300
[  306.628510][T12730]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[  306.633967][T12730]  __x64_sys_writev+0x75/0xb0
[  306.638659][T12730]  do_syscall_64+0x1a3/0x800
[  306.643264][T12730]  ? syscall_return_slowpath+0x5f0/0x5f0
[  306.648895][T12730]  ? prepare_exit_to_usermode+0x232/0x3b0
[  306.654632][T12730]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  306.660193][T12730]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  306.666088][T12730] RIP: 0033:0x458089
[  306.670021][T12730] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  306.689621][T12730] RSP: 002b:00007f72cd38ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000014
[  306.698025][T12730] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000458089
[  306.705992][T12730] RDX: 1000000000000103 RSI: 0000000020000700 RDI: 0000000000000005
[  306.713954][T12730] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000
[  306.721916][T12730] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f72cd38b6d4
[  306.729880][T12730] R13: 00000000004c4b74 R14: 00000000004dd108 R15: 00000000ffffffff
[  306.743509][T12730] memory: usage 5992kB, limit 0kB, failcnt 44
[  306.752619][T12730] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[  306.760940][T12730] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0
[  306.768238][T12730] Memory cgroup stats for /syz2: cache:64KB rss:2196KB rss_huge:2048KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:2160KB inactive_file:4KB active_file:0KB unevictable:0KB
[  306.789355][T12730] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor2,pid=12729,uid=0
[  306.805562][T12730] Memory cgroup out of memory: Kill process 12729 (syz-executor2) score 9271000 or sacrifice child
09:19:15 executing program 2:
eventfd2(0x0, 0x0)
recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000440)=@pppol2tpv3={0x18, 0x1, {0x0, <r0=>0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, 0x0}, 0x0)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00\xe6\xd6\xaa\x00\xc7\xf4\\.\xf3\xd3\xa6\xb0(I\xc4\x85\xcb\xe7\x84\x00\xf2\xc8\xd4\x99\x8bP`-iU\x83\r\x94\xe6l\x87\f\xea1\xc2', 0x200002, 0x0)
getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f00000000c0)={0x0, 0x2, 0x10000, 0x4, 0x9, 0x6, 0x3, 0x0, {<r2=>0x0, @in6={{0xa, 0x4e21, 0x81, @dev={0xfe, 0x80, [], 0x1b}, 0x3}}, 0x3, 0x6, 0x8001, 0x4, 0xb74}}, &(0x7f0000000000)=0xb0)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000180)={r2, @in={{0x2, 0x4e20, @local}}, 0xffffffffffffff4e, 0x4}, &(0x7f0000000240)=0x90)
r3 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0)
writev(r3, &(0x7f0000000700), 0x1000000000000103)

09:19:15 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000001100)="0adc1f123c12a41d88b070")
r1 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x0)
ioctl$VIDIOC_SUBDEV_S_FMT(r1, 0xc0585605, &(0x7f0000000080)={0x1})

09:19:15 executing program 0:
syz_open_dev$dmmidi(0x0, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x80, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
mkdir(&(0x7f0000001540)='./file0\x00', 0x0)

09:19:15 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0xffffffffffff7310})

09:19:15 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
recvmmsg(0xffffffffffffffff, &(0x7f0000001180)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000d80)=""/185, 0xb9}], 0x1}}], 0x1, 0x0, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-generic\x00'}, 0x58)
r2 = accept$alg(r1, 0x0, 0x0)
sendmmsg$alg(r2, &(0x7f00000004c0)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000140)}], 0x1500, 0x0)

09:19:15 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000580)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20)
r2 = accept$alg(r1, 0x0, 0x0)
write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa)
recvmmsg(r2, &(0x7f0000008a00)=[{{0x0, 0xffffffffffffff2d, &(0x7f0000000000)=[{&(0x7f0000000680)=""/120, 0x78}, {&(0x7f0000000300)=""/230, 0xe6}], 0x2}}], 0x1d, 0x0, 0x0)

[  306.816410][T12730] Killed process 12729 (syz-executor2) total-vm:72448kB, anon-rss:2136kB, file-rss:34816kB, shmem-rss:0kB
[  306.828985][ T1039] oom_reaper: reaped process 12729 (syz-executor2), now anon-rss:0kB, file-rss:34832kB, shmem-rss:0kB
[  306.891494][T12689] syz-executor2 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), order=0, oom_score_adj=0
[  306.937551][T12689] CPU: 1 PID: 12689 Comm: syz-executor2 Not tainted 5.0.0-rc4-next-20190130 #22
[  306.946571][T12689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  306.956637][T12689] Call Trace:
[  306.959931][T12689]  dump_stack+0x1db/0x2d0
[  306.964282][T12689]  ? dump_stack_print_info.cold+0x20/0x20
[  306.970050][T12689]  dump_header+0x1e6/0x11a6
[  306.974574][T12689]  ? add_lock_to_list.isra.0+0x450/0x450
[  306.980211][T12689]  ? pagefault_out_of_memory+0x1a1/0x1a1
[  306.985852][T12689]  ? ___ratelimit+0x37c/0x686
[  306.990563][T12689]  ? find_held_lock+0x35/0x120
[  306.995334][T12689]  ? mark_held_locks+0xa4/0xf0
[  307.000099][T12689]  ? lock_acquire+0x1db/0x570
[  307.004782][T12689]  ? _raw_spin_unlock_irqrestore+0x6b/0xe0
[  307.010587][T12689]  ? _raw_spin_unlock_irqrestore+0x6b/0xe0
[  307.016398][T12689]  ? lockdep_hardirqs_on+0x418/0x5d0
[  307.021698][T12689]  ? trace_hardirqs_on+0xbd/0x310
[  307.026720][T12689]  ? kasan_check_read+0x11/0x20
[  307.031569][T12689]  ? ___ratelimit+0x37c/0x686
[  307.036254][T12689]  ? trace_hardirqs_off_caller+0x300/0x300
[  307.042075][T12689]  ? do_raw_spin_trylock+0x270/0x270
[  307.047374][T12689]  ? trace_hardirqs_on_caller+0x310/0x310
[  307.053123][T12689]  ? lock_acquire+0x1db/0x570
[  307.057802][T12689]  ? _raw_spin_unlock_irqrestore+0xa4/0xe0
[  307.063602][T12689]  ? ___ratelimit+0xac/0x686
[  307.068206][T12689]  ? idr_get_free+0xee0/0xee0
[  307.072885][T12689]  ? lockdep_hardirqs_on+0x418/0x5d0
[  307.078264][T12689]  oom_kill_process.cold+0x10/0x9ca
[  307.083463][T12689]  ? cgroup_procs_next+0x70/0x70
[  307.088404][T12689]  ? _raw_spin_unlock_irq+0x5e/0x90
[  307.093602][T12689]  ? oom_badness+0xa50/0xa50
[  307.098195][T12689]  ? oom_evaluate_task+0x540/0x540
[  307.103348][T12689]  ? mem_cgroup_iter_break+0x30/0x30
[  307.108651][T12689]  ? mutex_trylock+0x2d0/0x2d0
[  307.113412][T12689]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  307.119661][T12689]  ? rcu_read_unlock_special+0x380/0x380
[  307.125299][T12689]  out_of_memory+0x885/0x1420
[  307.129981][T12689]  ? mem_cgroup_iter+0x4f4/0xf50
[  307.134921][T12689]  ? oom_killer_disable+0x340/0x340
[  307.140120][T12689]  ? mem_cgroup_unmark_under_oom+0x8d/0xb0
[  307.145923][T12689]  ? lock_acquire+0x1db/0x570
[  307.150624][T12689]  mem_cgroup_out_of_memory+0x21a/0x2a0
[  307.156169][T12689]  ? do_raw_spin_unlock+0xa0/0x330
[  307.161293][T12689]  ? memory_oom_group_write+0x160/0x160
[  307.166836][T12689]  ? do_raw_spin_trylock+0x270/0x270
[  307.172126][T12689]  ? _raw_spin_unlock+0x2d/0x50
[  307.176974][T12689]  try_charge+0x1407/0x1d30
[  307.181471][T12689]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  307.187749][T12689]  ? mem_cgroup_oom_trylock+0x1a0/0x1a0
[  307.193289][T12689]  ? rcu_read_unlock_special+0x380/0x380
[  307.198925][T12689]  ? get_mem_cgroup_from_mm+0x1ea/0x420
[  307.204480][T12689]  ? get_mem_cgroup_from_page+0x190/0x190
[  307.210217][T12689]  ? rcu_read_lock_sched_held+0x110/0x130
[  307.215948][T12689]  mem_cgroup_try_charge+0x43a/0xdb0
[  307.221242][T12689]  ? mem_cgroup_protected+0xa10/0xa10
[  307.226630][T12689]  ? __sanitizer_cov_trace_const_cmp2+0x18/0x20
[  307.232906][T12689]  ? __sanitizer_cov_trace_const_cmp2+0x18/0x20
[  307.239157][T12689]  mem_cgroup_try_charge_delay+0x1f/0xa0
[  307.244790][T12689]  wp_page_copy+0x45a/0x1c70
[  307.249375][T12689]  ? swp_swapcount+0x540/0x540
[  307.254132][T12689]  ? __lock_acquire+0x572/0x4a10
[  307.259078][T12689]  ? pmd_pfn+0x1d0/0x1d0
[  307.263312][T12689]  ? find_held_lock+0x35/0x120
[  307.268099][T12689]  ? do_wp_page+0x74e/0x1cc0
[  307.272701][T12689]  ? kasan_check_read+0x11/0x20
[  307.277571][T12689]  ? do_raw_spin_unlock+0xa0/0x330
[  307.282705][T12689]  ? do_raw_spin_trylock+0x270/0x270
[  307.287999][T12689]  ? print_usage_bug+0xd0/0xd0
[  307.292763][T12689]  do_wp_page+0x756/0x1cc0
[  307.297213][T12689]  ? finish_mkwrite_fault+0x4f0/0x4f0
[  307.302606][T12689]  ? kernel_text_address+0x73/0xf0
[  307.307729][T12689]  ? lock_acquire+0x1db/0x570
[  307.312401][T12689]  ? __handle_mm_fault+0x1dac/0x5610
[  307.317686][T12689]  ? kasan_check_write+0x14/0x20
[  307.322619][T12689]  ? do_raw_spin_lock+0x156/0x360
[  307.327634][T12689]  ? lock_release+0xc40/0xc40
[  307.332409][T12689]  ? rwlock_bug.part.0+0x90/0x90
[  307.337360][T12689]  ? pmd_devmap_trans_unstable+0x1d0/0x1d0
[  307.343160][T12689]  ? add_mm_counter_fast.part.0+0x40/0x40
[  307.348887][T12689]  __handle_mm_fault+0x2d06/0x5610
[  307.354008][T12689]  ? vmf_insert_mixed_mkwrite+0x40/0x40
[  307.359570][T12689]  ? check_preemption_disabled+0x48/0x290
[  307.365317][T12689]  ? handle_mm_fault+0x3cc/0xc80
[  307.370276][T12689]  ? lock_downgrade+0xc40/0xc40
[  307.375121][T12689]  ? kasan_check_read+0x11/0x20
[  307.379971][T12689]  ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170
[  307.385950][T12689]  ? rcu_read_unlock_special+0x380/0x380
[  307.391595][T12689]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  307.397840][T12689]  ? check_preemption_disabled+0x48/0x290
[  307.403565][T12689]  handle_mm_fault+0x4ec/0xc80
[  307.408351][T12689]  ? __handle_mm_fault+0x5610/0x5610
[  307.413660][T12689]  __do_page_fault+0x5ef/0xda0
[  307.418478][T12689]  do_page_fault+0xe6/0x7d8
[  307.422981][T12689]  ? trace_hardirqs_on_caller+0xc0/0x310
[  307.428615][T12689]  ? vmalloc_sync_all+0x30/0x30
[  307.433462][T12689]  ? __bpf_trace_preemptirq_template+0x30/0x30
[  307.439659][T12689]  ? syscall_return_slowpath+0x5f0/0x5f0
[  307.445288][T12689]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  307.451557][T12689]  ? prepare_exit_to_usermode+0x232/0x3b0
[  307.457275][T12689]  ? page_fault+0x8/0x30
[  307.461520][T12689]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  307.467076][T12689]  ? page_fault+0x8/0x30
[  307.471347][T12689]  page_fault+0x1e/0x30
[  307.475500][T12689] RIP: 0033:0x42f216
[  307.479405][T12689] Code: 1f 44 00 00 48 29 e8 31 c9 48 81 fb 40 16 71 00 0f 95 c1 48 8d 34 2a 48 83 cd 01 48 c1 e1 02 48 83 c8 01 48 09 e9 48 89 73 58 <48> 89 4a 08 48 89 46 08 48 8d 4a 10 8b 05 4c 5d 62 00 85 c0 0f 84
[  307.499000][T12689] RSP: 002b:00007ffd9d56c170 EFLAGS: 00010206
[  307.505058][T12689] RAX: 0000000000019691 RBX: 0000000000711640 RCX: 0000000000008041
[  307.513045][T12689] RDX: 0000000002952930 RSI: 000000000295a970 RDI: 0000000000000003
[  307.521018][T12689] RBP: 0000000000008041 R08: 0000000000000001 R09: 0000000002951940
[  307.528977][T12689] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000711698
09:19:15 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
recvmmsg(0xffffffffffffffff, &(0x7f0000001180)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000d80)=""/185, 0xb9}], 0x1}}], 0x1, 0x0, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-generic\x00'}, 0x58)
r2 = accept$alg(r1, 0x0, 0x0)
sendmmsg$alg(r2, &(0x7f00000004c0)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000140)}], 0x1500, 0x0)

09:19:15 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000001100)="0adc1f123c12a41d88b070")
r1 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x0)
ioctl$VIDIOC_SUBDEV_S_FMT(r1, 0xc0585605, &(0x7f0000000080)={0x1})

[  307.536939][T12689] R13: 0000000000711698 R14: 0000000000000000 R15: 0000000000002710
09:19:15 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0xffffffffffff7310})

[  307.593183][T12747] FAT-fs (loop0): error, invalid access to FAT (entry 0x00006500)
[  307.639658][T12747] FAT-fs (loop0): Filesystem has been set read-only
09:19:15 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000580)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20)
r2 = accept$alg(r1, 0x0, 0x0)
write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa)
recvmmsg(r2, &(0x7f0000008a00)=[{{0x0, 0xffffffffffffff2d, &(0x7f0000000000)=[{&(0x7f0000000680)=""/120, 0x78}, {&(0x7f0000000300)=""/230, 0xe6}], 0x2}}], 0x1d, 0x0, 0x0)

09:19:15 executing program 0:
socketpair$unix(0x1, 0x800000000003, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000200)={0x80033d, 0x20000000209, 0x0, <r2=>0xffffffffffffffff})
r3 = dup2(r1, r2)
ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000000)={0x9cf0000008, 0x7})

09:19:15 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000001100)="0adc1f123c12a41d88b070")
r1 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x0)
ioctl$VIDIOC_SUBDEV_S_FMT(r1, 0xc0585605, &(0x7f0000000080)={0x1})

[  307.754772][T12689] memory: usage 3644kB, limit 0kB, failcnt 52
[  307.760871][T12689] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[  307.789706][T12689] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0
[  307.843941][T12689] Memory cgroup stats for /syz2: cache:64KB rss:68KB rss_huge:0KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:36KB inactive_file:0KB active_file:0KB unevictable:0KB
[  307.910833][T12689] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor2,pid=12689,uid=0
[  307.964681][T12689] Memory cgroup out of memory: Kill process 12689 (syz-executor2) score 8753000 or sacrifice child
[  307.986995][T12689] Killed process 12689 (syz-executor2) total-vm:72316kB, anon-rss:72kB, file-rss:34816kB, shmem-rss:0kB
[  308.010806][ T1039] oom_reaper: reaped process 12689 (syz-executor2), now anon-rss:0kB, file-rss:33984kB, shmem-rss:0kB
09:19:16 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c12a41d88b070")
setpgid(0x0, 0x0)

09:19:16 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
recvmmsg(0xffffffffffffffff, &(0x7f0000001180)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000d80)=""/185, 0xb9}], 0x1}}], 0x1, 0x0, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-generic\x00'}, 0x58)
r2 = accept$alg(r1, 0x0, 0x0)
sendmmsg$alg(r2, &(0x7f00000004c0)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000140)}], 0x1500, 0x0)

09:19:16 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000001100)="0adc1f123c12a41d88b070")
r1 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x0)
ioctl$VIDIOC_SUBDEV_S_FMT(r1, 0xc0585605, &(0x7f0000000080)={0x1})

09:19:16 executing program 0:
socketpair$unix(0x1, 0x800000000003, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000200)={0x80033d, 0x20000000209, 0x0, <r2=>0xffffffffffffffff})
r3 = dup2(r1, r2)
ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000000)={0x9cf0000008, 0x7})

09:19:16 executing program 2:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x2, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='numa_maps\x00')
sendfile(r0, r1, 0x0, 0xffffffff)

09:19:16 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0)
ioctl$EVIOCSKEYCODE(r1, 0x80104592, &(0x7f00000000c0)=[0x1f00, 0x4])

09:19:16 executing program 5:
recvmmsg(0xffffffffffffffff, &(0x7f0000003a40)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)=""/126, 0x7e}], 0x1, &(0x7f0000000300)=""/44, 0x2c}, 0x20}, {{&(0x7f0000000340)=@tipc=@name, 0x80, &(0x7f00000004c0)=[{&(0x7f00000003c0)=""/34, 0x22}, {&(0x7f0000000400)=""/157, 0x9d}], 0x2}, 0x8}, {{&(0x7f0000000500)=@xdp, 0x80, 0x0, 0x0, &(0x7f0000000a00)=""/4096, 0x1000}, 0x974}, {{&(0x7f0000001a80)=@tipc=@id, 0x80, &(0x7f0000001d00)=[{&(0x7f0000001a00)=""/13, 0xd}, {&(0x7f0000001b00)=""/130, 0x82}, {&(0x7f0000001bc0)=""/47, 0x2f}, {&(0x7f0000001c00)=""/224, 0xe0}], 0x4}, 0x1}, {{&(0x7f0000001d40)=@sco, 0x80, &(0x7f0000001f80)=[{&(0x7f0000001dc0)=""/92, 0x5c}, {&(0x7f0000001e40)=""/109, 0x6d}, {&(0x7f0000001ec0)=""/175, 0xaf}], 0x3, &(0x7f0000001fc0)=""/57, 0x39}, 0x3}, {{&(0x7f0000002000)=@alg, 0x80, &(0x7f00000024c0)=[{&(0x7f0000002080)=""/215, 0xd7}, {&(0x7f0000002180)=""/117, 0x75}, {&(0x7f0000002200)=""/161, 0xa1}, {&(0x7f00000022c0)=""/20, 0x14}, {&(0x7f0000002300)=""/147, 0x93}, {&(0x7f00000023c0)=""/239, 0xef}], 0x6}, 0x9}, {{&(0x7f0000002540)=@pptp={0x18, 0x2, {0x0, @remote}}, 0x80, &(0x7f0000003740)=[{&(0x7f00000025c0)=""/118, 0x76}, {&(0x7f0000002640)=""/173, 0xad}, {&(0x7f0000002700)=""/58, 0x3a}, {&(0x7f0000002740)=""/4096, 0x1000}], 0x4, &(0x7f0000003780)=""/232, 0xe8}, 0x8}, {{&(0x7f0000003880)=@pppol2tp={0x18, 0x1, {0x0, <r0=>0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000003900), 0x0, &(0x7f0000003940)=""/197, 0xc5}, 0x111}], 0x8, 0x0, &(0x7f0000003c40))
setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000003c80)={0x3b, @empty, 0x4e20, 0x0, 'nq\x00', 0x20, 0x9, 0x1c}, 0x2c)
fcntl$setflags(r0, 0x2, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = syz_open_dev$usbmon(0x0, 0x0, 0x0)
ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0)
clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
mkdirat$cgroup(r1, 0x0, 0x1ff)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300030c000000000000200000000002000900400000000000bc000000000003000600000000000200ee00e0000054d81458186fe8b90002000100000000000000020200044a7b030005000000000002000000e0003f010000000000fca0d9"], 0x60}}, 0x0)
setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, 0x0, 0x0)
exit(0x0)
socket$packet(0x11, 0x3, 0x300)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000140)={{{@in=@local, @in6}}, {{@in=@initdev}, 0x0, @in6=@initdev}}, &(0x7f0000000000)=0xe8)
setns(0xffffffffffffffff, 0x0)

09:19:16 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c12a41d88b070")
setpgid(0x0, 0x0)

09:19:16 executing program 0:
socketpair$unix(0x1, 0x800000000003, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000200)={0x80033d, 0x20000000209, 0x0, <r2=>0xffffffffffffffff})
r3 = dup2(r1, r2)
ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000000)={0x9cf0000008, 0x7})

09:19:17 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
recvmmsg(0xffffffffffffffff, &(0x7f0000001180)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000d80)=""/185, 0xb9}], 0x1}}], 0x1, 0x0, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-generic\x00'}, 0x58)
r2 = accept$alg(r1, 0x0, 0x0)
sendmmsg$alg(r2, &(0x7f00000004c0)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000140)}], 0x1500, 0x0)

09:19:17 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0)
ioctl$EVIOCSKEYCODE(r1, 0x80104592, &(0x7f00000000c0)=[0x1f00, 0x4])

09:19:17 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c12a41d88b070")
setpgid(0x0, 0x0)

[  309.151423][T12814] IPVS: ftp: loaded support on port[0] = 21
[  309.341998][T12814] chnl_net:caif_netlink_parms(): no params data found
[  309.391190][T12814] bridge0: port 1(bridge_slave_0) entered blocking state
[  309.398449][T12814] bridge0: port 1(bridge_slave_0) entered disabled state
[  309.406580][T12814] device bridge_slave_0 entered promiscuous mode
[  309.414926][T12814] bridge0: port 2(bridge_slave_1) entered blocking state
[  309.422069][T12814] bridge0: port 2(bridge_slave_1) entered disabled state
[  309.430814][T12814] device bridge_slave_1 entered promiscuous mode
[  309.453394][T12814] bond0: Enslaving bond_slave_0 as an active interface with an up link
[  309.464141][T12814] bond0: Enslaving bond_slave_1 as an active interface with an up link
[  309.491391][T12814] team0: Port device team_slave_0 added
[  309.498485][T12814] team0: Port device team_slave_1 added
[  309.567996][T12814] device hsr_slave_0 entered promiscuous mode
[  309.584956][T12814] device hsr_slave_1 entered promiscuous mode
[  309.676109][T12814] 8021q: adding VLAN 0 to HW filter on device bond0
[  309.691204][ T2650] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  309.699766][ T2650] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  309.711067][T12814] 8021q: adding VLAN 0 to HW filter on device team0
[  309.722757][ T2650] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  309.732148][ T2650] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  309.740841][ T2650] bridge0: port 1(bridge_slave_0) entered blocking state
[  309.747945][ T2650] bridge0: port 1(bridge_slave_0) entered forwarding state
[  309.773586][T12814] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  309.784539][T12814] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  309.796952][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  309.806158][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  309.816196][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  309.824459][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  309.831536][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  309.842920][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  309.853847][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  309.863182][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  309.871785][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  309.880301][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  309.888750][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  309.897275][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  309.905815][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  309.915401][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  309.922998][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  309.942992][T12814] 8021q: adding VLAN 0 to HW filter on device batadv0
09:19:18 executing program 2:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x2, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='numa_maps\x00')
sendfile(r0, r1, 0x0, 0xffffffff)

09:19:18 executing program 0:
socketpair$unix(0x1, 0x800000000003, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000200)={0x80033d, 0x20000000209, 0x0, <r2=>0xffffffffffffffff})
r3 = dup2(r1, r2)
ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000000)={0x9cf0000008, 0x7})

09:19:18 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0)
ioctl$EVIOCSKEYCODE(r1, 0x80104592, &(0x7f00000000c0)=[0x1f00, 0x4])

09:19:18 executing program 3:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_read_part_table(0x0, 0x0, 0x0)

09:19:18 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c12a41d88b070")
setpgid(0x0, 0x0)

09:19:18 executing program 5:
recvmmsg(0xffffffffffffffff, &(0x7f0000003a40)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)=""/126, 0x7e}], 0x1, &(0x7f0000000300)=""/44, 0x2c}, 0x20}, {{&(0x7f0000000340)=@tipc=@name, 0x80, &(0x7f00000004c0)=[{&(0x7f00000003c0)=""/34, 0x22}, {&(0x7f0000000400)=""/157, 0x9d}], 0x2}, 0x8}, {{&(0x7f0000000500)=@xdp, 0x80, 0x0, 0x0, &(0x7f0000000a00)=""/4096, 0x1000}, 0x974}, {{&(0x7f0000001a80)=@tipc=@id, 0x80, &(0x7f0000001d00)=[{&(0x7f0000001a00)=""/13, 0xd}, {&(0x7f0000001b00)=""/130, 0x82}, {&(0x7f0000001bc0)=""/47, 0x2f}, {&(0x7f0000001c00)=""/224, 0xe0}], 0x4}, 0x1}, {{&(0x7f0000001d40)=@sco, 0x80, &(0x7f0000001f80)=[{&(0x7f0000001dc0)=""/92, 0x5c}, {&(0x7f0000001e40)=""/109, 0x6d}, {&(0x7f0000001ec0)=""/175, 0xaf}], 0x3, &(0x7f0000001fc0)=""/57, 0x39}, 0x3}, {{&(0x7f0000002000)=@alg, 0x80, &(0x7f00000024c0)=[{&(0x7f0000002080)=""/215, 0xd7}, {&(0x7f0000002180)=""/117, 0x75}, {&(0x7f0000002200)=""/161, 0xa1}, {&(0x7f00000022c0)=""/20, 0x14}, {&(0x7f0000002300)=""/147, 0x93}, {&(0x7f00000023c0)=""/239, 0xef}], 0x6}, 0x9}, {{&(0x7f0000002540)=@pptp={0x18, 0x2, {0x0, @remote}}, 0x80, &(0x7f0000003740)=[{&(0x7f00000025c0)=""/118, 0x76}, {&(0x7f0000002640)=""/173, 0xad}, {&(0x7f0000002700)=""/58, 0x3a}, {&(0x7f0000002740)=""/4096, 0x1000}], 0x4, &(0x7f0000003780)=""/232, 0xe8}, 0x8}, {{&(0x7f0000003880)=@pppol2tp={0x18, 0x1, {0x0, <r0=>0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000003900), 0x0, &(0x7f0000003940)=""/197, 0xc5}, 0x111}], 0x8, 0x0, &(0x7f0000003c40))
setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000003c80)={0x3b, @empty, 0x4e20, 0x0, 'nq\x00', 0x20, 0x9, 0x1c}, 0x2c)
fcntl$setflags(r0, 0x2, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = syz_open_dev$usbmon(0x0, 0x0, 0x0)
ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0)
clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
mkdirat$cgroup(r1, 0x0, 0x1ff)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300030c000000000000200000000002000900400000000000bc000000000003000600000000000200ee00e0000054d81458186fe8b90002000100000000000000020200044a7b030005000000000002000000e0003f010000000000fca0d9"], 0x60}}, 0x0)
setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, 0x0, 0x0)
exit(0x0)
socket$packet(0x11, 0x3, 0x300)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000140)={{{@in=@local, @in6}}, {{@in=@initdev}, 0x0, @in6=@initdev}}, &(0x7f0000000000)=0xe8)
setns(0xffffffffffffffff, 0x0)

09:19:18 executing program 5:
recvmmsg(0xffffffffffffffff, &(0x7f0000003a40)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)=""/126, 0x7e}], 0x1, &(0x7f0000000300)=""/44, 0x2c}, 0x20}, {{&(0x7f0000000340)=@tipc=@name, 0x80, &(0x7f00000004c0)=[{&(0x7f00000003c0)=""/34, 0x22}, {&(0x7f0000000400)=""/157, 0x9d}], 0x2}, 0x8}, {{&(0x7f0000000500)=@xdp, 0x80, 0x0, 0x0, &(0x7f0000000a00)=""/4096, 0x1000}, 0x974}, {{&(0x7f0000001a80)=@tipc=@id, 0x80, &(0x7f0000001d00)=[{&(0x7f0000001a00)=""/13, 0xd}, {&(0x7f0000001b00)=""/130, 0x82}, {&(0x7f0000001bc0)=""/47, 0x2f}, {&(0x7f0000001c00)=""/224, 0xe0}], 0x4}, 0x1}, {{&(0x7f0000001d40)=@sco, 0x80, &(0x7f0000001f80)=[{&(0x7f0000001dc0)=""/92, 0x5c}, {&(0x7f0000001e40)=""/109, 0x6d}, {&(0x7f0000001ec0)=""/175, 0xaf}], 0x3, &(0x7f0000001fc0)=""/57, 0x39}, 0x3}, {{&(0x7f0000002000)=@alg, 0x80, &(0x7f00000024c0)=[{&(0x7f0000002080)=""/215, 0xd7}, {&(0x7f0000002180)=""/117, 0x75}, {&(0x7f0000002200)=""/161, 0xa1}, {&(0x7f00000022c0)=""/20, 0x14}, {&(0x7f0000002300)=""/147, 0x93}, {&(0x7f00000023c0)=""/239, 0xef}], 0x6}, 0x9}, {{&(0x7f0000002540)=@pptp={0x18, 0x2, {0x0, @remote}}, 0x80, &(0x7f0000003740)=[{&(0x7f00000025c0)=""/118, 0x76}, {&(0x7f0000002640)=""/173, 0xad}, {&(0x7f0000002700)=""/58, 0x3a}, {&(0x7f0000002740)=""/4096, 0x1000}], 0x4, &(0x7f0000003780)=""/232, 0xe8}, 0x8}, {{&(0x7f0000003880)=@pppol2tp={0x18, 0x1, {0x0, <r0=>0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000003900), 0x0, &(0x7f0000003940)=""/197, 0xc5}, 0x111}], 0x8, 0x0, &(0x7f0000003c40))
setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000003c80)={0x3b, @empty, 0x4e20, 0x0, 'nq\x00', 0x20, 0x9, 0x1c}, 0x2c)
fcntl$setflags(r0, 0x2, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = syz_open_dev$usbmon(0x0, 0x0, 0x0)
ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0)
clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
mkdirat$cgroup(r1, 0x0, 0x1ff)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300030c000000000000200000000002000900400000000000bc000000000003000600000000000200ee00e0000054d81458186fe8b90002000100000000000000020200044a7b030005000000000002000000e0003f010000000000fca0d9"], 0x60}}, 0x0)
setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, 0x0, 0x0)
exit(0x0)
socket$packet(0x11, 0x3, 0x300)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000140)={{{@in=@local, @in6}}, {{@in=@initdev}, 0x0, @in6=@initdev}}, &(0x7f0000000000)=0xe8)
setns(0xffffffffffffffff, 0x0)

[  310.234739][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  310.240615][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  310.289409][T12848] __loop_clr_fd: partition scan of loop3 failed (rc=-22)
[  310.354804][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  310.360700][    C0] protocol 88fb is buggy, dev hsr_slave_1
09:19:18 executing program 3:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_read_part_table(0x0, 0x0, 0x0)

09:19:18 executing program 2:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x2, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='numa_maps\x00')
sendfile(r0, r1, 0x0, 0xffffffff)

09:19:18 executing program 5:
recvmmsg(0xffffffffffffffff, &(0x7f0000003a40)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)=""/126, 0x7e}], 0x1, &(0x7f0000000300)=""/44, 0x2c}, 0x20}, {{&(0x7f0000000340)=@tipc=@name, 0x80, &(0x7f00000004c0)=[{&(0x7f00000003c0)=""/34, 0x22}, {&(0x7f0000000400)=""/157, 0x9d}], 0x2}, 0x8}, {{&(0x7f0000000500)=@xdp, 0x80, 0x0, 0x0, &(0x7f0000000a00)=""/4096, 0x1000}, 0x974}, {{&(0x7f0000001a80)=@tipc=@id, 0x80, &(0x7f0000001d00)=[{&(0x7f0000001a00)=""/13, 0xd}, {&(0x7f0000001b00)=""/130, 0x82}, {&(0x7f0000001bc0)=""/47, 0x2f}, {&(0x7f0000001c00)=""/224, 0xe0}], 0x4}, 0x1}, {{&(0x7f0000001d40)=@sco, 0x80, &(0x7f0000001f80)=[{&(0x7f0000001dc0)=""/92, 0x5c}, {&(0x7f0000001e40)=""/109, 0x6d}, {&(0x7f0000001ec0)=""/175, 0xaf}], 0x3, &(0x7f0000001fc0)=""/57, 0x39}, 0x3}, {{&(0x7f0000002000)=@alg, 0x80, &(0x7f00000024c0)=[{&(0x7f0000002080)=""/215, 0xd7}, {&(0x7f0000002180)=""/117, 0x75}, {&(0x7f0000002200)=""/161, 0xa1}, {&(0x7f00000022c0)=""/20, 0x14}, {&(0x7f0000002300)=""/147, 0x93}, {&(0x7f00000023c0)=""/239, 0xef}], 0x6}, 0x9}, {{&(0x7f0000002540)=@pptp={0x18, 0x2, {0x0, @remote}}, 0x80, &(0x7f0000003740)=[{&(0x7f00000025c0)=""/118, 0x76}, {&(0x7f0000002640)=""/173, 0xad}, {&(0x7f0000002700)=""/58, 0x3a}, {&(0x7f0000002740)=""/4096, 0x1000}], 0x4, &(0x7f0000003780)=""/232, 0xe8}, 0x8}, {{&(0x7f0000003880)=@pppol2tp={0x18, 0x1, {0x0, <r0=>0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000003900), 0x0, &(0x7f0000003940)=""/197, 0xc5}, 0x111}], 0x8, 0x0, &(0x7f0000003c40))
setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000003c80)={0x3b, @empty, 0x4e20, 0x0, 'nq\x00', 0x20, 0x9, 0x1c}, 0x2c)
fcntl$setflags(r0, 0x2, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = syz_open_dev$usbmon(0x0, 0x0, 0x0)
ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0)
clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
mkdirat$cgroup(r1, 0x0, 0x1ff)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300030c000000000000200000000002000900400000000000bc000000000003000600000000000200ee00e0000054d81458186fe8b90002000100000000000000020200044a7b030005000000000002000000e0003f010000000000fca0d9"], 0x60}}, 0x0)
setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, 0x0, 0x0)
exit(0x0)
socket$packet(0x11, 0x3, 0x300)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000140)={{{@in=@local, @in6}}, {{@in=@initdev}, 0x0, @in6=@initdev}}, &(0x7f0000000000)=0xe8)
setns(0xffffffffffffffff, 0x0)

[  310.515245][ T8255] __loop_clr_fd: partition scan of loop3 failed (rc=-22)
09:19:18 executing program 5:
r0 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000600)={'vcan0\x00', <r1=>0x0})
r2 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x1000}, 0x18)
setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000000280)=0x400, 0x4)
setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000100)=0x8, 0x4)
setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f00000002c0)=0x80, 0x4)
bind$xdp(r2, &(0x7f0000000300)={0x2c, 0x0, r1}, 0x10)
close(r2)

[  310.746008][T12872] __loop_clr_fd: partition scan of loop3 failed (rc=-22)
09:19:19 executing program 2:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x2, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='numa_maps\x00')
sendfile(r0, r1, 0x0, 0xffffffff)

09:19:19 executing program 3:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_read_part_table(0x0, 0x0, 0x0)

[  310.894698][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  310.900568][    C1] protocol 88fb is buggy, dev hsr_slave_1
[  310.906477][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  310.912289][    C1] protocol 88fb is buggy, dev hsr_slave_1
09:19:19 executing program 1:
timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000044000))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c)
listen(r1, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f0000000080)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x410)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28)
sendto$inet6(r0, &(0x7f00000005c0), 0xc00500200000923d, 0x0, 0x0, 0x0)
r2 = gettid()
write$binfmt_elf64(r0, 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
tkill(r2, 0x14)

[  311.055488][T12883] __loop_clr_fd: partition scan of loop3 failed (rc=-22)
09:19:19 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0)
ioctl$EVIOCSKEYCODE(r1, 0x80104592, &(0x7f00000000c0)=[0x1f00, 0x4])

09:19:19 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55", 0x10)
r1 = accept$alg(r0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000140)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0xbd}], 0x30}], 0x1, 0x0)
write$binfmt_script(r1, &(0x7f0000000300)=ANY=[], 0xffffffaa)
recvmmsg(r1, &(0x7f00000043c0)=[{{0x0, 0x0, &(0x7f00000030c0)=[{&(0x7f0000001d80)=""/136, 0x88}, {&(0x7f0000001e40)=""/4096, 0x1000}], 0x2, &(0x7f0000003140)=""/203, 0xcb}}], 0x1, 0x0, &(0x7f00000044c0)={0x0, 0x1c9c380})

09:19:19 executing program 3:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_read_part_table(0x0, 0x0, 0x0)

[  311.209452][    C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
09:19:19 executing program 2:
syz_open_dev$sndctrl(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
shmget(0xffffffffffffffff, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil)
syz_open_dev$midi(0x0, 0x0, 0x204002)
shmctl$IPC_INFO(0x0, 0x3, 0x0)

[  311.320614][T12897] __loop_clr_fd: partition scan of loop3 failed (rc=-22)
09:19:19 executing program 2:
mremap(&(0x7f0000008000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000005000/0x1000)=nil)
mremap(&(0x7f0000007000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000ff8000/0x1000)=nil)

09:19:19 executing program 3:
pipe2(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x4000)
recvmmsg(0xffffffffffffffff, &(0x7f0000009340)=[{{0xffffffffffffffff, 0x0, &(0x7f0000003280)=[{&(0x7f0000002180)=""/113, 0x71}, {&(0x7f0000002200)=""/66, 0x42}, {&(0x7f0000002280)=""/4096, 0x1000}], 0x3, &(0x7f00000032c0)=""/224, 0xe0, 0x9}, 0xfffffffffffffffe}, {{0x0, 0x0, &(0x7f0000003480)=[{0x0}], 0x1, 0x0, 0x0, 0x2}}, {{0x0, 0x0, &(0x7f0000003700)=[{&(0x7f0000003540)=""/187, 0xbb}, {&(0x7f0000003600)=""/253, 0xfd}], 0x2, &(0x7f0000003740)=""/165, 0xa5, 0x10001}}, {{&(0x7f0000003980)=@ipx, 0x80, 0x0, 0x0, &(0x7f0000005c40)=""/4096, 0x1000}, 0x8}, {{&(0x7f0000006c40)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000006ec0)=[{&(0x7f0000006cc0)=""/230, 0xe6}, {&(0x7f0000006dc0)=""/66, 0x42}], 0x2, &(0x7f0000006f00)=""/245, 0xf5, 0x1000}, 0x5}], 0x5, 0x0, 0x0)
eventfd(0x2)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha512\x00'}, 0x58)
ioctl$KVM_SET_GUEST_DEBUG(r0, 0x4048ae9b, &(0x7f00000001c0)={0xa0002, 0x0, [0x0, 0x81, 0x0, 0x1ff, 0x8, 0x400, 0x2, 0x2]})
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f00000002c0)=0x16, 0x4)
ioctl$TIOCMBIC(r1, 0x5417, &(0x7f0000000240)=0x44)
syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x1)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000180)={0x0, 'bond_slave_1\x00'}, 0x18)
mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x1000, &(0x7f00000009c0)=ANY=[@ANYBLOB=',smackfsroot=/dev/input/mice\x00,dont_hash,obj_role=/dev/input/mice#,appraise,\x00'])
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000ff8000), 0x0)
socket$alg(0x26, 0x5, 0x0)
r3 = accept$alg(r2, 0x0, 0x0)
recvmmsg(r3, &(0x7f0000001280)=[{{&(0x7f0000000ec0)=@nl=@proc, 0x34e, &(0x7f0000001180)=[{&(0x7f0000001080)=""/251, 0xfb}], 0x11, &(0x7f00000011c0)=""/157, 0x9d}}], 0x1500, 0x0, &(0x7f0000001380)={0x77359400})

09:19:19 executing program 2:
mremap(&(0x7f0000008000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000005000/0x1000)=nil)
mremap(&(0x7f0000007000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000ff8000/0x1000)=nil)

09:19:19 executing program 2:
mremap(&(0x7f0000008000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000005000/0x1000)=nil)
mremap(&(0x7f0000007000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000ff8000/0x1000)=nil)

[  311.694692][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  313.455994][    T7] device bridge_slave_1 left promiscuous mode
[  313.462305][    T7] bridge0: port 2(bridge_slave_1) entered disabled state
[  313.505497][    T7] device bridge_slave_0 left promiscuous mode
[  313.511633][    T7] bridge0: port 1(bridge_slave_0) entered disabled state
[  315.854742][    C0] net_ratelimit: 25 callbacks suppressed
[  315.854752][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  315.866354][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  316.174778][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  316.180603][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  316.254819][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  316.260580][    C1] protocol 88fb is buggy, dev hsr_slave_1
[  316.574742][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  316.580581][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  317.134688][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  317.140593][    C1] protocol 88fb is buggy, dev hsr_slave_1
[  317.237851][    T7] device hsr_slave_1 left promiscuous mode
[  317.308227][    T7] device hsr_slave_0 left promiscuous mode
[  317.388694][    T7] team0 (unregistering): Port device team_slave_1 removed
[  317.403360][    T7] team0 (unregistering): Port device team_slave_0 removed
[  317.415512][    T7] bond0 (unregistering): Releasing backup interface bond_slave_1
[  317.441879][    T7] bond0 (unregistering): Releasing backup interface bond_slave_0
[  317.533588][    T7] bond0 (unregistering): Released all slaves
09:19:27 executing program 4:
mremap(&(0x7f0000008000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000005000/0x1000)=nil)
mremap(&(0x7f0000007000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000ff8000/0x1000)=nil)

09:19:27 executing program 2:
mremap(&(0x7f0000008000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000005000/0x1000)=nil)
mremap(&(0x7f0000007000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000ff8000/0x1000)=nil)

09:19:27 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55", 0x10)
r1 = accept$alg(r0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000140)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0xbd}], 0x30}], 0x1, 0x0)
write$binfmt_script(r1, &(0x7f0000000300)=ANY=[], 0xffffffaa)
recvmmsg(r1, &(0x7f00000043c0)=[{{0x0, 0x0, &(0x7f00000030c0)=[{&(0x7f0000001d80)=""/136, 0x88}, {&(0x7f0000001e40)=""/4096, 0x1000}], 0x2, &(0x7f0000003140)=""/203, 0xcb}}], 0x1, 0x0, &(0x7f00000044c0)={0x0, 0x1c9c380})

09:19:27 executing program 5:
r0 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000600)={'vcan0\x00', <r1=>0x0})
r2 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x1000}, 0x18)
setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000000280)=0x400, 0x4)
setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000100)=0x8, 0x4)
setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f00000002c0)=0x80, 0x4)
bind$xdp(r2, &(0x7f0000000300)={0x2c, 0x0, r1}, 0x10)
close(r2)

09:19:27 executing program 1:
timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000044000))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c)
listen(r1, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f0000000080)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x410)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28)
sendto$inet6(r0, &(0x7f00000005c0), 0xc00500200000923d, 0x0, 0x0, 0x0)
r2 = gettid()
write$binfmt_elf64(r0, 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
tkill(r2, 0x14)

09:19:27 executing program 3:
pipe2(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x4000)
recvmmsg(0xffffffffffffffff, &(0x7f0000009340)=[{{0xffffffffffffffff, 0x0, &(0x7f0000003280)=[{&(0x7f0000002180)=""/113, 0x71}, {&(0x7f0000002200)=""/66, 0x42}, {&(0x7f0000002280)=""/4096, 0x1000}], 0x3, &(0x7f00000032c0)=""/224, 0xe0, 0x9}, 0xfffffffffffffffe}, {{0x0, 0x0, &(0x7f0000003480)=[{0x0}], 0x1, 0x0, 0x0, 0x2}}, {{0x0, 0x0, &(0x7f0000003700)=[{&(0x7f0000003540)=""/187, 0xbb}, {&(0x7f0000003600)=""/253, 0xfd}], 0x2, &(0x7f0000003740)=""/165, 0xa5, 0x10001}}, {{&(0x7f0000003980)=@ipx, 0x80, 0x0, 0x0, &(0x7f0000005c40)=""/4096, 0x1000}, 0x8}, {{&(0x7f0000006c40)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000006ec0)=[{&(0x7f0000006cc0)=""/230, 0xe6}, {&(0x7f0000006dc0)=""/66, 0x42}], 0x2, &(0x7f0000006f00)=""/245, 0xf5, 0x1000}, 0x5}], 0x5, 0x0, 0x0)
eventfd(0x2)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha512\x00'}, 0x58)
ioctl$KVM_SET_GUEST_DEBUG(r0, 0x4048ae9b, &(0x7f00000001c0)={0xa0002, 0x0, [0x0, 0x81, 0x0, 0x1ff, 0x8, 0x400, 0x2, 0x2]})
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f00000002c0)=0x16, 0x4)
ioctl$TIOCMBIC(r1, 0x5417, &(0x7f0000000240)=0x44)
syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x1)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000180)={0x0, 'bond_slave_1\x00'}, 0x18)
mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x1000, &(0x7f00000009c0)=ANY=[@ANYBLOB=',smackfsroot=/dev/input/mice\x00,dont_hash,obj_role=/dev/input/mice#,appraise,\x00'])
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000ff8000), 0x0)
socket$alg(0x26, 0x5, 0x0)
r3 = accept$alg(r2, 0x0, 0x0)
recvmmsg(r3, &(0x7f0000001280)=[{{&(0x7f0000000ec0)=@nl=@proc, 0x34e, &(0x7f0000001180)=[{&(0x7f0000001080)=""/251, 0xfb}], 0x11, &(0x7f00000011c0)=""/157, 0x9d}}], 0x1500, 0x0, &(0x7f0000001380)={0x77359400})

09:19:27 executing program 4:
mremap(&(0x7f0000008000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000005000/0x1000)=nil)
mremap(&(0x7f0000007000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000ff8000/0x1000)=nil)

09:19:27 executing program 2:
pipe2(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x4000)
recvmmsg(0xffffffffffffffff, &(0x7f0000009340)=[{{0xffffffffffffffff, 0x0, &(0x7f0000003280)=[{&(0x7f0000002180)=""/113, 0x71}, {&(0x7f0000002200)=""/66, 0x42}, {&(0x7f0000002280)=""/4096, 0x1000}], 0x3, &(0x7f00000032c0)=""/224, 0xe0, 0x9}, 0xfffffffffffffffe}, {{0x0, 0x0, &(0x7f0000003480)=[{0x0}], 0x1, 0x0, 0x0, 0x2}}, {{0x0, 0x0, &(0x7f0000003700)=[{&(0x7f0000003540)=""/187, 0xbb}, {&(0x7f0000003600)=""/253, 0xfd}], 0x2, &(0x7f0000003740)=""/165, 0xa5, 0x10001}}, {{&(0x7f0000003980)=@ipx, 0x80, 0x0, 0x0, &(0x7f0000005c40)=""/4096, 0x1000}, 0x8}, {{&(0x7f0000006c40)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000006ec0)=[{&(0x7f0000006cc0)=""/230, 0xe6}, {&(0x7f0000006dc0)=""/66, 0x42}], 0x2, &(0x7f0000006f00)=""/245, 0xf5, 0x1000}, 0x5}], 0x5, 0x0, 0x0)
eventfd(0x2)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha512\x00'}, 0x58)
ioctl$KVM_SET_GUEST_DEBUG(r0, 0x4048ae9b, &(0x7f00000001c0)={0xa0002, 0x0, [0x0, 0x81, 0x0, 0x1ff, 0x8, 0x400, 0x2, 0x2]})
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f00000002c0)=0x16, 0x4)
ioctl$TIOCMBIC(r1, 0x5417, &(0x7f0000000240)=0x44)
syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x1)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000180)={0x0, 'bond_slave_1\x00'}, 0x18)
mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x1000, &(0x7f00000009c0)=ANY=[@ANYBLOB=',smackfsroot=/dev/input/mice\x00,dont_hash,obj_role=/dev/input/mice#,appraise,\x00'])
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000ff8000), 0x0)
socket$alg(0x26, 0x5, 0x0)
r3 = accept$alg(r2, 0x0, 0x0)
recvmmsg(r3, &(0x7f0000001280)=[{{&(0x7f0000000ec0)=@nl=@proc, 0x34e, &(0x7f0000001180)=[{&(0x7f0000001080)=""/251, 0xfb}], 0x11, &(0x7f00000011c0)=""/157, 0x9d}}], 0x1500, 0x0, &(0x7f0000001380)={0x77359400})

09:19:27 executing program 4:
mremap(&(0x7f0000008000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000005000/0x1000)=nil)
mremap(&(0x7f0000007000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000ff8000/0x1000)=nil)

09:19:27 executing program 5:
r0 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000600)={'vcan0\x00', <r1=>0x0})
r2 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x1000}, 0x18)
setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000000280)=0x400, 0x4)
setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000100)=0x8, 0x4)
setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f00000002c0)=0x80, 0x4)
bind$xdp(r2, &(0x7f0000000300)={0x2c, 0x0, r1}, 0x10)
close(r2)

09:19:27 executing program 1:
timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000044000))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c)
listen(r1, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f0000000080)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x410)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28)
sendto$inet6(r0, &(0x7f00000005c0), 0xc00500200000923d, 0x0, 0x0, 0x0)
r2 = gettid()
write$binfmt_elf64(r0, 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
tkill(r2, 0x14)

09:19:27 executing program 4:
pipe2(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x4000)
recvmmsg(0xffffffffffffffff, &(0x7f0000009340)=[{{0xffffffffffffffff, 0x0, &(0x7f0000003280)=[{&(0x7f0000002180)=""/113, 0x71}, {&(0x7f0000002200)=""/66, 0x42}, {&(0x7f0000002280)=""/4096, 0x1000}], 0x3, &(0x7f00000032c0)=""/224, 0xe0, 0x9}, 0xfffffffffffffffe}, {{0x0, 0x0, &(0x7f0000003480)=[{0x0}], 0x1, 0x0, 0x0, 0x2}}, {{0x0, 0x0, &(0x7f0000003700)=[{&(0x7f0000003540)=""/187, 0xbb}, {&(0x7f0000003600)=""/253, 0xfd}], 0x2, &(0x7f0000003740)=""/165, 0xa5, 0x10001}}, {{&(0x7f0000003980)=@ipx, 0x80, 0x0, 0x0, &(0x7f0000005c40)=""/4096, 0x1000}, 0x8}, {{&(0x7f0000006c40)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000006ec0)=[{&(0x7f0000006cc0)=""/230, 0xe6}, {&(0x7f0000006dc0)=""/66, 0x42}], 0x2, &(0x7f0000006f00)=""/245, 0xf5, 0x1000}, 0x5}], 0x5, 0x0, 0x0)
eventfd(0x2)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha512\x00'}, 0x58)
ioctl$KVM_SET_GUEST_DEBUG(r0, 0x4048ae9b, &(0x7f00000001c0)={0xa0002, 0x0, [0x0, 0x81, 0x0, 0x1ff, 0x8, 0x400, 0x2, 0x2]})
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f00000002c0)=0x16, 0x4)
ioctl$TIOCMBIC(r1, 0x5417, &(0x7f0000000240)=0x44)
syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x1)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000180)={0x0, 'bond_slave_1\x00'}, 0x18)
mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x1000, &(0x7f00000009c0)=ANY=[@ANYBLOB=',smackfsroot=/dev/input/mice\x00,dont_hash,obj_role=/dev/input/mice#,appraise,\x00'])
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000ff8000), 0x0)
socket$alg(0x26, 0x5, 0x0)
r3 = accept$alg(r2, 0x0, 0x0)
recvmmsg(r3, &(0x7f0000001280)=[{{&(0x7f0000000ec0)=@nl=@proc, 0x34e, &(0x7f0000001180)=[{&(0x7f0000001080)=""/251, 0xfb}], 0x11, &(0x7f00000011c0)=""/157, 0x9d}}], 0x1500, 0x0, &(0x7f0000001380)={0x77359400})

09:19:27 executing program 5:
r0 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000600)={'vcan0\x00', <r1=>0x0})
r2 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x1000}, 0x18)
setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000000280)=0x400, 0x4)
setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000100)=0x8, 0x4)
setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f00000002c0)=0x80, 0x4)
bind$xdp(r2, &(0x7f0000000300)={0x2c, 0x0, r1}, 0x10)
close(r2)

09:19:27 executing program 5:
timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000044000))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c)
listen(r1, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f0000000080)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x410)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28)
sendto$inet6(r0, &(0x7f00000005c0), 0xc00500200000923d, 0x0, 0x0, 0x0)
r2 = gettid()
write$binfmt_elf64(r0, 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
tkill(r2, 0x14)

09:19:28 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55", 0x10)
r1 = accept$alg(r0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000140)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0xbd}], 0x30}], 0x1, 0x0)
write$binfmt_script(r1, &(0x7f0000000300)=ANY=[], 0xffffffaa)
recvmmsg(r1, &(0x7f00000043c0)=[{{0x0, 0x0, &(0x7f00000030c0)=[{&(0x7f0000001d80)=""/136, 0x88}, {&(0x7f0000001e40)=""/4096, 0x1000}], 0x2, &(0x7f0000003140)=""/203, 0xcb}}], 0x1, 0x0, &(0x7f00000044c0)={0x0, 0x1c9c380})

09:19:28 executing program 1:
timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000044000))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c)
listen(r1, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f0000000080)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x410)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28)
sendto$inet6(r0, &(0x7f00000005c0), 0xc00500200000923d, 0x0, 0x0, 0x0)
r2 = gettid()
write$binfmt_elf64(r0, 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
tkill(r2, 0x14)

09:19:28 executing program 3:
pipe2(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x4000)
recvmmsg(0xffffffffffffffff, &(0x7f0000009340)=[{{0xffffffffffffffff, 0x0, &(0x7f0000003280)=[{&(0x7f0000002180)=""/113, 0x71}, {&(0x7f0000002200)=""/66, 0x42}, {&(0x7f0000002280)=""/4096, 0x1000}], 0x3, &(0x7f00000032c0)=""/224, 0xe0, 0x9}, 0xfffffffffffffffe}, {{0x0, 0x0, &(0x7f0000003480)=[{0x0}], 0x1, 0x0, 0x0, 0x2}}, {{0x0, 0x0, &(0x7f0000003700)=[{&(0x7f0000003540)=""/187, 0xbb}, {&(0x7f0000003600)=""/253, 0xfd}], 0x2, &(0x7f0000003740)=""/165, 0xa5, 0x10001}}, {{&(0x7f0000003980)=@ipx, 0x80, 0x0, 0x0, &(0x7f0000005c40)=""/4096, 0x1000}, 0x8}, {{&(0x7f0000006c40)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000006ec0)=[{&(0x7f0000006cc0)=""/230, 0xe6}, {&(0x7f0000006dc0)=""/66, 0x42}], 0x2, &(0x7f0000006f00)=""/245, 0xf5, 0x1000}, 0x5}], 0x5, 0x0, 0x0)
eventfd(0x2)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha512\x00'}, 0x58)
ioctl$KVM_SET_GUEST_DEBUG(r0, 0x4048ae9b, &(0x7f00000001c0)={0xa0002, 0x0, [0x0, 0x81, 0x0, 0x1ff, 0x8, 0x400, 0x2, 0x2]})
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f00000002c0)=0x16, 0x4)
ioctl$TIOCMBIC(r1, 0x5417, &(0x7f0000000240)=0x44)
syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x1)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000180)={0x0, 'bond_slave_1\x00'}, 0x18)
mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x1000, &(0x7f00000009c0)=ANY=[@ANYBLOB=',smackfsroot=/dev/input/mice\x00,dont_hash,obj_role=/dev/input/mice#,appraise,\x00'])
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000ff8000), 0x0)
socket$alg(0x26, 0x5, 0x0)
r3 = accept$alg(r2, 0x0, 0x0)
recvmmsg(r3, &(0x7f0000001280)=[{{&(0x7f0000000ec0)=@nl=@proc, 0x34e, &(0x7f0000001180)=[{&(0x7f0000001080)=""/251, 0xfb}], 0x11, &(0x7f00000011c0)=""/157, 0x9d}}], 0x1500, 0x0, &(0x7f0000001380)={0x77359400})

09:19:28 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x2, 0x3, 0x0, 0x2c, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_sa={0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0)

09:19:28 executing program 2:
pipe2(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x4000)
recvmmsg(0xffffffffffffffff, &(0x7f0000009340)=[{{0xffffffffffffffff, 0x0, &(0x7f0000003280)=[{&(0x7f0000002180)=""/113, 0x71}, {&(0x7f0000002200)=""/66, 0x42}, {&(0x7f0000002280)=""/4096, 0x1000}], 0x3, &(0x7f00000032c0)=""/224, 0xe0, 0x9}, 0xfffffffffffffffe}, {{0x0, 0x0, &(0x7f0000003480)=[{0x0}], 0x1, 0x0, 0x0, 0x2}}, {{0x0, 0x0, &(0x7f0000003700)=[{&(0x7f0000003540)=""/187, 0xbb}, {&(0x7f0000003600)=""/253, 0xfd}], 0x2, &(0x7f0000003740)=""/165, 0xa5, 0x10001}}, {{&(0x7f0000003980)=@ipx, 0x80, 0x0, 0x0, &(0x7f0000005c40)=""/4096, 0x1000}, 0x8}, {{&(0x7f0000006c40)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000006ec0)=[{&(0x7f0000006cc0)=""/230, 0xe6}, {&(0x7f0000006dc0)=""/66, 0x42}], 0x2, &(0x7f0000006f00)=""/245, 0xf5, 0x1000}, 0x5}], 0x5, 0x0, 0x0)
eventfd(0x2)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha512\x00'}, 0x58)
ioctl$KVM_SET_GUEST_DEBUG(r0, 0x4048ae9b, &(0x7f00000001c0)={0xa0002, 0x0, [0x0, 0x81, 0x0, 0x1ff, 0x8, 0x400, 0x2, 0x2]})
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f00000002c0)=0x16, 0x4)
ioctl$TIOCMBIC(r1, 0x5417, &(0x7f0000000240)=0x44)
syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x1)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000180)={0x0, 'bond_slave_1\x00'}, 0x18)
mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x1000, &(0x7f00000009c0)=ANY=[@ANYBLOB=',smackfsroot=/dev/input/mice\x00,dont_hash,obj_role=/dev/input/mice#,appraise,\x00'])
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000ff8000), 0x0)
socket$alg(0x26, 0x5, 0x0)
r3 = accept$alg(r2, 0x0, 0x0)
recvmmsg(r3, &(0x7f0000001280)=[{{&(0x7f0000000ec0)=@nl=@proc, 0x34e, &(0x7f0000001180)=[{&(0x7f0000001080)=""/251, 0xfb}], 0x11, &(0x7f00000011c0)=""/157, 0x9d}}], 0x1500, 0x0, &(0x7f0000001380)={0x77359400})

09:19:28 executing program 4:
pipe2(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x4000)
recvmmsg(0xffffffffffffffff, &(0x7f0000009340)=[{{0xffffffffffffffff, 0x0, &(0x7f0000003280)=[{&(0x7f0000002180)=""/113, 0x71}, {&(0x7f0000002200)=""/66, 0x42}, {&(0x7f0000002280)=""/4096, 0x1000}], 0x3, &(0x7f00000032c0)=""/224, 0xe0, 0x9}, 0xfffffffffffffffe}, {{0x0, 0x0, &(0x7f0000003480)=[{0x0}], 0x1, 0x0, 0x0, 0x2}}, {{0x0, 0x0, &(0x7f0000003700)=[{&(0x7f0000003540)=""/187, 0xbb}, {&(0x7f0000003600)=""/253, 0xfd}], 0x2, &(0x7f0000003740)=""/165, 0xa5, 0x10001}}, {{&(0x7f0000003980)=@ipx, 0x80, 0x0, 0x0, &(0x7f0000005c40)=""/4096, 0x1000}, 0x8}, {{&(0x7f0000006c40)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000006ec0)=[{&(0x7f0000006cc0)=""/230, 0xe6}, {&(0x7f0000006dc0)=""/66, 0x42}], 0x2, &(0x7f0000006f00)=""/245, 0xf5, 0x1000}, 0x5}], 0x5, 0x0, 0x0)
eventfd(0x2)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha512\x00'}, 0x58)
ioctl$KVM_SET_GUEST_DEBUG(r0, 0x4048ae9b, &(0x7f00000001c0)={0xa0002, 0x0, [0x0, 0x81, 0x0, 0x1ff, 0x8, 0x400, 0x2, 0x2]})
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f00000002c0)=0x16, 0x4)
ioctl$TIOCMBIC(r1, 0x5417, &(0x7f0000000240)=0x44)
syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x1)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000180)={0x0, 'bond_slave_1\x00'}, 0x18)
mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x1000, &(0x7f00000009c0)=ANY=[@ANYBLOB=',smackfsroot=/dev/input/mice\x00,dont_hash,obj_role=/dev/input/mice#,appraise,\x00'])
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000ff8000), 0x0)
socket$alg(0x26, 0x5, 0x0)
r3 = accept$alg(r2, 0x0, 0x0)
recvmmsg(r3, &(0x7f0000001280)=[{{&(0x7f0000000ec0)=@nl=@proc, 0x34e, &(0x7f0000001180)=[{&(0x7f0000001080)=""/251, 0xfb}], 0x11, &(0x7f00000011c0)=""/157, 0x9d}}], 0x1500, 0x0, &(0x7f0000001380)={0x77359400})

09:19:28 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x2, 0x3, 0x0, 0x2c, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_sa={0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0)

09:19:28 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x2, 0x3, 0x0, 0x2c, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_sa={0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0)

09:19:28 executing program 5:
timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000044000))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c)
listen(r1, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f0000000080)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x410)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28)
sendto$inet6(r0, &(0x7f00000005c0), 0xc00500200000923d, 0x0, 0x0, 0x0)
r2 = gettid()
write$binfmt_elf64(r0, 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
tkill(r2, 0x14)

09:19:28 executing program 3:
pipe2(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x4000)
recvmmsg(0xffffffffffffffff, &(0x7f0000009340)=[{{0xffffffffffffffff, 0x0, &(0x7f0000003280)=[{&(0x7f0000002180)=""/113, 0x71}, {&(0x7f0000002200)=""/66, 0x42}, {&(0x7f0000002280)=""/4096, 0x1000}], 0x3, &(0x7f00000032c0)=""/224, 0xe0, 0x9}, 0xfffffffffffffffe}, {{0x0, 0x0, &(0x7f0000003480)=[{0x0}], 0x1, 0x0, 0x0, 0x2}}, {{0x0, 0x0, &(0x7f0000003700)=[{&(0x7f0000003540)=""/187, 0xbb}, {&(0x7f0000003600)=""/253, 0xfd}], 0x2, &(0x7f0000003740)=""/165, 0xa5, 0x10001}}, {{&(0x7f0000003980)=@ipx, 0x80, 0x0, 0x0, &(0x7f0000005c40)=""/4096, 0x1000}, 0x8}, {{&(0x7f0000006c40)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000006ec0)=[{&(0x7f0000006cc0)=""/230, 0xe6}, {&(0x7f0000006dc0)=""/66, 0x42}], 0x2, &(0x7f0000006f00)=""/245, 0xf5, 0x1000}, 0x5}], 0x5, 0x0, 0x0)
eventfd(0x2)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha512\x00'}, 0x58)
ioctl$KVM_SET_GUEST_DEBUG(r0, 0x4048ae9b, &(0x7f00000001c0)={0xa0002, 0x0, [0x0, 0x81, 0x0, 0x1ff, 0x8, 0x400, 0x2, 0x2]})
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f00000002c0)=0x16, 0x4)
ioctl$TIOCMBIC(r1, 0x5417, &(0x7f0000000240)=0x44)
syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x1)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000180)={0x0, 'bond_slave_1\x00'}, 0x18)
mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x1000, &(0x7f00000009c0)=ANY=[@ANYBLOB=',smackfsroot=/dev/input/mice\x00,dont_hash,obj_role=/dev/input/mice#,appraise,\x00'])
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000ff8000), 0x0)
socket$alg(0x26, 0x5, 0x0)
r3 = accept$alg(r2, 0x0, 0x0)
recvmmsg(r3, &(0x7f0000001280)=[{{&(0x7f0000000ec0)=@nl=@proc, 0x34e, &(0x7f0000001180)=[{&(0x7f0000001080)=""/251, 0xfb}], 0x11, &(0x7f00000011c0)=""/157, 0x9d}}], 0x1500, 0x0, &(0x7f0000001380)={0x77359400})

09:19:29 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55", 0x10)
r1 = accept$alg(r0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000140)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0xbd}], 0x30}], 0x1, 0x0)
write$binfmt_script(r1, &(0x7f0000000300)=ANY=[], 0xffffffaa)
recvmmsg(r1, &(0x7f00000043c0)=[{{0x0, 0x0, &(0x7f00000030c0)=[{&(0x7f0000001d80)=""/136, 0x88}, {&(0x7f0000001e40)=""/4096, 0x1000}], 0x2, &(0x7f0000003140)=""/203, 0xcb}}], 0x1, 0x0, &(0x7f00000044c0)={0x0, 0x1c9c380})

09:19:29 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x2, 0x3, 0x0, 0x2c, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_sa={0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0)

09:19:29 executing program 5:
timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000044000))
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c)
listen(r1, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f0000000080)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x410)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28)
sendto$inet6(r0, &(0x7f00000005c0), 0xc00500200000923d, 0x0, 0x0, 0x0)
r2 = gettid()
write$binfmt_elf64(r0, 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
tkill(r2, 0x14)

09:19:29 executing program 1:
r0 = socket$rxrpc(0x21, 0x2, 0x2)
accept4(r0, 0x0, 0x0, 0x0)

09:19:29 executing program 4:
pipe2(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x4000)
recvmmsg(0xffffffffffffffff, &(0x7f0000009340)=[{{0xffffffffffffffff, 0x0, &(0x7f0000003280)=[{&(0x7f0000002180)=""/113, 0x71}, {&(0x7f0000002200)=""/66, 0x42}, {&(0x7f0000002280)=""/4096, 0x1000}], 0x3, &(0x7f00000032c0)=""/224, 0xe0, 0x9}, 0xfffffffffffffffe}, {{0x0, 0x0, &(0x7f0000003480)=[{0x0}], 0x1, 0x0, 0x0, 0x2}}, {{0x0, 0x0, &(0x7f0000003700)=[{&(0x7f0000003540)=""/187, 0xbb}, {&(0x7f0000003600)=""/253, 0xfd}], 0x2, &(0x7f0000003740)=""/165, 0xa5, 0x10001}}, {{&(0x7f0000003980)=@ipx, 0x80, 0x0, 0x0, &(0x7f0000005c40)=""/4096, 0x1000}, 0x8}, {{&(0x7f0000006c40)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000006ec0)=[{&(0x7f0000006cc0)=""/230, 0xe6}, {&(0x7f0000006dc0)=""/66, 0x42}], 0x2, &(0x7f0000006f00)=""/245, 0xf5, 0x1000}, 0x5}], 0x5, 0x0, 0x0)
eventfd(0x2)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha512\x00'}, 0x58)
ioctl$KVM_SET_GUEST_DEBUG(r0, 0x4048ae9b, &(0x7f00000001c0)={0xa0002, 0x0, [0x0, 0x81, 0x0, 0x1ff, 0x8, 0x400, 0x2, 0x2]})
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f00000002c0)=0x16, 0x4)
ioctl$TIOCMBIC(r1, 0x5417, &(0x7f0000000240)=0x44)
syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x1)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000180)={0x0, 'bond_slave_1\x00'}, 0x18)
mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x1000, &(0x7f00000009c0)=ANY=[@ANYBLOB=',smackfsroot=/dev/input/mice\x00,dont_hash,obj_role=/dev/input/mice#,appraise,\x00'])
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000ff8000), 0x0)
socket$alg(0x26, 0x5, 0x0)
r3 = accept$alg(r2, 0x0, 0x0)
recvmmsg(r3, &(0x7f0000001280)=[{{&(0x7f0000000ec0)=@nl=@proc, 0x34e, &(0x7f0000001180)=[{&(0x7f0000001080)=""/251, 0xfb}], 0x11, &(0x7f00000011c0)=""/157, 0x9d}}], 0x1500, 0x0, &(0x7f0000001380)={0x77359400})

09:19:29 executing program 2:
pipe2(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x4000)
recvmmsg(0xffffffffffffffff, &(0x7f0000009340)=[{{0xffffffffffffffff, 0x0, &(0x7f0000003280)=[{&(0x7f0000002180)=""/113, 0x71}, {&(0x7f0000002200)=""/66, 0x42}, {&(0x7f0000002280)=""/4096, 0x1000}], 0x3, &(0x7f00000032c0)=""/224, 0xe0, 0x9}, 0xfffffffffffffffe}, {{0x0, 0x0, &(0x7f0000003480)=[{0x0}], 0x1, 0x0, 0x0, 0x2}}, {{0x0, 0x0, &(0x7f0000003700)=[{&(0x7f0000003540)=""/187, 0xbb}, {&(0x7f0000003600)=""/253, 0xfd}], 0x2, &(0x7f0000003740)=""/165, 0xa5, 0x10001}}, {{&(0x7f0000003980)=@ipx, 0x80, 0x0, 0x0, &(0x7f0000005c40)=""/4096, 0x1000}, 0x8}, {{&(0x7f0000006c40)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000006ec0)=[{&(0x7f0000006cc0)=""/230, 0xe6}, {&(0x7f0000006dc0)=""/66, 0x42}], 0x2, &(0x7f0000006f00)=""/245, 0xf5, 0x1000}, 0x5}], 0x5, 0x0, 0x0)
eventfd(0x2)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha512\x00'}, 0x58)
ioctl$KVM_SET_GUEST_DEBUG(r0, 0x4048ae9b, &(0x7f00000001c0)={0xa0002, 0x0, [0x0, 0x81, 0x0, 0x1ff, 0x8, 0x400, 0x2, 0x2]})
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f00000002c0)=0x16, 0x4)
ioctl$TIOCMBIC(r1, 0x5417, &(0x7f0000000240)=0x44)
syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x1)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000180)={0x0, 'bond_slave_1\x00'}, 0x18)
mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x1000, &(0x7f00000009c0)=ANY=[@ANYBLOB=',smackfsroot=/dev/input/mice\x00,dont_hash,obj_role=/dev/input/mice#,appraise,\x00'])
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000ff8000), 0x0)
socket$alg(0x26, 0x5, 0x0)
r3 = accept$alg(r2, 0x0, 0x0)
recvmmsg(r3, &(0x7f0000001280)=[{{&(0x7f0000000ec0)=@nl=@proc, 0x34e, &(0x7f0000001180)=[{&(0x7f0000001080)=""/251, 0xfb}], 0x11, &(0x7f00000011c0)=""/157, 0x9d}}], 0x1500, 0x0, &(0x7f0000001380)={0x77359400})

09:19:29 executing program 1:
r0 = socket$rxrpc(0x21, 0x2, 0x2)
accept4(r0, 0x0, 0x0, 0x0)

[  321.284694][    C0] net_ratelimit: 27 callbacks suppressed
[  321.284706][    C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
[  321.294824][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  321.307976][    C1] protocol 88fb is buggy, dev hsr_slave_1
[  321.314895][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  321.320955][    C1] protocol 88fb is buggy, dev hsr_slave_1
09:19:29 executing program 1:
r0 = socket$rxrpc(0x21, 0x2, 0x2)
accept4(r0, 0x0, 0x0, 0x0)

09:19:29 executing program 1:
r0 = socket$rxrpc(0x21, 0x2, 0x2)
accept4(r0, 0x0, 0x0, 0x0)

09:19:29 executing program 5:
openat$uhid(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$fou(0x0)
sendmsg$FOU_CMD_DEL(0xffffffffffffffff, 0x0, 0x801)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000500)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11)
ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f0000000000)={0x0, 0x0, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@empty, 0x5db, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfff}, 0x0)
r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
sendfile(r1, 0xffffffffffffffff, 0x0, 0x10013c93e)
ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x4)
ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x9)
setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, 0x0, 0x0)
perf_event_open(&(0x7f00000003c0)={0x7, 0x70, 0x0, 0x8, 0x6c4e, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3662, 0x0, 0x0, 0xa86, 0x0, 0x0, 0x2f1, 0x0, 0x7ff, 0x7, 0xd53d, 0x0, 0x96a, 0x0, 0xa432, 0x0, 0x0, 0x0, 0x0, 0x401, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'})
ioctl$UI_DEV_DESTROY(r0, 0x5502)
clock_gettime(0x0, &(0x7f0000000040))
ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, 0x0)
ioctl$SG_SCSI_RESET(0xffffffffffffffff, 0x2284, 0x0)

09:19:30 executing program 0:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x3, 0x0)
clock_gettime(0x0, &(0x7f0000000100)={<r1=>0x0})
recvmmsg(r0, &(0x7f0000001cc0), 0x400000000000160, 0x10102, &(0x7f0000001540)={r1})
sendmsg$nl_generic(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x14, 0x42, 0x201}, 0x14}, 0x1, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)

[  321.949171][T13052] input:  as /devices/virtual/input/input27
09:19:30 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='gid_map\x00')
preadv(r0, &(0x7f00000017c0), 0x1d0, 0x0)

09:19:30 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x6, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x3)
write$binfmt_misc(r0, 0x0, 0x0)

[  322.094729][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  322.100584][    C0] protocol 88fb is buggy, dev hsr_slave_1
09:19:30 executing program 1:
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000140)={{0x7fffffff, 0x3}, {}, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]})

09:19:30 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x6, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x3)
write$binfmt_misc(r0, 0x0, 0x0)

09:19:30 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000cecffc), 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000080)=0x80000000, 0x4)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0)

09:19:30 executing program 0:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x3, 0x0)
clock_gettime(0x0, &(0x7f0000000100)={<r1=>0x0})
recvmmsg(r0, &(0x7f0000001cc0), 0x400000000000160, 0x10102, &(0x7f0000001540)={r1})
sendmsg$nl_generic(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x14, 0x42, 0x201}, 0x14}, 0x1, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)

09:19:30 executing program 2:
r0 = epoll_create1(0x0)
set_mempolicy(0x4002, &(0x7f0000000380)=0x7, 0x9)
r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
mq_notify(r1, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4068aea3, 0x0)
fcntl$setstatus(r1, 0x4, 0x44000)
setsockopt$inet6_dccp_int(r1, 0x21, 0x13, &(0x7f00000004c0)=0x6, 0x4)
ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$pfkey(0xffffffffffffff9c, 0x0, 0x40, 0x0)
clock_gettime(0x0, &(0x7f00000005c0))
ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000080)={0x9, 0x0, 0x10003})
lsetxattr$trusted_overlay_upper(&(0x7f00000001c0)='./bus\x00', &(0x7f0000000240)='trusted.overlay.upper\x00', &(0x7f0000000600)={0x0, 0xfb, 0xba, 0x2, 0xfff, "93de27b3d3ae686f0847cd0ce935d056", "921bfa30b80b7b2e1837f07e88547d7506cec5683a911918e7249a848670c0f6590a6aa813c11cc038804f097763e00216bed8eb0ae51bf6e23497da0c03e7eca174ad86c72ba70840a9eb5ab53984bfdfb88b6a88eb65963923a46f272636e9f963604fd727d4e35fef5657205fe85d62bd1b0640683fbdde8ed94db1c99de65bc6c296bbed4fb5118f5a26945c83ea0b01d41049aa9e77574774bf018552093b8a8ba47e"}, 0xba, 0x0)
add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000280)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffff9)
fallocate(r1, 0x0, 0x0, 0xa6ba0)
io_setup(0x40000100000003, &(0x7f0000000340)=<r2=>0x0)
io_submit(r2, 0x653, &(0x7f0000000540)=[&(0x7f00000000c0)={0x8040000a70c0300, 0x0, 0x8, 0x1, 0x0, r1, &(0x7f0000000000), 0x377140be6b5ef4c7, 0xc00}])
ioctl$VHOST_SET_VRING_ENDIAN(r1, 0x4008af13, &(0x7f0000000100)={0x2, 0x7fffffff})
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x5c831, 0xffffffffffffffff, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000b0e000))
preadv(0xffffffffffffffff, &(0x7f0000000480), 0x10000000000002a1, 0x0)

[  322.414726][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  322.420545][    C0] protocol 88fb is buggy, dev hsr_slave_1
09:19:30 executing program 5:
openat$uhid(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$fou(0x0)
sendmsg$FOU_CMD_DEL(0xffffffffffffffff, 0x0, 0x801)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000500)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11)
ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f0000000000)={0x0, 0x0, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@empty, 0x5db, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfff}, 0x0)
r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
sendfile(r1, 0xffffffffffffffff, 0x0, 0x10013c93e)
ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x4)
ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x9)
setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, 0x0, 0x0)
perf_event_open(&(0x7f00000003c0)={0x7, 0x70, 0x0, 0x8, 0x6c4e, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3662, 0x0, 0x0, 0xa86, 0x0, 0x0, 0x2f1, 0x0, 0x7ff, 0x7, 0xd53d, 0x0, 0x96a, 0x0, 0xa432, 0x0, 0x0, 0x0, 0x0, 0x401, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'})
ioctl$UI_DEV_DESTROY(r0, 0x5502)
clock_gettime(0x0, &(0x7f0000000040))
ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, 0x0)
ioctl$SG_SCSI_RESET(0xffffffffffffffff, 0x2284, 0x0)

[  322.494740][    C1] protocol 88fb is buggy, dev hsr_slave_0
09:19:30 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x6, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x3)
write$binfmt_misc(r0, 0x0, 0x0)

[  322.590969][T13076] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
09:19:30 executing program 1:
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000140)={{0x7fffffff, 0x3}, {}, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]})

[  322.652876][T13089] input:  as /devices/virtual/input/input30
09:19:30 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x6, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x3)
write$binfmt_misc(r0, 0x0, 0x0)

09:19:31 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000cecffc), 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000080)=0x80000000, 0x4)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0)

09:19:31 executing program 1:
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000140)={{0x7fffffff, 0x3}, {}, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]})

09:19:31 executing program 1:
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000140)={{0x7fffffff, 0x3}, {}, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]})

09:19:31 executing program 3:
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x7, 0x1, 0x9c}]}, &(0x7f0000000040)='syzkaller\x00', 0x1, 0xfb, &(0x7f0000002880)=""/251}, 0x48)

[  323.100813][T13107] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
09:19:31 executing program 0:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x3, 0x0)
clock_gettime(0x0, &(0x7f0000000100)={<r1=>0x0})
recvmmsg(r0, &(0x7f0000001cc0), 0x400000000000160, 0x10102, &(0x7f0000001540)={r1})
sendmsg$nl_generic(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x14, 0x42, 0x201}, 0x14}, 0x1, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)

09:19:31 executing program 5:
openat$uhid(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$fou(0x0)
sendmsg$FOU_CMD_DEL(0xffffffffffffffff, 0x0, 0x801)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000500)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11)
ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f0000000000)={0x0, 0x0, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@empty, 0x5db, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfff}, 0x0)
r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
sendfile(r1, 0xffffffffffffffff, 0x0, 0x10013c93e)
ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x4)
ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x9)
setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, 0x0, 0x0)
perf_event_open(&(0x7f00000003c0)={0x7, 0x70, 0x0, 0x8, 0x6c4e, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3662, 0x0, 0x0, 0xa86, 0x0, 0x0, 0x2f1, 0x0, 0x7ff, 0x7, 0xd53d, 0x0, 0x96a, 0x0, 0xa432, 0x0, 0x0, 0x0, 0x0, 0x401, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'})
ioctl$UI_DEV_DESTROY(r0, 0x5502)
clock_gettime(0x0, &(0x7f0000000040))
ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, 0x0)
ioctl$SG_SCSI_RESET(0xffffffffffffffff, 0x2284, 0x0)

09:19:31 executing program 1:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-generic\x00'}, 0x58)
fcntl$getownex(0xffffffffffffffff, 0x10, 0x0)
r1 = accept$alg(r0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can, 0x3000, &(0x7f00000000c0)}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x1a9, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0xff03)

[  323.453803][T13120] input:  as /devices/virtual/input/input31
[  323.684572][T13086] syz-executor2 (13086) used greatest stack depth: 17448 bytes left
09:19:31 executing program 2:
r0 = epoll_create1(0x0)
set_mempolicy(0x4002, &(0x7f0000000380)=0x7, 0x9)
r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
mq_notify(r1, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4068aea3, 0x0)
fcntl$setstatus(r1, 0x4, 0x44000)
setsockopt$inet6_dccp_int(r1, 0x21, 0x13, &(0x7f00000004c0)=0x6, 0x4)
ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$pfkey(0xffffffffffffff9c, 0x0, 0x40, 0x0)
clock_gettime(0x0, &(0x7f00000005c0))
ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000080)={0x9, 0x0, 0x10003})
lsetxattr$trusted_overlay_upper(&(0x7f00000001c0)='./bus\x00', &(0x7f0000000240)='trusted.overlay.upper\x00', &(0x7f0000000600)={0x0, 0xfb, 0xba, 0x2, 0xfff, "93de27b3d3ae686f0847cd0ce935d056", "921bfa30b80b7b2e1837f07e88547d7506cec5683a911918e7249a848670c0f6590a6aa813c11cc038804f097763e00216bed8eb0ae51bf6e23497da0c03e7eca174ad86c72ba70840a9eb5ab53984bfdfb88b6a88eb65963923a46f272636e9f963604fd727d4e35fef5657205fe85d62bd1b0640683fbdde8ed94db1c99de65bc6c296bbed4fb5118f5a26945c83ea0b01d41049aa9e77574774bf018552093b8a8ba47e"}, 0xba, 0x0)
add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000280)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffff9)
fallocate(r1, 0x0, 0x0, 0xa6ba0)
io_setup(0x40000100000003, &(0x7f0000000340)=<r2=>0x0)
io_submit(r2, 0x653, &(0x7f0000000540)=[&(0x7f00000000c0)={0x8040000a70c0300, 0x0, 0x8, 0x1, 0x0, r1, &(0x7f0000000000), 0x377140be6b5ef4c7, 0xc00}])
ioctl$VHOST_SET_VRING_ENDIAN(r1, 0x4008af13, &(0x7f0000000100)={0x2, 0x7fffffff})
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x5c831, 0xffffffffffffffff, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000b0e000))
preadv(0xffffffffffffffff, &(0x7f0000000480), 0x10000000000002a1, 0x0)

09:19:31 executing program 5:
openat$uhid(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$fou(0x0)
sendmsg$FOU_CMD_DEL(0xffffffffffffffff, 0x0, 0x801)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000500)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11)
ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f0000000000)={0x0, 0x0, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@empty, 0x5db, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfff}, 0x0)
r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
sendfile(r1, 0xffffffffffffffff, 0x0, 0x10013c93e)
ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x4)
ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x9)
setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, 0x0, 0x0)
perf_event_open(&(0x7f00000003c0)={0x7, 0x70, 0x0, 0x8, 0x6c4e, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3662, 0x0, 0x0, 0xa86, 0x0, 0x0, 0x2f1, 0x0, 0x7ff, 0x7, 0xd53d, 0x0, 0x96a, 0x0, 0xa432, 0x0, 0x0, 0x0, 0x0, 0x401, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'})
ioctl$UI_DEV_DESTROY(r0, 0x5502)
clock_gettime(0x0, &(0x7f0000000040))
ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, 0x0)
ioctl$SG_SCSI_RESET(0xffffffffffffffff, 0x2284, 0x0)

09:19:31 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000cecffc), 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000080)=0x80000000, 0x4)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0)

09:19:31 executing program 3:
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x7, 0x1, 0x9c}]}, &(0x7f0000000040)='syzkaller\x00', 0x1, 0xfb, &(0x7f0000002880)=""/251}, 0x48)

09:19:31 executing program 0:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x3, 0x0)
clock_gettime(0x0, &(0x7f0000000100)={<r1=>0x0})
recvmmsg(r0, &(0x7f0000001cc0), 0x400000000000160, 0x10102, &(0x7f0000001540)={r1})
sendmsg$nl_generic(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x14, 0x42, 0x201}, 0x14}, 0x1, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)

09:19:31 executing program 1:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-generic\x00'}, 0x58)
fcntl$getownex(0xffffffffffffffff, 0x10, 0x0)
r1 = accept$alg(r0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can, 0x3000, &(0x7f00000000c0)}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x1a9, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0xff03)

09:19:32 executing program 3:
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x7, 0x1, 0x9c}]}, &(0x7f0000000040)='syzkaller\x00', 0x1, 0xfb, &(0x7f0000002880)=""/251}, 0x48)

[  323.902333][T13145] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  323.958075][T13144] input:  as /devices/virtual/input/input32
09:19:32 executing program 3:
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x7, 0x1, 0x9c}]}, &(0x7f0000000040)='syzkaller\x00', 0x1, 0xfb, &(0x7f0000002880)=""/251}, 0x48)

09:19:32 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000cecffc), 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000080)=0x80000000, 0x4)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0)

09:19:32 executing program 1:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-generic\x00'}, 0x58)
fcntl$getownex(0xffffffffffffffff, 0x10, 0x0)
r1 = accept$alg(r0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can, 0x3000, &(0x7f00000000c0)}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x1a9, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0xff03)

09:19:32 executing program 5:
r0 = epoll_create1(0x0)
set_mempolicy(0x4002, &(0x7f0000000380)=0x7, 0x9)
r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
mq_notify(r1, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4068aea3, 0x0)
fcntl$setstatus(r1, 0x4, 0x44000)
setsockopt$inet6_dccp_int(r1, 0x21, 0x13, &(0x7f00000004c0)=0x6, 0x4)
ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$pfkey(0xffffffffffffff9c, 0x0, 0x40, 0x0)
clock_gettime(0x0, &(0x7f00000005c0))
ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000080)={0x9, 0x0, 0x10003})
lsetxattr$trusted_overlay_upper(&(0x7f00000001c0)='./bus\x00', &(0x7f0000000240)='trusted.overlay.upper\x00', &(0x7f0000000600)={0x0, 0xfb, 0xba, 0x2, 0xfff, "93de27b3d3ae686f0847cd0ce935d056", "921bfa30b80b7b2e1837f07e88547d7506cec5683a911918e7249a848670c0f6590a6aa813c11cc038804f097763e00216bed8eb0ae51bf6e23497da0c03e7eca174ad86c72ba70840a9eb5ab53984bfdfb88b6a88eb65963923a46f272636e9f963604fd727d4e35fef5657205fe85d62bd1b0640683fbdde8ed94db1c99de65bc6c296bbed4fb5118f5a26945c83ea0b01d41049aa9e77574774bf018552093b8a8ba47e"}, 0xba, 0x0)
add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000280)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffff9)
fallocate(r1, 0x0, 0x0, 0xa6ba0)
io_setup(0x40000100000003, &(0x7f0000000340)=<r2=>0x0)
io_submit(r2, 0x653, &(0x7f0000000540)=[&(0x7f00000000c0)={0x8040000a70c0300, 0x0, 0x8, 0x1, 0x0, r1, &(0x7f0000000000), 0x377140be6b5ef4c7, 0xc00}])
ioctl$VHOST_SET_VRING_ENDIAN(r1, 0x4008af13, &(0x7f0000000100)={0x2, 0x7fffffff})
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x5c831, 0xffffffffffffffff, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000b0e000))
preadv(0xffffffffffffffff, &(0x7f0000000480), 0x10000000000002a1, 0x0)

09:19:32 executing program 0:
r0 = epoll_create1(0x0)
set_mempolicy(0x4002, &(0x7f0000000380)=0x7, 0x9)
r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
mq_notify(r1, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4068aea3, 0x0)
fcntl$setstatus(r1, 0x4, 0x44000)
setsockopt$inet6_dccp_int(r1, 0x21, 0x13, &(0x7f00000004c0)=0x6, 0x4)
ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$pfkey(0xffffffffffffff9c, 0x0, 0x40, 0x0)
clock_gettime(0x0, &(0x7f00000005c0))
ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000080)={0x9, 0x0, 0x10003})
lsetxattr$trusted_overlay_upper(&(0x7f00000001c0)='./bus\x00', &(0x7f0000000240)='trusted.overlay.upper\x00', &(0x7f0000000600)={0x0, 0xfb, 0xba, 0x2, 0xfff, "93de27b3d3ae686f0847cd0ce935d056", "921bfa30b80b7b2e1837f07e88547d7506cec5683a911918e7249a848670c0f6590a6aa813c11cc038804f097763e00216bed8eb0ae51bf6e23497da0c03e7eca174ad86c72ba70840a9eb5ab53984bfdfb88b6a88eb65963923a46f272636e9f963604fd727d4e35fef5657205fe85d62bd1b0640683fbdde8ed94db1c99de65bc6c296bbed4fb5118f5a26945c83ea0b01d41049aa9e77574774bf018552093b8a8ba47e"}, 0xba, 0x0)
add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000280)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffff9)
fallocate(r1, 0x0, 0x0, 0xa6ba0)
io_setup(0x40000100000003, &(0x7f0000000340)=<r2=>0x0)
io_submit(r2, 0x653, &(0x7f0000000540)=[&(0x7f00000000c0)={0x8040000a70c0300, 0x0, 0x8, 0x1, 0x0, r1, &(0x7f0000000000), 0x377140be6b5ef4c7, 0xc00}])
ioctl$VHOST_SET_VRING_ENDIAN(r1, 0x4008af13, &(0x7f0000000100)={0x2, 0x7fffffff})
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x5c831, 0xffffffffffffffff, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000b0e000))
preadv(0xffffffffffffffff, &(0x7f0000000480), 0x10000000000002a1, 0x0)

[  324.398930][T13164] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
09:19:33 executing program 2:
r0 = epoll_create1(0x0)
set_mempolicy(0x4002, &(0x7f0000000380)=0x7, 0x9)
r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
mq_notify(r1, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4068aea3, 0x0)
fcntl$setstatus(r1, 0x4, 0x44000)
setsockopt$inet6_dccp_int(r1, 0x21, 0x13, &(0x7f00000004c0)=0x6, 0x4)
ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$pfkey(0xffffffffffffff9c, 0x0, 0x40, 0x0)
clock_gettime(0x0, &(0x7f00000005c0))
ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000080)={0x9, 0x0, 0x10003})
lsetxattr$trusted_overlay_upper(&(0x7f00000001c0)='./bus\x00', &(0x7f0000000240)='trusted.overlay.upper\x00', &(0x7f0000000600)={0x0, 0xfb, 0xba, 0x2, 0xfff, "93de27b3d3ae686f0847cd0ce935d056", "921bfa30b80b7b2e1837f07e88547d7506cec5683a911918e7249a848670c0f6590a6aa813c11cc038804f097763e00216bed8eb0ae51bf6e23497da0c03e7eca174ad86c72ba70840a9eb5ab53984bfdfb88b6a88eb65963923a46f272636e9f963604fd727d4e35fef5657205fe85d62bd1b0640683fbdde8ed94db1c99de65bc6c296bbed4fb5118f5a26945c83ea0b01d41049aa9e77574774bf018552093b8a8ba47e"}, 0xba, 0x0)
add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000280)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffff9)
fallocate(r1, 0x0, 0x0, 0xa6ba0)
io_setup(0x40000100000003, &(0x7f0000000340)=<r2=>0x0)
io_submit(r2, 0x653, &(0x7f0000000540)=[&(0x7f00000000c0)={0x8040000a70c0300, 0x0, 0x8, 0x1, 0x0, r1, &(0x7f0000000000), 0x377140be6b5ef4c7, 0xc00}])
ioctl$VHOST_SET_VRING_ENDIAN(r1, 0x4008af13, &(0x7f0000000100)={0x2, 0x7fffffff})
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x5c831, 0xffffffffffffffff, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000b0e000))
preadv(0xffffffffffffffff, &(0x7f0000000480), 0x10000000000002a1, 0x0)

09:19:33 executing program 3:
r0 = socket$packet(0x11, 0x8000000000002, 0x300)
setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000200)=0x2, 0x4)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
syz_emit_ethernet(0xffdb, &(0x7f0000000080)={@link_local, @empty, [{}], {@can={0xc, {{}, 0x0, 0x0, 0x0, 0x0, "911aab5cc21f21b9"}}}}, 0x0)

09:19:33 executing program 4:
mkdir(0x0, 0x0)
symlink(0x0, &(0x7f0000000140)='./bus\x00')
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fchdir(r0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x89a1, 0x0)
setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000380)=0xc4ce7b5fa1687d12, 0x4)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, 0x0)
openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/nullb0\x00', 0x0, 0x0)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000400))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0)
setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f00000002c0)={0x8aa}, 0x6)
r1 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0)
r2 = open$dir(&(0x7f0000000600)='./file0\x00', 0x4000, 0x0)
write(r1, &(0x7f0000000400)="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", 0x200)
sendfile(r1, r2, 0x0, 0x10000)
ioctl$PPPIOCSFLAGS(r1, 0x40047459, &(0x7f00000003c0)=0x10000)
setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x0, 0x488, &(0x7f0000000640)={{0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24, 0x1, 'none\x00', 0x1, 0xffffffffbb670edb, 0x67}, {@broadcast, 0x4e21, 0x0, 0x100000000, 0xfffffffffffffff7, 0x401}}, 0x44)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000240)='westwood\x00', 0x9)
mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, &(0x7f0000000180)=ANY=[])
mkdirat(r2, &(0x7f0000000040)='./bus\x00', 0x40)
ioctl$IOC_PR_CLEAR(0xffffffffffffffff, 0x401070cd, 0x0)

09:19:33 executing program 1:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-generic\x00'}, 0x58)
fcntl$getownex(0xffffffffffffffff, 0x10, 0x0)
r1 = accept$alg(r0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can, 0x3000, &(0x7f00000000c0)}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x1a9, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0xff03)

[  325.235571][T13186] tpacket_rcv: packet too big, clamped from 65481 to 65392. macoff=96
[  325.287686][   T26] audit: type=1800 audit(1548839973.453:73): pid=13188 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor4" name="file0" dev="sda1" ino=17053 res=0
[  325.437365][   T26] audit: type=1804 audit(1548839973.453:74): pid=13188 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor4" name="/root/syzkaller-testdir249741109/syzkaller.k1e7J6/174/file0/file0" dev="sda1" ino=17053 res=1
09:19:33 executing program 3:
r0 = socket$packet(0x11, 0x8000000000002, 0x300)
setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000200)=0x2, 0x4)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
syz_emit_ethernet(0xffdb, &(0x7f0000000080)={@link_local, @empty, [{}], {@can={0xc, {{}, 0x0, 0x0, 0x0, 0x0, "911aab5cc21f21b9"}}}}, 0x0)

[  325.662208][   T26] audit: type=1800 audit(1548839973.453:75): pid=13188 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor4" name="file0" dev="sda1" ino=17053 res=0
09:19:33 executing program 1:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x100082)
r1 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0)
fsetxattr$security_smack_entry(r1, &(0x7f0000000140)='security.SMACK64MMAP\x00', 0x0, 0x0, 0x0)
pwritev(r1, &(0x7f00000002c0)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r1, &(0x7f0000000240), 0x2000010200000b)
add_key$keyring(0x0, &(0x7f0000000540)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe)
add_key$keyring(0x0, &(0x7f0000000300)={'syz'}, 0x0, 0x0, 0x0)
r2 = creat(&(0x7f00000006c0)='./bus\x00', 0xfffffffffffffffc)
io_submit(0x0, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x10000, 0x407000}])
ioctl$LOOP_CLR_FD(r0, 0x4c01)

09:19:33 executing program 0:
r0 = epoll_create1(0x0)
set_mempolicy(0x4002, &(0x7f0000000380)=0x7, 0x9)
r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
mq_notify(r1, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4068aea3, 0x0)
fcntl$setstatus(r1, 0x4, 0x44000)
setsockopt$inet6_dccp_int(r1, 0x21, 0x13, &(0x7f00000004c0)=0x6, 0x4)
ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$pfkey(0xffffffffffffff9c, 0x0, 0x40, 0x0)
clock_gettime(0x0, &(0x7f00000005c0))
ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000080)={0x9, 0x0, 0x10003})
lsetxattr$trusted_overlay_upper(&(0x7f00000001c0)='./bus\x00', &(0x7f0000000240)='trusted.overlay.upper\x00', &(0x7f0000000600)={0x0, 0xfb, 0xba, 0x2, 0xfff, "93de27b3d3ae686f0847cd0ce935d056", "921bfa30b80b7b2e1837f07e88547d7506cec5683a911918e7249a848670c0f6590a6aa813c11cc038804f097763e00216bed8eb0ae51bf6e23497da0c03e7eca174ad86c72ba70840a9eb5ab53984bfdfb88b6a88eb65963923a46f272636e9f963604fd727d4e35fef5657205fe85d62bd1b0640683fbdde8ed94db1c99de65bc6c296bbed4fb5118f5a26945c83ea0b01d41049aa9e77574774bf018552093b8a8ba47e"}, 0xba, 0x0)
add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000280)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffff9)
fallocate(r1, 0x0, 0x0, 0xa6ba0)
io_setup(0x40000100000003, &(0x7f0000000340)=<r2=>0x0)
io_submit(r2, 0x653, &(0x7f0000000540)=[&(0x7f00000000c0)={0x8040000a70c0300, 0x0, 0x8, 0x1, 0x0, r1, &(0x7f0000000000), 0x377140be6b5ef4c7, 0xc00}])
ioctl$VHOST_SET_VRING_ENDIAN(r1, 0x4008af13, &(0x7f0000000100)={0x2, 0x7fffffff})
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x5c831, 0xffffffffffffffff, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000b0e000))
preadv(0xffffffffffffffff, &(0x7f0000000480), 0x10000000000002a1, 0x0)

09:19:33 executing program 5:
r0 = epoll_create1(0x0)
set_mempolicy(0x4002, &(0x7f0000000380)=0x7, 0x9)
r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
mq_notify(r1, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4068aea3, 0x0)
fcntl$setstatus(r1, 0x4, 0x44000)
setsockopt$inet6_dccp_int(r1, 0x21, 0x13, &(0x7f00000004c0)=0x6, 0x4)
ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$pfkey(0xffffffffffffff9c, 0x0, 0x40, 0x0)
clock_gettime(0x0, &(0x7f00000005c0))
ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000080)={0x9, 0x0, 0x10003})
lsetxattr$trusted_overlay_upper(&(0x7f00000001c0)='./bus\x00', &(0x7f0000000240)='trusted.overlay.upper\x00', &(0x7f0000000600)={0x0, 0xfb, 0xba, 0x2, 0xfff, "93de27b3d3ae686f0847cd0ce935d056", "921bfa30b80b7b2e1837f07e88547d7506cec5683a911918e7249a848670c0f6590a6aa813c11cc038804f097763e00216bed8eb0ae51bf6e23497da0c03e7eca174ad86c72ba70840a9eb5ab53984bfdfb88b6a88eb65963923a46f272636e9f963604fd727d4e35fef5657205fe85d62bd1b0640683fbdde8ed94db1c99de65bc6c296bbed4fb5118f5a26945c83ea0b01d41049aa9e77574774bf018552093b8a8ba47e"}, 0xba, 0x0)
add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000280)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffff9)
fallocate(r1, 0x0, 0x0, 0xa6ba0)
io_setup(0x40000100000003, &(0x7f0000000340)=<r2=>0x0)
io_submit(r2, 0x653, &(0x7f0000000540)=[&(0x7f00000000c0)={0x8040000a70c0300, 0x0, 0x8, 0x1, 0x0, r1, &(0x7f0000000000), 0x377140be6b5ef4c7, 0xc00}])
ioctl$VHOST_SET_VRING_ENDIAN(r1, 0x4008af13, &(0x7f0000000100)={0x2, 0x7fffffff})
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x5c831, 0xffffffffffffffff, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000b0e000))
preadv(0xffffffffffffffff, &(0x7f0000000480), 0x10000000000002a1, 0x0)

09:19:34 executing program 3:
r0 = socket$packet(0x11, 0x8000000000002, 0x300)
setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000200)=0x2, 0x4)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
syz_emit_ethernet(0xffdb, &(0x7f0000000080)={@link_local, @empty, [{}], {@can={0xc, {{}, 0x0, 0x0, 0x0, 0x0, "911aab5cc21f21b9"}}}}, 0x0)

09:19:34 executing program 2:
r0 = epoll_create1(0x0)
set_mempolicy(0x4002, &(0x7f0000000380)=0x7, 0x9)
r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
mq_notify(r1, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4068aea3, 0x0)
fcntl$setstatus(r1, 0x4, 0x44000)
setsockopt$inet6_dccp_int(r1, 0x21, 0x13, &(0x7f00000004c0)=0x6, 0x4)
ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$pfkey(0xffffffffffffff9c, 0x0, 0x40, 0x0)
clock_gettime(0x0, &(0x7f00000005c0))
ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000080)={0x9, 0x0, 0x10003})
lsetxattr$trusted_overlay_upper(&(0x7f00000001c0)='./bus\x00', &(0x7f0000000240)='trusted.overlay.upper\x00', &(0x7f0000000600)={0x0, 0xfb, 0xba, 0x2, 0xfff, "93de27b3d3ae686f0847cd0ce935d056", "921bfa30b80b7b2e1837f07e88547d7506cec5683a911918e7249a848670c0f6590a6aa813c11cc038804f097763e00216bed8eb0ae51bf6e23497da0c03e7eca174ad86c72ba70840a9eb5ab53984bfdfb88b6a88eb65963923a46f272636e9f963604fd727d4e35fef5657205fe85d62bd1b0640683fbdde8ed94db1c99de65bc6c296bbed4fb5118f5a26945c83ea0b01d41049aa9e77574774bf018552093b8a8ba47e"}, 0xba, 0x0)
add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000280)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffff9)
fallocate(r1, 0x0, 0x0, 0xa6ba0)
io_setup(0x40000100000003, &(0x7f0000000340)=<r2=>0x0)
io_submit(r2, 0x653, &(0x7f0000000540)=[&(0x7f00000000c0)={0x8040000a70c0300, 0x0, 0x8, 0x1, 0x0, r1, &(0x7f0000000000), 0x377140be6b5ef4c7, 0xc00}])
ioctl$VHOST_SET_VRING_ENDIAN(r1, 0x4008af13, &(0x7f0000000100)={0x2, 0x7fffffff})
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x5c831, 0xffffffffffffffff, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000b0e000))
preadv(0xffffffffffffffff, &(0x7f0000000480), 0x10000000000002a1, 0x0)

[  325.972700][   T26] audit: type=1804 audit(1548839974.133:76): pid=13180 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor4" name="/root/syzkaller-testdir249741109/syzkaller.k1e7J6/174/file0/file0" dev="sda1" ino=17053 res=1
09:19:34 executing program 4:
mkdir(0x0, 0x0)
symlink(0x0, &(0x7f0000000140)='./bus\x00')
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fchdir(r0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x89a1, 0x0)
setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000380)=0xc4ce7b5fa1687d12, 0x4)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, 0x0)
openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/nullb0\x00', 0x0, 0x0)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000400))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0)
setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f00000002c0)={0x8aa}, 0x6)
r1 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0)
r2 = open$dir(&(0x7f0000000600)='./file0\x00', 0x4000, 0x0)
write(r1, &(0x7f0000000400)="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", 0x200)
sendfile(r1, r2, 0x0, 0x10000)
ioctl$PPPIOCSFLAGS(r1, 0x40047459, &(0x7f00000003c0)=0x10000)
setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x0, 0x488, &(0x7f0000000640)={{0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24, 0x1, 'none\x00', 0x1, 0xffffffffbb670edb, 0x67}, {@broadcast, 0x4e21, 0x0, 0x100000000, 0xfffffffffffffff7, 0x401}}, 0x44)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000240)='westwood\x00', 0x9)
mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, &(0x7f0000000180)=ANY=[])
mkdirat(r2, &(0x7f0000000040)='./bus\x00', 0x40)
ioctl$IOC_PR_CLEAR(0xffffffffffffffff, 0x401070cd, 0x0)

[  326.084522][   T26] audit: type=1804 audit(1548839974.173:77): pid=13210 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor4" name="/root/syzkaller-testdir249741109/syzkaller.k1e7J6/174/file0/file0" dev="sda1" ino=17053 res=1
[  326.147220][ T2479] print_req_error: I/O error, dev loop0, sector 384 flags 801
[  326.156263][ T2479] Buffer I/O error on dev loop0, logical block 48, lost async page write
09:19:34 executing program 3:
r0 = socket$packet(0x11, 0x8000000000002, 0x300)
setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000200)=0x2, 0x4)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
syz_emit_ethernet(0xffdb, &(0x7f0000000080)={@link_local, @empty, [{}], {@can={0xc, {{}, 0x0, 0x0, 0x0, 0x0, "911aab5cc21f21b9"}}}}, 0x0)

09:19:34 executing program 1:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x100082)
r1 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0)
fsetxattr$security_smack_entry(r1, &(0x7f0000000140)='security.SMACK64MMAP\x00', 0x0, 0x0, 0x0)
pwritev(r1, &(0x7f00000002c0)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r1, &(0x7f0000000240), 0x2000010200000b)
add_key$keyring(0x0, &(0x7f0000000540)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe)
add_key$keyring(0x0, &(0x7f0000000300)={'syz'}, 0x0, 0x0, 0x0)
r2 = creat(&(0x7f00000006c0)='./bus\x00', 0xfffffffffffffffc)
io_submit(0x0, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x10000, 0x407000}])
ioctl$LOOP_CLR_FD(r0, 0x4c01)

[  326.414526][   T26] audit: type=1800 audit(1548839974.573:78): pid=13235 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor4" name="file0" dev="sda1" ino=17053 res=0
[  326.543094][   T26] audit: type=1804 audit(1548839974.703:79): pid=13230 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor4" name="/root/syzkaller-testdir249741109/syzkaller.k1e7J6/175/file0/file0" dev="sda1" ino=17053 res=1
[  326.574707][    C0] net_ratelimit: 21 callbacks suppressed
[  326.574715][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  326.586202][    C0] protocol 88fb is buggy, dev hsr_slave_1
09:19:34 executing program 3:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x14, 0x4, 0x4, 0x400, 0x0, 0x1}, 0x2c)
socket$kcm(0x29, 0x5, 0x0)
r1 = socket$kcm(0x2, 0x2, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(r1, 0x1, 0xf, &(0x7f0000000400), 0x8)
sendmsg$kcm(r1, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000080)}, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
bpf$OBJ_PIN_MAP(0x6, 0x0, 0x3c3)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5}, 0x2c)
bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x10020000000, 0x0}, 0x2c)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000000c0)={r0, &(0x7f0000000080)}, 0x10)

[  326.655407][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  326.657384][ T2480] print_req_error: I/O error, dev loop0, sector 608 flags 801
[  326.661230][    C1] protocol 88fb is buggy, dev hsr_slave_1
[  326.668767][ T2480] Buffer I/O error on dev loop0, logical block 76, lost async page write
[  326.683327][ T2480] print_req_error: I/O error, dev loop0, sector 616 flags 801
[  326.690988][ T2480] Buffer I/O error on dev loop0, logical block 77, lost async page write
[  326.704941][ T2480] print_req_error: I/O error, dev loop0, sector 624 flags 801
[  326.712442][ T2480] Buffer I/O error on dev loop0, logical block 78, lost async page write
[  326.721366][ T2480] print_req_error: I/O error, dev loop0, sector 632 flags 801
[  326.728901][ T2480] Buffer I/O error on dev loop0, logical block 79, lost async page write
[  326.814000][   T26] audit: type=1800 audit(1548839974.703:80): pid=13230 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor4" name="file0" dev="sda1" ino=17053 res=0
09:19:35 executing program 3:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x14, 0x4, 0x4, 0x400, 0x0, 0x1}, 0x2c)
socket$kcm(0x29, 0x5, 0x0)
r1 = socket$kcm(0x2, 0x2, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(r1, 0x1, 0xf, &(0x7f0000000400), 0x8)
sendmsg$kcm(r1, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000080)}, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
bpf$OBJ_PIN_MAP(0x6, 0x0, 0x3c3)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5}, 0x2c)
bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x10020000000, 0x0}, 0x2c)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000000c0)={r0, &(0x7f0000000080)}, 0x10)

09:19:35 executing program 1:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x100082)
r1 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0)
fsetxattr$security_smack_entry(r1, &(0x7f0000000140)='security.SMACK64MMAP\x00', 0x0, 0x0, 0x0)
pwritev(r1, &(0x7f00000002c0)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r1, &(0x7f0000000240), 0x2000010200000b)
add_key$keyring(0x0, &(0x7f0000000540)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe)
add_key$keyring(0x0, &(0x7f0000000300)={'syz'}, 0x0, 0x0, 0x0)
r2 = creat(&(0x7f00000006c0)='./bus\x00', 0xfffffffffffffffc)
io_submit(0x0, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x10000, 0x407000}])
ioctl$LOOP_CLR_FD(r0, 0x4c01)

[  326.977061][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  326.982893][    C0] protocol 88fb is buggy, dev hsr_slave_1
09:19:35 executing program 3:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x14, 0x4, 0x4, 0x400, 0x0, 0x1}, 0x2c)
socket$kcm(0x29, 0x5, 0x0)
r1 = socket$kcm(0x2, 0x2, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(r1, 0x1, 0xf, &(0x7f0000000400), 0x8)
sendmsg$kcm(r1, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000080)}, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
bpf$OBJ_PIN_MAP(0x6, 0x0, 0x3c3)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5}, 0x2c)
bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x10020000000, 0x0}, 0x2c)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000000c0)={r0, &(0x7f0000000080)}, 0x10)

09:19:35 executing program 0:
r0 = epoll_create1(0x0)
set_mempolicy(0x4002, &(0x7f0000000380)=0x7, 0x9)
r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
mq_notify(r1, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4068aea3, 0x0)
fcntl$setstatus(r1, 0x4, 0x44000)
setsockopt$inet6_dccp_int(r1, 0x21, 0x13, &(0x7f00000004c0)=0x6, 0x4)
ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$pfkey(0xffffffffffffff9c, 0x0, 0x40, 0x0)
clock_gettime(0x0, &(0x7f00000005c0))
ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000080)={0x9, 0x0, 0x10003})
lsetxattr$trusted_overlay_upper(&(0x7f00000001c0)='./bus\x00', &(0x7f0000000240)='trusted.overlay.upper\x00', &(0x7f0000000600)={0x0, 0xfb, 0xba, 0x2, 0xfff, "93de27b3d3ae686f0847cd0ce935d056", "921bfa30b80b7b2e1837f07e88547d7506cec5683a911918e7249a848670c0f6590a6aa813c11cc038804f097763e00216bed8eb0ae51bf6e23497da0c03e7eca174ad86c72ba70840a9eb5ab53984bfdfb88b6a88eb65963923a46f272636e9f963604fd727d4e35fef5657205fe85d62bd1b0640683fbdde8ed94db1c99de65bc6c296bbed4fb5118f5a26945c83ea0b01d41049aa9e77574774bf018552093b8a8ba47e"}, 0xba, 0x0)
add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000280)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffff9)
fallocate(r1, 0x0, 0x0, 0xa6ba0)
io_setup(0x40000100000003, &(0x7f0000000340)=<r2=>0x0)
io_submit(r2, 0x653, &(0x7f0000000540)=[&(0x7f00000000c0)={0x8040000a70c0300, 0x0, 0x8, 0x1, 0x0, r1, &(0x7f0000000000), 0x377140be6b5ef4c7, 0xc00}])
ioctl$VHOST_SET_VRING_ENDIAN(r1, 0x4008af13, &(0x7f0000000100)={0x2, 0x7fffffff})
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x5c831, 0xffffffffffffffff, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000b0e000))
preadv(0xffffffffffffffff, &(0x7f0000000480), 0x10000000000002a1, 0x0)

09:19:35 executing program 5:
r0 = epoll_create1(0x0)
set_mempolicy(0x4002, &(0x7f0000000380)=0x7, 0x9)
r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
mq_notify(r1, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4068aea3, 0x0)
fcntl$setstatus(r1, 0x4, 0x44000)
setsockopt$inet6_dccp_int(r1, 0x21, 0x13, &(0x7f00000004c0)=0x6, 0x4)
ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$pfkey(0xffffffffffffff9c, 0x0, 0x40, 0x0)
clock_gettime(0x0, &(0x7f00000005c0))
ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000080)={0x9, 0x0, 0x10003})
lsetxattr$trusted_overlay_upper(&(0x7f00000001c0)='./bus\x00', &(0x7f0000000240)='trusted.overlay.upper\x00', &(0x7f0000000600)={0x0, 0xfb, 0xba, 0x2, 0xfff, "93de27b3d3ae686f0847cd0ce935d056", "921bfa30b80b7b2e1837f07e88547d7506cec5683a911918e7249a848670c0f6590a6aa813c11cc038804f097763e00216bed8eb0ae51bf6e23497da0c03e7eca174ad86c72ba70840a9eb5ab53984bfdfb88b6a88eb65963923a46f272636e9f963604fd727d4e35fef5657205fe85d62bd1b0640683fbdde8ed94db1c99de65bc6c296bbed4fb5118f5a26945c83ea0b01d41049aa9e77574774bf018552093b8a8ba47e"}, 0xba, 0x0)
add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000280)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffff9)
fallocate(r1, 0x0, 0x0, 0xa6ba0)
io_setup(0x40000100000003, &(0x7f0000000340)=<r2=>0x0)
io_submit(r2, 0x653, &(0x7f0000000540)=[&(0x7f00000000c0)={0x8040000a70c0300, 0x0, 0x8, 0x1, 0x0, r1, &(0x7f0000000000), 0x377140be6b5ef4c7, 0xc00}])
ioctl$VHOST_SET_VRING_ENDIAN(r1, 0x4008af13, &(0x7f0000000100)={0x2, 0x7fffffff})
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x5c831, 0xffffffffffffffff, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000b0e000))
preadv(0xffffffffffffffff, &(0x7f0000000480), 0x10000000000002a1, 0x0)

09:19:35 executing program 4:
mkdir(0x0, 0x0)
symlink(0x0, &(0x7f0000000140)='./bus\x00')
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fchdir(r0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x89a1, 0x0)
setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000380)=0xc4ce7b5fa1687d12, 0x4)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, 0x0)
openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/nullb0\x00', 0x0, 0x0)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000400))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0)
setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f00000002c0)={0x8aa}, 0x6)
r1 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0)
r2 = open$dir(&(0x7f0000000600)='./file0\x00', 0x4000, 0x0)
write(r1, &(0x7f0000000400)="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", 0x200)
sendfile(r1, r2, 0x0, 0x10000)
ioctl$PPPIOCSFLAGS(r1, 0x40047459, &(0x7f00000003c0)=0x10000)
setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x0, 0x488, &(0x7f0000000640)={{0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24, 0x1, 'none\x00', 0x1, 0xffffffffbb670edb, 0x67}, {@broadcast, 0x4e21, 0x0, 0x100000000, 0xfffffffffffffff7, 0x401}}, 0x44)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000240)='westwood\x00', 0x9)
mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, &(0x7f0000000180)=ANY=[])
mkdirat(r2, &(0x7f0000000040)='./bus\x00', 0x40)
ioctl$IOC_PR_CLEAR(0xffffffffffffffff, 0x401070cd, 0x0)

09:19:35 executing program 3:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x14, 0x4, 0x4, 0x400, 0x0, 0x1}, 0x2c)
socket$kcm(0x29, 0x5, 0x0)
r1 = socket$kcm(0x2, 0x2, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(r1, 0x1, 0xf, &(0x7f0000000400), 0x8)
sendmsg$kcm(r1, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000080)}, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
bpf$OBJ_PIN_MAP(0x6, 0x0, 0x3c3)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5}, 0x2c)
bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x10020000000, 0x0}, 0x2c)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000000c0)={r0, &(0x7f0000000080)}, 0x10)

[  327.266760][ T2480] print_req_error: I/O error, dev loop0, sector 0 flags 801
09:19:35 executing program 1:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x100082)
r1 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0)
fsetxattr$security_smack_entry(r1, &(0x7f0000000140)='security.SMACK64MMAP\x00', 0x0, 0x0, 0x0)
pwritev(r1, &(0x7f00000002c0)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r1, &(0x7f0000000240), 0x2000010200000b)
add_key$keyring(0x0, &(0x7f0000000540)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe)
add_key$keyring(0x0, &(0x7f0000000300)={'syz'}, 0x0, 0x0, 0x0)
r2 = creat(&(0x7f00000006c0)='./bus\x00', 0xfffffffffffffffc)
io_submit(0x0, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x10000, 0x407000}])
ioctl$LOOP_CLR_FD(r0, 0x4c01)

[  327.534676][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  327.540527][    C1] protocol 88fb is buggy, dev hsr_slave_1
[  327.546394][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  327.552156][    C1] protocol 88fb is buggy, dev hsr_slave_1
[  327.559959][   T26] audit: type=1800 audit(1548839975.733:81): pid=13274 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor4" name="file0" dev="sda1" ino=17017 res=0
09:19:35 executing program 3:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x14, 0x4, 0x4, 0x400, 0x0, 0x1}, 0x2c)
socket$kcm(0x29, 0x5, 0x0)
r1 = socket$kcm(0x2, 0x2, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(r1, 0x1, 0xf, &(0x7f0000000400), 0x8)
sendmsg$kcm(r1, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000080)}, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
bpf$OBJ_PIN_MAP(0x6, 0x0, 0x3c3)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5}, 0x2c)
bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x10020000000, 0x0}, 0x2c)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000000c0)={r0, &(0x7f0000000080)}, 0x10)

09:19:35 executing program 2:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x14, 0x4, 0x4, 0x400, 0x0, 0x1}, 0x2c)
socket$kcm(0x29, 0x5, 0x0)
r1 = socket$kcm(0x2, 0x2, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(r1, 0x1, 0xf, &(0x7f0000000400), 0x8)
sendmsg$kcm(r1, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000080)}, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
bpf$OBJ_PIN_MAP(0x6, 0x0, 0x3c3)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5}, 0x2c)
bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x10020000000, 0x0}, 0x2c)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000000c0)={r0, &(0x7f0000000080)}, 0x10)

[  327.697341][   T26] audit: type=1804 audit(1548839975.783:82): pid=13274 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor4" name="/root/syzkaller-testdir249741109/syzkaller.k1e7J6/176/file0/file0" dev="sda1" ino=17017 res=1
[  327.932609][ T2479] print_req_error: I/O error, dev loop0, sector 640 flags 801
[  327.940599][ T2479] Buffer I/O error on dev loop0, logical block 80, lost async page write
[  327.949590][ T2479] print_req_error: I/O error, dev loop0, sector 648 flags 801
[  327.957270][ T2479] Buffer I/O error on dev loop0, logical block 81, lost async page write
[  327.965944][ T2479] print_req_error: I/O error, dev loop0, sector 656 flags 801
[  327.973475][ T2479] Buffer I/O error on dev loop0, logical block 82, lost async page write
09:19:36 executing program 2:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x14, 0x4, 0x4, 0x400, 0x0, 0x1}, 0x2c)
socket$kcm(0x29, 0x5, 0x0)
r1 = socket$kcm(0x2, 0x2, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(r1, 0x1, 0xf, &(0x7f0000000400), 0x8)
sendmsg$kcm(r1, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000080)}, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
bpf$OBJ_PIN_MAP(0x6, 0x0, 0x3c3)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5}, 0x2c)
bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x10020000000, 0x0}, 0x2c)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000000c0)={r0, &(0x7f0000000080)}, 0x10)

[  327.982196][ T2479] print_req_error: I/O error, dev loop0, sector 664 flags 801
[  327.989849][ T2479] Buffer I/O error on dev loop0, logical block 83, lost async page write
[  327.998614][ T2479] Buffer I/O error on dev loop0, logical block 84, lost async page write
09:19:36 executing program 3:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x14, 0x4, 0x4, 0x400, 0x0, 0x1}, 0x2c)
socket$kcm(0x29, 0x5, 0x0)
r1 = socket$kcm(0x2, 0x2, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(r1, 0x1, 0xf, &(0x7f0000000400), 0x8)
sendmsg$kcm(r1, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000080)}, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
bpf$OBJ_PIN_MAP(0x6, 0x0, 0x3c3)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5}, 0x2c)
bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x10020000000, 0x0}, 0x2c)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000000c0)={r0, &(0x7f0000000080)}, 0x10)

09:19:36 executing program 4:
mkdir(0x0, 0x0)
symlink(0x0, &(0x7f0000000140)='./bus\x00')
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fchdir(r0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x89a1, 0x0)
setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000380)=0xc4ce7b5fa1687d12, 0x4)
ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, 0x0)
openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/nullb0\x00', 0x0, 0x0)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000400))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0)
setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f00000002c0)={0x8aa}, 0x6)
r1 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0)
r2 = open$dir(&(0x7f0000000600)='./file0\x00', 0x4000, 0x0)
write(r1, &(0x7f0000000400)="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", 0x200)
sendfile(r1, r2, 0x0, 0x10000)
ioctl$PPPIOCSFLAGS(r1, 0x40047459, &(0x7f00000003c0)=0x10000)
setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x0, 0x488, &(0x7f0000000640)={{0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24, 0x1, 'none\x00', 0x1, 0xffffffffbb670edb, 0x67}, {@broadcast, 0x4e21, 0x0, 0x100000000, 0xfffffffffffffff7, 0x401}}, 0x44)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000240)='westwood\x00', 0x9)
mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, &(0x7f0000000180)=ANY=[])
mkdirat(r2, &(0x7f0000000040)='./bus\x00', 0x40)
ioctl$IOC_PR_CLEAR(0xffffffffffffffff, 0x401070cd, 0x0)

09:19:36 executing program 3:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x14, 0x4, 0x4, 0x400, 0x0, 0x1}, 0x2c)
socket$kcm(0x29, 0x5, 0x0)
r1 = socket$kcm(0x2, 0x2, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(r1, 0x1, 0xf, &(0x7f0000000400), 0x8)
sendmsg$kcm(r1, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000080)}, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
bpf$OBJ_PIN_MAP(0x6, 0x0, 0x3c3)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5}, 0x2c)
bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x10020000000, 0x0}, 0x2c)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000000c0)={r0, &(0x7f0000000080)}, 0x10)

09:19:36 executing program 5:
r0 = socket$inet6_sctp(0xa, 0x2000000000000001, 0x84)
setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x12, &(0x7f0000000000), 0x0)

09:19:36 executing program 2:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x14, 0x4, 0x4, 0x400, 0x0, 0x1}, 0x2c)
socket$kcm(0x29, 0x5, 0x0)
r1 = socket$kcm(0x2, 0x2, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(r1, 0x1, 0xf, &(0x7f0000000400), 0x8)
sendmsg$kcm(r1, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000080)}, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
bpf$OBJ_PIN_MAP(0x6, 0x0, 0x3c3)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5}, 0x2c)
bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x10020000000, 0x0}, 0x2c)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000000c0)={r0, &(0x7f0000000080)}, 0x10)

09:19:36 executing program 5:
r0 = socket$inet6_sctp(0xa, 0x2000000000000001, 0x84)
setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x12, &(0x7f0000000000), 0x0)

09:19:36 executing program 0:
r0 = socket$inet(0x2, 0x0, 0x0)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x4)
bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00')
sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, 0x0, 0x1)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000240)='/dev/hwrng\x00', 0x800, 0x0)
r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/autofs\x00', 0x2, 0x0)
fcntl$dupfd(r0, 0x0, r0)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f00000002c0)={r2, 0x1, 0x6})
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4)
writev(r1, &(0x7f0000000340)=[{&(0x7f0000000a80)="d85e678e676090b1343eb9c52bd02479d0747d8b2ab1410220300dba233c5193d6240d4a4d3d2a693cc7b07ce79ebbae29f214bee98043109616a4205ae885b9fa8c3b79353fa61bf3da3d814e673a4e0524a241d81a07f6dd09e1d0e34871ddf209e2e0ea4539e15d", 0x69}], 0x1)
r3 = fcntl$dupfd(r0, 0x406, r1)
ioctl$SIOCRSGCAUSE(r3, 0x89e0, &(0x7f0000000200))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_elf32(r1, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x169)
write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0x10280, 0x0)
ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0)

09:19:36 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x1}], 0x100000c7, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/route\x00')
preadv(r0, &(0x7f0000000480), 0x10000000000001f6, 0x10400003)

09:19:36 executing program 3:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f000001b000)={@multicast2, @remote, @loopback}, 0xc)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000280)='net/mcfilter\x00')
preadv(r2, &(0x7f0000000480), 0x10000000000002a1, 0x10400003)
dup2(0xffffffffffffffff, r0)
ioctl$PPPIOCSCOMPRESS(0xffffffffffffffff, 0x4010744d)

09:19:37 executing program 5:
r0 = socket$inet6_sctp(0xa, 0x2000000000000001, 0x84)
setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x12, &(0x7f0000000000), 0x0)

09:19:37 executing program 2:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x5, 0x1, 0x5, 0xb, 0x0, 0x1}, 0x2c)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x6, 0x4, 0x100000009}, 0x2c)
bpf$PROG_LOAD(0x5, &(0x7f00004b1000)={0x8, 0x7, &(0x7f0000261000)=@framed={{}, [@map={0x18, 0x9, 0x1, 0x0, r1}, @map={0x18, 0x4, 0x1, 0x0, r0}]}, &(0x7f0000cd0000)='GPL\x00', 0xb4c3, 0x259, &(0x7f0000cdd000)=""/4096}, 0x48)

09:19:37 executing program 5:
r0 = socket$inet6_sctp(0xa, 0x2000000000000001, 0x84)
setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x12, &(0x7f0000000000), 0x0)

09:19:37 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
msgget$private(0x0, 0x40)
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
sigaltstack(&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000000))
r0 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r0, 0x800000c0045005, &(0x7f0000000000)=0x1000)
ioctl$PIO_FONT(r0, 0x4b61, &(0x7f00000000c0)="68cdfcce268735b8748557")
process_vm_writev(0x0, &(0x7f0000000380)=[{&(0x7f0000000200)=""/74, 0x4a}, {&(0x7f0000000500)=""/164, 0xa4}], 0x2, &(0x7f0000001900)=[{&(0x7f0000001700)=""/126, 0x7e}, {&(0x7f0000001780)=""/180, 0xb4}, {&(0x7f0000001840)=""/148, 0x94}], 0x3, 0x0)
time(&(0x7f0000000180))
mmap(&(0x7f0000ffc000/0x3000)=nil, 0x200000, 0xfffffffffffffffd, 0x2012, r0, 0x0)
sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000040), 0xc, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="f5ea73dcffa88435aec4ff7a3b7afb9acaac516a1b44a21ce247ae492105cd546d0f041c46cd9fa734407ebd1de8dfe5cbdb2f0c6ac888cb3f6fa2baf07144f6a0c0c3d4bbf5435651dcb74eace5ca44e24d79c561aed3d6d5d20b488c3911f62fd5c5725b9cd6403e4df26c0df68ad925ee"], 0x1}}, 0x0)
mlockall(0xfffffffffffffffc)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0)
fanotify_init(0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer2\x00', 0x0, 0x0)
pipe(&(0x7f0000000680)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
timer_create(0x5, &(0x7f0000000800)={0x0, 0x16, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000840)=<r3=>0x0)
timer_delete(r3)
write(r2, &(0x7f0000000340), 0x10000014c)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000540)={0x0, <r4=>0x0})
pselect6(0x40, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r4+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8})
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000080)=0x2, 0x4)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000006c0)={{{@in6=@mcast1, @in=@broadcast}}, {{@in6=@ipv4={[], [], @broadcast}}, 0x0, @in=@multicast1}}, &(0x7f00000007c0)=0xe8)
getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000400)={{{@in=@multicast1, @in6=@remote}}, {{@in=@dev}}}, &(0x7f0000000500)=0xe8)
sendmmsg(0xffffffffffffffff, &(0x7f0000006240)=[{{0x0, 0x0, &(0x7f0000005e00), 0x0, &(0x7f0000006300)}}], 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="45964a5c4f0f00fe000030492a768b88b40eda954797623745e004"], 0x0, 0x0, 0xce, &(0x7f0000000300)=""/206}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000880)=ANY=[@ANYBLOB="180000000000000000001000028000006a0a00fffff8f61230a5d269a6804cb6276fd6ca006318"], 0x0, 0x0, 0xce, &(0x7f0000000180)=""/206}, 0x48)

09:19:37 executing program 2:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x5, 0x1, 0x5, 0xb, 0x0, 0x1}, 0x2c)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x6, 0x4, 0x100000009}, 0x2c)
bpf$PROG_LOAD(0x5, &(0x7f00004b1000)={0x8, 0x7, &(0x7f0000261000)=@framed={{}, [@map={0x18, 0x9, 0x1, 0x0, r1}, @map={0x18, 0x4, 0x1, 0x0, r0}]}, &(0x7f0000cd0000)='GPL\x00', 0xb4c3, 0x259, &(0x7f0000cdd000)=""/4096}, 0x48)

09:19:37 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x1}], 0x100000c7, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/route\x00')
preadv(r0, &(0x7f0000000480), 0x10000000000001f6, 0x10400003)

09:19:38 executing program 0:
r0 = socket$inet(0x2, 0x0, 0x0)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x4)
bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00')
sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, 0x0, 0x1)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000240)='/dev/hwrng\x00', 0x800, 0x0)
r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/autofs\x00', 0x2, 0x0)
fcntl$dupfd(r0, 0x0, r0)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f00000002c0)={r2, 0x1, 0x6})
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4)
writev(r1, &(0x7f0000000340)=[{&(0x7f0000000a80)="d85e678e676090b1343eb9c52bd02479d0747d8b2ab1410220300dba233c5193d6240d4a4d3d2a693cc7b07ce79ebbae29f214bee98043109616a4205ae885b9fa8c3b79353fa61bf3da3d814e673a4e0524a241d81a07f6dd09e1d0e34871ddf209e2e0ea4539e15d", 0x69}], 0x1)
r3 = fcntl$dupfd(r0, 0x406, r1)
ioctl$SIOCRSGCAUSE(r3, 0x89e0, &(0x7f0000000200))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_elf32(r1, &(0x7f00000008c0)=ANY=[@ANYBLOB="7f454c4600010000000000040000000000003e0000000000000000003800000000000000042233e9c50000000000002000000000000000000000c9484caaef0000000000000000000000000000000000000008000500000000000000000000000000dcd22cd830a0b2dfb284f65df3be04dde0a02b9b0419a613996c39550c551257a02ed03c964962b39865598eb492c34f905034bd7d9f10500ef64d649be114b2288c34fb7ddc637b9d0946f83fec2e839af8f9e12f1ee74fb6162bd4376c76bc5adde08ed5100ccc787198f570d1cf8416e898239ed43d19c4bb3eaa5c94af371c3873f17fd32c7f6dcd68149eaab27808e12a5f8b9eba051e6aa9643ecc28e846a75295aa20a67542b2e0f401cfa52d12d67c3a56d14afd8af1bc576c97aa3fd8157f787bc01ec50235d4478600038529f054d742fc59d22047ac17a240259f075336007911856ceec85fdfa92e4a10870b1dcaafd938a33e8aaef120c74f3535db08184a92fa"], 0x169)
write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0x10280, 0x0)
ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0)

09:19:38 executing program 4:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x20e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet(0x2, 0x6, 0x7fffffff)
r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/sequencer2\x00', 0x141080, 0x0)
ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000480)={&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1})
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_ifreq(r3, 0x8991, &(0x7f00000005c0)={'bond0\x00\x00\x00\x00\x00\x00\x00!\x00', @ifru_names='bond_slave_1\x00'})
ioctl$VIDIOC_ENCODER_CMD(r2, 0xc028564d, &(0x7f0000000680)={0x1, 0x1, [0xfff, 0x101, 0x3ff, 0x40, 0x0, 0xfffffffffffffffb, 0x8, 0x4f]})
ioctl$SNDRV_TIMER_IOCTL_PVERSION(r2, 0x80045400, &(0x7f00000004c0))
r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000240)='/dev/full\x00', 0x20a800, 0x0)
ioctl$KDSKBSENT(r4, 0x4b49, &(0x7f0000000740)="e2da5cdea423495c8b5663b2d9e462f4e65c25cc8b2ba5e1349cd9ae758d94c045f53f48860fd0b3d8013a69034f6ac0d6e1e98dfe38d2d9e2e2c54d473c67bfa22bbf07fadb6002cda4dd466bf8b4ac1fd7837039b702b9d0fa204a8e5df87c3de67d40844e3ddd3c120aee61b90f3b98210922d8d4271c6df39457ffa88a8a1c33837414408c58e56e3fc11ec40ec466928864d45fe30bbdca4189941c975bc6fe8fb0e6bf8e2a58131d1b5d088066c68b8a6ee0c4e1fea78983de57627ebf6f449a310f966c64391d936f99802fb9320ae1cc")
r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000016c0)='/dev/sequencer2\x00', 0x40042, 0x0)
sendto$inet(r1, &(0x7f0000000a00)="8dec431bb44aff53a310b4eabef65b9ca28574570c8753d962784ce7563c1f448215fd237bf4c9159a98e9205a38a1fef116825d2a67dccc355557378e26b4e71c9ead8245ce8f8727e4d5e348d6b048462955248e97e362bb149adcd5ad849873b82111c2ecfa383140f9d4c99f525041a886277a6592dbc6b9108911e88a440b93f5c0fae544676b44a19bf06aa255a549db9cb0a9221a90f33fec43b1d074bf", 0xa1, 0x1, 0x0, 0x0)
r6 = syz_genetlink_get_family_id$fou(&(0x7f0000000580)='fou\x00')
sendmsg$FOU_CMD_DEL(r5, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000600)={&(0x7f00000006c0)=ANY=[@ANYBLOB="c3d1c79f", @ANYRES16=r6, @ANYRESHEX=r1], 0x3}, 0x1, 0x0, 0x0, 0x20044000}, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000b00)='IPVS\x00')
sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f0000000700)=ANY=[@ANYBLOB="520f020000000000000020fb00000000000000"], 0x1}, 0x1, 0x0, 0x0, 0x8050}, 0x40)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25d1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
keyctl$session_to_parent(0x12)
ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x200)
r7 = dup2(r0, r5)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0xc81, 0x0)
r8 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_open_dev$midi(&(0x7f00000002c0)='/dev/midi#\x00', 0x3, 0x40100)
getsockopt$inet_pktinfo(r8, 0x0, 0x8, &(0x7f0000000300)={0x0, @remote, @loopback}, &(0x7f0000000340)=0xc)
sendmsg$nl_route(r7, &(0x7f0000000400)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000380)={&(0x7f0000000c80)=ANY=[]}}, 0x4008000)
ioctl$sock_proto_private(r8, 0x80089ec, &(0x7f0000000140)="039625617620978a4df541244054545eefb285b44d2198c37642636f3bd6084339c6e79154e7a4e1e8a3a316d5a4d756fa828508c3eaae4df2759d4d16de576413772f248c74aae160e44749d604a7af5290efc74ba837ec71ff4bfb5f9a2d51403ecc6b5a4bb2dab710e3367549b45cd0b3fed1c251372400872f340ee3b348964d022f3224519d06adad720a5650c9b04292955ae6fd364adebee641bc911bcdd907f409e8200d95b946789c69b1d8876c")
r9 = syz_open_dev$usb(&(0x7f0000000200)='/dev/bus/usb/00#/00#\x00', 0xff, 0x80000)
syz_open_dev$sndtimer(&(0x7f0000000500)='/dev/snd/timer\x00', 0x0, 0x4080)
ioctl$VT_GETMODE(r9, 0x5601, &(0x7f0000000240))
setsockopt$inet_group_source_req(r8, 0x0, 0x2e, &(0x7f0000000000)={0x1, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @multicast1}}}, 0xfffffffffffffc1a)

09:19:38 executing program 2:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x5, 0x1, 0x5, 0xb, 0x0, 0x1}, 0x2c)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x6, 0x4, 0x100000009}, 0x2c)
bpf$PROG_LOAD(0x5, &(0x7f00004b1000)={0x8, 0x7, &(0x7f0000261000)=@framed={{}, [@map={0x18, 0x9, 0x1, 0x0, r1}, @map={0x18, 0x4, 0x1, 0x0, r0}]}, &(0x7f0000cd0000)='GPL\x00', 0xb4c3, 0x259, &(0x7f0000cdd000)=""/4096}, 0x48)

09:19:38 executing program 3:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f000001b000)={@multicast2, @remote, @loopback}, 0xc)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000280)='net/mcfilter\x00')
preadv(r2, &(0x7f0000000480), 0x10000000000002a1, 0x10400003)
dup2(0xffffffffffffffff, r0)
ioctl$PPPIOCSCOMPRESS(0xffffffffffffffff, 0x4010744d)

09:19:38 executing program 2:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x5, 0x1, 0x5, 0xb, 0x0, 0x1}, 0x2c)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x6, 0x4, 0x100000009}, 0x2c)
bpf$PROG_LOAD(0x5, &(0x7f00004b1000)={0x8, 0x7, &(0x7f0000261000)=@framed={{}, [@map={0x18, 0x9, 0x1, 0x0, r1}, @map={0x18, 0x4, 0x1, 0x0, r0}]}, &(0x7f0000cd0000)='GPL\x00', 0xb4c3, 0x259, &(0x7f0000cdd000)=""/4096}, 0x48)

09:19:38 executing program 4:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x20e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet(0x2, 0x6, 0x7fffffff)
r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/sequencer2\x00', 0x141080, 0x0)
ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000480)={&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1})
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_ifreq(r3, 0x8991, &(0x7f00000005c0)={'bond0\x00\x00\x00\x00\x00\x00\x00!\x00', @ifru_names='bond_slave_1\x00'})
ioctl$VIDIOC_ENCODER_CMD(r2, 0xc028564d, &(0x7f0000000680)={0x1, 0x1, [0xfff, 0x101, 0x3ff, 0x40, 0x0, 0xfffffffffffffffb, 0x8, 0x4f]})
ioctl$SNDRV_TIMER_IOCTL_PVERSION(r2, 0x80045400, &(0x7f00000004c0))
r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000240)='/dev/full\x00', 0x20a800, 0x0)
ioctl$KDSKBSENT(r4, 0x4b49, &(0x7f0000000740)="e2da5cdea423495c8b5663b2d9e462f4e65c25cc8b2ba5e1349cd9ae758d94c045f53f48860fd0b3d8013a69034f6ac0d6e1e98dfe38d2d9e2e2c54d473c67bfa22bbf07fadb6002cda4dd466bf8b4ac1fd7837039b702b9d0fa204a8e5df87c3de67d40844e3ddd3c120aee61b90f3b98210922d8d4271c6df39457ffa88a8a1c33837414408c58e56e3fc11ec40ec466928864d45fe30bbdca4189941c975bc6fe8fb0e6bf8e2a58131d1b5d088066c68b8a6ee0c4e1fea78983de57627ebf6f449a310f966c64391d936f99802fb9320ae1cc")
r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000016c0)='/dev/sequencer2\x00', 0x40042, 0x0)
sendto$inet(r1, &(0x7f0000000a00)="8dec431bb44aff53a310b4eabef65b9ca28574570c8753d962784ce7563c1f448215fd237bf4c9159a98e9205a38a1fef116825d2a67dccc355557378e26b4e71c9ead8245ce8f8727e4d5e348d6b048462955248e97e362bb149adcd5ad849873b82111c2ecfa383140f9d4c99f525041a886277a6592dbc6b9108911e88a440b93f5c0fae544676b44a19bf06aa255a549db9cb0a9221a90f33fec43b1d074bf", 0xa1, 0x1, 0x0, 0x0)
r6 = syz_genetlink_get_family_id$fou(&(0x7f0000000580)='fou\x00')
sendmsg$FOU_CMD_DEL(r5, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000600)={&(0x7f00000006c0)=ANY=[@ANYBLOB="c3d1c79f", @ANYRES16=r6, @ANYRESHEX=r1], 0x3}, 0x1, 0x0, 0x0, 0x20044000}, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000b00)='IPVS\x00')
sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f0000000700)=ANY=[@ANYBLOB="520f020000000000000020fb00000000000000"], 0x1}, 0x1, 0x0, 0x0, 0x8050}, 0x40)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25d1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
keyctl$session_to_parent(0x12)
ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x200)
r7 = dup2(r0, r5)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0xc81, 0x0)
r8 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_open_dev$midi(&(0x7f00000002c0)='/dev/midi#\x00', 0x3, 0x40100)
getsockopt$inet_pktinfo(r8, 0x0, 0x8, &(0x7f0000000300)={0x0, @remote, @loopback}, &(0x7f0000000340)=0xc)
sendmsg$nl_route(r7, &(0x7f0000000400)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000380)={&(0x7f0000000c80)=ANY=[]}}, 0x4008000)
ioctl$sock_proto_private(r8, 0x80089ec, &(0x7f0000000140)="039625617620978a4df541244054545eefb285b44d2198c37642636f3bd6084339c6e79154e7a4e1e8a3a316d5a4d756fa828508c3eaae4df2759d4d16de576413772f248c74aae160e44749d604a7af5290efc74ba837ec71ff4bfb5f9a2d51403ecc6b5a4bb2dab710e3367549b45cd0b3fed1c251372400872f340ee3b348964d022f3224519d06adad720a5650c9b04292955ae6fd364adebee641bc911bcdd907f409e8200d95b946789c69b1d8876c")
r9 = syz_open_dev$usb(&(0x7f0000000200)='/dev/bus/usb/00#/00#\x00', 0xff, 0x80000)
syz_open_dev$sndtimer(&(0x7f0000000500)='/dev/snd/timer\x00', 0x0, 0x4080)
ioctl$VT_GETMODE(r9, 0x5601, &(0x7f0000000240))
setsockopt$inet_group_source_req(r8, 0x0, 0x2e, &(0x7f0000000000)={0x1, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @multicast1}}}, 0xfffffffffffffc1a)

09:19:38 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x1}], 0x100000c7, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/route\x00')
preadv(r0, &(0x7f0000000480), 0x10000000000001f6, 0x10400003)

09:19:38 executing program 4:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x20e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet(0x2, 0x6, 0x7fffffff)
r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/sequencer2\x00', 0x141080, 0x0)
ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000480)={&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1})
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_ifreq(r3, 0x8991, &(0x7f00000005c0)={'bond0\x00\x00\x00\x00\x00\x00\x00!\x00', @ifru_names='bond_slave_1\x00'})
ioctl$VIDIOC_ENCODER_CMD(r2, 0xc028564d, &(0x7f0000000680)={0x1, 0x1, [0xfff, 0x101, 0x3ff, 0x40, 0x0, 0xfffffffffffffffb, 0x8, 0x4f]})
ioctl$SNDRV_TIMER_IOCTL_PVERSION(r2, 0x80045400, &(0x7f00000004c0))
r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000240)='/dev/full\x00', 0x20a800, 0x0)
ioctl$KDSKBSENT(r4, 0x4b49, &(0x7f0000000740)="e2da5cdea423495c8b5663b2d9e462f4e65c25cc8b2ba5e1349cd9ae758d94c045f53f48860fd0b3d8013a69034f6ac0d6e1e98dfe38d2d9e2e2c54d473c67bfa22bbf07fadb6002cda4dd466bf8b4ac1fd7837039b702b9d0fa204a8e5df87c3de67d40844e3ddd3c120aee61b90f3b98210922d8d4271c6df39457ffa88a8a1c33837414408c58e56e3fc11ec40ec466928864d45fe30bbdca4189941c975bc6fe8fb0e6bf8e2a58131d1b5d088066c68b8a6ee0c4e1fea78983de57627ebf6f449a310f966c64391d936f99802fb9320ae1cc")
r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000016c0)='/dev/sequencer2\x00', 0x40042, 0x0)
sendto$inet(r1, &(0x7f0000000a00)="8dec431bb44aff53a310b4eabef65b9ca28574570c8753d962784ce7563c1f448215fd237bf4c9159a98e9205a38a1fef116825d2a67dccc355557378e26b4e71c9ead8245ce8f8727e4d5e348d6b048462955248e97e362bb149adcd5ad849873b82111c2ecfa383140f9d4c99f525041a886277a6592dbc6b9108911e88a440b93f5c0fae544676b44a19bf06aa255a549db9cb0a9221a90f33fec43b1d074bf", 0xa1, 0x1, 0x0, 0x0)
r6 = syz_genetlink_get_family_id$fou(&(0x7f0000000580)='fou\x00')
sendmsg$FOU_CMD_DEL(r5, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000600)={&(0x7f00000006c0)=ANY=[@ANYBLOB="c3d1c79f", @ANYRES16=r6, @ANYRESHEX=r1], 0x3}, 0x1, 0x0, 0x0, 0x20044000}, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000b00)='IPVS\x00')
sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f0000000700)=ANY=[@ANYBLOB="520f020000000000000020fb00000000000000"], 0x1}, 0x1, 0x0, 0x0, 0x8050}, 0x40)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25d1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
keyctl$session_to_parent(0x12)
ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x200)
r7 = dup2(r0, r5)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0xc81, 0x0)
r8 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_open_dev$midi(&(0x7f00000002c0)='/dev/midi#\x00', 0x3, 0x40100)
getsockopt$inet_pktinfo(r8, 0x0, 0x8, &(0x7f0000000300)={0x0, @remote, @loopback}, &(0x7f0000000340)=0xc)
sendmsg$nl_route(r7, &(0x7f0000000400)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000380)={&(0x7f0000000c80)=ANY=[]}}, 0x4008000)
ioctl$sock_proto_private(r8, 0x80089ec, &(0x7f0000000140)="039625617620978a4df541244054545eefb285b44d2198c37642636f3bd6084339c6e79154e7a4e1e8a3a316d5a4d756fa828508c3eaae4df2759d4d16de576413772f248c74aae160e44749d604a7af5290efc74ba837ec71ff4bfb5f9a2d51403ecc6b5a4bb2dab710e3367549b45cd0b3fed1c251372400872f340ee3b348964d022f3224519d06adad720a5650c9b04292955ae6fd364adebee641bc911bcdd907f409e8200d95b946789c69b1d8876c")
r9 = syz_open_dev$usb(&(0x7f0000000200)='/dev/bus/usb/00#/00#\x00', 0xff, 0x80000)
syz_open_dev$sndtimer(&(0x7f0000000500)='/dev/snd/timer\x00', 0x0, 0x4080)
ioctl$VT_GETMODE(r9, 0x5601, &(0x7f0000000240))
setsockopt$inet_group_source_req(r8, 0x0, 0x2e, &(0x7f0000000000)={0x1, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @multicast1}}}, 0xfffffffffffffc1a)

09:19:38 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
msgget$private(0x0, 0x40)
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
sigaltstack(&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000000))
r0 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r0, 0x800000c0045005, &(0x7f0000000000)=0x1000)
ioctl$PIO_FONT(r0, 0x4b61, &(0x7f00000000c0)="68cdfcce268735b8748557")
process_vm_writev(0x0, &(0x7f0000000380)=[{&(0x7f0000000200)=""/74, 0x4a}, {&(0x7f0000000500)=""/164, 0xa4}], 0x2, &(0x7f0000001900)=[{&(0x7f0000001700)=""/126, 0x7e}, {&(0x7f0000001780)=""/180, 0xb4}, {&(0x7f0000001840)=""/148, 0x94}], 0x3, 0x0)
time(&(0x7f0000000180))
mmap(&(0x7f0000ffc000/0x3000)=nil, 0x200000, 0xfffffffffffffffd, 0x2012, r0, 0x0)
sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000040), 0xc, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="f5ea73dcffa88435aec4ff7a3b7afb9acaac516a1b44a21ce247ae492105cd546d0f041c46cd9fa734407ebd1de8dfe5cbdb2f0c6ac888cb3f6fa2baf07144f6a0c0c3d4bbf5435651dcb74eace5ca44e24d79c561aed3d6d5d20b488c3911f62fd5c5725b9cd6403e4df26c0df68ad925ee"], 0x1}}, 0x0)
mlockall(0xfffffffffffffffc)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0)
fanotify_init(0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer2\x00', 0x0, 0x0)
pipe(&(0x7f0000000680)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
timer_create(0x5, &(0x7f0000000800)={0x0, 0x16, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000840)=<r3=>0x0)
timer_delete(r3)
write(r2, &(0x7f0000000340), 0x10000014c)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000540)={0x0, <r4=>0x0})
pselect6(0x40, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r4+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8})
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000080)=0x2, 0x4)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000006c0)={{{@in6=@mcast1, @in=@broadcast}}, {{@in6=@ipv4={[], [], @broadcast}}, 0x0, @in=@multicast1}}, &(0x7f00000007c0)=0xe8)
getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000400)={{{@in=@multicast1, @in6=@remote}}, {{@in=@dev}}}, &(0x7f0000000500)=0xe8)
sendmmsg(0xffffffffffffffff, &(0x7f0000006240)=[{{0x0, 0x0, &(0x7f0000005e00), 0x0, &(0x7f0000006300)}}], 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="45964a5c4f0f00fe000030492a768b88b40eda954797623745e004"], 0x0, 0x0, 0xce, &(0x7f0000000300)=""/206}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000880)=ANY=[@ANYBLOB="180000000000000000001000028000006a0a00fffff8f61230a5d269a6804cb6276fd6ca006318"], 0x0, 0x0, 0xce, &(0x7f0000000180)=""/206}, 0x48)

09:19:39 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
msgget$private(0x0, 0x40)
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
sigaltstack(&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000000))
r0 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r0, 0x800000c0045005, &(0x7f0000000000)=0x1000)
ioctl$PIO_FONT(r0, 0x4b61, &(0x7f00000000c0)="68cdfcce268735b8748557")
process_vm_writev(0x0, &(0x7f0000000380)=[{&(0x7f0000000200)=""/74, 0x4a}, {&(0x7f0000000500)=""/164, 0xa4}], 0x2, &(0x7f0000001900)=[{&(0x7f0000001700)=""/126, 0x7e}, {&(0x7f0000001780)=""/180, 0xb4}, {&(0x7f0000001840)=""/148, 0x94}], 0x3, 0x0)
time(&(0x7f0000000180))
mmap(&(0x7f0000ffc000/0x3000)=nil, 0x200000, 0xfffffffffffffffd, 0x2012, r0, 0x0)
sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000040), 0xc, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="f5ea73dcffa88435aec4ff7a3b7afb9acaac516a1b44a21ce247ae492105cd546d0f041c46cd9fa734407ebd1de8dfe5cbdb2f0c6ac888cb3f6fa2baf07144f6a0c0c3d4bbf5435651dcb74eace5ca44e24d79c561aed3d6d5d20b488c3911f62fd5c5725b9cd6403e4df26c0df68ad925ee"], 0x1}}, 0x0)
mlockall(0xfffffffffffffffc)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0)
fanotify_init(0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer2\x00', 0x0, 0x0)
pipe(&(0x7f0000000680)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
timer_create(0x5, &(0x7f0000000800)={0x0, 0x16, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000840)=<r3=>0x0)
timer_delete(r3)
write(r2, &(0x7f0000000340), 0x10000014c)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000540)={0x0, <r4=>0x0})
pselect6(0x40, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r4+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8})
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000080)=0x2, 0x4)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000006c0)={{{@in6=@mcast1, @in=@broadcast}}, {{@in6=@ipv4={[], [], @broadcast}}, 0x0, @in=@multicast1}}, &(0x7f00000007c0)=0xe8)
getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000400)={{{@in=@multicast1, @in6=@remote}}, {{@in=@dev}}}, &(0x7f0000000500)=0xe8)
sendmmsg(0xffffffffffffffff, &(0x7f0000006240)=[{{0x0, 0x0, &(0x7f0000005e00), 0x0, &(0x7f0000006300)}}], 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="45964a5c4f0f00fe000030492a768b88b40eda954797623745e004"], 0x0, 0x0, 0xce, &(0x7f0000000300)=""/206}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000880)=ANY=[@ANYBLOB="180000000000000000001000028000006a0a00fffff8f61230a5d269a6804cb6276fd6ca006318"], 0x0, 0x0, 0xce, &(0x7f0000000180)=""/206}, 0x48)

09:19:39 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x1}], 0x100000c7, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/route\x00')
preadv(r0, &(0x7f0000000480), 0x10000000000001f6, 0x10400003)

09:19:39 executing program 0:
r0 = socket$inet(0x2, 0x0, 0x0)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x4)
bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00')
sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, 0x0, 0x1)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000240)='/dev/hwrng\x00', 0x800, 0x0)
r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/autofs\x00', 0x2, 0x0)
fcntl$dupfd(r0, 0x0, r0)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f00000002c0)={r2, 0x1, 0x6})
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4)
writev(r1, &(0x7f0000000340)=[{&(0x7f0000000a80)="d85e678e676090b1343eb9c52bd02479d0747d8b2ab1410220300dba233c5193d6240d4a4d3d2a693cc7b07ce79ebbae29f214bee98043109616a4205ae885b9fa8c3b79353fa61bf3da3d814e673a4e0524a241d81a07f6dd09e1d0e34871ddf209e2e0ea4539e15d", 0x69}], 0x1)
r3 = fcntl$dupfd(r0, 0x406, r1)
ioctl$SIOCRSGCAUSE(r3, 0x89e0, &(0x7f0000000200))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_elf32(r1, &(0x7f00000008c0)=ANY=[@ANYBLOB="7f454c4600010000000000040000000000003e0000000000000000003800000000000000042233e9c50000000000002000000000000000000000c9484caaef0000000000000000000000000000000000000008000500000000000000000000000000dcd22cd830a0b2dfb284f65df3be04dde0a02b9b0419a613996c39550c551257a02ed03c964962b39865598eb492c34f905034bd7d9f10500ef64d649be114b2288c34fb7ddc637b9d0946f83fec2e839af8f9e12f1ee74fb6162bd4376c76bc5adde08ed5100ccc787198f570d1cf8416e898239ed43d19c4bb3eaa5c94af371c3873f17fd32c7f6dcd68149eaab27808e12a5f8b9eba051e6aa9643ecc28e846a75295aa20a67542b2e0f401cfa52d12d67c3a56d14afd8af1bc576c97aa3fd8157f787bc01ec50235d4478600038529f054d742fc59d22047ac17a240259f075336007911856ceec85fdfa92e4a10870b1dcaafd938a33e8aaef120c74f3535db08184a92fa"], 0x169)
write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0x10280, 0x0)
ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0)

09:19:39 executing program 4:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x20e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet(0x2, 0x6, 0x7fffffff)
r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/sequencer2\x00', 0x141080, 0x0)
ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000480)={&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1})
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_ifreq(r3, 0x8991, &(0x7f00000005c0)={'bond0\x00\x00\x00\x00\x00\x00\x00!\x00', @ifru_names='bond_slave_1\x00'})
ioctl$VIDIOC_ENCODER_CMD(r2, 0xc028564d, &(0x7f0000000680)={0x1, 0x1, [0xfff, 0x101, 0x3ff, 0x40, 0x0, 0xfffffffffffffffb, 0x8, 0x4f]})
ioctl$SNDRV_TIMER_IOCTL_PVERSION(r2, 0x80045400, &(0x7f00000004c0))
r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000240)='/dev/full\x00', 0x20a800, 0x0)
ioctl$KDSKBSENT(r4, 0x4b49, &(0x7f0000000740)="e2da5cdea423495c8b5663b2d9e462f4e65c25cc8b2ba5e1349cd9ae758d94c045f53f48860fd0b3d8013a69034f6ac0d6e1e98dfe38d2d9e2e2c54d473c67bfa22bbf07fadb6002cda4dd466bf8b4ac1fd7837039b702b9d0fa204a8e5df87c3de67d40844e3ddd3c120aee61b90f3b98210922d8d4271c6df39457ffa88a8a1c33837414408c58e56e3fc11ec40ec466928864d45fe30bbdca4189941c975bc6fe8fb0e6bf8e2a58131d1b5d088066c68b8a6ee0c4e1fea78983de57627ebf6f449a310f966c64391d936f99802fb9320ae1cc")
r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000016c0)='/dev/sequencer2\x00', 0x40042, 0x0)
sendto$inet(r1, &(0x7f0000000a00)="8dec431bb44aff53a310b4eabef65b9ca28574570c8753d962784ce7563c1f448215fd237bf4c9159a98e9205a38a1fef116825d2a67dccc355557378e26b4e71c9ead8245ce8f8727e4d5e348d6b048462955248e97e362bb149adcd5ad849873b82111c2ecfa383140f9d4c99f525041a886277a6592dbc6b9108911e88a440b93f5c0fae544676b44a19bf06aa255a549db9cb0a9221a90f33fec43b1d074bf", 0xa1, 0x1, 0x0, 0x0)
r6 = syz_genetlink_get_family_id$fou(&(0x7f0000000580)='fou\x00')
sendmsg$FOU_CMD_DEL(r5, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000600)={&(0x7f00000006c0)=ANY=[@ANYBLOB="c3d1c79f", @ANYRES16=r6, @ANYRESHEX=r1], 0x3}, 0x1, 0x0, 0x0, 0x20044000}, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000b00)='IPVS\x00')
sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f0000000700)=ANY=[@ANYBLOB="520f020000000000000020fb00000000000000"], 0x1}, 0x1, 0x0, 0x0, 0x8050}, 0x40)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25d1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
keyctl$session_to_parent(0x12)
ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x200)
r7 = dup2(r0, r5)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0xc81, 0x0)
r8 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_open_dev$midi(&(0x7f00000002c0)='/dev/midi#\x00', 0x3, 0x40100)
getsockopt$inet_pktinfo(r8, 0x0, 0x8, &(0x7f0000000300)={0x0, @remote, @loopback}, &(0x7f0000000340)=0xc)
sendmsg$nl_route(r7, &(0x7f0000000400)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000380)={&(0x7f0000000c80)=ANY=[]}}, 0x4008000)
ioctl$sock_proto_private(r8, 0x80089ec, &(0x7f0000000140)="039625617620978a4df541244054545eefb285b44d2198c37642636f3bd6084339c6e79154e7a4e1e8a3a316d5a4d756fa828508c3eaae4df2759d4d16de576413772f248c74aae160e44749d604a7af5290efc74ba837ec71ff4bfb5f9a2d51403ecc6b5a4bb2dab710e3367549b45cd0b3fed1c251372400872f340ee3b348964d022f3224519d06adad720a5650c9b04292955ae6fd364adebee641bc911bcdd907f409e8200d95b946789c69b1d8876c")
r9 = syz_open_dev$usb(&(0x7f0000000200)='/dev/bus/usb/00#/00#\x00', 0xff, 0x80000)
syz_open_dev$sndtimer(&(0x7f0000000500)='/dev/snd/timer\x00', 0x0, 0x4080)
ioctl$VT_GETMODE(r9, 0x5601, &(0x7f0000000240))
setsockopt$inet_group_source_req(r8, 0x0, 0x2e, &(0x7f0000000000)={0x1, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @multicast1}}}, 0xfffffffffffffc1a)

09:19:39 executing program 3:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f000001b000)={@multicast2, @remote, @loopback}, 0xc)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000280)='net/mcfilter\x00')
preadv(r2, &(0x7f0000000480), 0x10000000000002a1, 0x10400003)
dup2(0xffffffffffffffff, r0)
ioctl$PPPIOCSCOMPRESS(0xffffffffffffffff, 0x4010744d)

[  331.694903][    C1] net_ratelimit: 20 callbacks suppressed
[  331.695053][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  331.707182][    C1] protocol 88fb is buggy, dev hsr_slave_1
[  331.713587][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  331.719880][    C1] protocol 88fb is buggy, dev hsr_slave_1
09:19:40 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
msgget$private(0x0, 0x40)
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
sigaltstack(&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000000))
r0 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r0, 0x800000c0045005, &(0x7f0000000000)=0x1000)
ioctl$PIO_FONT(r0, 0x4b61, &(0x7f00000000c0)="68cdfcce268735b8748557")
process_vm_writev(0x0, &(0x7f0000000380)=[{&(0x7f0000000200)=""/74, 0x4a}, {&(0x7f0000000500)=""/164, 0xa4}], 0x2, &(0x7f0000001900)=[{&(0x7f0000001700)=""/126, 0x7e}, {&(0x7f0000001780)=""/180, 0xb4}, {&(0x7f0000001840)=""/148, 0x94}], 0x3, 0x0)
time(&(0x7f0000000180))
mmap(&(0x7f0000ffc000/0x3000)=nil, 0x200000, 0xfffffffffffffffd, 0x2012, r0, 0x0)
sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000040), 0xc, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="f5ea73dcffa88435aec4ff7a3b7afb9acaac516a1b44a21ce247ae492105cd546d0f041c46cd9fa734407ebd1de8dfe5cbdb2f0c6ac888cb3f6fa2baf07144f6a0c0c3d4bbf5435651dcb74eace5ca44e24d79c561aed3d6d5d20b488c3911f62fd5c5725b9cd6403e4df26c0df68ad925ee"], 0x1}}, 0x0)
mlockall(0xfffffffffffffffc)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0)
fanotify_init(0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer2\x00', 0x0, 0x0)
pipe(&(0x7f0000000680)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
timer_create(0x5, &(0x7f0000000800)={0x0, 0x16, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000840)=<r3=>0x0)
timer_delete(r3)
write(r2, &(0x7f0000000340), 0x10000014c)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000540)={0x0, <r4=>0x0})
pselect6(0x40, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r4+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8})
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000080)=0x2, 0x4)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000006c0)={{{@in6=@mcast1, @in=@broadcast}}, {{@in6=@ipv4={[], [], @broadcast}}, 0x0, @in=@multicast1}}, &(0x7f00000007c0)=0xe8)
getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000400)={{{@in=@multicast1, @in6=@remote}}, {{@in=@dev}}}, &(0x7f0000000500)=0xe8)
sendmmsg(0xffffffffffffffff, &(0x7f0000006240)=[{{0x0, 0x0, &(0x7f0000005e00), 0x0, &(0x7f0000006300)}}], 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="45964a5c4f0f00fe000030492a768b88b40eda954797623745e004"], 0x0, 0x0, 0xce, &(0x7f0000000300)=""/206}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000880)=ANY=[@ANYBLOB="180000000000000000001000028000006a0a00fffff8f61230a5d269a6804cb6276fd6ca006318"], 0x0, 0x0, 0xce, &(0x7f0000000180)=""/206}, 0x48)

09:19:40 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
msgget$private(0x0, 0x40)
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
sigaltstack(&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000000))
r0 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r0, 0x800000c0045005, &(0x7f0000000000)=0x1000)
ioctl$PIO_FONT(r0, 0x4b61, &(0x7f00000000c0)="68cdfcce268735b8748557")
process_vm_writev(0x0, &(0x7f0000000380)=[{&(0x7f0000000200)=""/74, 0x4a}, {&(0x7f0000000500)=""/164, 0xa4}], 0x2, &(0x7f0000001900)=[{&(0x7f0000001700)=""/126, 0x7e}, {&(0x7f0000001780)=""/180, 0xb4}, {&(0x7f0000001840)=""/148, 0x94}], 0x3, 0x0)
time(&(0x7f0000000180))
mmap(&(0x7f0000ffc000/0x3000)=nil, 0x200000, 0xfffffffffffffffd, 0x2012, r0, 0x0)
sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000040), 0xc, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="f5ea73dcffa88435aec4ff7a3b7afb9acaac516a1b44a21ce247ae492105cd546d0f041c46cd9fa734407ebd1de8dfe5cbdb2f0c6ac888cb3f6fa2baf07144f6a0c0c3d4bbf5435651dcb74eace5ca44e24d79c561aed3d6d5d20b488c3911f62fd5c5725b9cd6403e4df26c0df68ad925ee"], 0x1}}, 0x0)
mlockall(0xfffffffffffffffc)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0)
fanotify_init(0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer2\x00', 0x0, 0x0)
pipe(&(0x7f0000000680)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
timer_create(0x5, &(0x7f0000000800)={0x0, 0x16, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000840)=<r3=>0x0)
timer_delete(r3)
write(r2, &(0x7f0000000340), 0x10000014c)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000540)={0x0, <r4=>0x0})
pselect6(0x40, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r4+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8})
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000080)=0x2, 0x4)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000006c0)={{{@in6=@mcast1, @in=@broadcast}}, {{@in6=@ipv4={[], [], @broadcast}}, 0x0, @in=@multicast1}}, &(0x7f00000007c0)=0xe8)
getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000400)={{{@in=@multicast1, @in6=@remote}}, {{@in=@dev}}}, &(0x7f0000000500)=0xe8)
sendmmsg(0xffffffffffffffff, &(0x7f0000006240)=[{{0x0, 0x0, &(0x7f0000005e00), 0x0, &(0x7f0000006300)}}], 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="45964a5c4f0f00fe000030492a768b88b40eda954797623745e004"], 0x0, 0x0, 0xce, &(0x7f0000000300)=""/206}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000880)=ANY=[@ANYBLOB="180000000000000000001000028000006a0a00fffff8f61230a5d269a6804cb6276fd6ca006318"], 0x0, 0x0, 0xce, &(0x7f0000000180)=""/206}, 0x48)

09:19:40 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
msgget$private(0x0, 0x40)
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
sigaltstack(&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000000))
r0 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r0, 0x800000c0045005, &(0x7f0000000000)=0x1000)
ioctl$PIO_FONT(r0, 0x4b61, &(0x7f00000000c0)="68cdfcce268735b8748557")
process_vm_writev(0x0, &(0x7f0000000380)=[{&(0x7f0000000200)=""/74, 0x4a}, {&(0x7f0000000500)=""/164, 0xa4}], 0x2, &(0x7f0000001900)=[{&(0x7f0000001700)=""/126, 0x7e}, {&(0x7f0000001780)=""/180, 0xb4}, {&(0x7f0000001840)=""/148, 0x94}], 0x3, 0x0)
time(&(0x7f0000000180))
mmap(&(0x7f0000ffc000/0x3000)=nil, 0x200000, 0xfffffffffffffffd, 0x2012, r0, 0x0)
sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000040), 0xc, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="f5ea73dcffa88435aec4ff7a3b7afb9acaac516a1b44a21ce247ae492105cd546d0f041c46cd9fa734407ebd1de8dfe5cbdb2f0c6ac888cb3f6fa2baf07144f6a0c0c3d4bbf5435651dcb74eace5ca44e24d79c561aed3d6d5d20b488c3911f62fd5c5725b9cd6403e4df26c0df68ad925ee"], 0x1}}, 0x0)
mlockall(0xfffffffffffffffc)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0)
fanotify_init(0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer2\x00', 0x0, 0x0)
pipe(&(0x7f0000000680)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
timer_create(0x5, &(0x7f0000000800)={0x0, 0x16, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000840)=<r3=>0x0)
timer_delete(r3)
write(r2, &(0x7f0000000340), 0x10000014c)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000540)={0x0, <r4=>0x0})
pselect6(0x40, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r4+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8})
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000080)=0x2, 0x4)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000006c0)={{{@in6=@mcast1, @in=@broadcast}}, {{@in6=@ipv4={[], [], @broadcast}}, 0x0, @in=@multicast1}}, &(0x7f00000007c0)=0xe8)
getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000400)={{{@in=@multicast1, @in6=@remote}}, {{@in=@dev}}}, &(0x7f0000000500)=0xe8)
sendmmsg(0xffffffffffffffff, &(0x7f0000006240)=[{{0x0, 0x0, &(0x7f0000005e00), 0x0, &(0x7f0000006300)}}], 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="45964a5c4f0f00fe000030492a768b88b40eda954797623745e004"], 0x0, 0x0, 0xce, &(0x7f0000000300)=""/206}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000880)=ANY=[@ANYBLOB="180000000000000000001000028000006a0a00fffff8f61230a5d269a6804cb6276fd6ca006318"], 0x0, 0x0, 0xce, &(0x7f0000000180)=""/206}, 0x48)

09:19:40 executing program 0:
r0 = socket$inet(0x2, 0x0, 0x0)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x4)
bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00')
sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, 0x0, 0x1)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000240)='/dev/hwrng\x00', 0x800, 0x0)
r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/autofs\x00', 0x2, 0x0)
fcntl$dupfd(r0, 0x0, r0)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f00000002c0)={r2, 0x1, 0x6})
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4)
writev(r1, &(0x7f0000000340)=[{&(0x7f0000000a80)="d85e678e676090b1343eb9c52bd02479d0747d8b2ab1410220300dba233c5193d6240d4a4d3d2a693cc7b07ce79ebbae29f214bee98043109616a4205ae885b9fa8c3b79353fa61bf3da3d814e673a4e0524a241d81a07f6dd09e1d0e34871ddf209e2e0ea4539e15d", 0x69}], 0x1)
r3 = fcntl$dupfd(r0, 0x406, r1)
ioctl$SIOCRSGCAUSE(r3, 0x89e0, &(0x7f0000000200))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$binfmt_elf32(r1, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x169)
write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0x10280, 0x0)
ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0)

09:19:40 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
msgget$private(0x0, 0x40)
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
sigaltstack(&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000000))
r0 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r0, 0x800000c0045005, &(0x7f0000000000)=0x1000)
ioctl$PIO_FONT(r0, 0x4b61, &(0x7f00000000c0)="68cdfcce268735b8748557")
process_vm_writev(0x0, &(0x7f0000000380)=[{&(0x7f0000000200)=""/74, 0x4a}, {&(0x7f0000000500)=""/164, 0xa4}], 0x2, &(0x7f0000001900)=[{&(0x7f0000001700)=""/126, 0x7e}, {&(0x7f0000001780)=""/180, 0xb4}, {&(0x7f0000001840)=""/148, 0x94}], 0x3, 0x0)
time(&(0x7f0000000180))
mmap(&(0x7f0000ffc000/0x3000)=nil, 0x200000, 0xfffffffffffffffd, 0x2012, r0, 0x0)
sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000040), 0xc, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="f5ea73dcffa88435aec4ff7a3b7afb9acaac516a1b44a21ce247ae492105cd546d0f041c46cd9fa734407ebd1de8dfe5cbdb2f0c6ac888cb3f6fa2baf07144f6a0c0c3d4bbf5435651dcb74eace5ca44e24d79c561aed3d6d5d20b488c3911f62fd5c5725b9cd6403e4df26c0df68ad925ee"], 0x1}}, 0x0)
mlockall(0xfffffffffffffffc)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0)
fanotify_init(0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer2\x00', 0x0, 0x0)
pipe(&(0x7f0000000680)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
timer_create(0x5, &(0x7f0000000800)={0x0, 0x16, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000840)=<r3=>0x0)
timer_delete(r3)
write(r2, &(0x7f0000000340), 0x10000014c)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000540)={0x0, <r4=>0x0})
pselect6(0x40, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r4+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8})
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000080)=0x2, 0x4)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000006c0)={{{@in6=@mcast1, @in=@broadcast}}, {{@in6=@ipv4={[], [], @broadcast}}, 0x0, @in=@multicast1}}, &(0x7f00000007c0)=0xe8)
getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000400)={{{@in=@multicast1, @in6=@remote}}, {{@in=@dev}}}, &(0x7f0000000500)=0xe8)
sendmmsg(0xffffffffffffffff, &(0x7f0000006240)=[{{0x0, 0x0, &(0x7f0000005e00), 0x0, &(0x7f0000006300)}}], 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="45964a5c4f0f00fe000030492a768b88b40eda954797623745e004"], 0x0, 0x0, 0xce, &(0x7f0000000300)=""/206}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000880)=ANY=[@ANYBLOB="180000000000000000001000028000006a0a00fffff8f61230a5d269a6804cb6276fd6ca006318"], 0x0, 0x0, 0xce, &(0x7f0000000180)=""/206}, 0x48)

[  332.495486][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  332.502108][    C0] protocol 88fb is buggy, dev hsr_slave_1
09:19:40 executing program 3:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f000001b000)={@multicast2, @remote, @loopback}, 0xc)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000280)='net/mcfilter\x00')
preadv(r2, &(0x7f0000000480), 0x10000000000002a1, 0x10400003)
dup2(0xffffffffffffffff, r0)
ioctl$PPPIOCSCOMPRESS(0xffffffffffffffff, 0x4010744d)

[  332.815317][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  332.821501][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  332.895206][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  332.902067][    C1] protocol 88fb is buggy, dev hsr_slave_1
09:19:41 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
msgget$private(0x0, 0x40)
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
sigaltstack(&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000000))
r0 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r0, 0x800000c0045005, &(0x7f0000000000)=0x1000)
ioctl$PIO_FONT(r0, 0x4b61, &(0x7f00000000c0)="68cdfcce268735b8748557")
process_vm_writev(0x0, &(0x7f0000000380)=[{&(0x7f0000000200)=""/74, 0x4a}, {&(0x7f0000000500)=""/164, 0xa4}], 0x2, &(0x7f0000001900)=[{&(0x7f0000001700)=""/126, 0x7e}, {&(0x7f0000001780)=""/180, 0xb4}, {&(0x7f0000001840)=""/148, 0x94}], 0x3, 0x0)
time(&(0x7f0000000180))
mmap(&(0x7f0000ffc000/0x3000)=nil, 0x200000, 0xfffffffffffffffd, 0x2012, r0, 0x0)
sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000040), 0xc, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="f5ea73dcffa88435aec4ff7a3b7afb9acaac516a1b44a21ce247ae492105cd546d0f041c46cd9fa734407ebd1de8dfe5cbdb2f0c6ac888cb3f6fa2baf07144f6a0c0c3d4bbf5435651dcb74eace5ca44e24d79c561aed3d6d5d20b488c3911f62fd5c5725b9cd6403e4df26c0df68ad925ee"], 0x1}}, 0x0)
mlockall(0xfffffffffffffffc)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0)
fanotify_init(0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer2\x00', 0x0, 0x0)
pipe(&(0x7f0000000680)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
timer_create(0x5, &(0x7f0000000800)={0x0, 0x16, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000840)=<r3=>0x0)
timer_delete(r3)
write(r2, &(0x7f0000000340), 0x10000014c)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000540)={0x0, <r4=>0x0})
pselect6(0x40, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r4+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8})
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000080)=0x2, 0x4)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000006c0)={{{@in6=@mcast1, @in=@broadcast}}, {{@in6=@ipv4={[], [], @broadcast}}, 0x0, @in=@multicast1}}, &(0x7f00000007c0)=0xe8)
getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000400)={{{@in=@multicast1, @in6=@remote}}, {{@in=@dev}}}, &(0x7f0000000500)=0xe8)
sendmmsg(0xffffffffffffffff, &(0x7f0000006240)=[{{0x0, 0x0, &(0x7f0000005e00), 0x0, &(0x7f0000006300)}}], 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="45964a5c4f0f00fe000030492a768b88b40eda954797623745e004"], 0x0, 0x0, 0xce, &(0x7f0000000300)=""/206}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000880)=ANY=[@ANYBLOB="180000000000000000001000028000006a0a00fffff8f61230a5d269a6804cb6276fd6ca006318"], 0x0, 0x0, 0xce, &(0x7f0000000180)=""/206}, 0x48)

09:19:41 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
msgget$private(0x0, 0x40)
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
sigaltstack(&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000000))
r0 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r0, 0x800000c0045005, &(0x7f0000000000)=0x1000)
ioctl$PIO_FONT(r0, 0x4b61, &(0x7f00000000c0)="68cdfcce268735b8748557")
process_vm_writev(0x0, &(0x7f0000000380)=[{&(0x7f0000000200)=""/74, 0x4a}, {&(0x7f0000000500)=""/164, 0xa4}], 0x2, &(0x7f0000001900)=[{&(0x7f0000001700)=""/126, 0x7e}, {&(0x7f0000001780)=""/180, 0xb4}, {&(0x7f0000001840)=""/148, 0x94}], 0x3, 0x0)
time(&(0x7f0000000180))
mmap(&(0x7f0000ffc000/0x3000)=nil, 0x200000, 0xfffffffffffffffd, 0x2012, r0, 0x0)
sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000040), 0xc, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="f5ea73dcffa88435aec4ff7a3b7afb9acaac516a1b44a21ce247ae492105cd546d0f041c46cd9fa734407ebd1de8dfe5cbdb2f0c6ac888cb3f6fa2baf07144f6a0c0c3d4bbf5435651dcb74eace5ca44e24d79c561aed3d6d5d20b488c3911f62fd5c5725b9cd6403e4df26c0df68ad925ee"], 0x1}}, 0x0)
mlockall(0xfffffffffffffffc)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0)
fanotify_init(0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer2\x00', 0x0, 0x0)
pipe(&(0x7f0000000680)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
timer_create(0x5, &(0x7f0000000800)={0x0, 0x16, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000840)=<r3=>0x0)
timer_delete(r3)
write(r2, &(0x7f0000000340), 0x10000014c)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000540)={0x0, <r4=>0x0})
pselect6(0x40, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r4+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8})
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000080)=0x2, 0x4)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000006c0)={{{@in6=@mcast1, @in=@broadcast}}, {{@in6=@ipv4={[], [], @broadcast}}, 0x0, @in=@multicast1}}, &(0x7f00000007c0)=0xe8)
getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000400)={{{@in=@multicast1, @in6=@remote}}, {{@in=@dev}}}, &(0x7f0000000500)=0xe8)
sendmmsg(0xffffffffffffffff, &(0x7f0000006240)=[{{0x0, 0x0, &(0x7f0000005e00), 0x0, &(0x7f0000006300)}}], 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="45964a5c4f0f00fe000030492a768b88b40eda954797623745e004"], 0x0, 0x0, 0xce, &(0x7f0000000300)=""/206}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000880)=ANY=[@ANYBLOB="180000000000000000001000028000006a0a00fffff8f61230a5d269a6804cb6276fd6ca006318"], 0x0, 0x0, 0xce, &(0x7f0000000180)=""/206}, 0x48)

09:19:41 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
msgget$private(0x0, 0x40)
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
sigaltstack(&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000000))
r0 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r0, 0x800000c0045005, &(0x7f0000000000)=0x1000)
ioctl$PIO_FONT(r0, 0x4b61, &(0x7f00000000c0)="68cdfcce268735b8748557")
process_vm_writev(0x0, &(0x7f0000000380)=[{&(0x7f0000000200)=""/74, 0x4a}, {&(0x7f0000000500)=""/164, 0xa4}], 0x2, &(0x7f0000001900)=[{&(0x7f0000001700)=""/126, 0x7e}, {&(0x7f0000001780)=""/180, 0xb4}, {&(0x7f0000001840)=""/148, 0x94}], 0x3, 0x0)
time(&(0x7f0000000180))
mmap(&(0x7f0000ffc000/0x3000)=nil, 0x200000, 0xfffffffffffffffd, 0x2012, r0, 0x0)
sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000040), 0xc, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="f5ea73dcffa88435aec4ff7a3b7afb9acaac516a1b44a21ce247ae492105cd546d0f041c46cd9fa734407ebd1de8dfe5cbdb2f0c6ac888cb3f6fa2baf07144f6a0c0c3d4bbf5435651dcb74eace5ca44e24d79c561aed3d6d5d20b488c3911f62fd5c5725b9cd6403e4df26c0df68ad925ee"], 0x1}}, 0x0)
mlockall(0xfffffffffffffffc)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0)
fanotify_init(0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer2\x00', 0x0, 0x0)
pipe(&(0x7f0000000680)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
timer_create(0x5, &(0x7f0000000800)={0x0, 0x16, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000840)=<r3=>0x0)
timer_delete(r3)
write(r2, &(0x7f0000000340), 0x10000014c)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000540)={0x0, <r4=>0x0})
pselect6(0x40, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r4+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8})
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000080)=0x2, 0x4)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000006c0)={{{@in6=@mcast1, @in=@broadcast}}, {{@in6=@ipv4={[], [], @broadcast}}, 0x0, @in=@multicast1}}, &(0x7f00000007c0)=0xe8)
getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000400)={{{@in=@multicast1, @in6=@remote}}, {{@in=@dev}}}, &(0x7f0000000500)=0xe8)
sendmmsg(0xffffffffffffffff, &(0x7f0000006240)=[{{0x0, 0x0, &(0x7f0000005e00), 0x0, &(0x7f0000006300)}}], 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="45964a5c4f0f00fe000030492a768b88b40eda954797623745e004"], 0x0, 0x0, 0xce, &(0x7f0000000300)=""/206}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000880)=ANY=[@ANYBLOB="180000000000000000001000028000006a0a00fffff8f61230a5d269a6804cb6276fd6ca006318"], 0x0, 0x0, 0xce, &(0x7f0000000180)=""/206}, 0x48)

09:19:42 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
msgget$private(0x0, 0x40)
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
sigaltstack(&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000000))
r0 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r0, 0x800000c0045005, &(0x7f0000000000)=0x1000)
ioctl$PIO_FONT(r0, 0x4b61, &(0x7f00000000c0)="68cdfcce268735b8748557")
process_vm_writev(0x0, &(0x7f0000000380)=[{&(0x7f0000000200)=""/74, 0x4a}, {&(0x7f0000000500)=""/164, 0xa4}], 0x2, &(0x7f0000001900)=[{&(0x7f0000001700)=""/126, 0x7e}, {&(0x7f0000001780)=""/180, 0xb4}, {&(0x7f0000001840)=""/148, 0x94}], 0x3, 0x0)
time(&(0x7f0000000180))
mmap(&(0x7f0000ffc000/0x3000)=nil, 0x200000, 0xfffffffffffffffd, 0x2012, r0, 0x0)
sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000040), 0xc, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="f5ea73dcffa88435aec4ff7a3b7afb9acaac516a1b44a21ce247ae492105cd546d0f041c46cd9fa734407ebd1de8dfe5cbdb2f0c6ac888cb3f6fa2baf07144f6a0c0c3d4bbf5435651dcb74eace5ca44e24d79c561aed3d6d5d20b488c3911f62fd5c5725b9cd6403e4df26c0df68ad925ee"], 0x1}}, 0x0)
mlockall(0xfffffffffffffffc)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0)
fanotify_init(0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer2\x00', 0x0, 0x0)
pipe(&(0x7f0000000680)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
timer_create(0x5, &(0x7f0000000800)={0x0, 0x16, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000840)=<r3=>0x0)
timer_delete(r3)
write(r2, &(0x7f0000000340), 0x10000014c)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000540)={0x0, <r4=>0x0})
pselect6(0x40, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r4+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8})
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000080)=0x2, 0x4)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000006c0)={{{@in6=@mcast1, @in=@broadcast}}, {{@in6=@ipv4={[], [], @broadcast}}, 0x0, @in=@multicast1}}, &(0x7f00000007c0)=0xe8)
getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000400)={{{@in=@multicast1, @in6=@remote}}, {{@in=@dev}}}, &(0x7f0000000500)=0xe8)
sendmmsg(0xffffffffffffffff, &(0x7f0000006240)=[{{0x0, 0x0, &(0x7f0000005e00), 0x0, &(0x7f0000006300)}}], 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="45964a5c4f0f00fe000030492a768b88b40eda954797623745e004"], 0x0, 0x0, 0xce, &(0x7f0000000300)=""/206}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000880)=ANY=[@ANYBLOB="180000000000000000001000028000006a0a00fffff8f61230a5d269a6804cb6276fd6ca006318"], 0x0, 0x0, 0xce, &(0x7f0000000180)=""/206}, 0x48)

09:19:42 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
msgget$private(0x0, 0x40)
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
sigaltstack(&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000000))
r0 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r0, 0x800000c0045005, &(0x7f0000000000)=0x1000)
ioctl$PIO_FONT(r0, 0x4b61, &(0x7f00000000c0)="68cdfcce268735b8748557")
process_vm_writev(0x0, &(0x7f0000000380)=[{&(0x7f0000000200)=""/74, 0x4a}, {&(0x7f0000000500)=""/164, 0xa4}], 0x2, &(0x7f0000001900)=[{&(0x7f0000001700)=""/126, 0x7e}, {&(0x7f0000001780)=""/180, 0xb4}, {&(0x7f0000001840)=""/148, 0x94}], 0x3, 0x0)
time(&(0x7f0000000180))
mmap(&(0x7f0000ffc000/0x3000)=nil, 0x200000, 0xfffffffffffffffd, 0x2012, r0, 0x0)
sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000040), 0xc, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="f5ea73dcffa88435aec4ff7a3b7afb9acaac516a1b44a21ce247ae492105cd546d0f041c46cd9fa734407ebd1de8dfe5cbdb2f0c6ac888cb3f6fa2baf07144f6a0c0c3d4bbf5435651dcb74eace5ca44e24d79c561aed3d6d5d20b488c3911f62fd5c5725b9cd6403e4df26c0df68ad925ee"], 0x1}}, 0x0)
mlockall(0xfffffffffffffffc)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0)
fanotify_init(0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer2\x00', 0x0, 0x0)
pipe(&(0x7f0000000680)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
timer_create(0x5, &(0x7f0000000800)={0x0, 0x16, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000840)=<r3=>0x0)
timer_delete(r3)
write(r2, &(0x7f0000000340), 0x10000014c)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000540)={0x0, <r4=>0x0})
pselect6(0x40, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r4+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8})
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000080)=0x2, 0x4)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000006c0)={{{@in6=@mcast1, @in=@broadcast}}, {{@in6=@ipv4={[], [], @broadcast}}, 0x0, @in=@multicast1}}, &(0x7f00000007c0)=0xe8)
getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000400)={{{@in=@multicast1, @in6=@remote}}, {{@in=@dev}}}, &(0x7f0000000500)=0xe8)
sendmmsg(0xffffffffffffffff, &(0x7f0000006240)=[{{0x0, 0x0, &(0x7f0000005e00), 0x0, &(0x7f0000006300)}}], 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="45964a5c4f0f00fe000030492a768b88b40eda954797623745e004"], 0x0, 0x0, 0xce, &(0x7f0000000300)=""/206}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000880)=ANY=[@ANYBLOB="180000000000000000001000028000006a0a00fffff8f61230a5d269a6804cb6276fd6ca006318"], 0x0, 0x0, 0xce, &(0x7f0000000180)=""/206}, 0x48)

09:19:42 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
msgget$private(0x0, 0x40)
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
sigaltstack(&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000000))
r0 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r0, 0x800000c0045005, &(0x7f0000000000)=0x1000)
ioctl$PIO_FONT(r0, 0x4b61, &(0x7f00000000c0)="68cdfcce268735b8748557")
process_vm_writev(0x0, &(0x7f0000000380)=[{&(0x7f0000000200)=""/74, 0x4a}, {&(0x7f0000000500)=""/164, 0xa4}], 0x2, &(0x7f0000001900)=[{&(0x7f0000001700)=""/126, 0x7e}, {&(0x7f0000001780)=""/180, 0xb4}, {&(0x7f0000001840)=""/148, 0x94}], 0x3, 0x0)
time(&(0x7f0000000180))
mmap(&(0x7f0000ffc000/0x3000)=nil, 0x200000, 0xfffffffffffffffd, 0x2012, r0, 0x0)
sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000040), 0xc, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="f5ea73dcffa88435aec4ff7a3b7afb9acaac516a1b44a21ce247ae492105cd546d0f041c46cd9fa734407ebd1de8dfe5cbdb2f0c6ac888cb3f6fa2baf07144f6a0c0c3d4bbf5435651dcb74eace5ca44e24d79c561aed3d6d5d20b488c3911f62fd5c5725b9cd6403e4df26c0df68ad925ee"], 0x1}}, 0x0)
mlockall(0xfffffffffffffffc)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0)
fanotify_init(0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer2\x00', 0x0, 0x0)
pipe(&(0x7f0000000680)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
timer_create(0x5, &(0x7f0000000800)={0x0, 0x16, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000840)=<r3=>0x0)
timer_delete(r3)
write(r2, &(0x7f0000000340), 0x10000014c)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000540)={0x0, <r4=>0x0})
pselect6(0x40, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r4+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8})
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000080)=0x2, 0x4)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000006c0)={{{@in6=@mcast1, @in=@broadcast}}, {{@in6=@ipv4={[], [], @broadcast}}, 0x0, @in=@multicast1}}, &(0x7f00000007c0)=0xe8)
getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000400)={{{@in=@multicast1, @in6=@remote}}, {{@in=@dev}}}, &(0x7f0000000500)=0xe8)
sendmmsg(0xffffffffffffffff, &(0x7f0000006240)=[{{0x0, 0x0, &(0x7f0000005e00), 0x0, &(0x7f0000006300)}}], 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="45964a5c4f0f00fe000030492a768b88b40eda954797623745e004"], 0x0, 0x0, 0xce, &(0x7f0000000300)=""/206}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000880)=ANY=[@ANYBLOB="180000000000000000001000028000006a0a00fffff8f61230a5d269a6804cb6276fd6ca006318"], 0x0, 0x0, 0xce, &(0x7f0000000180)=""/206}, 0x48)

09:19:43 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
msgget$private(0x0, 0x40)
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
sigaltstack(&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000000))
r0 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r0, 0x800000c0045005, &(0x7f0000000000)=0x1000)
ioctl$PIO_FONT(r0, 0x4b61, &(0x7f00000000c0)="68cdfcce268735b8748557")
process_vm_writev(0x0, &(0x7f0000000380)=[{&(0x7f0000000200)=""/74, 0x4a}, {&(0x7f0000000500)=""/164, 0xa4}], 0x2, &(0x7f0000001900)=[{&(0x7f0000001700)=""/126, 0x7e}, {&(0x7f0000001780)=""/180, 0xb4}, {&(0x7f0000001840)=""/148, 0x94}], 0x3, 0x0)
time(&(0x7f0000000180))
mmap(&(0x7f0000ffc000/0x3000)=nil, 0x200000, 0xfffffffffffffffd, 0x2012, r0, 0x0)
sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000040), 0xc, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="f5ea73dcffa88435aec4ff7a3b7afb9acaac516a1b44a21ce247ae492105cd546d0f041c46cd9fa734407ebd1de8dfe5cbdb2f0c6ac888cb3f6fa2baf07144f6a0c0c3d4bbf5435651dcb74eace5ca44e24d79c561aed3d6d5d20b488c3911f62fd5c5725b9cd6403e4df26c0df68ad925ee"], 0x1}}, 0x0)
mlockall(0xfffffffffffffffc)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0)
fanotify_init(0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer2\x00', 0x0, 0x0)
pipe(&(0x7f0000000680)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
timer_create(0x5, &(0x7f0000000800)={0x0, 0x16, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000840)=<r3=>0x0)
timer_delete(r3)
write(r2, &(0x7f0000000340), 0x10000014c)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000540)={0x0, <r4=>0x0})
pselect6(0x40, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r4+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8})
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000080)=0x2, 0x4)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000006c0)={{{@in6=@mcast1, @in=@broadcast}}, {{@in6=@ipv4={[], [], @broadcast}}, 0x0, @in=@multicast1}}, &(0x7f00000007c0)=0xe8)
getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000400)={{{@in=@multicast1, @in6=@remote}}, {{@in=@dev}}}, &(0x7f0000000500)=0xe8)
sendmmsg(0xffffffffffffffff, &(0x7f0000006240)=[{{0x0, 0x0, &(0x7f0000005e00), 0x0, &(0x7f0000006300)}}], 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="45964a5c4f0f00fe000030492a768b88b40eda954797623745e004"], 0x0, 0x0, 0xce, &(0x7f0000000300)=""/206}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000880)=ANY=[@ANYBLOB="180000000000000000001000028000006a0a00fffff8f61230a5d269a6804cb6276fd6ca006318"], 0x0, 0x0, 0xce, &(0x7f0000000180)=""/206}, 0x48)

09:19:43 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
msgget$private(0x0, 0x40)
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
sigaltstack(&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000000))
r0 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r0, 0x800000c0045005, &(0x7f0000000000)=0x1000)
ioctl$PIO_FONT(r0, 0x4b61, &(0x7f00000000c0)="68cdfcce268735b8748557")
process_vm_writev(0x0, &(0x7f0000000380)=[{&(0x7f0000000200)=""/74, 0x4a}, {&(0x7f0000000500)=""/164, 0xa4}], 0x2, &(0x7f0000001900)=[{&(0x7f0000001700)=""/126, 0x7e}, {&(0x7f0000001780)=""/180, 0xb4}, {&(0x7f0000001840)=""/148, 0x94}], 0x3, 0x0)
time(&(0x7f0000000180))
mmap(&(0x7f0000ffc000/0x3000)=nil, 0x200000, 0xfffffffffffffffd, 0x2012, r0, 0x0)
sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000040), 0xc, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="f5ea73dcffa88435aec4ff7a3b7afb9acaac516a1b44a21ce247ae492105cd546d0f041c46cd9fa734407ebd1de8dfe5cbdb2f0c6ac888cb3f6fa2baf07144f6a0c0c3d4bbf5435651dcb74eace5ca44e24d79c561aed3d6d5d20b488c3911f62fd5c5725b9cd6403e4df26c0df68ad925ee"], 0x1}}, 0x0)
mlockall(0xfffffffffffffffc)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0)
fanotify_init(0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer2\x00', 0x0, 0x0)
pipe(&(0x7f0000000680)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
timer_create(0x5, &(0x7f0000000800)={0x0, 0x16, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000840)=<r3=>0x0)
timer_delete(r3)
write(r2, &(0x7f0000000340), 0x10000014c)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000540)={0x0, <r4=>0x0})
pselect6(0x40, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r4+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8})
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000080)=0x2, 0x4)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000006c0)={{{@in6=@mcast1, @in=@broadcast}}, {{@in6=@ipv4={[], [], @broadcast}}, 0x0, @in=@multicast1}}, &(0x7f00000007c0)=0xe8)
getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000400)={{{@in=@multicast1, @in6=@remote}}, {{@in=@dev}}}, &(0x7f0000000500)=0xe8)
sendmmsg(0xffffffffffffffff, &(0x7f0000006240)=[{{0x0, 0x0, &(0x7f0000005e00), 0x0, &(0x7f0000006300)}}], 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="45964a5c4f0f00fe000030492a768b88b40eda954797623745e004"], 0x0, 0x0, 0xce, &(0x7f0000000300)=""/206}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000880)=ANY=[@ANYBLOB="180000000000000000001000028000006a0a00fffff8f61230a5d269a6804cb6276fd6ca006318"], 0x0, 0x0, 0xce, &(0x7f0000000180)=""/206}, 0x48)

09:19:43 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
msgget$private(0x0, 0x40)
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
sigaltstack(&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000000))
r0 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r0, 0x800000c0045005, &(0x7f0000000000)=0x1000)
ioctl$PIO_FONT(r0, 0x4b61, &(0x7f00000000c0)="68cdfcce268735b8748557")
process_vm_writev(0x0, &(0x7f0000000380)=[{&(0x7f0000000200)=""/74, 0x4a}, {&(0x7f0000000500)=""/164, 0xa4}], 0x2, &(0x7f0000001900)=[{&(0x7f0000001700)=""/126, 0x7e}, {&(0x7f0000001780)=""/180, 0xb4}, {&(0x7f0000001840)=""/148, 0x94}], 0x3, 0x0)
time(&(0x7f0000000180))
mmap(&(0x7f0000ffc000/0x3000)=nil, 0x200000, 0xfffffffffffffffd, 0x2012, r0, 0x0)
sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000040), 0xc, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="f5ea73dcffa88435aec4ff7a3b7afb9acaac516a1b44a21ce247ae492105cd546d0f041c46cd9fa734407ebd1de8dfe5cbdb2f0c6ac888cb3f6fa2baf07144f6a0c0c3d4bbf5435651dcb74eace5ca44e24d79c561aed3d6d5d20b488c3911f62fd5c5725b9cd6403e4df26c0df68ad925ee"], 0x1}}, 0x0)
mlockall(0xfffffffffffffffc)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0)
fanotify_init(0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer2\x00', 0x0, 0x0)
pipe(&(0x7f0000000680)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
timer_create(0x5, &(0x7f0000000800)={0x0, 0x16, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000840)=<r3=>0x0)
timer_delete(r3)
write(r2, &(0x7f0000000340), 0x10000014c)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000540)={0x0, <r4=>0x0})
pselect6(0x40, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r4+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8})
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000080)=0x2, 0x4)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000006c0)={{{@in6=@mcast1, @in=@broadcast}}, {{@in6=@ipv4={[], [], @broadcast}}, 0x0, @in=@multicast1}}, &(0x7f00000007c0)=0xe8)
getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000400)={{{@in=@multicast1, @in6=@remote}}, {{@in=@dev}}}, &(0x7f0000000500)=0xe8)
sendmmsg(0xffffffffffffffff, &(0x7f0000006240)=[{{0x0, 0x0, &(0x7f0000005e00), 0x0, &(0x7f0000006300)}}], 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="45964a5c4f0f00fe000030492a768b88b40eda954797623745e004"], 0x0, 0x0, 0xce, &(0x7f0000000300)=""/206}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000880)=ANY=[@ANYBLOB="180000000000000000001000028000006a0a00fffff8f61230a5d269a6804cb6276fd6ca006318"], 0x0, 0x0, 0xce, &(0x7f0000000180)=""/206}, 0x48)

09:19:43 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
msgget$private(0x0, 0x40)
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
sigaltstack(&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000000))
r0 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r0, 0x800000c0045005, &(0x7f0000000000)=0x1000)
ioctl$PIO_FONT(r0, 0x4b61, &(0x7f00000000c0)="68cdfcce268735b8748557")
process_vm_writev(0x0, &(0x7f0000000380)=[{&(0x7f0000000200)=""/74, 0x4a}, {&(0x7f0000000500)=""/164, 0xa4}], 0x2, &(0x7f0000001900)=[{&(0x7f0000001700)=""/126, 0x7e}, {&(0x7f0000001780)=""/180, 0xb4}, {&(0x7f0000001840)=""/148, 0x94}], 0x3, 0x0)
time(&(0x7f0000000180))
mmap(&(0x7f0000ffc000/0x3000)=nil, 0x200000, 0xfffffffffffffffd, 0x2012, r0, 0x0)
sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000040), 0xc, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="f5ea73dcffa88435aec4ff7a3b7afb9acaac516a1b44a21ce247ae492105cd546d0f041c46cd9fa734407ebd1de8dfe5cbdb2f0c6ac888cb3f6fa2baf07144f6a0c0c3d4bbf5435651dcb74eace5ca44e24d79c561aed3d6d5d20b488c3911f62fd5c5725b9cd6403e4df26c0df68ad925ee"], 0x1}}, 0x0)
mlockall(0xfffffffffffffffc)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0)
fanotify_init(0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer2\x00', 0x0, 0x0)
pipe(&(0x7f0000000680)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
timer_create(0x5, &(0x7f0000000800)={0x0, 0x16, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000840)=<r3=>0x0)
timer_delete(r3)
write(r2, &(0x7f0000000340), 0x10000014c)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000540)={0x0, <r4=>0x0})
pselect6(0x40, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r4+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8})
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000080)=0x2, 0x4)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000006c0)={{{@in6=@mcast1, @in=@broadcast}}, {{@in6=@ipv4={[], [], @broadcast}}, 0x0, @in=@multicast1}}, &(0x7f00000007c0)=0xe8)
getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000400)={{{@in=@multicast1, @in6=@remote}}, {{@in=@dev}}}, &(0x7f0000000500)=0xe8)
sendmmsg(0xffffffffffffffff, &(0x7f0000006240)=[{{0x0, 0x0, &(0x7f0000005e00), 0x0, &(0x7f0000006300)}}], 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="45964a5c4f0f00fe000030492a768b88b40eda954797623745e004"], 0x0, 0x0, 0xce, &(0x7f0000000300)=""/206}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000880)=ANY=[@ANYBLOB="180000000000000000001000028000006a0a00fffff8f61230a5d269a6804cb6276fd6ca006318"], 0x0, 0x0, 0xce, &(0x7f0000000180)=""/206}, 0x48)

09:19:43 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
msgget$private(0x0, 0x40)
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
sigaltstack(&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000000))
r0 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r0, 0x800000c0045005, &(0x7f0000000000)=0x1000)
ioctl$PIO_FONT(r0, 0x4b61, &(0x7f00000000c0)="68cdfcce268735b8748557")
process_vm_writev(0x0, &(0x7f0000000380)=[{&(0x7f0000000200)=""/74, 0x4a}, {&(0x7f0000000500)=""/164, 0xa4}], 0x2, &(0x7f0000001900)=[{&(0x7f0000001700)=""/126, 0x7e}, {&(0x7f0000001780)=""/180, 0xb4}, {&(0x7f0000001840)=""/148, 0x94}], 0x3, 0x0)
time(&(0x7f0000000180))
mmap(&(0x7f0000ffc000/0x3000)=nil, 0x200000, 0xfffffffffffffffd, 0x2012, r0, 0x0)
sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000040), 0xc, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="f5ea73dcffa88435aec4ff7a3b7afb9acaac516a1b44a21ce247ae492105cd546d0f041c46cd9fa734407ebd1de8dfe5cbdb2f0c6ac888cb3f6fa2baf07144f6a0c0c3d4bbf5435651dcb74eace5ca44e24d79c561aed3d6d5d20b488c3911f62fd5c5725b9cd6403e4df26c0df68ad925ee"], 0x1}}, 0x0)
mlockall(0xfffffffffffffffc)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0)
fanotify_init(0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer2\x00', 0x0, 0x0)
pipe(&(0x7f0000000680)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
timer_create(0x5, &(0x7f0000000800)={0x0, 0x16, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000840)=<r3=>0x0)
timer_delete(r3)
write(r2, &(0x7f0000000340), 0x10000014c)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000540)={0x0, <r4=>0x0})
pselect6(0x40, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r4+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8})
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000080)=0x2, 0x4)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000006c0)={{{@in6=@mcast1, @in=@broadcast}}, {{@in6=@ipv4={[], [], @broadcast}}, 0x0, @in=@multicast1}}, &(0x7f00000007c0)=0xe8)
getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000400)={{{@in=@multicast1, @in6=@remote}}, {{@in=@dev}}}, &(0x7f0000000500)=0xe8)
sendmmsg(0xffffffffffffffff, &(0x7f0000006240)=[{{0x0, 0x0, &(0x7f0000005e00), 0x0, &(0x7f0000006300)}}], 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="45964a5c4f0f00fe000030492a768b88b40eda954797623745e004"], 0x0, 0x0, 0xce, &(0x7f0000000300)=""/206}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000880)=ANY=[@ANYBLOB="180000000000000000001000028000006a0a00fffff8f61230a5d269a6804cb6276fd6ca006318"], 0x0, 0x0, 0xce, &(0x7f0000000180)=""/206}, 0x48)

09:19:44 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
msgget$private(0x0, 0x40)
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
sigaltstack(&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000000))
r0 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r0, 0x800000c0045005, &(0x7f0000000000)=0x1000)
ioctl$PIO_FONT(r0, 0x4b61, &(0x7f00000000c0)="68cdfcce268735b8748557")
process_vm_writev(0x0, &(0x7f0000000380)=[{&(0x7f0000000200)=""/74, 0x4a}, {&(0x7f0000000500)=""/164, 0xa4}], 0x2, &(0x7f0000001900)=[{&(0x7f0000001700)=""/126, 0x7e}, {&(0x7f0000001780)=""/180, 0xb4}, {&(0x7f0000001840)=""/148, 0x94}], 0x3, 0x0)
time(&(0x7f0000000180))
mmap(&(0x7f0000ffc000/0x3000)=nil, 0x200000, 0xfffffffffffffffd, 0x2012, r0, 0x0)
sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000040), 0xc, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="f5ea73dcffa88435aec4ff7a3b7afb9acaac516a1b44a21ce247ae492105cd546d0f041c46cd9fa734407ebd1de8dfe5cbdb2f0c6ac888cb3f6fa2baf07144f6a0c0c3d4bbf5435651dcb74eace5ca44e24d79c561aed3d6d5d20b488c3911f62fd5c5725b9cd6403e4df26c0df68ad925ee"], 0x1}}, 0x0)
mlockall(0xfffffffffffffffc)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0)
fanotify_init(0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer2\x00', 0x0, 0x0)
pipe(&(0x7f0000000680)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
timer_create(0x5, &(0x7f0000000800)={0x0, 0x16, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000840)=<r3=>0x0)
timer_delete(r3)
write(r2, &(0x7f0000000340), 0x10000014c)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000540)={0x0, <r4=>0x0})
pselect6(0x40, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r4+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8})
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000080)=0x2, 0x4)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000006c0)={{{@in6=@mcast1, @in=@broadcast}}, {{@in6=@ipv4={[], [], @broadcast}}, 0x0, @in=@multicast1}}, &(0x7f00000007c0)=0xe8)
getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000400)={{{@in=@multicast1, @in6=@remote}}, {{@in=@dev}}}, &(0x7f0000000500)=0xe8)
sendmmsg(0xffffffffffffffff, &(0x7f0000006240)=[{{0x0, 0x0, &(0x7f0000005e00), 0x0, &(0x7f0000006300)}}], 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="45964a5c4f0f00fe000030492a768b88b40eda954797623745e004"], 0x0, 0x0, 0xce, &(0x7f0000000300)=""/206}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000880)=ANY=[@ANYBLOB="180000000000000000001000028000006a0a00fffff8f61230a5d269a6804cb6276fd6ca006318"], 0x0, 0x0, 0xce, &(0x7f0000000180)=""/206}, 0x48)

09:19:44 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
msgget$private(0x0, 0x40)
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
sigaltstack(&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000000))
r0 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r0, 0x800000c0045005, &(0x7f0000000000)=0x1000)
ioctl$PIO_FONT(r0, 0x4b61, &(0x7f00000000c0)="68cdfcce268735b8748557")
process_vm_writev(0x0, &(0x7f0000000380)=[{&(0x7f0000000200)=""/74, 0x4a}, {&(0x7f0000000500)=""/164, 0xa4}], 0x2, &(0x7f0000001900)=[{&(0x7f0000001700)=""/126, 0x7e}, {&(0x7f0000001780)=""/180, 0xb4}, {&(0x7f0000001840)=""/148, 0x94}], 0x3, 0x0)
time(&(0x7f0000000180))
mmap(&(0x7f0000ffc000/0x3000)=nil, 0x200000, 0xfffffffffffffffd, 0x2012, r0, 0x0)
sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000040), 0xc, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="f5ea73dcffa88435aec4ff7a3b7afb9acaac516a1b44a21ce247ae492105cd546d0f041c46cd9fa734407ebd1de8dfe5cbdb2f0c6ac888cb3f6fa2baf07144f6a0c0c3d4bbf5435651dcb74eace5ca44e24d79c561aed3d6d5d20b488c3911f62fd5c5725b9cd6403e4df26c0df68ad925ee"], 0x1}}, 0x0)
mlockall(0xfffffffffffffffc)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0)
fanotify_init(0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer2\x00', 0x0, 0x0)
pipe(&(0x7f0000000680)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
timer_create(0x5, &(0x7f0000000800)={0x0, 0x16, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000840)=<r3=>0x0)
timer_delete(r3)
write(r2, &(0x7f0000000340), 0x10000014c)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000540)={0x0, <r4=>0x0})
pselect6(0x40, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r4+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8})
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000080)=0x2, 0x4)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000006c0)={{{@in6=@mcast1, @in=@broadcast}}, {{@in6=@ipv4={[], [], @broadcast}}, 0x0, @in=@multicast1}}, &(0x7f00000007c0)=0xe8)
getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000400)={{{@in=@multicast1, @in6=@remote}}, {{@in=@dev}}}, &(0x7f0000000500)=0xe8)
sendmmsg(0xffffffffffffffff, &(0x7f0000006240)=[{{0x0, 0x0, &(0x7f0000005e00), 0x0, &(0x7f0000006300)}}], 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="45964a5c4f0f00fe000030492a768b88b40eda954797623745e004"], 0x0, 0x0, 0xce, &(0x7f0000000300)=""/206}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000880)=ANY=[@ANYBLOB="180000000000000000001000028000006a0a00fffff8f61230a5d269a6804cb6276fd6ca006318"], 0x0, 0x0, 0xce, &(0x7f0000000180)=""/206}, 0x48)

09:19:44 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
msgget$private(0x0, 0x40)
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
sigaltstack(&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000000))
r0 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r0, 0x800000c0045005, &(0x7f0000000000)=0x1000)
ioctl$PIO_FONT(r0, 0x4b61, &(0x7f00000000c0)="68cdfcce268735b8748557")
process_vm_writev(0x0, &(0x7f0000000380)=[{&(0x7f0000000200)=""/74, 0x4a}, {&(0x7f0000000500)=""/164, 0xa4}], 0x2, &(0x7f0000001900)=[{&(0x7f0000001700)=""/126, 0x7e}, {&(0x7f0000001780)=""/180, 0xb4}, {&(0x7f0000001840)=""/148, 0x94}], 0x3, 0x0)
time(&(0x7f0000000180))
mmap(&(0x7f0000ffc000/0x3000)=nil, 0x200000, 0xfffffffffffffffd, 0x2012, r0, 0x0)
sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000040), 0xc, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="f5ea73dcffa88435aec4ff7a3b7afb9acaac516a1b44a21ce247ae492105cd546d0f041c46cd9fa734407ebd1de8dfe5cbdb2f0c6ac888cb3f6fa2baf07144f6a0c0c3d4bbf5435651dcb74eace5ca44e24d79c561aed3d6d5d20b488c3911f62fd5c5725b9cd6403e4df26c0df68ad925ee"], 0x1}}, 0x0)
mlockall(0xfffffffffffffffc)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0)
fanotify_init(0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer2\x00', 0x0, 0x0)
pipe(&(0x7f0000000680)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
timer_create(0x5, &(0x7f0000000800)={0x0, 0x16, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000840)=<r3=>0x0)
timer_delete(r3)
write(r2, &(0x7f0000000340), 0x10000014c)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000540)={0x0, <r4=>0x0})
pselect6(0x40, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r4+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8})
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000080)=0x2, 0x4)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000006c0)={{{@in6=@mcast1, @in=@broadcast}}, {{@in6=@ipv4={[], [], @broadcast}}, 0x0, @in=@multicast1}}, &(0x7f00000007c0)=0xe8)
getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000400)={{{@in=@multicast1, @in6=@remote}}, {{@in=@dev}}}, &(0x7f0000000500)=0xe8)
sendmmsg(0xffffffffffffffff, &(0x7f0000006240)=[{{0x0, 0x0, &(0x7f0000005e00), 0x0, &(0x7f0000006300)}}], 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="45964a5c4f0f00fe000030492a768b88b40eda954797623745e004"], 0x0, 0x0, 0xce, &(0x7f0000000300)=""/206}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000880)=ANY=[@ANYBLOB="180000000000000000001000028000006a0a00fffff8f61230a5d269a6804cb6276fd6ca006318"], 0x0, 0x0, 0xce, &(0x7f0000000180)=""/206}, 0x48)

[  336.708990][    C0] net_ratelimit: 18 callbacks suppressed
[  336.708998][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  336.720500][    C0] protocol 88fb is buggy, dev hsr_slave_1
09:19:45 executing program 1:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x20e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet(0x2, 0x6, 0x7fffffff)
r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/sequencer2\x00', 0x141080, 0x0)
ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000480)={&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1})
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_ifreq(r3, 0x8991, &(0x7f00000005c0)={'bond0\x00\x00\x00\x00\x00\x00\x00!\x00', @ifru_names='bond_slave_1\x00'})
ioctl$VIDIOC_ENCODER_CMD(r2, 0xc028564d, &(0x7f0000000680)={0x1, 0x1, [0xfff, 0x101, 0x3ff, 0x40, 0x0, 0xfffffffffffffffb, 0x8, 0x4f]})
ioctl$SNDRV_TIMER_IOCTL_PVERSION(r2, 0x80045400, &(0x7f00000004c0))
r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000240)='/dev/full\x00', 0x20a800, 0x0)
ioctl$KDSKBSENT(r4, 0x4b49, &(0x7f0000000740)="e2da5cdea423495c8b5663b2d9e462f4e65c25cc8b2ba5e1349cd9ae758d94c045f53f48860fd0b3d8013a69034f6ac0d6e1e98dfe38d2d9e2e2c54d473c67bfa22bbf07fadb6002cda4dd466bf8b4ac1fd7837039b702b9d0fa204a8e5df87c3de67d40844e3ddd3c120aee61b90f3b98210922d8d4271c6df39457ffa88a8a1c33837414408c58e56e3fc11ec40ec466928864d45fe30bbdca4189941c975bc6fe8fb0e6bf8e2a58131d1b5d088066c68b8a6ee0c4e1fea78983de57627ebf6f449a310f966c64391d936f99802fb9320ae1cc")
r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000016c0)='/dev/sequencer2\x00', 0x40042, 0x0)
sendto$inet(r1, &(0x7f0000000a00)="8dec431bb44aff53a310b4eabef65b9ca28574570c8753d962784ce7563c1f448215fd237bf4c9159a98e9205a38a1fef116825d2a67dccc355557378e26b4e71c9ead8245ce8f8727e4d5e348d6b048462955248e97e362bb149adcd5ad849873b82111c2ecfa383140f9d4c99f525041a886277a6592dbc6b9108911e88a440b93f5c0fae544676b44a19bf06aa255a549db9cb0a9221a90f33fec43b1d074bf", 0xa1, 0x1, 0x0, 0x0)
r6 = syz_genetlink_get_family_id$fou(&(0x7f0000000580)='fou\x00')
sendmsg$FOU_CMD_DEL(r5, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000600)={&(0x7f00000006c0)=ANY=[@ANYBLOB="c3d1c79f", @ANYRES16=r6, @ANYRESHEX=r1], 0x3}, 0x1, 0x0, 0x0, 0x20044000}, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000b00)='IPVS\x00')
sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f0000000700)=ANY=[@ANYBLOB="520f020000000000000020fb00000000000000"], 0x1}, 0x1, 0x0, 0x0, 0x8050}, 0x40)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25d1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
keyctl$session_to_parent(0x12)
ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x200)
r7 = dup2(r0, r5)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0xc81, 0x0)
r8 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_open_dev$midi(&(0x7f00000002c0)='/dev/midi#\x00', 0x3, 0x40100)
getsockopt$inet_pktinfo(r8, 0x0, 0x8, &(0x7f0000000300)={0x0, @remote, @loopback}, &(0x7f0000000340)=0xc)
sendmsg$nl_route(r7, &(0x7f0000000400)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000380)={&(0x7f0000000c80)=ANY=[]}}, 0x4008000)
ioctl$sock_proto_private(r8, 0x80089ec, &(0x7f0000000140)="039625617620978a4df541244054545eefb285b44d2198c37642636f3bd6084339c6e79154e7a4e1e8a3a316d5a4d756fa828508c3eaae4df2759d4d16de576413772f248c74aae160e44749d604a7af5290efc74ba837ec71ff4bfb5f9a2d51403ecc6b5a4bb2dab710e3367549b45cd0b3fed1c251372400872f340ee3b348964d022f3224519d06adad720a5650c9b04292955ae6fd364adebee641bc911bcdd907f409e8200d95b946789c69b1d8876c")
r9 = syz_open_dev$usb(&(0x7f0000000200)='/dev/bus/usb/00#/00#\x00', 0xff, 0x80000)
syz_open_dev$sndtimer(&(0x7f0000000500)='/dev/snd/timer\x00', 0x0, 0x4080)
ioctl$VT_GETMODE(r9, 0x5601, &(0x7f0000000240))
setsockopt$inet_group_source_req(r8, 0x0, 0x2e, &(0x7f0000000000)={0x1, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @multicast1}}}, 0xfffffffffffffc1a)

09:19:45 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
msgget$private(0x0, 0x40)
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
sigaltstack(&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000000))
r0 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r0, 0x800000c0045005, &(0x7f0000000000)=0x1000)
ioctl$PIO_FONT(r0, 0x4b61, &(0x7f00000000c0)="68cdfcce268735b8748557")
process_vm_writev(0x0, &(0x7f0000000380)=[{&(0x7f0000000200)=""/74, 0x4a}, {&(0x7f0000000500)=""/164, 0xa4}], 0x2, &(0x7f0000001900)=[{&(0x7f0000001700)=""/126, 0x7e}, {&(0x7f0000001780)=""/180, 0xb4}, {&(0x7f0000001840)=""/148, 0x94}], 0x3, 0x0)
time(&(0x7f0000000180))
mmap(&(0x7f0000ffc000/0x3000)=nil, 0x200000, 0xfffffffffffffffd, 0x2012, r0, 0x0)
sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000040), 0xc, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="f5ea73dcffa88435aec4ff7a3b7afb9acaac516a1b44a21ce247ae492105cd546d0f041c46cd9fa734407ebd1de8dfe5cbdb2f0c6ac888cb3f6fa2baf07144f6a0c0c3d4bbf5435651dcb74eace5ca44e24d79c561aed3d6d5d20b488c3911f62fd5c5725b9cd6403e4df26c0df68ad925ee"], 0x1}}, 0x0)
mlockall(0xfffffffffffffffc)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0)
fanotify_init(0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer2\x00', 0x0, 0x0)
pipe(&(0x7f0000000680)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
timer_create(0x5, &(0x7f0000000800)={0x0, 0x16, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000840)=<r3=>0x0)
timer_delete(r3)
write(r2, &(0x7f0000000340), 0x10000014c)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000540)={0x0, <r4=>0x0})
pselect6(0x40, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r4+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8})
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000080)=0x2, 0x4)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000006c0)={{{@in6=@mcast1, @in=@broadcast}}, {{@in6=@ipv4={[], [], @broadcast}}, 0x0, @in=@multicast1}}, &(0x7f00000007c0)=0xe8)
getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000400)={{{@in=@multicast1, @in6=@remote}}, {{@in=@dev}}}, &(0x7f0000000500)=0xe8)
sendmmsg(0xffffffffffffffff, &(0x7f0000006240)=[{{0x0, 0x0, &(0x7f0000005e00), 0x0, &(0x7f0000006300)}}], 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="45964a5c4f0f00fe000030492a768b88b40eda954797623745e004"], 0x0, 0x0, 0xce, &(0x7f0000000300)=""/206}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000880)=ANY=[@ANYBLOB="180000000000000000001000028000006a0a00fffff8f61230a5d269a6804cb6276fd6ca006318"], 0x0, 0x0, 0xce, &(0x7f0000000180)=""/206}, 0x48)

09:19:45 executing program 4:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x20e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet(0x2, 0x6, 0x7fffffff)
r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/sequencer2\x00', 0x141080, 0x0)
ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000480)={&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1})
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_ifreq(r3, 0x8991, &(0x7f00000005c0)={'bond0\x00\x00\x00\x00\x00\x00\x00!\x00', @ifru_names='bond_slave_1\x00'})
ioctl$VIDIOC_ENCODER_CMD(r2, 0xc028564d, &(0x7f0000000680)={0x1, 0x1, [0xfff, 0x101, 0x3ff, 0x40, 0x0, 0xfffffffffffffffb, 0x8, 0x4f]})
ioctl$SNDRV_TIMER_IOCTL_PVERSION(r2, 0x80045400, &(0x7f00000004c0))
r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000240)='/dev/full\x00', 0x20a800, 0x0)
ioctl$KDSKBSENT(r4, 0x4b49, &(0x7f0000000740)="e2da5cdea423495c8b5663b2d9e462f4e65c25cc8b2ba5e1349cd9ae758d94c045f53f48860fd0b3d8013a69034f6ac0d6e1e98dfe38d2d9e2e2c54d473c67bfa22bbf07fadb6002cda4dd466bf8b4ac1fd7837039b702b9d0fa204a8e5df87c3de67d40844e3ddd3c120aee61b90f3b98210922d8d4271c6df39457ffa88a8a1c33837414408c58e56e3fc11ec40ec466928864d45fe30bbdca4189941c975bc6fe8fb0e6bf8e2a58131d1b5d088066c68b8a6ee0c4e1fea78983de57627ebf6f449a310f966c64391d936f99802fb9320ae1cc")
r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000016c0)='/dev/sequencer2\x00', 0x40042, 0x0)
sendto$inet(r1, &(0x7f0000000a00)="8dec431bb44aff53a310b4eabef65b9ca28574570c8753d962784ce7563c1f448215fd237bf4c9159a98e9205a38a1fef116825d2a67dccc355557378e26b4e71c9ead8245ce8f8727e4d5e348d6b048462955248e97e362bb149adcd5ad849873b82111c2ecfa383140f9d4c99f525041a886277a6592dbc6b9108911e88a440b93f5c0fae544676b44a19bf06aa255a549db9cb0a9221a90f33fec43b1d074bf", 0xa1, 0x1, 0x0, 0x0)
r6 = syz_genetlink_get_family_id$fou(&(0x7f0000000580)='fou\x00')
sendmsg$FOU_CMD_DEL(r5, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000600)={&(0x7f00000006c0)=ANY=[@ANYBLOB="c3d1c79f", @ANYRES16=r6, @ANYRESHEX=r1], 0x3}, 0x1, 0x0, 0x0, 0x20044000}, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000b00)='IPVS\x00')
sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f0000000700)=ANY=[@ANYBLOB="520f020000000000000020fb00000000000000"], 0x1}, 0x1, 0x0, 0x0, 0x8050}, 0x40)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25d1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
keyctl$session_to_parent(0x12)
ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x200)
r7 = dup2(r0, r5)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0xc81, 0x0)
r8 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_open_dev$midi(&(0x7f00000002c0)='/dev/midi#\x00', 0x3, 0x40100)
getsockopt$inet_pktinfo(r8, 0x0, 0x8, &(0x7f0000000300)={0x0, @remote, @loopback}, &(0x7f0000000340)=0xc)
sendmsg$nl_route(r7, &(0x7f0000000400)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000380)={&(0x7f0000000c80)=ANY=[]}}, 0x4008000)
ioctl$sock_proto_private(r8, 0x80089ec, &(0x7f0000000140)="039625617620978a4df541244054545eefb285b44d2198c37642636f3bd6084339c6e79154e7a4e1e8a3a316d5a4d756fa828508c3eaae4df2759d4d16de576413772f248c74aae160e44749d604a7af5290efc74ba837ec71ff4bfb5f9a2d51403ecc6b5a4bb2dab710e3367549b45cd0b3fed1c251372400872f340ee3b348964d022f3224519d06adad720a5650c9b04292955ae6fd364adebee641bc911bcdd907f409e8200d95b946789c69b1d8876c")
r9 = syz_open_dev$usb(&(0x7f0000000200)='/dev/bus/usb/00#/00#\x00', 0xff, 0x80000)
syz_open_dev$sndtimer(&(0x7f0000000500)='/dev/snd/timer\x00', 0x0, 0x4080)
ioctl$VT_GETMODE(r9, 0x5601, &(0x7f0000000240))
setsockopt$inet_group_source_req(r8, 0x0, 0x2e, &(0x7f0000000000)={0x1, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @multicast1}}}, 0xfffffffffffffc1a)

[  336.974707][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  336.980529][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  337.055940][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  337.062825][    C1] protocol 88fb is buggy, dev hsr_slave_1
09:19:45 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
msgget$private(0x0, 0x40)
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
sigaltstack(&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000000))
r0 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r0, 0x800000c0045005, &(0x7f0000000000)=0x1000)
ioctl$PIO_FONT(r0, 0x4b61, &(0x7f00000000c0)="68cdfcce268735b8748557")
process_vm_writev(0x0, &(0x7f0000000380)=[{&(0x7f0000000200)=""/74, 0x4a}, {&(0x7f0000000500)=""/164, 0xa4}], 0x2, &(0x7f0000001900)=[{&(0x7f0000001700)=""/126, 0x7e}, {&(0x7f0000001780)=""/180, 0xb4}, {&(0x7f0000001840)=""/148, 0x94}], 0x3, 0x0)
time(&(0x7f0000000180))
mmap(&(0x7f0000ffc000/0x3000)=nil, 0x200000, 0xfffffffffffffffd, 0x2012, r0, 0x0)
sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000040), 0xc, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="f5ea73dcffa88435aec4ff7a3b7afb9acaac516a1b44a21ce247ae492105cd546d0f041c46cd9fa734407ebd1de8dfe5cbdb2f0c6ac888cb3f6fa2baf07144f6a0c0c3d4bbf5435651dcb74eace5ca44e24d79c561aed3d6d5d20b488c3911f62fd5c5725b9cd6403e4df26c0df68ad925ee"], 0x1}}, 0x0)
mlockall(0xfffffffffffffffc)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0)
fanotify_init(0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer2\x00', 0x0, 0x0)
pipe(&(0x7f0000000680)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
timer_create(0x5, &(0x7f0000000800)={0x0, 0x16, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000840)=<r3=>0x0)
timer_delete(r3)
write(r2, &(0x7f0000000340), 0x10000014c)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000540)={0x0, <r4=>0x0})
pselect6(0x40, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r4+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8})
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000080)=0x2, 0x4)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000006c0)={{{@in6=@mcast1, @in=@broadcast}}, {{@in6=@ipv4={[], [], @broadcast}}, 0x0, @in=@multicast1}}, &(0x7f00000007c0)=0xe8)
getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000400)={{{@in=@multicast1, @in6=@remote}}, {{@in=@dev}}}, &(0x7f0000000500)=0xe8)
sendmmsg(0xffffffffffffffff, &(0x7f0000006240)=[{{0x0, 0x0, &(0x7f0000005e00), 0x0, &(0x7f0000006300)}}], 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="45964a5c4f0f00fe000030492a768b88b40eda954797623745e004"], 0x0, 0x0, 0xce, &(0x7f0000000300)=""/206}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000880)=ANY=[@ANYBLOB="180000000000000000001000028000006a0a00fffff8f61230a5d269a6804cb6276fd6ca006318"], 0x0, 0x0, 0xce, &(0x7f0000000180)=""/206}, 0x48)

09:19:45 executing program 1:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x20e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet(0x2, 0x6, 0x7fffffff)
r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/sequencer2\x00', 0x141080, 0x0)
ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000480)={&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1})
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_ifreq(r3, 0x8991, &(0x7f00000005c0)={'bond0\x00\x00\x00\x00\x00\x00\x00!\x00', @ifru_names='bond_slave_1\x00'})
ioctl$VIDIOC_ENCODER_CMD(r2, 0xc028564d, &(0x7f0000000680)={0x1, 0x1, [0xfff, 0x101, 0x3ff, 0x40, 0x0, 0xfffffffffffffffb, 0x8, 0x4f]})
ioctl$SNDRV_TIMER_IOCTL_PVERSION(r2, 0x80045400, &(0x7f00000004c0))
r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000240)='/dev/full\x00', 0x20a800, 0x0)
ioctl$KDSKBSENT(r4, 0x4b49, &(0x7f0000000740)="e2da5cdea423495c8b5663b2d9e462f4e65c25cc8b2ba5e1349cd9ae758d94c045f53f48860fd0b3d8013a69034f6ac0d6e1e98dfe38d2d9e2e2c54d473c67bfa22bbf07fadb6002cda4dd466bf8b4ac1fd7837039b702b9d0fa204a8e5df87c3de67d40844e3ddd3c120aee61b90f3b98210922d8d4271c6df39457ffa88a8a1c33837414408c58e56e3fc11ec40ec466928864d45fe30bbdca4189941c975bc6fe8fb0e6bf8e2a58131d1b5d088066c68b8a6ee0c4e1fea78983de57627ebf6f449a310f966c64391d936f99802fb9320ae1cc")
r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000016c0)='/dev/sequencer2\x00', 0x40042, 0x0)
sendto$inet(r1, &(0x7f0000000a00)="8dec431bb44aff53a310b4eabef65b9ca28574570c8753d962784ce7563c1f448215fd237bf4c9159a98e9205a38a1fef116825d2a67dccc355557378e26b4e71c9ead8245ce8f8727e4d5e348d6b048462955248e97e362bb149adcd5ad849873b82111c2ecfa383140f9d4c99f525041a886277a6592dbc6b9108911e88a440b93f5c0fae544676b44a19bf06aa255a549db9cb0a9221a90f33fec43b1d074bf", 0xa1, 0x1, 0x0, 0x0)
r6 = syz_genetlink_get_family_id$fou(&(0x7f0000000580)='fou\x00')
sendmsg$FOU_CMD_DEL(r5, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000600)={&(0x7f00000006c0)=ANY=[@ANYBLOB="c3d1c79f", @ANYRES16=r6, @ANYRESHEX=r1], 0x3}, 0x1, 0x0, 0x0, 0x20044000}, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000b00)='IPVS\x00')
sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f0000000700)=ANY=[@ANYBLOB="520f020000000000000020fb00000000000000"], 0x1}, 0x1, 0x0, 0x0, 0x8050}, 0x40)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25d1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
keyctl$session_to_parent(0x12)
ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x200)
r7 = dup2(r0, r5)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0xc81, 0x0)
r8 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_open_dev$midi(&(0x7f00000002c0)='/dev/midi#\x00', 0x3, 0x40100)
getsockopt$inet_pktinfo(r8, 0x0, 0x8, &(0x7f0000000300)={0x0, @remote, @loopback}, &(0x7f0000000340)=0xc)
sendmsg$nl_route(r7, &(0x7f0000000400)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000380)={&(0x7f0000000c80)=ANY=[]}}, 0x4008000)
ioctl$sock_proto_private(r8, 0x80089ec, &(0x7f0000000140)="039625617620978a4df541244054545eefb285b44d2198c37642636f3bd6084339c6e79154e7a4e1e8a3a316d5a4d756fa828508c3eaae4df2759d4d16de576413772f248c74aae160e44749d604a7af5290efc74ba837ec71ff4bfb5f9a2d51403ecc6b5a4bb2dab710e3367549b45cd0b3fed1c251372400872f340ee3b348964d022f3224519d06adad720a5650c9b04292955ae6fd364adebee641bc911bcdd907f409e8200d95b946789c69b1d8876c")
r9 = syz_open_dev$usb(&(0x7f0000000200)='/dev/bus/usb/00#/00#\x00', 0xff, 0x80000)
syz_open_dev$sndtimer(&(0x7f0000000500)='/dev/snd/timer\x00', 0x0, 0x4080)
ioctl$VT_GETMODE(r9, 0x5601, &(0x7f0000000240))
setsockopt$inet_group_source_req(r8, 0x0, 0x2e, &(0x7f0000000000)={0x1, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @multicast1}}}, 0xfffffffffffffc1a)

[  337.385802][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  337.391995][    C0] protocol 88fb is buggy, dev hsr_slave_1
09:19:46 executing program 4:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x20e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet(0x2, 0x6, 0x7fffffff)
r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/sequencer2\x00', 0x141080, 0x0)
ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000480)={&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1})
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_ifreq(r3, 0x8991, &(0x7f00000005c0)={'bond0\x00\x00\x00\x00\x00\x00\x00!\x00', @ifru_names='bond_slave_1\x00'})
ioctl$VIDIOC_ENCODER_CMD(r2, 0xc028564d, &(0x7f0000000680)={0x1, 0x1, [0xfff, 0x101, 0x3ff, 0x40, 0x0, 0xfffffffffffffffb, 0x8, 0x4f]})
ioctl$SNDRV_TIMER_IOCTL_PVERSION(r2, 0x80045400, &(0x7f00000004c0))
r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000240)='/dev/full\x00', 0x20a800, 0x0)
ioctl$KDSKBSENT(r4, 0x4b49, &(0x7f0000000740)="e2da5cdea423495c8b5663b2d9e462f4e65c25cc8b2ba5e1349cd9ae758d94c045f53f48860fd0b3d8013a69034f6ac0d6e1e98dfe38d2d9e2e2c54d473c67bfa22bbf07fadb6002cda4dd466bf8b4ac1fd7837039b702b9d0fa204a8e5df87c3de67d40844e3ddd3c120aee61b90f3b98210922d8d4271c6df39457ffa88a8a1c33837414408c58e56e3fc11ec40ec466928864d45fe30bbdca4189941c975bc6fe8fb0e6bf8e2a58131d1b5d088066c68b8a6ee0c4e1fea78983de57627ebf6f449a310f966c64391d936f99802fb9320ae1cc")
r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000016c0)='/dev/sequencer2\x00', 0x40042, 0x0)
sendto$inet(r1, &(0x7f0000000a00)="8dec431bb44aff53a310b4eabef65b9ca28574570c8753d962784ce7563c1f448215fd237bf4c9159a98e9205a38a1fef116825d2a67dccc355557378e26b4e71c9ead8245ce8f8727e4d5e348d6b048462955248e97e362bb149adcd5ad849873b82111c2ecfa383140f9d4c99f525041a886277a6592dbc6b9108911e88a440b93f5c0fae544676b44a19bf06aa255a549db9cb0a9221a90f33fec43b1d074bf", 0xa1, 0x1, 0x0, 0x0)
r6 = syz_genetlink_get_family_id$fou(&(0x7f0000000580)='fou\x00')
sendmsg$FOU_CMD_DEL(r5, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000600)={&(0x7f00000006c0)=ANY=[@ANYBLOB="c3d1c79f", @ANYRES16=r6, @ANYRESHEX=r1], 0x3}, 0x1, 0x0, 0x0, 0x20044000}, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000b00)='IPVS\x00')
sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f0000000700)=ANY=[@ANYBLOB="520f020000000000000020fb00000000000000"], 0x1}, 0x1, 0x0, 0x0, 0x8050}, 0x40)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25d1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
keyctl$session_to_parent(0x12)
ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x200)
r7 = dup2(r0, r5)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0xc81, 0x0)
r8 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_open_dev$midi(&(0x7f00000002c0)='/dev/midi#\x00', 0x3, 0x40100)
getsockopt$inet_pktinfo(r8, 0x0, 0x8, &(0x7f0000000300)={0x0, @remote, @loopback}, &(0x7f0000000340)=0xc)
sendmsg$nl_route(r7, &(0x7f0000000400)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000380)={&(0x7f0000000c80)=ANY=[]}}, 0x4008000)
ioctl$sock_proto_private(r8, 0x80089ec, &(0x7f0000000140)="039625617620978a4df541244054545eefb285b44d2198c37642636f3bd6084339c6e79154e7a4e1e8a3a316d5a4d756fa828508c3eaae4df2759d4d16de576413772f248c74aae160e44749d604a7af5290efc74ba837ec71ff4bfb5f9a2d51403ecc6b5a4bb2dab710e3367549b45cd0b3fed1c251372400872f340ee3b348964d022f3224519d06adad720a5650c9b04292955ae6fd364adebee641bc911bcdd907f409e8200d95b946789c69b1d8876c")
r9 = syz_open_dev$usb(&(0x7f0000000200)='/dev/bus/usb/00#/00#\x00', 0xff, 0x80000)
syz_open_dev$sndtimer(&(0x7f0000000500)='/dev/snd/timer\x00', 0x0, 0x4080)
ioctl$VT_GETMODE(r9, 0x5601, &(0x7f0000000240))
setsockopt$inet_group_source_req(r8, 0x0, 0x2e, &(0x7f0000000000)={0x1, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @multicast1}}}, 0xfffffffffffffc1a)

[  337.935131][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  337.941668][    C1] protocol 88fb is buggy, dev hsr_slave_1
09:19:46 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
msgget$private(0x0, 0x40)
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
sigaltstack(&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000000))
r0 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r0, 0x800000c0045005, &(0x7f0000000000)=0x1000)
ioctl$PIO_FONT(r0, 0x4b61, &(0x7f00000000c0)="68cdfcce268735b8748557")
process_vm_writev(0x0, &(0x7f0000000380)=[{&(0x7f0000000200)=""/74, 0x4a}, {&(0x7f0000000500)=""/164, 0xa4}], 0x2, &(0x7f0000001900)=[{&(0x7f0000001700)=""/126, 0x7e}, {&(0x7f0000001780)=""/180, 0xb4}, {&(0x7f0000001840)=""/148, 0x94}], 0x3, 0x0)
time(&(0x7f0000000180))
mmap(&(0x7f0000ffc000/0x3000)=nil, 0x200000, 0xfffffffffffffffd, 0x2012, r0, 0x0)
sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000040), 0xc, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="f5ea73dcffa88435aec4ff7a3b7afb9acaac516a1b44a21ce247ae492105cd546d0f041c46cd9fa734407ebd1de8dfe5cbdb2f0c6ac888cb3f6fa2baf07144f6a0c0c3d4bbf5435651dcb74eace5ca44e24d79c561aed3d6d5d20b488c3911f62fd5c5725b9cd6403e4df26c0df68ad925ee"], 0x1}}, 0x0)
mlockall(0xfffffffffffffffc)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0)
fanotify_init(0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer2\x00', 0x0, 0x0)
pipe(&(0x7f0000000680)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
timer_create(0x5, &(0x7f0000000800)={0x0, 0x16, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000840)=<r3=>0x0)
timer_delete(r3)
write(r2, &(0x7f0000000340), 0x10000014c)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000540)={0x0, <r4=>0x0})
pselect6(0x40, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r4+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8})
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000080)=0x2, 0x4)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000006c0)={{{@in6=@mcast1, @in=@broadcast}}, {{@in6=@ipv4={[], [], @broadcast}}, 0x0, @in=@multicast1}}, &(0x7f00000007c0)=0xe8)
getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000400)={{{@in=@multicast1, @in6=@remote}}, {{@in=@dev}}}, &(0x7f0000000500)=0xe8)
sendmmsg(0xffffffffffffffff, &(0x7f0000006240)=[{{0x0, 0x0, &(0x7f0000005e00), 0x0, &(0x7f0000006300)}}], 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="45964a5c4f0f00fe000030492a768b88b40eda954797623745e004"], 0x0, 0x0, 0xce, &(0x7f0000000300)=""/206}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000880)=ANY=[@ANYBLOB="180000000000000000001000028000006a0a00fffff8f61230a5d269a6804cb6276fd6ca006318"], 0x0, 0x0, 0xce, &(0x7f0000000180)=""/206}, 0x48)

09:19:46 executing program 0:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x20e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet(0x2, 0x6, 0x7fffffff)
r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/sequencer2\x00', 0x141080, 0x0)
ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000480)={&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1})
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_ifreq(r3, 0x8991, &(0x7f00000005c0)={'bond0\x00\x00\x00\x00\x00\x00\x00!\x00', @ifru_names='bond_slave_1\x00'})
ioctl$VIDIOC_ENCODER_CMD(r2, 0xc028564d, &(0x7f0000000680)={0x1, 0x1, [0xfff, 0x101, 0x3ff, 0x40, 0x0, 0xfffffffffffffffb, 0x8, 0x4f]})
ioctl$SNDRV_TIMER_IOCTL_PVERSION(r2, 0x80045400, &(0x7f00000004c0))
r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000240)='/dev/full\x00', 0x20a800, 0x0)
ioctl$KDSKBSENT(r4, 0x4b49, &(0x7f0000000740)="e2da5cdea423495c8b5663b2d9e462f4e65c25cc8b2ba5e1349cd9ae758d94c045f53f48860fd0b3d8013a69034f6ac0d6e1e98dfe38d2d9e2e2c54d473c67bfa22bbf07fadb6002cda4dd466bf8b4ac1fd7837039b702b9d0fa204a8e5df87c3de67d40844e3ddd3c120aee61b90f3b98210922d8d4271c6df39457ffa88a8a1c33837414408c58e56e3fc11ec40ec466928864d45fe30bbdca4189941c975bc6fe8fb0e6bf8e2a58131d1b5d088066c68b8a6ee0c4e1fea78983de57627ebf6f449a310f966c64391d936f99802fb9320ae1cc")
r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000016c0)='/dev/sequencer2\x00', 0x40042, 0x0)
sendto$inet(r1, &(0x7f0000000a00)="8dec431bb44aff53a310b4eabef65b9ca28574570c8753d962784ce7563c1f448215fd237bf4c9159a98e9205a38a1fef116825d2a67dccc355557378e26b4e71c9ead8245ce8f8727e4d5e348d6b048462955248e97e362bb149adcd5ad849873b82111c2ecfa383140f9d4c99f525041a886277a6592dbc6b9108911e88a440b93f5c0fae544676b44a19bf06aa255a549db9cb0a9221a90f33fec43b1d074bf", 0xa1, 0x1, 0x0, 0x0)
r6 = syz_genetlink_get_family_id$fou(&(0x7f0000000580)='fou\x00')
sendmsg$FOU_CMD_DEL(r5, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000600)={&(0x7f00000006c0)=ANY=[@ANYBLOB="c3d1c79f", @ANYRES16=r6, @ANYRESHEX=r1], 0x3}, 0x1, 0x0, 0x0, 0x20044000}, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000b00)='IPVS\x00')
sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f0000000700)=ANY=[@ANYBLOB="520f020000000000000020fb00000000000000"], 0x1}, 0x1, 0x0, 0x0, 0x8050}, 0x40)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25d1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
keyctl$session_to_parent(0x12)
ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x200)
r7 = dup2(r0, r5)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0xc81, 0x0)
r8 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_open_dev$midi(&(0x7f00000002c0)='/dev/midi#\x00', 0x3, 0x40100)
getsockopt$inet_pktinfo(r8, 0x0, 0x8, &(0x7f0000000300)={0x0, @remote, @loopback}, &(0x7f0000000340)=0xc)
sendmsg$nl_route(r7, &(0x7f0000000400)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000380)={&(0x7f0000000c80)=ANY=[]}}, 0x4008000)
ioctl$sock_proto_private(r8, 0x80089ec, &(0x7f0000000140)="039625617620978a4df541244054545eefb285b44d2198c37642636f3bd6084339c6e79154e7a4e1e8a3a316d5a4d756fa828508c3eaae4df2759d4d16de576413772f248c74aae160e44749d604a7af5290efc74ba837ec71ff4bfb5f9a2d51403ecc6b5a4bb2dab710e3367549b45cd0b3fed1c251372400872f340ee3b348964d022f3224519d06adad720a5650c9b04292955ae6fd364adebee641bc911bcdd907f409e8200d95b946789c69b1d8876c")
r9 = syz_open_dev$usb(&(0x7f0000000200)='/dev/bus/usb/00#/00#\x00', 0xff, 0x80000)
syz_open_dev$sndtimer(&(0x7f0000000500)='/dev/snd/timer\x00', 0x0, 0x4080)
ioctl$VT_GETMODE(r9, 0x5601, &(0x7f0000000240))
setsockopt$inet_group_source_req(r8, 0x0, 0x2e, &(0x7f0000000000)={0x1, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @multicast1}}}, 0xfffffffffffffc1a)

09:19:46 executing program 1:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x20e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet(0x2, 0x6, 0x7fffffff)
r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/sequencer2\x00', 0x141080, 0x0)
ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000480)={&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1})
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_ifreq(r3, 0x8991, &(0x7f00000005c0)={'bond0\x00\x00\x00\x00\x00\x00\x00!\x00', @ifru_names='bond_slave_1\x00'})
ioctl$VIDIOC_ENCODER_CMD(r2, 0xc028564d, &(0x7f0000000680)={0x1, 0x1, [0xfff, 0x101, 0x3ff, 0x40, 0x0, 0xfffffffffffffffb, 0x8, 0x4f]})
ioctl$SNDRV_TIMER_IOCTL_PVERSION(r2, 0x80045400, &(0x7f00000004c0))
r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000240)='/dev/full\x00', 0x20a800, 0x0)
ioctl$KDSKBSENT(r4, 0x4b49, &(0x7f0000000740)="e2da5cdea423495c8b5663b2d9e462f4e65c25cc8b2ba5e1349cd9ae758d94c045f53f48860fd0b3d8013a69034f6ac0d6e1e98dfe38d2d9e2e2c54d473c67bfa22bbf07fadb6002cda4dd466bf8b4ac1fd7837039b702b9d0fa204a8e5df87c3de67d40844e3ddd3c120aee61b90f3b98210922d8d4271c6df39457ffa88a8a1c33837414408c58e56e3fc11ec40ec466928864d45fe30bbdca4189941c975bc6fe8fb0e6bf8e2a58131d1b5d088066c68b8a6ee0c4e1fea78983de57627ebf6f449a310f966c64391d936f99802fb9320ae1cc")
r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000016c0)='/dev/sequencer2\x00', 0x40042, 0x0)
sendto$inet(r1, &(0x7f0000000a00)="8dec431bb44aff53a310b4eabef65b9ca28574570c8753d962784ce7563c1f448215fd237bf4c9159a98e9205a38a1fef116825d2a67dccc355557378e26b4e71c9ead8245ce8f8727e4d5e348d6b048462955248e97e362bb149adcd5ad849873b82111c2ecfa383140f9d4c99f525041a886277a6592dbc6b9108911e88a440b93f5c0fae544676b44a19bf06aa255a549db9cb0a9221a90f33fec43b1d074bf", 0xa1, 0x1, 0x0, 0x0)
r6 = syz_genetlink_get_family_id$fou(&(0x7f0000000580)='fou\x00')
sendmsg$FOU_CMD_DEL(r5, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000600)={&(0x7f00000006c0)=ANY=[@ANYBLOB="c3d1c79f", @ANYRES16=r6, @ANYRESHEX=r1], 0x3}, 0x1, 0x0, 0x0, 0x20044000}, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000b00)='IPVS\x00')
sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f0000000700)=ANY=[@ANYBLOB="520f020000000000000020fb00000000000000"], 0x1}, 0x1, 0x0, 0x0, 0x8050}, 0x40)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25d1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
keyctl$session_to_parent(0x12)
ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x200)
r7 = dup2(r0, r5)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0xc81, 0x0)
r8 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_open_dev$midi(&(0x7f00000002c0)='/dev/midi#\x00', 0x3, 0x40100)
getsockopt$inet_pktinfo(r8, 0x0, 0x8, &(0x7f0000000300)={0x0, @remote, @loopback}, &(0x7f0000000340)=0xc)
sendmsg$nl_route(r7, &(0x7f0000000400)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000380)={&(0x7f0000000c80)=ANY=[]}}, 0x4008000)
ioctl$sock_proto_private(r8, 0x80089ec, &(0x7f0000000140)="039625617620978a4df541244054545eefb285b44d2198c37642636f3bd6084339c6e79154e7a4e1e8a3a316d5a4d756fa828508c3eaae4df2759d4d16de576413772f248c74aae160e44749d604a7af5290efc74ba837ec71ff4bfb5f9a2d51403ecc6b5a4bb2dab710e3367549b45cd0b3fed1c251372400872f340ee3b348964d022f3224519d06adad720a5650c9b04292955ae6fd364adebee641bc911bcdd907f409e8200d95b946789c69b1d8876c")
r9 = syz_open_dev$usb(&(0x7f0000000200)='/dev/bus/usb/00#/00#\x00', 0xff, 0x80000)
syz_open_dev$sndtimer(&(0x7f0000000500)='/dev/snd/timer\x00', 0x0, 0x4080)
ioctl$VT_GETMODE(r9, 0x5601, &(0x7f0000000240))
setsockopt$inet_group_source_req(r8, 0x0, 0x2e, &(0x7f0000000000)={0x1, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @multicast1}}}, 0xfffffffffffffc1a)

09:19:46 executing program 4:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x20e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet(0x2, 0x6, 0x7fffffff)
r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/sequencer2\x00', 0x141080, 0x0)
ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000480)={&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1})
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_ifreq(r3, 0x8991, &(0x7f00000005c0)={'bond0\x00\x00\x00\x00\x00\x00\x00!\x00', @ifru_names='bond_slave_1\x00'})
ioctl$VIDIOC_ENCODER_CMD(r2, 0xc028564d, &(0x7f0000000680)={0x1, 0x1, [0xfff, 0x101, 0x3ff, 0x40, 0x0, 0xfffffffffffffffb, 0x8, 0x4f]})
ioctl$SNDRV_TIMER_IOCTL_PVERSION(r2, 0x80045400, &(0x7f00000004c0))
r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000240)='/dev/full\x00', 0x20a800, 0x0)
ioctl$KDSKBSENT(r4, 0x4b49, &(0x7f0000000740)="e2da5cdea423495c8b5663b2d9e462f4e65c25cc8b2ba5e1349cd9ae758d94c045f53f48860fd0b3d8013a69034f6ac0d6e1e98dfe38d2d9e2e2c54d473c67bfa22bbf07fadb6002cda4dd466bf8b4ac1fd7837039b702b9d0fa204a8e5df87c3de67d40844e3ddd3c120aee61b90f3b98210922d8d4271c6df39457ffa88a8a1c33837414408c58e56e3fc11ec40ec466928864d45fe30bbdca4189941c975bc6fe8fb0e6bf8e2a58131d1b5d088066c68b8a6ee0c4e1fea78983de57627ebf6f449a310f966c64391d936f99802fb9320ae1cc")
r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000016c0)='/dev/sequencer2\x00', 0x40042, 0x0)
sendto$inet(r1, &(0x7f0000000a00)="8dec431bb44aff53a310b4eabef65b9ca28574570c8753d962784ce7563c1f448215fd237bf4c9159a98e9205a38a1fef116825d2a67dccc355557378e26b4e71c9ead8245ce8f8727e4d5e348d6b048462955248e97e362bb149adcd5ad849873b82111c2ecfa383140f9d4c99f525041a886277a6592dbc6b9108911e88a440b93f5c0fae544676b44a19bf06aa255a549db9cb0a9221a90f33fec43b1d074bf", 0xa1, 0x1, 0x0, 0x0)
r6 = syz_genetlink_get_family_id$fou(&(0x7f0000000580)='fou\x00')
sendmsg$FOU_CMD_DEL(r5, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000600)={&(0x7f00000006c0)=ANY=[@ANYBLOB="c3d1c79f", @ANYRES16=r6, @ANYRESHEX=r1], 0x3}, 0x1, 0x0, 0x0, 0x20044000}, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000b00)='IPVS\x00')
sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f0000000700)=ANY=[@ANYBLOB="520f020000000000000020fb00000000000000"], 0x1}, 0x1, 0x0, 0x0, 0x8050}, 0x40)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25d1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
keyctl$session_to_parent(0x12)
ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x200)
r7 = dup2(r0, r5)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0xc81, 0x0)
r8 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_open_dev$midi(&(0x7f00000002c0)='/dev/midi#\x00', 0x3, 0x40100)
getsockopt$inet_pktinfo(r8, 0x0, 0x8, &(0x7f0000000300)={0x0, @remote, @loopback}, &(0x7f0000000340)=0xc)
sendmsg$nl_route(r7, &(0x7f0000000400)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000380)={&(0x7f0000000c80)=ANY=[]}}, 0x4008000)
ioctl$sock_proto_private(r8, 0x80089ec, &(0x7f0000000140)="039625617620978a4df541244054545eefb285b44d2198c37642636f3bd6084339c6e79154e7a4e1e8a3a316d5a4d756fa828508c3eaae4df2759d4d16de576413772f248c74aae160e44749d604a7af5290efc74ba837ec71ff4bfb5f9a2d51403ecc6b5a4bb2dab710e3367549b45cd0b3fed1c251372400872f340ee3b348964d022f3224519d06adad720a5650c9b04292955ae6fd364adebee641bc911bcdd907f409e8200d95b946789c69b1d8876c")
r9 = syz_open_dev$usb(&(0x7f0000000200)='/dev/bus/usb/00#/00#\x00', 0xff, 0x80000)
syz_open_dev$sndtimer(&(0x7f0000000500)='/dev/snd/timer\x00', 0x0, 0x4080)
ioctl$VT_GETMODE(r9, 0x5601, &(0x7f0000000240))
setsockopt$inet_group_source_req(r8, 0x0, 0x2e, &(0x7f0000000000)={0x1, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @multicast1}}}, 0xfffffffffffffc1a)

09:19:46 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
msgget$private(0x0, 0x40)
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
sigaltstack(&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000000))
r0 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0)
ioctl$int_in(r0, 0x800000c0045005, &(0x7f0000000000)=0x1000)
ioctl$PIO_FONT(r0, 0x4b61, &(0x7f00000000c0)="68cdfcce268735b8748557")
process_vm_writev(0x0, &(0x7f0000000380)=[{&(0x7f0000000200)=""/74, 0x4a}, {&(0x7f0000000500)=""/164, 0xa4}], 0x2, &(0x7f0000001900)=[{&(0x7f0000001700)=""/126, 0x7e}, {&(0x7f0000001780)=""/180, 0xb4}, {&(0x7f0000001840)=""/148, 0x94}], 0x3, 0x0)
time(&(0x7f0000000180))
mmap(&(0x7f0000ffc000/0x3000)=nil, 0x200000, 0xfffffffffffffffd, 0x2012, r0, 0x0)
sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000040), 0xc, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="f5ea73dcffa88435aec4ff7a3b7afb9acaac516a1b44a21ce247ae492105cd546d0f041c46cd9fa734407ebd1de8dfe5cbdb2f0c6ac888cb3f6fa2baf07144f6a0c0c3d4bbf5435651dcb74eace5ca44e24d79c561aed3d6d5d20b488c3911f62fd5c5725b9cd6403e4df26c0df68ad925ee"], 0x1}}, 0x0)
mlockall(0xfffffffffffffffc)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0)
fanotify_init(0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer2\x00', 0x0, 0x0)
pipe(&(0x7f0000000680)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
timer_create(0x5, &(0x7f0000000800)={0x0, 0x16, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000840)=<r3=>0x0)
timer_delete(r3)
write(r2, &(0x7f0000000340), 0x10000014c)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000540)={0x0, <r4=>0x0})
pselect6(0x40, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r4+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8})
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000080)=0x2, 0x4)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000006c0)={{{@in6=@mcast1, @in=@broadcast}}, {{@in6=@ipv4={[], [], @broadcast}}, 0x0, @in=@multicast1}}, &(0x7f00000007c0)=0xe8)
getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000400)={{{@in=@multicast1, @in6=@remote}}, {{@in=@dev}}}, &(0x7f0000000500)=0xe8)
sendmmsg(0xffffffffffffffff, &(0x7f0000006240)=[{{0x0, 0x0, &(0x7f0000005e00), 0x0, &(0x7f0000006300)}}], 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="45964a5c4f0f00fe000030492a768b88b40eda954797623745e004"], 0x0, 0x0, 0xce, &(0x7f0000000300)=""/206}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000880)=ANY=[@ANYBLOB="180000000000000000001000028000006a0a00fffff8f61230a5d269a6804cb6276fd6ca006318"], 0x0, 0x0, 0xce, &(0x7f0000000180)=""/206}, 0x48)

09:19:46 executing program 0:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x20e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet(0x2, 0x6, 0x7fffffff)
r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/sequencer2\x00', 0x141080, 0x0)
ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000480)={&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1})
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_ifreq(r3, 0x8991, &(0x7f00000005c0)={'bond0\x00\x00\x00\x00\x00\x00\x00!\x00', @ifru_names='bond_slave_1\x00'})
ioctl$VIDIOC_ENCODER_CMD(r2, 0xc028564d, &(0x7f0000000680)={0x1, 0x1, [0xfff, 0x101, 0x3ff, 0x40, 0x0, 0xfffffffffffffffb, 0x8, 0x4f]})
ioctl$SNDRV_TIMER_IOCTL_PVERSION(r2, 0x80045400, &(0x7f00000004c0))
r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000240)='/dev/full\x00', 0x20a800, 0x0)
ioctl$KDSKBSENT(r4, 0x4b49, &(0x7f0000000740)="e2da5cdea423495c8b5663b2d9e462f4e65c25cc8b2ba5e1349cd9ae758d94c045f53f48860fd0b3d8013a69034f6ac0d6e1e98dfe38d2d9e2e2c54d473c67bfa22bbf07fadb6002cda4dd466bf8b4ac1fd7837039b702b9d0fa204a8e5df87c3de67d40844e3ddd3c120aee61b90f3b98210922d8d4271c6df39457ffa88a8a1c33837414408c58e56e3fc11ec40ec466928864d45fe30bbdca4189941c975bc6fe8fb0e6bf8e2a58131d1b5d088066c68b8a6ee0c4e1fea78983de57627ebf6f449a310f966c64391d936f99802fb9320ae1cc")
r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000016c0)='/dev/sequencer2\x00', 0x40042, 0x0)
sendto$inet(r1, &(0x7f0000000a00)="8dec431bb44aff53a310b4eabef65b9ca28574570c8753d962784ce7563c1f448215fd237bf4c9159a98e9205a38a1fef116825d2a67dccc355557378e26b4e71c9ead8245ce8f8727e4d5e348d6b048462955248e97e362bb149adcd5ad849873b82111c2ecfa383140f9d4c99f525041a886277a6592dbc6b9108911e88a440b93f5c0fae544676b44a19bf06aa255a549db9cb0a9221a90f33fec43b1d074bf", 0xa1, 0x1, 0x0, 0x0)
r6 = syz_genetlink_get_family_id$fou(&(0x7f0000000580)='fou\x00')
sendmsg$FOU_CMD_DEL(r5, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000600)={&(0x7f00000006c0)=ANY=[@ANYBLOB="c3d1c79f", @ANYRES16=r6, @ANYRESHEX=r1], 0x3}, 0x1, 0x0, 0x0, 0x20044000}, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000b00)='IPVS\x00')
sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f0000000700)=ANY=[@ANYBLOB="520f020000000000000020fb00000000000000"], 0x1}, 0x1, 0x0, 0x0, 0x8050}, 0x40)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25d1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
keyctl$session_to_parent(0x12)
ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x200)
r7 = dup2(r0, r5)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0xc81, 0x0)
r8 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_open_dev$midi(&(0x7f00000002c0)='/dev/midi#\x00', 0x3, 0x40100)
getsockopt$inet_pktinfo(r8, 0x0, 0x8, &(0x7f0000000300)={0x0, @remote, @loopback}, &(0x7f0000000340)=0xc)
sendmsg$nl_route(r7, &(0x7f0000000400)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000380)={&(0x7f0000000c80)=ANY=[]}}, 0x4008000)
ioctl$sock_proto_private(r8, 0x80089ec, &(0x7f0000000140)="039625617620978a4df541244054545eefb285b44d2198c37642636f3bd6084339c6e79154e7a4e1e8a3a316d5a4d756fa828508c3eaae4df2759d4d16de576413772f248c74aae160e44749d604a7af5290efc74ba837ec71ff4bfb5f9a2d51403ecc6b5a4bb2dab710e3367549b45cd0b3fed1c251372400872f340ee3b348964d022f3224519d06adad720a5650c9b04292955ae6fd364adebee641bc911bcdd907f409e8200d95b946789c69b1d8876c")
r9 = syz_open_dev$usb(&(0x7f0000000200)='/dev/bus/usb/00#/00#\x00', 0xff, 0x80000)
syz_open_dev$sndtimer(&(0x7f0000000500)='/dev/snd/timer\x00', 0x0, 0x4080)
ioctl$VT_GETMODE(r9, 0x5601, &(0x7f0000000240))
setsockopt$inet_group_source_req(r8, 0x0, 0x2e, &(0x7f0000000000)={0x1, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @multicast1}}}, 0xfffffffffffffc1a)

09:19:46 executing program 3:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x20e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet(0x2, 0x6, 0x7fffffff)
r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/sequencer2\x00', 0x141080, 0x0)
ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000480)={&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1})
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_ifreq(r3, 0x8991, &(0x7f00000005c0)={'bond0\x00\x00\x00\x00\x00\x00\x00!\x00', @ifru_names='bond_slave_1\x00'})
ioctl$VIDIOC_ENCODER_CMD(r2, 0xc028564d, &(0x7f0000000680)={0x1, 0x1, [0xfff, 0x101, 0x3ff, 0x40, 0x0, 0xfffffffffffffffb, 0x8, 0x4f]})
ioctl$SNDRV_TIMER_IOCTL_PVERSION(r2, 0x80045400, &(0x7f00000004c0))
r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000240)='/dev/full\x00', 0x20a800, 0x0)
ioctl$KDSKBSENT(r4, 0x4b49, &(0x7f0000000740)="e2da5cdea423495c8b5663b2d9e462f4e65c25cc8b2ba5e1349cd9ae758d94c045f53f48860fd0b3d8013a69034f6ac0d6e1e98dfe38d2d9e2e2c54d473c67bfa22bbf07fadb6002cda4dd466bf8b4ac1fd7837039b702b9d0fa204a8e5df87c3de67d40844e3ddd3c120aee61b90f3b98210922d8d4271c6df39457ffa88a8a1c33837414408c58e56e3fc11ec40ec466928864d45fe30bbdca4189941c975bc6fe8fb0e6bf8e2a58131d1b5d088066c68b8a6ee0c4e1fea78983de57627ebf6f449a310f966c64391d936f99802fb9320ae1cc")
r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000016c0)='/dev/sequencer2\x00', 0x40042, 0x0)
sendto$inet(r1, &(0x7f0000000a00)="8dec431bb44aff53a310b4eabef65b9ca28574570c8753d962784ce7563c1f448215fd237bf4c9159a98e9205a38a1fef116825d2a67dccc355557378e26b4e71c9ead8245ce8f8727e4d5e348d6b048462955248e97e362bb149adcd5ad849873b82111c2ecfa383140f9d4c99f525041a886277a6592dbc6b9108911e88a440b93f5c0fae544676b44a19bf06aa255a549db9cb0a9221a90f33fec43b1d074bf", 0xa1, 0x1, 0x0, 0x0)
r6 = syz_genetlink_get_family_id$fou(&(0x7f0000000580)='fou\x00')
sendmsg$FOU_CMD_DEL(r5, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000600)={&(0x7f00000006c0)=ANY=[@ANYBLOB="c3d1c79f", @ANYRES16=r6, @ANYRESHEX=r1], 0x3}, 0x1, 0x0, 0x0, 0x20044000}, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000b00)='IPVS\x00')
sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f0000000700)=ANY=[@ANYBLOB="520f020000000000000020fb00000000000000"], 0x1}, 0x1, 0x0, 0x0, 0x8050}, 0x40)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25d1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
keyctl$session_to_parent(0x12)
ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x200)
r7 = dup2(r0, r5)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0xc81, 0x0)
r8 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_open_dev$midi(&(0x7f00000002c0)='/dev/midi#\x00', 0x3, 0x40100)
getsockopt$inet_pktinfo(r8, 0x0, 0x8, &(0x7f0000000300)={0x0, @remote, @loopback}, &(0x7f0000000340)=0xc)
sendmsg$nl_route(r7, &(0x7f0000000400)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000380)={&(0x7f0000000c80)=ANY=[]}}, 0x4008000)
ioctl$sock_proto_private(r8, 0x80089ec, &(0x7f0000000140)="039625617620978a4df541244054545eefb285b44d2198c37642636f3bd6084339c6e79154e7a4e1e8a3a316d5a4d756fa828508c3eaae4df2759d4d16de576413772f248c74aae160e44749d604a7af5290efc74ba837ec71ff4bfb5f9a2d51403ecc6b5a4bb2dab710e3367549b45cd0b3fed1c251372400872f340ee3b348964d022f3224519d06adad720a5650c9b04292955ae6fd364adebee641bc911bcdd907f409e8200d95b946789c69b1d8876c")
r9 = syz_open_dev$usb(&(0x7f0000000200)='/dev/bus/usb/00#/00#\x00', 0xff, 0x80000)
syz_open_dev$sndtimer(&(0x7f0000000500)='/dev/snd/timer\x00', 0x0, 0x4080)
ioctl$VT_GETMODE(r9, 0x5601, &(0x7f0000000240))
setsockopt$inet_group_source_req(r8, 0x0, 0x2e, &(0x7f0000000000)={0x1, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @multicast1}}}, 0xfffffffffffffc1a)

09:19:46 executing program 4:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f000001b000)={@multicast2, @remote, @loopback}, 0xc)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000280)='net/mcfilter\x00')
preadv(r2, &(0x7f0000000480), 0x10000000000002a1, 0x10400003)
dup2(0xffffffffffffffff, r0)
ioctl$PPPIOCSCOMPRESS(0xffffffffffffffff, 0x4010744d)

09:19:47 executing program 1:
syz_open_dev$mice(0x0, 0x0, 0x0)
r0 = syz_open_dev$vcsa(0x0, 0x0, 0x0)
creat(&(0x7f00000000c0)='./file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f000000a000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xa00000400, 0x0, 0x8000010004}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='nfs\x00', 0x0, &(0x7f000000a000))
ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f0000000040)={0x3d, 0x0, 0x401, 0x0, 0x3, @stepwise={{0x0, 0x6}, {0x86}}})
socketpair(0x0, 0x0, 0x0, 0x0)
socketpair(0x0, 0x1, 0x0, 0x0)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, <r1=>0x0})
getsockopt$packet_buf(r1, 0x107, 0x0, 0x0, &(0x7f0000000200))
close(0xffffffffffffffff)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x0, 0x3}, 0x2c)
syz_genetlink_get_family_id$ipvs(0x0)
sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, 0x0, 0x8810)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x127)
sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0)
execve(0x0, &(0x7f00000006c0)=[0x0, &(0x7f00000004c0)='nfs\x00', &(0x7f0000000540)='nfs\x00', &(0x7f0000000580)='security)-\x00', &(0x7f00000005c0)='nfs\x00', &(0x7f0000000600)='keyring/$$\x00', &(0x7f0000000680)='\x00'], &(0x7f0000000900)=[&(0x7f0000000740)='nfs\x00', &(0x7f0000000780)='nfs\x00', &(0x7f00000007c0)='nfs\x00', &(0x7f0000000800)='nfs\x00', &(0x7f0000000840)='nfs\x00', &(0x7f0000000880)='nfs\x00', &(0x7f00000008c0)='\x00'])
getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000340)={0x0, 0x8000000, 0x0, 0x8001, 0x400}, &(0x7f0000000380)=0x18)

09:19:47 executing program 0:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x20e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet(0x2, 0x6, 0x7fffffff)
r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/sequencer2\x00', 0x141080, 0x0)
ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000480)={&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1})
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_ifreq(r3, 0x8991, &(0x7f00000005c0)={'bond0\x00\x00\x00\x00\x00\x00\x00!\x00', @ifru_names='bond_slave_1\x00'})
ioctl$VIDIOC_ENCODER_CMD(r2, 0xc028564d, &(0x7f0000000680)={0x1, 0x1, [0xfff, 0x101, 0x3ff, 0x40, 0x0, 0xfffffffffffffffb, 0x8, 0x4f]})
ioctl$SNDRV_TIMER_IOCTL_PVERSION(r2, 0x80045400, &(0x7f00000004c0))
r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000240)='/dev/full\x00', 0x20a800, 0x0)
ioctl$KDSKBSENT(r4, 0x4b49, &(0x7f0000000740)="e2da5cdea423495c8b5663b2d9e462f4e65c25cc8b2ba5e1349cd9ae758d94c045f53f48860fd0b3d8013a69034f6ac0d6e1e98dfe38d2d9e2e2c54d473c67bfa22bbf07fadb6002cda4dd466bf8b4ac1fd7837039b702b9d0fa204a8e5df87c3de67d40844e3ddd3c120aee61b90f3b98210922d8d4271c6df39457ffa88a8a1c33837414408c58e56e3fc11ec40ec466928864d45fe30bbdca4189941c975bc6fe8fb0e6bf8e2a58131d1b5d088066c68b8a6ee0c4e1fea78983de57627ebf6f449a310f966c64391d936f99802fb9320ae1cc")
r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000016c0)='/dev/sequencer2\x00', 0x40042, 0x0)
sendto$inet(r1, &(0x7f0000000a00)="8dec431bb44aff53a310b4eabef65b9ca28574570c8753d962784ce7563c1f448215fd237bf4c9159a98e9205a38a1fef116825d2a67dccc355557378e26b4e71c9ead8245ce8f8727e4d5e348d6b048462955248e97e362bb149adcd5ad849873b82111c2ecfa383140f9d4c99f525041a886277a6592dbc6b9108911e88a440b93f5c0fae544676b44a19bf06aa255a549db9cb0a9221a90f33fec43b1d074bf", 0xa1, 0x1, 0x0, 0x0)
r6 = syz_genetlink_get_family_id$fou(&(0x7f0000000580)='fou\x00')
sendmsg$FOU_CMD_DEL(r5, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000600)={&(0x7f00000006c0)=ANY=[@ANYBLOB="c3d1c79f", @ANYRES16=r6, @ANYRESHEX=r1], 0x3}, 0x1, 0x0, 0x0, 0x20044000}, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000b00)='IPVS\x00')
sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f0000000700)=ANY=[@ANYBLOB="520f020000000000000020fb00000000000000"], 0x1}, 0x1, 0x0, 0x0, 0x8050}, 0x40)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25d1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
keyctl$session_to_parent(0x12)
ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x200)
r7 = dup2(r0, r5)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0xc81, 0x0)
r8 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_open_dev$midi(&(0x7f00000002c0)='/dev/midi#\x00', 0x3, 0x40100)
getsockopt$inet_pktinfo(r8, 0x0, 0x8, &(0x7f0000000300)={0x0, @remote, @loopback}, &(0x7f0000000340)=0xc)
sendmsg$nl_route(r7, &(0x7f0000000400)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000380)={&(0x7f0000000c80)=ANY=[]}}, 0x4008000)
ioctl$sock_proto_private(r8, 0x80089ec, &(0x7f0000000140)="039625617620978a4df541244054545eefb285b44d2198c37642636f3bd6084339c6e79154e7a4e1e8a3a316d5a4d756fa828508c3eaae4df2759d4d16de576413772f248c74aae160e44749d604a7af5290efc74ba837ec71ff4bfb5f9a2d51403ecc6b5a4bb2dab710e3367549b45cd0b3fed1c251372400872f340ee3b348964d022f3224519d06adad720a5650c9b04292955ae6fd364adebee641bc911bcdd907f409e8200d95b946789c69b1d8876c")
r9 = syz_open_dev$usb(&(0x7f0000000200)='/dev/bus/usb/00#/00#\x00', 0xff, 0x80000)
syz_open_dev$sndtimer(&(0x7f0000000500)='/dev/snd/timer\x00', 0x0, 0x4080)
ioctl$VT_GETMODE(r9, 0x5601, &(0x7f0000000240))
setsockopt$inet_group_source_req(r8, 0x0, 0x2e, &(0x7f0000000000)={0x1, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @multicast1}}}, 0xfffffffffffffc1a)

09:19:47 executing program 3:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x20e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet(0x2, 0x6, 0x7fffffff)
r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/sequencer2\x00', 0x141080, 0x0)
ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000480)={&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1})
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_ifreq(r3, 0x8991, &(0x7f00000005c0)={'bond0\x00\x00\x00\x00\x00\x00\x00!\x00', @ifru_names='bond_slave_1\x00'})
ioctl$VIDIOC_ENCODER_CMD(r2, 0xc028564d, &(0x7f0000000680)={0x1, 0x1, [0xfff, 0x101, 0x3ff, 0x40, 0x0, 0xfffffffffffffffb, 0x8, 0x4f]})
ioctl$SNDRV_TIMER_IOCTL_PVERSION(r2, 0x80045400, &(0x7f00000004c0))
r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000240)='/dev/full\x00', 0x20a800, 0x0)
ioctl$KDSKBSENT(r4, 0x4b49, &(0x7f0000000740)="e2da5cdea423495c8b5663b2d9e462f4e65c25cc8b2ba5e1349cd9ae758d94c045f53f48860fd0b3d8013a69034f6ac0d6e1e98dfe38d2d9e2e2c54d473c67bfa22bbf07fadb6002cda4dd466bf8b4ac1fd7837039b702b9d0fa204a8e5df87c3de67d40844e3ddd3c120aee61b90f3b98210922d8d4271c6df39457ffa88a8a1c33837414408c58e56e3fc11ec40ec466928864d45fe30bbdca4189941c975bc6fe8fb0e6bf8e2a58131d1b5d088066c68b8a6ee0c4e1fea78983de57627ebf6f449a310f966c64391d936f99802fb9320ae1cc")
r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000016c0)='/dev/sequencer2\x00', 0x40042, 0x0)
sendto$inet(r1, &(0x7f0000000a00)="8dec431bb44aff53a310b4eabef65b9ca28574570c8753d962784ce7563c1f448215fd237bf4c9159a98e9205a38a1fef116825d2a67dccc355557378e26b4e71c9ead8245ce8f8727e4d5e348d6b048462955248e97e362bb149adcd5ad849873b82111c2ecfa383140f9d4c99f525041a886277a6592dbc6b9108911e88a440b93f5c0fae544676b44a19bf06aa255a549db9cb0a9221a90f33fec43b1d074bf", 0xa1, 0x1, 0x0, 0x0)
r6 = syz_genetlink_get_family_id$fou(&(0x7f0000000580)='fou\x00')
sendmsg$FOU_CMD_DEL(r5, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000600)={&(0x7f00000006c0)=ANY=[@ANYBLOB="c3d1c79f", @ANYRES16=r6, @ANYRESHEX=r1], 0x3}, 0x1, 0x0, 0x0, 0x20044000}, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000b00)='IPVS\x00')
sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f0000000700)=ANY=[@ANYBLOB="520f020000000000000020fb00000000000000"], 0x1}, 0x1, 0x0, 0x0, 0x8050}, 0x40)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25d1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
keyctl$session_to_parent(0x12)
ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x200)
r7 = dup2(r0, r5)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0xc81, 0x0)
r8 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_open_dev$midi(&(0x7f00000002c0)='/dev/midi#\x00', 0x3, 0x40100)
getsockopt$inet_pktinfo(r8, 0x0, 0x8, &(0x7f0000000300)={0x0, @remote, @loopback}, &(0x7f0000000340)=0xc)
sendmsg$nl_route(r7, &(0x7f0000000400)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000380)={&(0x7f0000000c80)=ANY=[]}}, 0x4008000)
ioctl$sock_proto_private(r8, 0x80089ec, &(0x7f0000000140)="039625617620978a4df541244054545eefb285b44d2198c37642636f3bd6084339c6e79154e7a4e1e8a3a316d5a4d756fa828508c3eaae4df2759d4d16de576413772f248c74aae160e44749d604a7af5290efc74ba837ec71ff4bfb5f9a2d51403ecc6b5a4bb2dab710e3367549b45cd0b3fed1c251372400872f340ee3b348964d022f3224519d06adad720a5650c9b04292955ae6fd364adebee641bc911bcdd907f409e8200d95b946789c69b1d8876c")
r9 = syz_open_dev$usb(&(0x7f0000000200)='/dev/bus/usb/00#/00#\x00', 0xff, 0x80000)
syz_open_dev$sndtimer(&(0x7f0000000500)='/dev/snd/timer\x00', 0x0, 0x4080)
ioctl$VT_GETMODE(r9, 0x5601, &(0x7f0000000240))
setsockopt$inet_group_source_req(r8, 0x0, 0x2e, &(0x7f0000000000)={0x1, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @multicast1}}}, 0xfffffffffffffc1a)

09:19:47 executing program 1:
syz_open_dev$mice(0x0, 0x0, 0x0)
r0 = syz_open_dev$vcsa(0x0, 0x0, 0x0)
creat(&(0x7f00000000c0)='./file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f000000a000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xa00000400, 0x0, 0x8000010004}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='nfs\x00', 0x0, &(0x7f000000a000))
ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f0000000040)={0x3d, 0x0, 0x401, 0x0, 0x3, @stepwise={{0x0, 0x6}, {0x86}}})
socketpair(0x0, 0x0, 0x0, 0x0)
socketpair(0x0, 0x1, 0x0, 0x0)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, <r1=>0x0})
getsockopt$packet_buf(r1, 0x107, 0x0, 0x0, &(0x7f0000000200))
close(0xffffffffffffffff)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x0, 0x3}, 0x2c)
syz_genetlink_get_family_id$ipvs(0x0)
sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, 0x0, 0x8810)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x127)
sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0)
execve(0x0, &(0x7f00000006c0)=[0x0, &(0x7f00000004c0)='nfs\x00', &(0x7f0000000540)='nfs\x00', &(0x7f0000000580)='security)-\x00', &(0x7f00000005c0)='nfs\x00', &(0x7f0000000600)='keyring/$$\x00', &(0x7f0000000680)='\x00'], &(0x7f0000000900)=[&(0x7f0000000740)='nfs\x00', &(0x7f0000000780)='nfs\x00', &(0x7f00000007c0)='nfs\x00', &(0x7f0000000800)='nfs\x00', &(0x7f0000000840)='nfs\x00', &(0x7f0000000880)='nfs\x00', &(0x7f00000008c0)='\x00'])
getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000340)={0x0, 0x8000000, 0x0, 0x8001, 0x400}, &(0x7f0000000380)=0x18)

[  339.206884][ T2475] rpcbind: RPC call returned error 22
[  339.234089][T10946] rpcbind: RPC call returned error 22
[  339.615507][T10946] rpcbind: RPC call returned error 22
09:19:48 executing program 1:
syz_open_dev$mice(0x0, 0x0, 0x0)
r0 = syz_open_dev$vcsa(0x0, 0x0, 0x0)
creat(&(0x7f00000000c0)='./file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f000000a000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xa00000400, 0x0, 0x8000010004}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='nfs\x00', 0x0, &(0x7f000000a000))
ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f0000000040)={0x3d, 0x0, 0x401, 0x0, 0x3, @stepwise={{0x0, 0x6}, {0x86}}})
socketpair(0x0, 0x0, 0x0, 0x0)
socketpair(0x0, 0x1, 0x0, 0x0)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, <r1=>0x0})
getsockopt$packet_buf(r1, 0x107, 0x0, 0x0, &(0x7f0000000200))
close(0xffffffffffffffff)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x0, 0x3}, 0x2c)
syz_genetlink_get_family_id$ipvs(0x0)
sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, 0x0, 0x8810)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x127)
sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0)
execve(0x0, &(0x7f00000006c0)=[0x0, &(0x7f00000004c0)='nfs\x00', &(0x7f0000000540)='nfs\x00', &(0x7f0000000580)='security)-\x00', &(0x7f00000005c0)='nfs\x00', &(0x7f0000000600)='keyring/$$\x00', &(0x7f0000000680)='\x00'], &(0x7f0000000900)=[&(0x7f0000000740)='nfs\x00', &(0x7f0000000780)='nfs\x00', &(0x7f00000007c0)='nfs\x00', &(0x7f0000000800)='nfs\x00', &(0x7f0000000840)='nfs\x00', &(0x7f0000000880)='nfs\x00', &(0x7f00000008c0)='\x00'])
getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000340)={0x0, 0x8000000, 0x0, 0x8001, 0x400}, &(0x7f0000000380)=0x18)

09:19:48 executing program 0:
syz_open_dev$mice(0x0, 0x0, 0x0)
r0 = syz_open_dev$vcsa(0x0, 0x0, 0x0)
creat(&(0x7f00000000c0)='./file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f000000a000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xa00000400, 0x0, 0x8000010004}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='nfs\x00', 0x0, &(0x7f000000a000))
ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f0000000040)={0x3d, 0x0, 0x401, 0x0, 0x3, @stepwise={{0x0, 0x6}, {0x86}}})
socketpair(0x0, 0x0, 0x0, 0x0)
socketpair(0x0, 0x1, 0x0, 0x0)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, <r1=>0x0})
getsockopt$packet_buf(r1, 0x107, 0x0, 0x0, &(0x7f0000000200))
close(0xffffffffffffffff)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x0, 0x3}, 0x2c)
syz_genetlink_get_family_id$ipvs(0x0)
sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, 0x0, 0x8810)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x127)
sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0)
execve(0x0, &(0x7f00000006c0)=[0x0, &(0x7f00000004c0)='nfs\x00', &(0x7f0000000540)='nfs\x00', &(0x7f0000000580)='security)-\x00', &(0x7f00000005c0)='nfs\x00', &(0x7f0000000600)='keyring/$$\x00', &(0x7f0000000680)='\x00'], &(0x7f0000000900)=[&(0x7f0000000740)='nfs\x00', &(0x7f0000000780)='nfs\x00', &(0x7f00000007c0)='nfs\x00', &(0x7f0000000800)='nfs\x00', &(0x7f0000000840)='nfs\x00', &(0x7f0000000880)='nfs\x00', &(0x7f00000008c0)='\x00'])
getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000340)={0x0, 0x8000000, 0x0, 0x8001, 0x400}, &(0x7f0000000380)=0x18)

09:19:48 executing program 3:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x20e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet(0x2, 0x6, 0x7fffffff)
r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/sequencer2\x00', 0x141080, 0x0)
ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000480)={&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1})
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_ifreq(r3, 0x8991, &(0x7f00000005c0)={'bond0\x00\x00\x00\x00\x00\x00\x00!\x00', @ifru_names='bond_slave_1\x00'})
ioctl$VIDIOC_ENCODER_CMD(r2, 0xc028564d, &(0x7f0000000680)={0x1, 0x1, [0xfff, 0x101, 0x3ff, 0x40, 0x0, 0xfffffffffffffffb, 0x8, 0x4f]})
ioctl$SNDRV_TIMER_IOCTL_PVERSION(r2, 0x80045400, &(0x7f00000004c0))
r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000240)='/dev/full\x00', 0x20a800, 0x0)
ioctl$KDSKBSENT(r4, 0x4b49, &(0x7f0000000740)="e2da5cdea423495c8b5663b2d9e462f4e65c25cc8b2ba5e1349cd9ae758d94c045f53f48860fd0b3d8013a69034f6ac0d6e1e98dfe38d2d9e2e2c54d473c67bfa22bbf07fadb6002cda4dd466bf8b4ac1fd7837039b702b9d0fa204a8e5df87c3de67d40844e3ddd3c120aee61b90f3b98210922d8d4271c6df39457ffa88a8a1c33837414408c58e56e3fc11ec40ec466928864d45fe30bbdca4189941c975bc6fe8fb0e6bf8e2a58131d1b5d088066c68b8a6ee0c4e1fea78983de57627ebf6f449a310f966c64391d936f99802fb9320ae1cc")
r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000016c0)='/dev/sequencer2\x00', 0x40042, 0x0)
sendto$inet(r1, &(0x7f0000000a00)="8dec431bb44aff53a310b4eabef65b9ca28574570c8753d962784ce7563c1f448215fd237bf4c9159a98e9205a38a1fef116825d2a67dccc355557378e26b4e71c9ead8245ce8f8727e4d5e348d6b048462955248e97e362bb149adcd5ad849873b82111c2ecfa383140f9d4c99f525041a886277a6592dbc6b9108911e88a440b93f5c0fae544676b44a19bf06aa255a549db9cb0a9221a90f33fec43b1d074bf", 0xa1, 0x1, 0x0, 0x0)
r6 = syz_genetlink_get_family_id$fou(&(0x7f0000000580)='fou\x00')
sendmsg$FOU_CMD_DEL(r5, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000600)={&(0x7f00000006c0)=ANY=[@ANYBLOB="c3d1c79f", @ANYRES16=r6, @ANYRESHEX=r1], 0x3}, 0x1, 0x0, 0x0, 0x20044000}, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000b00)='IPVS\x00')
sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f0000000700)=ANY=[@ANYBLOB="520f020000000000000020fb00000000000000"], 0x1}, 0x1, 0x0, 0x0, 0x8050}, 0x40)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25d1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
keyctl$session_to_parent(0x12)
ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x200)
r7 = dup2(r0, r5)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0xc81, 0x0)
r8 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_open_dev$midi(&(0x7f00000002c0)='/dev/midi#\x00', 0x3, 0x40100)
getsockopt$inet_pktinfo(r8, 0x0, 0x8, &(0x7f0000000300)={0x0, @remote, @loopback}, &(0x7f0000000340)=0xc)
sendmsg$nl_route(r7, &(0x7f0000000400)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000380)={&(0x7f0000000c80)=ANY=[]}}, 0x4008000)
ioctl$sock_proto_private(r8, 0x80089ec, &(0x7f0000000140)="039625617620978a4df541244054545eefb285b44d2198c37642636f3bd6084339c6e79154e7a4e1e8a3a316d5a4d756fa828508c3eaae4df2759d4d16de576413772f248c74aae160e44749d604a7af5290efc74ba837ec71ff4bfb5f9a2d51403ecc6b5a4bb2dab710e3367549b45cd0b3fed1c251372400872f340ee3b348964d022f3224519d06adad720a5650c9b04292955ae6fd364adebee641bc911bcdd907f409e8200d95b946789c69b1d8876c")
r9 = syz_open_dev$usb(&(0x7f0000000200)='/dev/bus/usb/00#/00#\x00', 0xff, 0x80000)
syz_open_dev$sndtimer(&(0x7f0000000500)='/dev/snd/timer\x00', 0x0, 0x4080)
ioctl$VT_GETMODE(r9, 0x5601, &(0x7f0000000240))
setsockopt$inet_group_source_req(r8, 0x0, 0x2e, &(0x7f0000000000)={0x1, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @multicast1}}}, 0xfffffffffffffc1a)

09:19:48 executing program 4:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f000001b000)={@multicast2, @remote, @loopback}, 0xc)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000280)='net/mcfilter\x00')
preadv(r2, &(0x7f0000000480), 0x10000000000002a1, 0x10400003)
dup2(0xffffffffffffffff, r0)
ioctl$PPPIOCSCOMPRESS(0xffffffffffffffff, 0x4010744d)

09:19:48 executing program 5:
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x7fffffff, 0x0)
openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video36\x00', 0x2, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00000000c0))
pipe(&(0x7f0000000280)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r1, &(0x7f0000000340), 0x10000014c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000240))
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, 0x0, &(0x7f0000000300)={&(0x7f0000000080), 0x8})
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
mount(0x0, &(0x7f0000000380)='.', &(0x7f0000fdb000)='ubifs\x00', 0x0, 0x0)

09:19:48 executing program 2:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$inet6(0xa, 0x80003, 0xff)
setsockopt$inet6_int(r1, 0x29, 0x16, &(0x7f0000fcb000), 0x4)
r2 = socket$inet6(0xa, 0x80003, 0xff)
dup3(r1, r2, 0x0)

[  340.026338][T13645] FS-Cache: Duplicate cookie detected
[  340.031973][T13645] FS-Cache: O-cookie c=0000000028a9ceae [p=00000000d1166a26 fl=222 nc=0 na=1]
[  340.040959][T13645] FS-Cache: O-cookie d=00000000f1d12677 n=00000000d815115b
[  340.049689][T13645] FS-Cache: O-key=[22] '02000a00000000000000040001000000000000000000'
[  340.060009][T13645] FS-Cache: N-cookie c=0000000008f0dfb5 [p=00000000d1166a26 fl=2 nc=0 na=1]
[  340.068975][T13645] FS-Cache: N-cookie d=00000000f1d12677 n=00000000c86b3d59
09:19:48 executing program 1:
syz_open_dev$mice(0x0, 0x0, 0x0)
r0 = syz_open_dev$vcsa(0x0, 0x0, 0x0)
creat(&(0x7f00000000c0)='./file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f000000a000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xa00000400, 0x0, 0x8000010004}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='nfs\x00', 0x0, &(0x7f000000a000))
ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f0000000040)={0x3d, 0x0, 0x401, 0x0, 0x3, @stepwise={{0x0, 0x6}, {0x86}}})
socketpair(0x0, 0x0, 0x0, 0x0)
socketpair(0x0, 0x1, 0x0, 0x0)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, <r1=>0x0})
getsockopt$packet_buf(r1, 0x107, 0x0, 0x0, &(0x7f0000000200))
close(0xffffffffffffffff)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x0, 0x3}, 0x2c)
syz_genetlink_get_family_id$ipvs(0x0)
sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, 0x0, 0x8810)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x127)
sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0)
execve(0x0, &(0x7f00000006c0)=[0x0, &(0x7f00000004c0)='nfs\x00', &(0x7f0000000540)='nfs\x00', &(0x7f0000000580)='security)-\x00', &(0x7f00000005c0)='nfs\x00', &(0x7f0000000600)='keyring/$$\x00', &(0x7f0000000680)='\x00'], &(0x7f0000000900)=[&(0x7f0000000740)='nfs\x00', &(0x7f0000000780)='nfs\x00', &(0x7f00000007c0)='nfs\x00', &(0x7f0000000800)='nfs\x00', &(0x7f0000000840)='nfs\x00', &(0x7f0000000880)='nfs\x00', &(0x7f00000008c0)='\x00'])
getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000340)={0x0, 0x8000000, 0x0, 0x8001, 0x400}, &(0x7f0000000380)=0x18)

[  340.076330][T13645] FS-Cache: N-key=[22] '02000a00000000000000040001000000000000000000'
[  340.086717][    T7] rpcbind: RPC call returned error 22
09:19:48 executing program 2:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$inet6(0xa, 0x80003, 0xff)
setsockopt$inet6_int(r1, 0x29, 0x16, &(0x7f0000fcb000), 0x4)
r2 = socket$inet6(0xa, 0x80003, 0xff)
dup3(r1, r2, 0x0)

[  340.131330][ T3865] UBIFS error (pid: 13669): cannot open "(null)", error -22
[  340.273018][T10946] rpcbind: RPC call returned error 22
09:19:48 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003840)=[{{0x0, 0xfffffffffffffe66, &(0x7f0000002b80)=[{&(0x7f0000001880)=""/190, 0xff86}], 0x1}}], 0x2b0, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/arp\x00')
ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, 0x0)
preadv(r0, &(0x7f00000017c0), 0x1d0, 0x0)

09:19:48 executing program 2:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$inet6(0xa, 0x80003, 0xff)
setsockopt$inet6_int(r1, 0x29, 0x16, &(0x7f0000fcb000), 0x4)
r2 = socket$inet6(0xa, 0x80003, 0xff)
dup3(r1, r2, 0x0)

[  340.419743][T10946] rpcbind: RPC call returned error 22
09:19:48 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000440)='TIPC\x00')
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000500)={0x0, 0x9000000, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, r1, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0)

09:19:48 executing program 0:
syz_open_dev$mice(0x0, 0x0, 0x0)
r0 = syz_open_dev$vcsa(0x0, 0x0, 0x0)
creat(&(0x7f00000000c0)='./file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f000000a000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xa00000400, 0x0, 0x8000010004}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='nfs\x00', 0x0, &(0x7f000000a000))
ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f0000000040)={0x3d, 0x0, 0x401, 0x0, 0x3, @stepwise={{0x0, 0x6}, {0x86}}})
socketpair(0x0, 0x0, 0x0, 0x0)
socketpair(0x0, 0x1, 0x0, 0x0)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, <r1=>0x0})
getsockopt$packet_buf(r1, 0x107, 0x0, 0x0, &(0x7f0000000200))
close(0xffffffffffffffff)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x0, 0x3}, 0x2c)
syz_genetlink_get_family_id$ipvs(0x0)
sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, 0x0, 0x8810)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x127)
sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0)
execve(0x0, &(0x7f00000006c0)=[0x0, &(0x7f00000004c0)='nfs\x00', &(0x7f0000000540)='nfs\x00', &(0x7f0000000580)='security)-\x00', &(0x7f00000005c0)='nfs\x00', &(0x7f0000000600)='keyring/$$\x00', &(0x7f0000000680)='\x00'], &(0x7f0000000900)=[&(0x7f0000000740)='nfs\x00', &(0x7f0000000780)='nfs\x00', &(0x7f00000007c0)='nfs\x00', &(0x7f0000000800)='nfs\x00', &(0x7f0000000840)='nfs\x00', &(0x7f0000000880)='nfs\x00', &(0x7f00000008c0)='\x00'])
getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000340)={0x0, 0x8000000, 0x0, 0x8001, 0x400}, &(0x7f0000000380)=0x18)

09:19:48 executing program 2:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$inet6(0xa, 0x80003, 0xff)
setsockopt$inet6_int(r1, 0x29, 0x16, &(0x7f0000fcb000), 0x4)
r2 = socket$inet6(0xa, 0x80003, 0xff)
dup3(r1, r2, 0x0)

09:19:48 executing program 1:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000580)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20)
r2 = accept$alg(r1, 0x0, 0x0)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x30, 0x0, 0x0, 0x0, 0x0, {{}, 0x0, 0x5, 0x0, {0x14}}}, 0xffffffeb}}, 0x0)
readv(r2, &(0x7f00000007c0)=[{&(0x7f0000000d80)=""/4096, 0x20001d80}], 0x1)

09:19:48 executing program 0:
syz_open_dev$mice(0x0, 0x0, 0x0)
r0 = syz_open_dev$vcsa(0x0, 0x0, 0x0)
creat(&(0x7f00000000c0)='./file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f000000a000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xa00000400, 0x0, 0x8000010004}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='nfs\x00', 0x0, &(0x7f000000a000))
ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f0000000040)={0x3d, 0x0, 0x401, 0x0, 0x3, @stepwise={{0x0, 0x6}, {0x86}}})
socketpair(0x0, 0x0, 0x0, 0x0)
socketpair(0x0, 0x1, 0x0, 0x0)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, <r1=>0x0})
getsockopt$packet_buf(r1, 0x107, 0x0, 0x0, &(0x7f0000000200))
close(0xffffffffffffffff)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x0, 0x3}, 0x2c)
syz_genetlink_get_family_id$ipvs(0x0)
sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, 0x0, 0x8810)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x127)
sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0)
execve(0x0, &(0x7f00000006c0)=[0x0, &(0x7f00000004c0)='nfs\x00', &(0x7f0000000540)='nfs\x00', &(0x7f0000000580)='security)-\x00', &(0x7f00000005c0)='nfs\x00', &(0x7f0000000600)='keyring/$$\x00', &(0x7f0000000680)='\x00'], &(0x7f0000000900)=[&(0x7f0000000740)='nfs\x00', &(0x7f0000000780)='nfs\x00', &(0x7f00000007c0)='nfs\x00', &(0x7f0000000800)='nfs\x00', &(0x7f0000000840)='nfs\x00', &(0x7f0000000880)='nfs\x00', &(0x7f00000008c0)='\x00'])
getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000340)={0x0, 0x8000000, 0x0, 0x8001, 0x400}, &(0x7f0000000380)=0x18)

[  340.781217][T10946] rpcbind: RPC call returned error 22
[  340.884951][ T3865] UBIFS error (pid: 13706): cannot open "(null)", error -22
09:19:49 executing program 4:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f000001b000)={@multicast2, @remote, @loopback}, 0xc)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000280)='net/mcfilter\x00')
preadv(r2, &(0x7f0000000480), 0x10000000000002a1, 0x10400003)
dup2(0xffffffffffffffff, r0)
ioctl$PPPIOCSCOMPRESS(0xffffffffffffffff, 0x4010744d)

09:19:49 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003840)=[{{0x0, 0xfffffffffffffe66, &(0x7f0000002b80)=[{&(0x7f0000001880)=""/190, 0xff86}], 0x1}}], 0x2b0, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/arp\x00')
ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, 0x0)
preadv(r0, &(0x7f00000017c0), 0x1d0, 0x0)

09:19:49 executing program 2:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket(0x1e, 0x1, 0x0)
getsockopt(r1, 0x800000010f, 0x20080000000082, &(0x7f00004ad000), &(0x7f0000a3c000)=0x329)

09:19:49 executing program 5:
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x7fffffff, 0x0)
openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video36\x00', 0x2, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00000000c0))
pipe(&(0x7f0000000280)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r1, &(0x7f0000000340), 0x10000014c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000240))
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, 0x0, &(0x7f0000000300)={&(0x7f0000000080), 0x8})
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
mount(0x0, &(0x7f0000000380)='.', &(0x7f0000fdb000)='ubifs\x00', 0x0, 0x0)

[  341.043440][ T8275] rpcbind: RPC call returned error 22
09:19:49 executing program 0:
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000640)=""/246)
poll(&(0x7f0000000040)=[{r0}], 0x1, 0x3)

09:19:49 executing program 2:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket(0x1e, 0x1, 0x0)
getsockopt(r1, 0x800000010f, 0x20080000000082, &(0x7f00004ad000), &(0x7f0000a3c000)=0x329)

09:19:49 executing program 2:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket(0x1e, 0x1, 0x0)
getsockopt(r1, 0x800000010f, 0x20080000000082, &(0x7f00004ad000), &(0x7f0000a3c000)=0x329)

[  341.245036][T13730] UBIFS error (pid: 13732): cannot open "(null)", error -22
09:19:49 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003840)=[{{0x0, 0xfffffffffffffe66, &(0x7f0000002b80)=[{&(0x7f0000001880)=""/190, 0xff86}], 0x1}}], 0x2b0, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/arp\x00')
ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, 0x0)
preadv(r0, &(0x7f00000017c0), 0x1d0, 0x0)

09:19:49 executing program 0:
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000640)=""/246)
poll(&(0x7f0000000040)=[{r0}], 0x1, 0x3)

09:19:49 executing program 2:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket(0x1e, 0x1, 0x0)
getsockopt(r1, 0x800000010f, 0x20080000000082, &(0x7f00004ad000), &(0x7f0000a3c000)=0x329)

09:19:49 executing program 1:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000580)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20)
r2 = accept$alg(r1, 0x0, 0x0)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x30, 0x0, 0x0, 0x0, 0x0, {{}, 0x0, 0x5, 0x0, {0x14}}}, 0xffffffeb}}, 0x0)
readv(r2, &(0x7f00000007c0)=[{&(0x7f0000000d80)=""/4096, 0x20001d80}], 0x1)

09:19:49 executing program 0:
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000640)=""/246)
poll(&(0x7f0000000040)=[{r0}], 0x1, 0x3)

09:19:50 executing program 2:
r0 = socket$packet(0x11, 0x2, 0x300)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff)
r1 = getpid()
sched_setscheduler(r1, 0x5, &(0x7f0000000200))
getsockopt$packet_int(r0, 0x107, 0x0, &(0x7f00000000c0), &(0x7f0000000080)=0xfffffffffffffd6e)

09:19:50 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003840)=[{{0x0, 0xfffffffffffffe66, &(0x7f0000002b80)=[{&(0x7f0000001880)=""/190, 0xff86}], 0x1}}], 0x2b0, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/arp\x00')
ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, 0x0)
preadv(r0, &(0x7f00000017c0), 0x1d0, 0x0)

09:19:50 executing program 0:
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000640)=""/246)
poll(&(0x7f0000000040)=[{r0}], 0x1, 0x3)

09:19:50 executing program 5:
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x7fffffff, 0x0)
openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video36\x00', 0x2, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00000000c0))
pipe(&(0x7f0000000280)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r1, &(0x7f0000000340), 0x10000014c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000240))
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, 0x0, &(0x7f0000000300)={&(0x7f0000000080), 0x8})
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
mount(0x0, &(0x7f0000000380)='.', &(0x7f0000fdb000)='ubifs\x00', 0x0, 0x0)

09:19:50 executing program 4:
r0 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x0, 0x0)
getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffff9c, 0x84, 0x13, &(0x7f0000000100)={<r1=>0x0, 0x8}, &(0x7f0000000180)=0x8)
ioctl$VIDIOC_S_OUTPUT(r0, 0xc004562f, &(0x7f0000000340)=0x1000)
setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f00000001c0)={r1, @in6={{0xa, 0x4e21, 0xfff, @ipv4={[], [], @rand_addr=0x8000}, 0x1}}}, 0x84)
r2 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2)
ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000380)={0x0, 0x0, 0x6, 0x0, [], [{0x9, 0x0, 0x9, 0x6, 0x401, 0xad}, {0x5, 0x2, 0xe68d, 0x5, 0x2, 0x5}], [[], [], [], [], [], []]})
ioctl$EVIOCSFF(r2, 0x40304580, &(0x7f0000000240)={0x53, 0x8, 0x0, {0x1f, 0x9}, {0x67e, 0x101}, @rumble={0x2}})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mq_open(0x0, 0x40, 0x0, 0x0)
syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2)
mount(0x0, &(0x7f0000000c40)='./file0\x00', &(0x7f00000001c0)='configfs\x00', 0x0, 0x0)
getdents64(0xffffffffffffffff, &(0x7f0000000100)=""/186, 0x4a9e280)
r3 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r3, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r3, 0x8)
r4 = socket$inet6_sctp(0xa, 0x805, 0x84)
r5 = accept4(r3, 0x0, 0x0, 0x0)
prctl$PR_SET_ENDIAN(0x14, 0x1)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
epoll_pwait(0xffffffffffffffff, &(0x7f0000000040)=[{}, {}, {}], 0x3, 0x0, &(0x7f0000000080)={0x9}, 0x8)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000280)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x54}, 0x98)
getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000008c0)={{{@in6, @in=@multicast2}}, {{@in6=@mcast1}, 0x0, @in6=@remote}}, &(0x7f00000009c0)=0xe8)

[  342.095836][    C1] net_ratelimit: 22 callbacks suppressed
[  342.095851][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  342.107585][    C1] protocol 88fb is buggy, dev hsr_slave_1
[  342.114329][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  342.120822][    C1] protocol 88fb is buggy, dev hsr_slave_1
09:19:50 executing program 2:
r0 = socket$packet(0x11, 0x2, 0x300)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff)
r1 = getpid()
sched_setscheduler(r1, 0x5, &(0x7f0000000200))
getsockopt$packet_int(r0, 0x107, 0x0, &(0x7f00000000c0), &(0x7f0000000080)=0xfffffffffffffd6e)

09:19:50 executing program 3:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xe, 0x24, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], 0x0}, 0x48)
nanosleep(&(0x7f0000000080)={0x77359400}, &(0x7f00000000c0))
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000440)={'g\x00\x00\x00\x00p0\x00'})

09:19:50 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$CAPI_CLR_FLAGS(0xffffffffffffffff, 0x80044325, &(0x7f00000000c0))
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10)
connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000240)=""/183}, 0x48)
r2 = socket$kcm(0x29, 0x1000000000002, 0x0)
setsockopt(r2, 0x0, 0x3ff, 0x0, 0x0)
ioctl$KVM_GET_PIT(0xffffffffffffffff, 0xc048ae65, &(0x7f00000001c0))
write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[@ANYRESOCT], 0x337)
ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000100)={r0, r1})
ioctl$PIO_CMAP(0xffffffffffffffff, 0x4b71, 0x0)
recvmmsg(r2, &(0x7f0000002300)=[{{0x0, 0xfffffe19, 0x0, 0x0, 0x0, 0x7e}}], 0x2fd, 0x400002fd, 0x0)

09:19:50 executing program 2:
r0 = socket$packet(0x11, 0x2, 0x300)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff)
r1 = getpid()
sched_setscheduler(r1, 0x5, &(0x7f0000000200))
getsockopt$packet_int(r0, 0x107, 0x0, &(0x7f00000000c0), &(0x7f0000000080)=0xfffffffffffffd6e)

[  342.365576][T13785] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based  firewall rule not found. Use the iptables CT target to attach helpers instead.
09:19:50 executing program 2:
r0 = socket$packet(0x11, 0x2, 0x300)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff)
r1 = getpid()
sched_setscheduler(r1, 0x5, &(0x7f0000000200))
getsockopt$packet_int(r0, 0x107, 0x0, &(0x7f00000000c0), &(0x7f0000000080)=0xfffffffffffffd6e)

[  342.459355][ T3865] UBIFS error (pid: 13796): cannot open "(null)", error -22
09:19:50 executing program 1:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000580)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20)
r2 = accept$alg(r1, 0x0, 0x0)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x30, 0x0, 0x0, 0x0, 0x0, {{}, 0x0, 0x5, 0x0, {0x14}}}, 0xffffffeb}}, 0x0)
readv(r2, &(0x7f00000007c0)=[{&(0x7f0000000d80)=""/4096, 0x20001d80}], 0x1)

09:19:50 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$CAPI_CLR_FLAGS(0xffffffffffffffff, 0x80044325, &(0x7f00000000c0))
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10)
connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000240)=""/183}, 0x48)
r2 = socket$kcm(0x29, 0x1000000000002, 0x0)
setsockopt(r2, 0x0, 0x3ff, 0x0, 0x0)
ioctl$KVM_GET_PIT(0xffffffffffffffff, 0xc048ae65, &(0x7f00000001c0))
write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[@ANYRESOCT], 0x337)
ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000100)={r0, r1})
ioctl$PIO_CMAP(0xffffffffffffffff, 0x4b71, 0x0)
recvmmsg(r2, &(0x7f0000002300)=[{{0x0, 0xfffffe19, 0x0, 0x0, 0x0, 0x7e}}], 0x2fd, 0x400002fd, 0x0)

09:19:51 executing program 4:
r0 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x0, 0x0)
getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffff9c, 0x84, 0x13, &(0x7f0000000100)={<r1=>0x0, 0x8}, &(0x7f0000000180)=0x8)
ioctl$VIDIOC_S_OUTPUT(r0, 0xc004562f, &(0x7f0000000340)=0x1000)
setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f00000001c0)={r1, @in6={{0xa, 0x4e21, 0xfff, @ipv4={[], [], @rand_addr=0x8000}, 0x1}}}, 0x84)
r2 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2)
ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000380)={0x0, 0x0, 0x6, 0x0, [], [{0x9, 0x0, 0x9, 0x6, 0x401, 0xad}, {0x5, 0x2, 0xe68d, 0x5, 0x2, 0x5}], [[], [], [], [], [], []]})
ioctl$EVIOCSFF(r2, 0x40304580, &(0x7f0000000240)={0x53, 0x8, 0x0, {0x1f, 0x9}, {0x67e, 0x101}, @rumble={0x2}})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mq_open(0x0, 0x40, 0x0, 0x0)
syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2)
mount(0x0, &(0x7f0000000c40)='./file0\x00', &(0x7f00000001c0)='configfs\x00', 0x0, 0x0)
getdents64(0xffffffffffffffff, &(0x7f0000000100)=""/186, 0x4a9e280)
r3 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r3, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r3, 0x8)
r4 = socket$inet6_sctp(0xa, 0x805, 0x84)
r5 = accept4(r3, 0x0, 0x0, 0x0)
prctl$PR_SET_ENDIAN(0x14, 0x1)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
epoll_pwait(0xffffffffffffffff, &(0x7f0000000040)=[{}, {}, {}], 0x3, 0x0, &(0x7f0000000080)={0x9}, 0x8)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000280)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x54}, 0x98)
getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000008c0)={{{@in6, @in=@multicast2}}, {{@in6=@mcast1}, 0x0, @in6=@remote}}, &(0x7f00000009c0)=0xe8)

09:19:51 executing program 2:
r0 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x0, 0x0)
getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffff9c, 0x84, 0x13, &(0x7f0000000100)={<r1=>0x0, 0x8}, &(0x7f0000000180)=0x8)
ioctl$VIDIOC_S_OUTPUT(r0, 0xc004562f, &(0x7f0000000340)=0x1000)
setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f00000001c0)={r1, @in6={{0xa, 0x4e21, 0xfff, @ipv4={[], [], @rand_addr=0x8000}, 0x1}}}, 0x84)
r2 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2)
ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000380)={0x0, 0x0, 0x6, 0x0, [], [{0x9, 0x0, 0x9, 0x6, 0x401, 0xad}, {0x5, 0x2, 0xe68d, 0x5, 0x2, 0x5}], [[], [], [], [], [], []]})
ioctl$EVIOCSFF(r2, 0x40304580, &(0x7f0000000240)={0x53, 0x8, 0x0, {0x1f, 0x9}, {0x67e, 0x101}, @rumble={0x2}})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mq_open(0x0, 0x40, 0x0, 0x0)
syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2)
mount(0x0, &(0x7f0000000c40)='./file0\x00', &(0x7f00000001c0)='configfs\x00', 0x0, 0x0)
getdents64(0xffffffffffffffff, &(0x7f0000000100)=""/186, 0x4a9e280)
r3 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r3, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r3, 0x8)
r4 = socket$inet6_sctp(0xa, 0x805, 0x84)
r5 = accept4(r3, 0x0, 0x0, 0x0)
prctl$PR_SET_ENDIAN(0x14, 0x1)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
epoll_pwait(0xffffffffffffffff, &(0x7f0000000040)=[{}, {}, {}], 0x3, 0x0, &(0x7f0000000080)={0x9}, 0x8)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000280)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x54}, 0x98)
getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000008c0)={{{@in6, @in=@multicast2}}, {{@in6=@mcast1}, 0x0, @in6=@remote}}, &(0x7f00000009c0)=0xe8)

[  342.894713][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  342.900599][    C0] protocol 88fb is buggy, dev hsr_slave_1
09:19:51 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$CAPI_CLR_FLAGS(0xffffffffffffffff, 0x80044325, &(0x7f00000000c0))
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10)
connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000240)=""/183}, 0x48)
r2 = socket$kcm(0x29, 0x1000000000002, 0x0)
setsockopt(r2, 0x0, 0x3ff, 0x0, 0x0)
ioctl$KVM_GET_PIT(0xffffffffffffffff, 0xc048ae65, &(0x7f00000001c0))
write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[@ANYRESOCT], 0x337)
ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000100)={r0, r1})
ioctl$PIO_CMAP(0xffffffffffffffff, 0x4b71, 0x0)
recvmmsg(r2, &(0x7f0000002300)=[{{0x0, 0xfffffe19, 0x0, 0x0, 0x0, 0x7e}}], 0x2fd, 0x400002fd, 0x0)

[  343.214736][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  343.220590][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  343.296837][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  343.302705][    C1] protocol 88fb is buggy, dev hsr_slave_1
09:19:51 executing program 5:
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x7fffffff, 0x0)
openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video36\x00', 0x2, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00000000c0))
pipe(&(0x7f0000000280)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r1, &(0x7f0000000340), 0x10000014c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000240))
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, 0x0, &(0x7f0000000300)={&(0x7f0000000080), 0x8})
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
mount(0x0, &(0x7f0000000380)='.', &(0x7f0000fdb000)='ubifs\x00', 0x0, 0x0)

09:19:51 executing program 3:
r0 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x0, 0x0)
getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffff9c, 0x84, 0x13, &(0x7f0000000100)={<r1=>0x0, 0x8}, &(0x7f0000000180)=0x8)
ioctl$VIDIOC_S_OUTPUT(r0, 0xc004562f, &(0x7f0000000340)=0x1000)
setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f00000001c0)={r1, @in6={{0xa, 0x4e21, 0xfff, @ipv4={[], [], @rand_addr=0x8000}, 0x1}}}, 0x84)
r2 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2)
ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000380)={0x0, 0x0, 0x6, 0x0, [], [{0x9, 0x0, 0x9, 0x6, 0x401, 0xad}, {0x5, 0x2, 0xe68d, 0x5, 0x2, 0x5}], [[], [], [], [], [], []]})
ioctl$EVIOCSFF(r2, 0x40304580, &(0x7f0000000240)={0x53, 0x8, 0x0, {0x1f, 0x9}, {0x67e, 0x101}, @rumble={0x2}})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mq_open(0x0, 0x40, 0x0, 0x0)
syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2)
mount(0x0, &(0x7f0000000c40)='./file0\x00', &(0x7f00000001c0)='configfs\x00', 0x0, 0x0)
getdents64(0xffffffffffffffff, &(0x7f0000000100)=""/186, 0x4a9e280)
r3 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r3, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r3, 0x8)
r4 = socket$inet6_sctp(0xa, 0x805, 0x84)
r5 = accept4(r3, 0x0, 0x0, 0x0)
prctl$PR_SET_ENDIAN(0x14, 0x1)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
epoll_pwait(0xffffffffffffffff, &(0x7f0000000040)=[{}, {}, {}], 0x3, 0x0, &(0x7f0000000080)={0x9}, 0x8)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000280)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x54}, 0x98)
getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000008c0)={{{@in6, @in=@multicast2}}, {{@in6=@mcast1}, 0x0, @in6=@remote}}, &(0x7f00000009c0)=0xe8)

09:19:51 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$CAPI_CLR_FLAGS(0xffffffffffffffff, 0x80044325, &(0x7f00000000c0))
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10)
connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000240)=""/183}, 0x48)
r2 = socket$kcm(0x29, 0x1000000000002, 0x0)
setsockopt(r2, 0x0, 0x3ff, 0x0, 0x0)
ioctl$KVM_GET_PIT(0xffffffffffffffff, 0xc048ae65, &(0x7f00000001c0))
write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[@ANYRESOCT], 0x337)
ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000100)={r0, r1})
ioctl$PIO_CMAP(0xffffffffffffffff, 0x4b71, 0x0)
recvmmsg(r2, &(0x7f0000002300)=[{{0x0, 0xfffffe19, 0x0, 0x0, 0x0, 0x7e}}], 0x2fd, 0x400002fd, 0x0)

09:19:51 executing program 1:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000580)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20)
r2 = accept$alg(r1, 0x0, 0x0)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x30, 0x0, 0x0, 0x0, 0x0, {{}, 0x0, 0x5, 0x0, {0x14}}}, 0xffffffeb}}, 0x0)
readv(r2, &(0x7f00000007c0)=[{&(0x7f0000000d80)=""/4096, 0x20001d80}], 0x1)

[  343.893228][ T3865] UBIFS error (pid: 13840): cannot open "(null)", error -22
09:19:52 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = syz_open_dev$sndtimer(&(0x7f0000026000)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000001000)={{0x100000001}})
r2 = syz_open_dev$sndtimer(0x0, 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f000000efcc)={{0x100000001}})
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2)
dup2(r2, r1)

09:19:52 executing program 2:
r0 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x0, 0x0)
getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffff9c, 0x84, 0x13, &(0x7f0000000100)={<r1=>0x0, 0x8}, &(0x7f0000000180)=0x8)
ioctl$VIDIOC_S_OUTPUT(r0, 0xc004562f, &(0x7f0000000340)=0x1000)
setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f00000001c0)={r1, @in6={{0xa, 0x4e21, 0xfff, @ipv4={[], [], @rand_addr=0x8000}, 0x1}}}, 0x84)
r2 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2)
ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000380)={0x0, 0x0, 0x6, 0x0, [], [{0x9, 0x0, 0x9, 0x6, 0x401, 0xad}, {0x5, 0x2, 0xe68d, 0x5, 0x2, 0x5}], [[], [], [], [], [], []]})
ioctl$EVIOCSFF(r2, 0x40304580, &(0x7f0000000240)={0x53, 0x8, 0x0, {0x1f, 0x9}, {0x67e, 0x101}, @rumble={0x2}})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mq_open(0x0, 0x40, 0x0, 0x0)
syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2)
mount(0x0, &(0x7f0000000c40)='./file0\x00', &(0x7f00000001c0)='configfs\x00', 0x0, 0x0)
getdents64(0xffffffffffffffff, &(0x7f0000000100)=""/186, 0x4a9e280)
r3 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r3, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r3, 0x8)
r4 = socket$inet6_sctp(0xa, 0x805, 0x84)
r5 = accept4(r3, 0x0, 0x0, 0x0)
prctl$PR_SET_ENDIAN(0x14, 0x1)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
epoll_pwait(0xffffffffffffffff, &(0x7f0000000040)=[{}, {}, {}], 0x3, 0x0, &(0x7f0000000080)={0x9}, 0x8)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000280)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x54}, 0x98)
getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000008c0)={{{@in6, @in=@multicast2}}, {{@in6=@mcast1}, 0x0, @in6=@remote}}, &(0x7f00000009c0)=0xe8)

09:19:52 executing program 4:
r0 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x0, 0x0)
getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffff9c, 0x84, 0x13, &(0x7f0000000100)={<r1=>0x0, 0x8}, &(0x7f0000000180)=0x8)
ioctl$VIDIOC_S_OUTPUT(r0, 0xc004562f, &(0x7f0000000340)=0x1000)
setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f00000001c0)={r1, @in6={{0xa, 0x4e21, 0xfff, @ipv4={[], [], @rand_addr=0x8000}, 0x1}}}, 0x84)
r2 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2)
ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000380)={0x0, 0x0, 0x6, 0x0, [], [{0x9, 0x0, 0x9, 0x6, 0x401, 0xad}, {0x5, 0x2, 0xe68d, 0x5, 0x2, 0x5}], [[], [], [], [], [], []]})
ioctl$EVIOCSFF(r2, 0x40304580, &(0x7f0000000240)={0x53, 0x8, 0x0, {0x1f, 0x9}, {0x67e, 0x101}, @rumble={0x2}})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mq_open(0x0, 0x40, 0x0, 0x0)
syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2)
mount(0x0, &(0x7f0000000c40)='./file0\x00', &(0x7f00000001c0)='configfs\x00', 0x0, 0x0)
getdents64(0xffffffffffffffff, &(0x7f0000000100)=""/186, 0x4a9e280)
r3 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r3, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r3, 0x8)
r4 = socket$inet6_sctp(0xa, 0x805, 0x84)
r5 = accept4(r3, 0x0, 0x0, 0x0)
prctl$PR_SET_ENDIAN(0x14, 0x1)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
epoll_pwait(0xffffffffffffffff, &(0x7f0000000040)=[{}, {}, {}], 0x3, 0x0, &(0x7f0000000080)={0x9}, 0x8)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000280)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x54}, 0x98)
getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000008c0)={{{@in6, @in=@multicast2}}, {{@in6=@mcast1}, 0x0, @in6=@remote}}, &(0x7f00000009c0)=0xe8)

09:19:52 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000000)={0x7b, 0x0, [0x4b564d02, 0x3]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

09:19:52 executing program 2:
r0 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x0, 0x0)
getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffff9c, 0x84, 0x13, &(0x7f0000000100)={<r1=>0x0, 0x8}, &(0x7f0000000180)=0x8)
ioctl$VIDIOC_S_OUTPUT(r0, 0xc004562f, &(0x7f0000000340)=0x1000)
setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f00000001c0)={r1, @in6={{0xa, 0x4e21, 0xfff, @ipv4={[], [], @rand_addr=0x8000}, 0x1}}}, 0x84)
r2 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2)
ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000380)={0x0, 0x0, 0x6, 0x0, [], [{0x9, 0x0, 0x9, 0x6, 0x401, 0xad}, {0x5, 0x2, 0xe68d, 0x5, 0x2, 0x5}], [[], [], [], [], [], []]})
ioctl$EVIOCSFF(r2, 0x40304580, &(0x7f0000000240)={0x53, 0x8, 0x0, {0x1f, 0x9}, {0x67e, 0x101}, @rumble={0x2}})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mq_open(0x0, 0x40, 0x0, 0x0)
syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2)
mount(0x0, &(0x7f0000000c40)='./file0\x00', &(0x7f00000001c0)='configfs\x00', 0x0, 0x0)
getdents64(0xffffffffffffffff, &(0x7f0000000100)=""/186, 0x4a9e280)
r3 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r3, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r3, 0x8)
r4 = socket$inet6_sctp(0xa, 0x805, 0x84)
r5 = accept4(r3, 0x0, 0x0, 0x0)
prctl$PR_SET_ENDIAN(0x14, 0x1)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
epoll_pwait(0xffffffffffffffff, &(0x7f0000000040)=[{}, {}, {}], 0x3, 0x0, &(0x7f0000000080)={0x9}, 0x8)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000280)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x54}, 0x98)
getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000008c0)={{{@in6, @in=@multicast2}}, {{@in6=@mcast1}, 0x0, @in6=@remote}}, &(0x7f00000009c0)=0xe8)

09:19:52 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000000)={0x7b, 0x0, [0x4b564d02, 0x3]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

09:19:52 executing program 1:
capset(&(0x7f0000002ffa)={0x20080522}, &(0x7f0000000000))
bpf$MAP_CREATE(0x0, &(0x7f00000007c0)={0x17}, 0x2c)

09:19:53 executing program 1:
capset(&(0x7f0000002ffa)={0x20080522}, &(0x7f0000000000))
bpf$MAP_CREATE(0x0, &(0x7f00000007c0)={0x17}, 0x2c)

09:19:53 executing program 1:
capset(&(0x7f0000002ffa)={0x20080522}, &(0x7f0000000000))
bpf$MAP_CREATE(0x0, &(0x7f00000007c0)={0x17}, 0x2c)

09:19:53 executing program 5:
r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0)
ioctl$SG_IO(r0, 0x2285, &(0x7f00000018c0)={0x53, 0x0, 0x6, 0x8, @scatter={0x0, 0x0, 0x0}, &(0x7f00000016c0)="af4a8f996506", 0x0, 0x4, 0x1, 0x3, &(0x7f0000001880)})

09:19:53 executing program 3:
r0 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x0, 0x0)
getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffff9c, 0x84, 0x13, &(0x7f0000000100)={<r1=>0x0, 0x8}, &(0x7f0000000180)=0x8)
ioctl$VIDIOC_S_OUTPUT(r0, 0xc004562f, &(0x7f0000000340)=0x1000)
setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f00000001c0)={r1, @in6={{0xa, 0x4e21, 0xfff, @ipv4={[], [], @rand_addr=0x8000}, 0x1}}}, 0x84)
r2 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2)
ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000380)={0x0, 0x0, 0x6, 0x0, [], [{0x9, 0x0, 0x9, 0x6, 0x401, 0xad}, {0x5, 0x2, 0xe68d, 0x5, 0x2, 0x5}], [[], [], [], [], [], []]})
ioctl$EVIOCSFF(r2, 0x40304580, &(0x7f0000000240)={0x53, 0x8, 0x0, {0x1f, 0x9}, {0x67e, 0x101}, @rumble={0x2}})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mq_open(0x0, 0x40, 0x0, 0x0)
syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2)
mount(0x0, &(0x7f0000000c40)='./file0\x00', &(0x7f00000001c0)='configfs\x00', 0x0, 0x0)
getdents64(0xffffffffffffffff, &(0x7f0000000100)=""/186, 0x4a9e280)
r3 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r3, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r3, 0x8)
r4 = socket$inet6_sctp(0xa, 0x805, 0x84)
r5 = accept4(r3, 0x0, 0x0, 0x0)
prctl$PR_SET_ENDIAN(0x14, 0x1)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
epoll_pwait(0xffffffffffffffff, &(0x7f0000000040)=[{}, {}, {}], 0x3, 0x0, &(0x7f0000000080)={0x9}, 0x8)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000280)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x54}, 0x98)
getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000008c0)={{{@in6, @in=@multicast2}}, {{@in6=@mcast1}, 0x0, @in6=@remote}}, &(0x7f00000009c0)=0xe8)

09:19:53 executing program 2:
r0 = socket$inet(0x10, 0x3, 0xc)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000020807031dfffd946fa283000a200a0009000500040000000c1baba20400ff7e28000000110affffba010000000009b356da5a80d18be34c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0)

[  345.142544][T13878] netlink: 20 bytes leftover after parsing attributes in process `syz-executor2'.
09:19:53 executing program 2:
r0 = socket$inet(0x10, 0x3, 0xc)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000020807031dfffd946fa283000a200a0009000500040000000c1baba20400ff7e28000000110affffba010000000009b356da5a80d18be34c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0)

09:19:53 executing program 5:
r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x1, 0x0)
readv(r0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/7, 0x7}], 0x1)
read$FUSE(r0, &(0x7f0000000300), 0x1000)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")

[  345.417534][T13895] netlink: 20 bytes leftover after parsing attributes in process `syz-executor2'.
09:19:53 executing program 4:
r0 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x0, 0x0)
getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffff9c, 0x84, 0x13, &(0x7f0000000100)={<r1=>0x0, 0x8}, &(0x7f0000000180)=0x8)
ioctl$VIDIOC_S_OUTPUT(r0, 0xc004562f, &(0x7f0000000340)=0x1000)
setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f00000001c0)={r1, @in6={{0xa, 0x4e21, 0xfff, @ipv4={[], [], @rand_addr=0x8000}, 0x1}}}, 0x84)
r2 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2)
ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000380)={0x0, 0x0, 0x6, 0x0, [], [{0x9, 0x0, 0x9, 0x6, 0x401, 0xad}, {0x5, 0x2, 0xe68d, 0x5, 0x2, 0x5}], [[], [], [], [], [], []]})
ioctl$EVIOCSFF(r2, 0x40304580, &(0x7f0000000240)={0x53, 0x8, 0x0, {0x1f, 0x9}, {0x67e, 0x101}, @rumble={0x2}})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mq_open(0x0, 0x40, 0x0, 0x0)
syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2)
mount(0x0, &(0x7f0000000c40)='./file0\x00', &(0x7f00000001c0)='configfs\x00', 0x0, 0x0)
getdents64(0xffffffffffffffff, &(0x7f0000000100)=""/186, 0x4a9e280)
r3 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r3, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r3, 0x8)
r4 = socket$inet6_sctp(0xa, 0x805, 0x84)
r5 = accept4(r3, 0x0, 0x0, 0x0)
prctl$PR_SET_ENDIAN(0x14, 0x1)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
epoll_pwait(0xffffffffffffffff, &(0x7f0000000040)=[{}, {}, {}], 0x3, 0x0, &(0x7f0000000080)={0x9}, 0x8)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000280)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x54}, 0x98)
getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000008c0)={{{@in6, @in=@multicast2}}, {{@in6=@mcast1}, 0x0, @in6=@remote}}, &(0x7f00000009c0)=0xe8)

09:19:53 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000000)={0x7b, 0x0, [0x4b564d02, 0x3]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

09:19:53 executing program 1:
capset(&(0x7f0000002ffa)={0x20080522}, &(0x7f0000000000))
bpf$MAP_CREATE(0x0, &(0x7f00000007c0)={0x17}, 0x2c)

09:19:53 executing program 2:
r0 = socket$inet(0x10, 0x3, 0xc)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000020807031dfffd946fa283000a200a0009000500040000000c1baba20400ff7e28000000110affffba010000000009b356da5a80d18be34c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0)

09:19:53 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='illinois\x00', 0x9)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0)
getsockopt$inet_tcp_buf(r1, 0x6, 0x1a, &(0x7f0000001200)=""/145, &(0x7f0000000040)=0x91)

[  345.595755][T13905] netlink: 20 bytes leftover after parsing attributes in process `syz-executor2'.
09:19:53 executing program 2:
r0 = socket$inet(0x10, 0x3, 0xc)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000020807031dfffd946fa283000a200a0009000500040000000c1baba20400ff7e28000000110affffba010000000009b356da5a80d18be34c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0)

09:19:54 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='illinois\x00', 0x9)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0)
getsockopt$inet_tcp_buf(r1, 0x6, 0x1a, &(0x7f0000001200)=""/145, &(0x7f0000000040)=0x91)

[  345.980319][T13921] netlink: 20 bytes leftover after parsing attributes in process `syz-executor2'.
09:19:54 executing program 3:
r0 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x0, 0x0)
getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffff9c, 0x84, 0x13, &(0x7f0000000100)={<r1=>0x0, 0x8}, &(0x7f0000000180)=0x8)
ioctl$VIDIOC_S_OUTPUT(r0, 0xc004562f, &(0x7f0000000340)=0x1000)
setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f00000001c0)={r1, @in6={{0xa, 0x4e21, 0xfff, @ipv4={[], [], @rand_addr=0x8000}, 0x1}}}, 0x84)
r2 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2)
ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000380)={0x0, 0x0, 0x6, 0x0, [], [{0x9, 0x0, 0x9, 0x6, 0x401, 0xad}, {0x5, 0x2, 0xe68d, 0x5, 0x2, 0x5}], [[], [], [], [], [], []]})
ioctl$EVIOCSFF(r2, 0x40304580, &(0x7f0000000240)={0x53, 0x8, 0x0, {0x1f, 0x9}, {0x67e, 0x101}, @rumble={0x2}})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mq_open(0x0, 0x40, 0x0, 0x0)
syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2)
mount(0x0, &(0x7f0000000c40)='./file0\x00', &(0x7f00000001c0)='configfs\x00', 0x0, 0x0)
getdents64(0xffffffffffffffff, &(0x7f0000000100)=""/186, 0x4a9e280)
r3 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r3, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r3, 0x8)
r4 = socket$inet6_sctp(0xa, 0x805, 0x84)
r5 = accept4(r3, 0x0, 0x0, 0x0)
prctl$PR_SET_ENDIAN(0x14, 0x1)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
epoll_pwait(0xffffffffffffffff, &(0x7f0000000040)=[{}, {}, {}], 0x3, 0x0, &(0x7f0000000080)={0x9}, 0x8)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000280)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x54}, 0x98)
getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000008c0)={{{@in6, @in=@multicast2}}, {{@in6=@mcast1}, 0x0, @in6=@remote}}, &(0x7f00000009c0)=0xe8)

09:19:54 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000000)={0x7b, 0x0, [0x4b564d02, 0x3]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

09:19:54 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='illinois\x00', 0x9)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0)
getsockopt$inet_tcp_buf(r1, 0x6, 0x1a, &(0x7f0000001200)=""/145, &(0x7f0000000040)=0x91)

09:19:54 executing program 4:
write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYPTR64=&(0x7f0000000040)=ANY=[@ANYRES16]], 0x1)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x220000002b)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000040))
ptrace$cont(0x1f, r0, 0x0, 0x0)

09:19:54 executing program 5:
r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x1, 0x0)
readv(r0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/7, 0x7}], 0x1)
read$FUSE(r0, &(0x7f0000000300), 0x1000)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")

09:19:54 executing program 2:
open(0x0, 0x0, 0x0)
r0 = creat(&(0x7f0000000040)='./file1\x00', 0x0)
fallocate(r0, 0x0, 0x0, 0x8000011)
fallocate(r0, 0x8, 0x0, 0x10000)

09:19:54 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='illinois\x00', 0x9)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0)
getsockopt$inet_tcp_buf(r1, 0x6, 0x1a, &(0x7f0000001200)=""/145, &(0x7f0000000040)=0x91)

09:19:54 executing program 0:
r0 = syz_open_dev$vivid(&(0x7f00000001c0)='/dev/video#\x00', 0x1, 0x2)
ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000200)={0x0, 0x2})

09:19:54 executing program 2:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x12, 0x3, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0xf, 0x57}}, &(0x7f0000000080)='M[Z\xf2\xa4\nf07\xc3Ju-\x01\xc2W>\x86E\x10*\xe7{\x15\xba)%\xdc@\x8f*\xe1=\x85-\xf6\xd3\xf2a|\xa6\x1f\x97\xbe70BL\x7f=\xc08\xc2\xb4\x85\xfc?8\xec\x93\a[M-\xcc\b\xad\xceP9\x8a\xc40\x83\xd5\b\x1d\xc7o\xbb\xec\x87\xdf\xd4\x9c\xa7s\xbf\xfd\xdc\xc9\xffI\x82r\x90\x05\xb5\a\xec`VY\x94}\xbfMF\x84\xb9ZmFW\xe39+s\xa16\xff\xb5 \xa4d\x1bm=\x1c\xa1`\"\xaf\xe4\x9b\xd8\xcb\xb3\x82D\xc2\xa4>\x87\xbd\xfe\x1b\x1b\xae\xe7\xe4\x7f\xd0/LS\xdf\xd4\xc7\x91S\xb7\x1f\f\xbe\xde4F+\x85\xb4\x97', 0x1, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], 0x0, 0x8}, 0x48)

09:19:54 executing program 0:
r0 = syz_open_dev$vivid(&(0x7f00000001c0)='/dev/video#\x00', 0x1, 0x2)
ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000200)={0x0, 0x2})

09:19:54 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000080)={0x7ff}, 0x8)
sendmmsg$inet_sctp(r0, &(0x7f0000002bc0)=[{&(0x7f0000000000)=@in={0x2, 0x0, @local}, 0x10, &(0x7f0000000500)=[{&(0x7f00000001c0)="93", 0x1}], 0x1}], 0x1, 0x0)

09:19:54 executing program 2:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x12, 0x3, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0xf, 0x57}}, &(0x7f0000000080)='M[Z\xf2\xa4\nf07\xc3Ju-\x01\xc2W>\x86E\x10*\xe7{\x15\xba)%\xdc@\x8f*\xe1=\x85-\xf6\xd3\xf2a|\xa6\x1f\x97\xbe70BL\x7f=\xc08\xc2\xb4\x85\xfc?8\xec\x93\a[M-\xcc\b\xad\xceP9\x8a\xc40\x83\xd5\b\x1d\xc7o\xbb\xec\x87\xdf\xd4\x9c\xa7s\xbf\xfd\xdc\xc9\xffI\x82r\x90\x05\xb5\a\xec`VY\x94}\xbfMF\x84\xb9ZmFW\xe39+s\xa16\xff\xb5 \xa4d\x1bm=\x1c\xa1`\"\xaf\xe4\x9b\xd8\xcb\xb3\x82D\xc2\xa4>\x87\xbd\xfe\x1b\x1b\xae\xe7\xe4\x7f\xd0/LS\xdf\xd4\xc7\x91S\xb7\x1f\f\xbe\xde4F+\x85\xb4\x97', 0x1, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], 0x0, 0x8}, 0x48)

09:19:55 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000080)={0x7ff}, 0x8)
sendmmsg$inet_sctp(r0, &(0x7f0000002bc0)=[{&(0x7f0000000000)=@in={0x2, 0x0, @local}, 0x10, &(0x7f0000000500)=[{&(0x7f00000001c0)="93", 0x1}], 0x1}], 0x1, 0x0)

09:19:55 executing program 0:
r0 = syz_open_dev$vivid(&(0x7f00000001c0)='/dev/video#\x00', 0x1, 0x2)
ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000200)={0x0, 0x2})

09:19:55 executing program 2:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x12, 0x3, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0xf, 0x57}}, &(0x7f0000000080)='M[Z\xf2\xa4\nf07\xc3Ju-\x01\xc2W>\x86E\x10*\xe7{\x15\xba)%\xdc@\x8f*\xe1=\x85-\xf6\xd3\xf2a|\xa6\x1f\x97\xbe70BL\x7f=\xc08\xc2\xb4\x85\xfc?8\xec\x93\a[M-\xcc\b\xad\xceP9\x8a\xc40\x83\xd5\b\x1d\xc7o\xbb\xec\x87\xdf\xd4\x9c\xa7s\xbf\xfd\xdc\xc9\xffI\x82r\x90\x05\xb5\a\xec`VY\x94}\xbfMF\x84\xb9ZmFW\xe39+s\xa16\xff\xb5 \xa4d\x1bm=\x1c\xa1`\"\xaf\xe4\x9b\xd8\xcb\xb3\x82D\xc2\xa4>\x87\xbd\xfe\x1b\x1b\xae\xe7\xe4\x7f\xd0/LS\xdf\xd4\xc7\x91S\xb7\x1f\f\xbe\xde4F+\x85\xb4\x97', 0x1, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], 0x0, 0x8}, 0x48)

[  347.374730][    C0] net_ratelimit: 20 callbacks suppressed
[  347.374742][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  347.386284][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  347.455499][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  347.461275][    C1] protocol 88fb is buggy, dev hsr_slave_1
[  347.774751][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  347.780634][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  348.334712][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  348.340494][    C1] protocol 88fb is buggy, dev hsr_slave_1
[  348.346365][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  348.352147][    C1] protocol 88fb is buggy, dev hsr_slave_1
09:19:57 executing program 4:
write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYPTR64=&(0x7f0000000040)=ANY=[@ANYRES16]], 0x1)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x220000002b)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000040))
ptrace$cont(0x1f, r0, 0x0, 0x0)

09:19:57 executing program 3:
pipe(&(0x7f00000002c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$alg(0x26, 0x5, 0x0)
write$binfmt_script(r1, &(0x7f0000000000)=ANY=[@ANYRES32], 0xffffffee)
bind$alg(r2, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0)
r3 = accept4(r2, 0x0, 0x0, 0x0)
r4 = accept4$alg(r3, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
splice(r0, 0x0, r4, 0x0, 0x200000, 0x0)

09:19:57 executing program 2:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x12, 0x3, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0xf, 0x57}}, &(0x7f0000000080)='M[Z\xf2\xa4\nf07\xc3Ju-\x01\xc2W>\x86E\x10*\xe7{\x15\xba)%\xdc@\x8f*\xe1=\x85-\xf6\xd3\xf2a|\xa6\x1f\x97\xbe70BL\x7f=\xc08\xc2\xb4\x85\xfc?8\xec\x93\a[M-\xcc\b\xad\xceP9\x8a\xc40\x83\xd5\b\x1d\xc7o\xbb\xec\x87\xdf\xd4\x9c\xa7s\xbf\xfd\xdc\xc9\xffI\x82r\x90\x05\xb5\a\xec`VY\x94}\xbfMF\x84\xb9ZmFW\xe39+s\xa16\xff\xb5 \xa4d\x1bm=\x1c\xa1`\"\xaf\xe4\x9b\xd8\xcb\xb3\x82D\xc2\xa4>\x87\xbd\xfe\x1b\x1b\xae\xe7\xe4\x7f\xd0/LS\xdf\xd4\xc7\x91S\xb7\x1f\f\xbe\xde4F+\x85\xb4\x97', 0x1, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], 0x0, 0x8}, 0x48)

09:19:57 executing program 0:
r0 = syz_open_dev$vivid(&(0x7f00000001c0)='/dev/video#\x00', 0x1, 0x2)
ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000200)={0x0, 0x2})

09:19:57 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000080)={0x7ff}, 0x8)
sendmmsg$inet_sctp(r0, &(0x7f0000002bc0)=[{&(0x7f0000000000)=@in={0x2, 0x0, @local}, 0x10, &(0x7f0000000500)=[{&(0x7f00000001c0)="93", 0x1}], 0x1}], 0x1, 0x0)

09:19:57 executing program 5:
r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x1, 0x0)
readv(r0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/7, 0x7}], 0x1)
read$FUSE(r0, &(0x7f0000000300), 0x1000)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")

09:19:57 executing program 0:
r0 = socket$caif_stream(0x25, 0x1, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
io_setup(0x1000, &(0x7f0000000080)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000c80)=[&(0x7f0000000380)={0x300000000000000, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000240)="e1", 0x1}])

09:19:57 executing program 2:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_mreqn(r0, 0x0, 0x23, 0xfffffffffffffffe, 0x2d5)

09:19:57 executing program 2:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_mreqn(r0, 0x0, 0x23, 0xfffffffffffffffe, 0x2d5)

09:19:57 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000080)={0x7ff}, 0x8)
sendmmsg$inet_sctp(r0, &(0x7f0000002bc0)=[{&(0x7f0000000000)=@in={0x2, 0x0, @local}, 0x10, &(0x7f0000000500)=[{&(0x7f00000001c0)="93", 0x1}], 0x1}], 0x1, 0x0)

09:19:57 executing program 2:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_mreqn(r0, 0x0, 0x23, 0xfffffffffffffffe, 0x2d5)

09:19:57 executing program 2:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_mreqn(r0, 0x0, 0x23, 0xfffffffffffffffe, 0x2d5)

09:20:00 executing program 4:
write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYPTR64=&(0x7f0000000040)=ANY=[@ANYRES16]], 0x1)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x220000002b)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000040))
ptrace$cont(0x1f, r0, 0x0, 0x0)

09:20:00 executing program 0:
r0 = socket$caif_stream(0x25, 0x1, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
io_setup(0x1000, &(0x7f0000000080)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000c80)=[&(0x7f0000000380)={0x300000000000000, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000240)="e1", 0x1}])

09:20:00 executing program 1:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
epoll_create1(0x1)

09:20:00 executing program 2:
r0 = socket$inet6(0xa, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup2(r1, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000d1c000)=0x6, 0x4)
bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @mcast2={0xff, 0x5}}, 0x1c)

09:20:00 executing program 5:
r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x1, 0x0)
readv(r0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/7, 0x7}], 0x1)
read$FUSE(r0, &(0x7f0000000300), 0x1000)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")

09:20:00 executing program 3:
open(&(0x7f0000f9aff8)='./file0\x00', 0x8000000000141046, 0x0)
mount(&(0x7f0000ae2d7d), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='nfs4\x00', 0x0, &(0x7f0000000000)='v3')

09:20:00 executing program 1:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
epoll_create1(0x1)

09:20:00 executing program 2:
r0 = socket$inet6(0xa, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup2(r1, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000d1c000)=0x6, 0x4)
bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @mcast2={0xff, 0x5}}, 0x1c)

09:20:00 executing program 3:
open(&(0x7f0000f9aff8)='./file0\x00', 0x8000000000141046, 0x0)
mount(&(0x7f0000ae2d7d), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='nfs4\x00', 0x0, &(0x7f0000000000)='v3')

09:20:00 executing program 2:
r0 = socket$inet6(0xa, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup2(r1, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000d1c000)=0x6, 0x4)
bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @mcast2={0xff, 0x5}}, 0x1c)

[  352.494729][    C1] net_ratelimit: 20 callbacks suppressed
[  352.494737][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  352.506396][    C1] protocol 88fb is buggy, dev hsr_slave_1
[  352.512218][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  352.518045][    C1] protocol 88fb is buggy, dev hsr_slave_1
09:20:00 executing program 0:
r0 = socket$caif_stream(0x25, 0x1, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
io_setup(0x1000, &(0x7f0000000080)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000c80)=[&(0x7f0000000380)={0x300000000000000, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000240)="e1", 0x1}])

09:20:00 executing program 3:
open(&(0x7f0000f9aff8)='./file0\x00', 0x8000000000141046, 0x0)
mount(&(0x7f0000ae2d7d), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='nfs4\x00', 0x0, &(0x7f0000000000)='v3')

[  353.294788][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  353.300593][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  353.614824][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  353.620721][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  353.694703][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  353.700543][    C1] protocol 88fb is buggy, dev hsr_slave_1
09:20:03 executing program 2:
r0 = socket$inet6(0xa, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup2(r1, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000d1c000)=0x6, 0x4)
bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @mcast2={0xff, 0x5}}, 0x1c)

09:20:03 executing program 0:
r0 = socket$caif_stream(0x25, 0x1, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
io_setup(0x1000, &(0x7f0000000080)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000c80)=[&(0x7f0000000380)={0x300000000000000, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000240)="e1", 0x1}])

09:20:03 executing program 1:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
epoll_create1(0x1)

09:20:03 executing program 4:
write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYPTR64=&(0x7f0000000040)=ANY=[@ANYRES16]], 0x1)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x220000002b)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000040))
ptrace$cont(0x1f, r0, 0x0, 0x0)

09:20:03 executing program 5:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000200)=@ethtool_dump={0x23}})
close(0xffffffffffffffff)

09:20:03 executing program 3:
open(&(0x7f0000f9aff8)='./file0\x00', 0x8000000000141046, 0x0)
mount(&(0x7f0000ae2d7d), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='nfs4\x00', 0x0, &(0x7f0000000000)='v3')

09:20:03 executing program 5:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000200)=@ethtool_dump={0x23}})
close(0xffffffffffffffff)

09:20:03 executing program 1:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
epoll_create1(0x1)

09:20:03 executing program 2:
r0 = socket$inet6(0xa, 0x1, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x6, 0xfffffffffffffffe}, 0x4)
dup2(r0, r1)

09:20:03 executing program 3:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$pptp(0x18, 0x1, 0x2)
bind$pptp(r0, &(0x7f0000000280)={0x18, 0x2, {0x0, @loopback}}, 0x1e)
connect$pptp(r0, &(0x7f0000000040)={0x18, 0x2, {0x0, @multicast1}}, 0x1e)

09:20:03 executing program 1:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070")
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0xe}]}}}]}, 0x3c}}, 0x0)

09:20:03 executing program 5:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000200)=@ethtool_dump={0x23}})
close(0xffffffffffffffff)

[  355.603333][T14108] validate_nla: 17 callbacks suppressed
[  355.603345][T14108] netlink: 'syz-executor1': attribute type 14 has an invalid length.
09:20:03 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x48, 0x1, 0x28}]}, &(0x7f0000000040)='\x19\xb7G>b\xc6\x05eA\x94\xed\b\xce\'\xf1\xeabu*aJ\xd68v\xa9\x01\xcb\xde\xf6\xde5O]\xf8\xd9\x8f\x86\b3\xcf\x95Mr*\x19\x18Y\xca\xe7\x87^\x9d40\x9e\xca\x91&5\x1b\x1c\xcac}\x15&\x06O\x9e\xe1\x85/\x02\x1a\xff\x90\x04\xab\x11\xae\x96h\xc3\xcf\x17\x17\xce\xe0\xd3\x9e\xdagk\xb7C?\xd9\xd0}\xd8\v\x1e(\xe4\x8c\xb3+g[\xdb\x03\x1d\x8f\x11\x9e', 0xffffffffffffffff, 0x409, &(0x7f00000000c0)=""/251, 0x0, 0x0, [], 0x0, 0xe}, 0x48)

[  357.774735][    C0] net_ratelimit: 20 callbacks suppressed
[  357.774745][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  357.786311][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  357.854717][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  357.860568][    C1] protocol 88fb is buggy, dev hsr_slave_1
[  358.174764][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  358.180626][    C0] protocol 88fb is buggy, dev hsr_slave_1
09:20:06 executing program 5:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000200)=@ethtool_dump={0x23}})
close(0xffffffffffffffff)

09:20:06 executing program 2:
r0 = socket$inet6(0xa, 0x1, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x6, 0xfffffffffffffffe}, 0x4)
dup2(r0, r1)

09:20:06 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x48, 0x1, 0x28}]}, &(0x7f0000000040)='\x19\xb7G>b\xc6\x05eA\x94\xed\b\xce\'\xf1\xeabu*aJ\xd68v\xa9\x01\xcb\xde\xf6\xde5O]\xf8\xd9\x8f\x86\b3\xcf\x95Mr*\x19\x18Y\xca\xe7\x87^\x9d40\x9e\xca\x91&5\x1b\x1c\xcac}\x15&\x06O\x9e\xe1\x85/\x02\x1a\xff\x90\x04\xab\x11\xae\x96h\xc3\xcf\x17\x17\xce\xe0\xd3\x9e\xdagk\xb7C?\xd9\xd0}\xd8\v\x1e(\xe4\x8c\xb3+g[\xdb\x03\x1d\x8f\x11\x9e', 0xffffffffffffffff, 0x409, &(0x7f00000000c0)=""/251, 0x0, 0x0, [], 0x0, 0xe}, 0x48)

09:20:06 executing program 3:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$pptp(0x18, 0x1, 0x2)
bind$pptp(r0, &(0x7f0000000280)={0x18, 0x2, {0x0, @loopback}}, 0x1e)
connect$pptp(r0, &(0x7f0000000040)={0x18, 0x2, {0x0, @multicast1}}, 0x1e)

09:20:06 executing program 1:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070")
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0xe}]}}}]}, 0x3c}}, 0x0)

09:20:06 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$pptp(0x18, 0x1, 0x2)
bind$pptp(r0, &(0x7f0000000280)={0x18, 0x2, {0x0, @loopback}}, 0x1e)
connect$pptp(r0, &(0x7f0000000040)={0x18, 0x2, {0x0, @multicast1}}, 0x1e)

09:20:06 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x48, 0x1, 0x28}]}, &(0x7f0000000040)='\x19\xb7G>b\xc6\x05eA\x94\xed\b\xce\'\xf1\xeabu*aJ\xd68v\xa9\x01\xcb\xde\xf6\xde5O]\xf8\xd9\x8f\x86\b3\xcf\x95Mr*\x19\x18Y\xca\xe7\x87^\x9d40\x9e\xca\x91&5\x1b\x1c\xcac}\x15&\x06O\x9e\xe1\x85/\x02\x1a\xff\x90\x04\xab\x11\xae\x96h\xc3\xcf\x17\x17\xce\xe0\xd3\x9e\xdagk\xb7C?\xd9\xd0}\xd8\v\x1e(\xe4\x8c\xb3+g[\xdb\x03\x1d\x8f\x11\x9e', 0xffffffffffffffff, 0x409, &(0x7f00000000c0)=""/251, 0x0, 0x0, [], 0x0, 0xe}, 0x48)

09:20:06 executing program 5:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$sg(&(0x7f00000002c0)='/dev/sg#\x00', 0x0, 0x0)
syz_open_dev$sg(0x0, 0x7, 0x4000000081)
ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0)
r3 = syz_open_dev$vcsa(0x0, 0x0, 0x400400)
sendmsg$alg(r3, 0x0, 0x400000d)
r4 = gettid()
syz_genetlink_get_family_id$fou(&(0x7f0000000200)='fou\x00')
sendmsg$FOU_CMD_GET(r3, 0x0, 0x40)
getgid()
writev(0xffffffffffffffff, 0x0, 0x0)
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
clock_gettime(0x0, &(0x7f0000000140)={<r5=>0x0, <r6=>0x0})
ioctl$KVM_HYPERV_EVENTFD(r3, 0x4018aebd, &(0x7f00000000c0)={0x2, r3})
timer_settime(0x0, 0x1, &(0x7f000006b000)={{0x0, 0x1c9c380}, {r5, r6+30000000}}, &(0x7f0000000000))
tkill(r4, 0x1004000000016)
close(r2)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000300), 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
timer_delete(0x0)

[  358.505714][T14134] netlink: 'syz-executor1': attribute type 14 has an invalid length.
09:20:06 executing program 2:
r0 = socket$inet6(0xa, 0x1, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x6, 0xfffffffffffffffe}, 0x4)
dup2(r0, r1)

09:20:06 executing program 3:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$pptp(0x18, 0x1, 0x2)
bind$pptp(r0, &(0x7f0000000280)={0x18, 0x2, {0x0, @loopback}}, 0x1e)
connect$pptp(r0, &(0x7f0000000040)={0x18, 0x2, {0x0, @multicast1}}, 0x1e)

09:20:06 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$pptp(0x18, 0x1, 0x2)
bind$pptp(r0, &(0x7f0000000280)={0x18, 0x2, {0x0, @loopback}}, 0x1e)
connect$pptp(r0, &(0x7f0000000040)={0x18, 0x2, {0x0, @multicast1}}, 0x1e)

[  358.734718][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  358.740625][    C1] protocol 88fb is buggy, dev hsr_slave_1
[  358.746519][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  358.752314][    C1] protocol 88fb is buggy, dev hsr_slave_1
09:20:06 executing program 1:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070")
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0xe}]}}}]}, 0x3c}}, 0x0)

09:20:06 executing program 2:
r0 = socket$inet6(0xa, 0x1, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x6, 0xfffffffffffffffe}, 0x4)
dup2(r0, r1)

09:20:07 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x48, 0x1, 0x28}]}, &(0x7f0000000040)='\x19\xb7G>b\xc6\x05eA\x94\xed\b\xce\'\xf1\xeabu*aJ\xd68v\xa9\x01\xcb\xde\xf6\xde5O]\xf8\xd9\x8f\x86\b3\xcf\x95Mr*\x19\x18Y\xca\xe7\x87^\x9d40\x9e\xca\x91&5\x1b\x1c\xcac}\x15&\x06O\x9e\xe1\x85/\x02\x1a\xff\x90\x04\xab\x11\xae\x96h\xc3\xcf\x17\x17\xce\xe0\xd3\x9e\xdagk\xb7C?\xd9\xd0}\xd8\v\x1e(\xe4\x8c\xb3+g[\xdb\x03\x1d\x8f\x11\x9e', 0xffffffffffffffff, 0x409, &(0x7f00000000c0)=""/251, 0x0, 0x0, [], 0x0, 0xe}, 0x48)

09:20:07 executing program 3:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$pptp(0x18, 0x1, 0x2)
bind$pptp(r0, &(0x7f0000000280)={0x18, 0x2, {0x0, @loopback}}, 0x1e)
connect$pptp(r0, &(0x7f0000000040)={0x18, 0x2, {0x0, @multicast1}}, 0x1e)

[  358.889150][T14163] netlink: 'syz-executor1': attribute type 14 has an invalid length.
09:20:07 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$pptp(0x18, 0x1, 0x2)
bind$pptp(r0, &(0x7f0000000280)={0x18, 0x2, {0x0, @loopback}}, 0x1e)
connect$pptp(r0, &(0x7f0000000040)={0x18, 0x2, {0x0, @multicast1}}, 0x1e)

09:20:07 executing program 2:
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000013c0)={{{@in, @in6=@ipv4, 0x0, 0x0, 0x0, 0xce, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0x32}, 0x0, @in6}}, 0xe8)
connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c)

09:20:07 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe2(&(0x7f00007f2000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
vmsplice(r0, 0x0, 0x0, 0x100000000)

09:20:07 executing program 3:
syslog(0x5, 0x0, 0x0)
syslog(0x4, &(0x7f0000000100)=""/112, 0x70)

09:20:09 executing program 5:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$sg(&(0x7f00000002c0)='/dev/sg#\x00', 0x0, 0x0)
syz_open_dev$sg(0x0, 0x7, 0x4000000081)
ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0)
r3 = syz_open_dev$vcsa(0x0, 0x0, 0x400400)
sendmsg$alg(r3, 0x0, 0x400000d)
r4 = gettid()
syz_genetlink_get_family_id$fou(&(0x7f0000000200)='fou\x00')
sendmsg$FOU_CMD_GET(r3, 0x0, 0x40)
getgid()
writev(0xffffffffffffffff, 0x0, 0x0)
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
clock_gettime(0x0, &(0x7f0000000140)={<r5=>0x0, <r6=>0x0})
ioctl$KVM_HYPERV_EVENTFD(r3, 0x4018aebd, &(0x7f00000000c0)={0x2, r3})
timer_settime(0x0, 0x1, &(0x7f000006b000)={{0x0, 0x1c9c380}, {r5, r6+30000000}}, &(0x7f0000000000))
tkill(r4, 0x1004000000016)
close(r2)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000300), 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
timer_delete(0x0)

09:20:09 executing program 0:
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, 0x0)
creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90)
r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$P9_RSTAT(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="510000007d000000004a0000000000000000000000000000000000000000000000000000000000000b002f080000006c6f6f702300000001402a0b002f6465762f6c6f"], 0x43)
sendfile(r1, r1, &(0x7f0000000140), 0x7fff)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)

09:20:09 executing program 4:
r0 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0)
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

09:20:09 executing program 3:
syslog(0x5, 0x0, 0x0)
syslog(0x4, &(0x7f0000000100)=""/112, 0x70)

09:20:09 executing program 2:
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000013c0)={{{@in, @in6=@ipv4, 0x0, 0x0, 0x0, 0xce, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0x32}, 0x0, @in6}}, 0xe8)
connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c)

09:20:09 executing program 1:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070")
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0xe}]}}}]}, 0x3c}}, 0x0)

[  361.648808][T14197] netlink: 'syz-executor1': attribute type 14 has an invalid length.
09:20:09 executing program 3:
syslog(0x5, 0x0, 0x0)
syslog(0x4, &(0x7f0000000100)=""/112, 0x70)

09:20:09 executing program 4:
r0 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0)
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

09:20:09 executing program 2:
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000013c0)={{{@in, @in6=@ipv4, 0x0, 0x0, 0x0, 0xce, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0x32}, 0x0, @in6}}, 0xe8)
connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c)

09:20:10 executing program 4:
r0 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0)
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

09:20:10 executing program 3:
syslog(0x5, 0x0, 0x0)
syslog(0x4, &(0x7f0000000100)=""/112, 0x70)

09:20:10 executing program 1:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$sg(&(0x7f00000002c0)='/dev/sg#\x00', 0x0, 0x0)
syz_open_dev$sg(0x0, 0x7, 0x4000000081)
ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0)
r3 = syz_open_dev$vcsa(0x0, 0x0, 0x400400)
sendmsg$alg(r3, 0x0, 0x400000d)
r4 = gettid()
syz_genetlink_get_family_id$fou(&(0x7f0000000200)='fou\x00')
sendmsg$FOU_CMD_GET(r3, 0x0, 0x40)
getgid()
writev(0xffffffffffffffff, 0x0, 0x0)
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
clock_gettime(0x0, &(0x7f0000000140)={<r5=>0x0, <r6=>0x0})
ioctl$KVM_HYPERV_EVENTFD(r3, 0x4018aebd, &(0x7f00000000c0)={0x2, r3})
timer_settime(0x0, 0x1, &(0x7f000006b000)={{0x0, 0x1c9c380}, {r5, r6+30000000}}, &(0x7f0000000000))
tkill(r4, 0x1004000000016)
close(r2)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000300), 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
timer_delete(0x0)

[  362.894730][    C1] net_ratelimit: 20 callbacks suppressed
[  362.894740][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  362.906420][    C1] protocol 88fb is buggy, dev hsr_slave_1
[  362.912216][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  362.918021][    C1] protocol 88fb is buggy, dev hsr_slave_1
[  363.694744][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  363.700630][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  364.014740][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  364.020647][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  364.094712][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  364.100551][    C1] protocol 88fb is buggy, dev hsr_slave_1
09:20:13 executing program 5:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$sg(&(0x7f00000002c0)='/dev/sg#\x00', 0x0, 0x0)
syz_open_dev$sg(0x0, 0x7, 0x4000000081)
ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0)
r3 = syz_open_dev$vcsa(0x0, 0x0, 0x400400)
sendmsg$alg(r3, 0x0, 0x400000d)
r4 = gettid()
syz_genetlink_get_family_id$fou(&(0x7f0000000200)='fou\x00')
sendmsg$FOU_CMD_GET(r3, 0x0, 0x40)
getgid()
writev(0xffffffffffffffff, 0x0, 0x0)
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
clock_gettime(0x0, &(0x7f0000000140)={<r5=>0x0, <r6=>0x0})
ioctl$KVM_HYPERV_EVENTFD(r3, 0x4018aebd, &(0x7f00000000c0)={0x2, r3})
timer_settime(0x0, 0x1, &(0x7f000006b000)={{0x0, 0x1c9c380}, {r5, r6+30000000}}, &(0x7f0000000000))
tkill(r4, 0x1004000000016)
close(r2)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000300), 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
timer_delete(0x0)

09:20:13 executing program 2:
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000013c0)={{{@in, @in6=@ipv4, 0x0, 0x0, 0x0, 0xce, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0x32}, 0x0, @in6}}, 0xe8)
connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c)

09:20:13 executing program 4:
r0 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0)
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

09:20:13 executing program 3:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$sg(&(0x7f00000002c0)='/dev/sg#\x00', 0x0, 0x0)
syz_open_dev$sg(0x0, 0x7, 0x4000000081)
ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0)
r3 = syz_open_dev$vcsa(0x0, 0x0, 0x400400)
sendmsg$alg(r3, 0x0, 0x400000d)
r4 = gettid()
syz_genetlink_get_family_id$fou(&(0x7f0000000200)='fou\x00')
sendmsg$FOU_CMD_GET(r3, 0x0, 0x40)
getgid()
writev(0xffffffffffffffff, 0x0, 0x0)
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
clock_gettime(0x0, &(0x7f0000000140)={<r5=>0x0, <r6=>0x0})
ioctl$KVM_HYPERV_EVENTFD(r3, 0x4018aebd, &(0x7f00000000c0)={0x2, r3})
timer_settime(0x0, 0x1, &(0x7f000006b000)={{0x0, 0x1c9c380}, {r5, r6+30000000}}, &(0x7f0000000000))
tkill(r4, 0x1004000000016)
close(r2)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000300), 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
timer_delete(0x0)

09:20:13 executing program 0:
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, 0x0)
creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90)
r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$P9_RSTAT(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="510000007d000000004a0000000000000000000000000000000000000000000000000000000000000b002f080000006c6f6f702300000001402a0b002f6465762f6c6f"], 0x43)
sendfile(r1, r1, &(0x7f0000000140), 0x7fff)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)

09:20:13 executing program 1:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$sg(&(0x7f00000002c0)='/dev/sg#\x00', 0x0, 0x0)
syz_open_dev$sg(0x0, 0x7, 0x4000000081)
ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0)
r3 = syz_open_dev$vcsa(0x0, 0x0, 0x400400)
sendmsg$alg(r3, 0x0, 0x400000d)
r4 = gettid()
syz_genetlink_get_family_id$fou(&(0x7f0000000200)='fou\x00')
sendmsg$FOU_CMD_GET(r3, 0x0, 0x40)
getgid()
writev(0xffffffffffffffff, 0x0, 0x0)
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
clock_gettime(0x0, &(0x7f0000000140)={<r5=>0x0, <r6=>0x0})
ioctl$KVM_HYPERV_EVENTFD(r3, 0x4018aebd, &(0x7f00000000c0)={0x2, r3})
timer_settime(0x0, 0x1, &(0x7f000006b000)={{0x0, 0x1c9c380}, {r5, r6+30000000}}, &(0x7f0000000000))
tkill(r4, 0x1004000000016)
close(r2)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000300), 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
timer_delete(0x0)

09:20:13 executing program 2:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$sg(&(0x7f00000002c0)='/dev/sg#\x00', 0x0, 0x0)
syz_open_dev$sg(0x0, 0x7, 0x4000000081)
ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0)
r3 = syz_open_dev$vcsa(0x0, 0x0, 0x400400)
sendmsg$alg(r3, 0x0, 0x400000d)
r4 = gettid()
syz_genetlink_get_family_id$fou(&(0x7f0000000200)='fou\x00')
sendmsg$FOU_CMD_GET(r3, 0x0, 0x40)
getgid()
writev(0xffffffffffffffff, 0x0, 0x0)
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
clock_gettime(0x0, &(0x7f0000000140)={<r5=>0x0, <r6=>0x0})
ioctl$KVM_HYPERV_EVENTFD(r3, 0x4018aebd, &(0x7f00000000c0)={0x2, r3})
timer_settime(0x0, 0x1, &(0x7f000006b000)={{0x0, 0x1c9c380}, {r5, r6+30000000}}, &(0x7f0000000000))
tkill(r4, 0x1004000000016)
close(r2)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000300), 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
timer_delete(0x0)

09:20:13 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(cast5)\x00'}, 0x58)
fcntl$setflags(0xffffffffffffffff, 0x2, 0x1)
r1 = socket(0x10, 0x20001000000003, 0x0)
write(r1, &(0x7f0000000000)="220000001400070500e80000004c03000208030001000000080002004102fff0f054", 0x22)
r2 = socket$netlink(0x10, 0x3, 0x18)
openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="390000001300090468fe0704000000000000ff3f03000000450001070000001419001a0015000a00070007000200000800005d14a4e91ee438", 0x39}], 0x1)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4)
ioctl$RTC_WIE_OFF(0xffffffffffffffff, 0x7010)
connect$inet(r3, &(0x7f0000000040)={0x2, 0x3ffffffffffffffe, @broadcast}, 0x10)
r5 = dup3(r3, r3, 0x80000)
ioctl$VIDIOC_G_STD(r5, 0x80085617, &(0x7f00000002c0))
ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000080)={0x2, {0x2, 0x4e20}, {0x2, 0x4e21, @loopback}, {0x2, 0x4e23, @broadcast}, 0x180, 0x8, 0x5, 0x1000, 0x0, 0x0, 0x800, 0x0, 0x8})
r6 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x94)
sendmmsg(r3, &(0x7f0000007fc0), 0x40000000000002f, 0x0)
ioctl$TIOCGPGRP(r6, 0x540f, &(0x7f0000000240)=<r7=>0x0)
ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000480)={'bond_slave_1\x00', {0x2, 0x4e23, @loopback}})
ioctl$TUNGETIFF(r6, 0x800454d2, &(0x7f0000000200))
ioctl$FS_IOC_FSGETXATTR(r3, 0x801c581f, &(0x7f0000000180)={0x8001, 0x8, 0x6, 0x0, 0x372})
ioctl$VIDIOC_TRY_DECODER_CMD(r4, 0xc0485661, &(0x7f0000000340)={0x3, 0x1, @start={0xda, 0x1}})
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000003c0)='./file0\x00', 0x8000, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000400)=ANY=[@ANYRES64=r7, @ANYRES64=r1])
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005", 0x5)
r8 = accept$alg(r0, 0x0, 0x0)
sendmmsg$alg(r8, &(0x7f0000003e80)=[{0x0, 0x0, &(0x7f0000002a80), 0x359, &(0x7f0000000100)=[@op={0x18}], 0x18}], 0x1, 0x0)
recvmsg(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000080)=""/30, 0x1e}], 0x1}, 0x0)

[  365.273611][T14260] netlink: 2 bytes leftover after parsing attributes in process `syz-executor4'.
[  365.459418][T14257] FAT-fs (loop4): Unrecognized mount option "��������" or missing value
09:20:13 executing program 5:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$sg(&(0x7f00000002c0)='/dev/sg#\x00', 0x0, 0x0)
syz_open_dev$sg(0x0, 0x7, 0x4000000081)
ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0)
r3 = syz_open_dev$vcsa(0x0, 0x0, 0x400400)
sendmsg$alg(r3, 0x0, 0x400000d)
r4 = gettid()
syz_genetlink_get_family_id$fou(&(0x7f0000000200)='fou\x00')
sendmsg$FOU_CMD_GET(r3, 0x0, 0x40)
getgid()
writev(0xffffffffffffffff, 0x0, 0x0)
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
clock_gettime(0x0, &(0x7f0000000140)={<r5=>0x0, <r6=>0x0})
ioctl$KVM_HYPERV_EVENTFD(r3, 0x4018aebd, &(0x7f00000000c0)={0x2, r3})
timer_settime(0x0, 0x1, &(0x7f000006b000)={{0x0, 0x1c9c380}, {r5, r6+30000000}}, &(0x7f0000000000))
tkill(r4, 0x1004000000016)
close(r2)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000300), 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
timer_delete(0x0)

09:20:13 executing program 0:
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, 0x0)
creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90)
r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$P9_RSTAT(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="510000007d000000004a0000000000000000000000000000000000000000000000000000000000000b002f080000006c6f6f702300000001402a0b002f6465762f6c6f"], 0x43)
sendfile(r1, r1, &(0x7f0000000140), 0x7fff)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)

[  365.600449][T14260] netlink: 2 bytes leftover after parsing attributes in process `syz-executor4'.
09:20:13 executing program 1:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$sg(&(0x7f00000002c0)='/dev/sg#\x00', 0x0, 0x0)
syz_open_dev$sg(0x0, 0x7, 0x4000000081)
ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0)
r3 = syz_open_dev$vcsa(0x0, 0x0, 0x400400)
sendmsg$alg(r3, 0x0, 0x400000d)
r4 = gettid()
syz_genetlink_get_family_id$fou(&(0x7f0000000200)='fou\x00')
sendmsg$FOU_CMD_GET(r3, 0x0, 0x40)
getgid()
writev(0xffffffffffffffff, 0x0, 0x0)
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
clock_gettime(0x0, &(0x7f0000000140)={<r5=>0x0, <r6=>0x0})
ioctl$KVM_HYPERV_EVENTFD(r3, 0x4018aebd, &(0x7f00000000c0)={0x2, r3})
timer_settime(0x0, 0x1, &(0x7f000006b000)={{0x0, 0x1c9c380}, {r5, r6+30000000}}, &(0x7f0000000000))
tkill(r4, 0x1004000000016)
close(r2)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000300), 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
timer_delete(0x0)

09:20:13 executing program 3:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$sg(&(0x7f00000002c0)='/dev/sg#\x00', 0x0, 0x0)
syz_open_dev$sg(0x0, 0x7, 0x4000000081)
ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0)
r3 = syz_open_dev$vcsa(0x0, 0x0, 0x400400)
sendmsg$alg(r3, 0x0, 0x400000d)
r4 = gettid()
syz_genetlink_get_family_id$fou(&(0x7f0000000200)='fou\x00')
sendmsg$FOU_CMD_GET(r3, 0x0, 0x40)
getgid()
writev(0xffffffffffffffff, 0x0, 0x0)
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
clock_gettime(0x0, &(0x7f0000000140)={<r5=>0x0, <r6=>0x0})
ioctl$KVM_HYPERV_EVENTFD(r3, 0x4018aebd, &(0x7f00000000c0)={0x2, r3})
timer_settime(0x0, 0x1, &(0x7f000006b000)={{0x0, 0x1c9c380}, {r5, r6+30000000}}, &(0x7f0000000000))
tkill(r4, 0x1004000000016)
close(r2)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000300), 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
timer_delete(0x0)

09:20:14 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(cast5)\x00'}, 0x58)
fcntl$setflags(0xffffffffffffffff, 0x2, 0x1)
r1 = socket(0x10, 0x20001000000003, 0x0)
write(r1, &(0x7f0000000000)="220000001400070500e80000004c03000208030001000000080002004102fff0f054", 0x22)
r2 = socket$netlink(0x10, 0x3, 0x18)
openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="390000001300090468fe0704000000000000ff3f03000000450001070000001419001a0015000a00070007000200000800005d14a4e91ee438", 0x39}], 0x1)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4)
ioctl$RTC_WIE_OFF(0xffffffffffffffff, 0x7010)
connect$inet(r3, &(0x7f0000000040)={0x2, 0x3ffffffffffffffe, @broadcast}, 0x10)
r5 = dup3(r3, r3, 0x80000)
ioctl$VIDIOC_G_STD(r5, 0x80085617, &(0x7f00000002c0))
ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000080)={0x2, {0x2, 0x4e20}, {0x2, 0x4e21, @loopback}, {0x2, 0x4e23, @broadcast}, 0x180, 0x8, 0x5, 0x1000, 0x0, 0x0, 0x800, 0x0, 0x8})
r6 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x94)
sendmmsg(r3, &(0x7f0000007fc0), 0x40000000000002f, 0x0)
ioctl$TIOCGPGRP(r6, 0x540f, &(0x7f0000000240)=<r7=>0x0)
ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000480)={'bond_slave_1\x00', {0x2, 0x4e23, @loopback}})
ioctl$TUNGETIFF(r6, 0x800454d2, &(0x7f0000000200))
ioctl$FS_IOC_FSGETXATTR(r3, 0x801c581f, &(0x7f0000000180)={0x8001, 0x8, 0x6, 0x0, 0x372})
ioctl$VIDIOC_TRY_DECODER_CMD(r4, 0xc0485661, &(0x7f0000000340)={0x3, 0x1, @start={0xda, 0x1}})
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000003c0)='./file0\x00', 0x8000, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000400)=ANY=[@ANYRES64=r7, @ANYRES64=r1])
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005", 0x5)
r8 = accept$alg(r0, 0x0, 0x0)
sendmmsg$alg(r8, &(0x7f0000003e80)=[{0x0, 0x0, &(0x7f0000002a80), 0x359, &(0x7f0000000100)=[@op={0x18}], 0x18}], 0x1, 0x0)
recvmsg(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000080)=""/30, 0x1e}], 0x1}, 0x0)

[  366.058451][T14295] netlink: 2 bytes leftover after parsing attributes in process `syz-executor4'.
09:20:14 executing program 2:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$sg(&(0x7f00000002c0)='/dev/sg#\x00', 0x0, 0x0)
syz_open_dev$sg(0x0, 0x7, 0x4000000081)
ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0)
r3 = syz_open_dev$vcsa(0x0, 0x0, 0x400400)
sendmsg$alg(r3, 0x0, 0x400000d)
r4 = gettid()
syz_genetlink_get_family_id$fou(&(0x7f0000000200)='fou\x00')
sendmsg$FOU_CMD_GET(r3, 0x0, 0x40)
getgid()
writev(0xffffffffffffffff, 0x0, 0x0)
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
clock_gettime(0x0, &(0x7f0000000140)={<r5=>0x0, <r6=>0x0})
ioctl$KVM_HYPERV_EVENTFD(r3, 0x4018aebd, &(0x7f00000000c0)={0x2, r3})
timer_settime(0x0, 0x1, &(0x7f000006b000)={{0x0, 0x1c9c380}, {r5, r6+30000000}}, &(0x7f0000000000))
tkill(r4, 0x1004000000016)
close(r2)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000300), 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
timer_delete(0x0)

[  366.279983][T14299] FAT-fs (loop4): Unrecognized mount option "��������" or missing value
09:20:14 executing program 5:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(cast5)\x00'}, 0x58)
fcntl$setflags(0xffffffffffffffff, 0x2, 0x1)
r1 = socket(0x10, 0x20001000000003, 0x0)
write(r1, &(0x7f0000000000)="220000001400070500e80000004c03000208030001000000080002004102fff0f054", 0x22)
r2 = socket$netlink(0x10, 0x3, 0x18)
openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="390000001300090468fe0704000000000000ff3f03000000450001070000001419001a0015000a00070007000200000800005d14a4e91ee438", 0x39}], 0x1)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4)
ioctl$RTC_WIE_OFF(0xffffffffffffffff, 0x7010)
connect$inet(r3, &(0x7f0000000040)={0x2, 0x3ffffffffffffffe, @broadcast}, 0x10)
r5 = dup3(r3, r3, 0x80000)
ioctl$VIDIOC_G_STD(r5, 0x80085617, &(0x7f00000002c0))
ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000080)={0x2, {0x2, 0x4e20}, {0x2, 0x4e21, @loopback}, {0x2, 0x4e23, @broadcast}, 0x180, 0x8, 0x5, 0x1000, 0x0, 0x0, 0x800, 0x0, 0x8})
r6 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x94)
sendmmsg(r3, &(0x7f0000007fc0), 0x40000000000002f, 0x0)
ioctl$TIOCGPGRP(r6, 0x540f, &(0x7f0000000240)=<r7=>0x0)
ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000480)={'bond_slave_1\x00', {0x2, 0x4e23, @loopback}})
ioctl$TUNGETIFF(r6, 0x800454d2, &(0x7f0000000200))
ioctl$FS_IOC_FSGETXATTR(r3, 0x801c581f, &(0x7f0000000180)={0x8001, 0x8, 0x6, 0x0, 0x372})
ioctl$VIDIOC_TRY_DECODER_CMD(r4, 0xc0485661, &(0x7f0000000340)={0x3, 0x1, @start={0xda, 0x1}})
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000003c0)='./file0\x00', 0x8000, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000400)=ANY=[@ANYRES64=r7, @ANYRES64=r1])
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005", 0x5)
r8 = accept$alg(r0, 0x0, 0x0)
sendmmsg$alg(r8, &(0x7f0000003e80)=[{0x0, 0x0, &(0x7f0000002a80), 0x359, &(0x7f0000000100)=[@op={0x18}], 0x18}], 0x1, 0x0)
recvmsg(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000080)=""/30, 0x1e}], 0x1}, 0x0)

09:20:14 executing program 0:
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, 0x0)
creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90)
r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$P9_RSTAT(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="510000007d000000004a0000000000000000000000000000000000000000000000000000000000000b002f080000006c6f6f702300000001402a0b002f6465762f6c6f"], 0x43)
sendfile(r1, r1, &(0x7f0000000140), 0x7fff)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)

09:20:14 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(cast5)\x00'}, 0x58)
fcntl$setflags(0xffffffffffffffff, 0x2, 0x1)
r1 = socket(0x10, 0x20001000000003, 0x0)
write(r1, &(0x7f0000000000)="220000001400070500e80000004c03000208030001000000080002004102fff0f054", 0x22)
r2 = socket$netlink(0x10, 0x3, 0x18)
openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="390000001300090468fe0704000000000000ff3f03000000450001070000001419001a0015000a00070007000200000800005d14a4e91ee438", 0x39}], 0x1)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4)
ioctl$RTC_WIE_OFF(0xffffffffffffffff, 0x7010)
connect$inet(r3, &(0x7f0000000040)={0x2, 0x3ffffffffffffffe, @broadcast}, 0x10)
r5 = dup3(r3, r3, 0x80000)
ioctl$VIDIOC_G_STD(r5, 0x80085617, &(0x7f00000002c0))
ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000080)={0x2, {0x2, 0x4e20}, {0x2, 0x4e21, @loopback}, {0x2, 0x4e23, @broadcast}, 0x180, 0x8, 0x5, 0x1000, 0x0, 0x0, 0x800, 0x0, 0x8})
r6 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x94)
sendmmsg(r3, &(0x7f0000007fc0), 0x40000000000002f, 0x0)
ioctl$TIOCGPGRP(r6, 0x540f, &(0x7f0000000240)=<r7=>0x0)
ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000480)={'bond_slave_1\x00', {0x2, 0x4e23, @loopback}})
ioctl$TUNGETIFF(r6, 0x800454d2, &(0x7f0000000200))
ioctl$FS_IOC_FSGETXATTR(r3, 0x801c581f, &(0x7f0000000180)={0x8001, 0x8, 0x6, 0x0, 0x372})
ioctl$VIDIOC_TRY_DECODER_CMD(r4, 0xc0485661, &(0x7f0000000340)={0x3, 0x1, @start={0xda, 0x1}})
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000003c0)='./file0\x00', 0x8000, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000400)=ANY=[@ANYRES64=r7, @ANYRES64=r1])
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005", 0x5)
r8 = accept$alg(r0, 0x0, 0x0)
sendmmsg$alg(r8, &(0x7f0000003e80)=[{0x0, 0x0, &(0x7f0000002a80), 0x359, &(0x7f0000000100)=[@op={0x18}], 0x18}], 0x1, 0x0)
recvmsg(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000080)=""/30, 0x1e}], 0x1}, 0x0)

[  366.580246][T14313] netlink: 2 bytes leftover after parsing attributes in process `syz-executor5'.
09:20:14 executing program 3:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$sg(&(0x7f00000002c0)='/dev/sg#\x00', 0x0, 0x0)
syz_open_dev$sg(0x0, 0x7, 0x4000000081)
ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0)
r3 = syz_open_dev$vcsa(0x0, 0x0, 0x400400)
sendmsg$alg(r3, 0x0, 0x400000d)
r4 = gettid()
syz_genetlink_get_family_id$fou(&(0x7f0000000200)='fou\x00')
sendmsg$FOU_CMD_GET(r3, 0x0, 0x40)
getgid()
writev(0xffffffffffffffff, 0x0, 0x0)
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
clock_gettime(0x0, &(0x7f0000000140)={<r5=>0x0, <r6=>0x0})
ioctl$KVM_HYPERV_EVENTFD(r3, 0x4018aebd, &(0x7f00000000c0)={0x2, r3})
timer_settime(0x0, 0x1, &(0x7f000006b000)={{0x0, 0x1c9c380}, {r5, r6+30000000}}, &(0x7f0000000000))
tkill(r4, 0x1004000000016)
close(r2)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000300), 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
timer_delete(0x0)

[  366.773675][T14319] netlink: 2 bytes leftover after parsing attributes in process `syz-executor4'.
09:20:15 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(cast5)\x00'}, 0x58)
fcntl$setflags(0xffffffffffffffff, 0x2, 0x1)
r1 = socket(0x10, 0x20001000000003, 0x0)
write(r1, &(0x7f0000000000)="220000001400070500e80000004c03000208030001000000080002004102fff0f054", 0x22)
r2 = socket$netlink(0x10, 0x3, 0x18)
openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="390000001300090468fe0704000000000000ff3f03000000450001070000001419001a0015000a00070007000200000800005d14a4e91ee438", 0x39}], 0x1)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4)
ioctl$RTC_WIE_OFF(0xffffffffffffffff, 0x7010)
connect$inet(r3, &(0x7f0000000040)={0x2, 0x3ffffffffffffffe, @broadcast}, 0x10)
r5 = dup3(r3, r3, 0x80000)
ioctl$VIDIOC_G_STD(r5, 0x80085617, &(0x7f00000002c0))
ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000080)={0x2, {0x2, 0x4e20}, {0x2, 0x4e21, @loopback}, {0x2, 0x4e23, @broadcast}, 0x180, 0x8, 0x5, 0x1000, 0x0, 0x0, 0x800, 0x0, 0x8})
r6 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x94)
sendmmsg(r3, &(0x7f0000007fc0), 0x40000000000002f, 0x0)
ioctl$TIOCGPGRP(r6, 0x540f, &(0x7f0000000240)=<r7=>0x0)
ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000480)={'bond_slave_1\x00', {0x2, 0x4e23, @loopback}})
ioctl$TUNGETIFF(r6, 0x800454d2, &(0x7f0000000200))
ioctl$FS_IOC_FSGETXATTR(r3, 0x801c581f, &(0x7f0000000180)={0x8001, 0x8, 0x6, 0x0, 0x372})
ioctl$VIDIOC_TRY_DECODER_CMD(r4, 0xc0485661, &(0x7f0000000340)={0x3, 0x1, @start={0xda, 0x1}})
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000003c0)='./file0\x00', 0x8000, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000400)=ANY=[@ANYRES64=r7, @ANYRES64=r1])
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005", 0x5)
r8 = accept$alg(r0, 0x0, 0x0)
sendmmsg$alg(r8, &(0x7f0000003e80)=[{0x0, 0x0, &(0x7f0000002a80), 0x359, &(0x7f0000000100)=[@op={0x18}], 0x18}], 0x1, 0x0)
recvmsg(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000080)=""/30, 0x1e}], 0x1}, 0x0)

[  366.948311][T14313] FAT-fs (loop5): Unrecognized mount option "��������" or missing value
[  367.003831][T14332] netlink: 2 bytes leftover after parsing attributes in process `syz-executor1'.
[  367.095841][T14323] FAT-fs (loop4): Unrecognized mount option "��������" or missing value
09:20:15 executing program 5:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(cast5)\x00'}, 0x58)
fcntl$setflags(0xffffffffffffffff, 0x2, 0x1)
r1 = socket(0x10, 0x20001000000003, 0x0)
write(r1, &(0x7f0000000000)="220000001400070500e80000004c03000208030001000000080002004102fff0f054", 0x22)
r2 = socket$netlink(0x10, 0x3, 0x18)
openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="390000001300090468fe0704000000000000ff3f03000000450001070000001419001a0015000a00070007000200000800005d14a4e91ee438", 0x39}], 0x1)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4)
ioctl$RTC_WIE_OFF(0xffffffffffffffff, 0x7010)
connect$inet(r3, &(0x7f0000000040)={0x2, 0x3ffffffffffffffe, @broadcast}, 0x10)
r5 = dup3(r3, r3, 0x80000)
ioctl$VIDIOC_G_STD(r5, 0x80085617, &(0x7f00000002c0))
ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000080)={0x2, {0x2, 0x4e20}, {0x2, 0x4e21, @loopback}, {0x2, 0x4e23, @broadcast}, 0x180, 0x8, 0x5, 0x1000, 0x0, 0x0, 0x800, 0x0, 0x8})
r6 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x94)
sendmmsg(r3, &(0x7f0000007fc0), 0x40000000000002f, 0x0)
ioctl$TIOCGPGRP(r6, 0x540f, &(0x7f0000000240)=<r7=>0x0)
ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000480)={'bond_slave_1\x00', {0x2, 0x4e23, @loopback}})
ioctl$TUNGETIFF(r6, 0x800454d2, &(0x7f0000000200))
ioctl$FS_IOC_FSGETXATTR(r3, 0x801c581f, &(0x7f0000000180)={0x8001, 0x8, 0x6, 0x0, 0x372})
ioctl$VIDIOC_TRY_DECODER_CMD(r4, 0xc0485661, &(0x7f0000000340)={0x3, 0x1, @start={0xda, 0x1}})
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000003c0)='./file0\x00', 0x8000, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000400)=ANY=[@ANYRES64=r7, @ANYRES64=r1])
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005", 0x5)
r8 = accept$alg(r0, 0x0, 0x0)
sendmmsg$alg(r8, &(0x7f0000003e80)=[{0x0, 0x0, &(0x7f0000002a80), 0x359, &(0x7f0000000100)=[@op={0x18}], 0x18}], 0x1, 0x0)
recvmsg(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000080)=""/30, 0x1e}], 0x1}, 0x0)

09:20:15 executing program 2:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$sg(&(0x7f00000002c0)='/dev/sg#\x00', 0x0, 0x0)
syz_open_dev$sg(0x0, 0x7, 0x4000000081)
ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0)
r3 = syz_open_dev$vcsa(0x0, 0x0, 0x400400)
sendmsg$alg(r3, 0x0, 0x400000d)
r4 = gettid()
syz_genetlink_get_family_id$fou(&(0x7f0000000200)='fou\x00')
sendmsg$FOU_CMD_GET(r3, 0x0, 0x40)
getgid()
writev(0xffffffffffffffff, 0x0, 0x0)
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
clock_gettime(0x0, &(0x7f0000000140)={<r5=>0x0, <r6=>0x0})
ioctl$KVM_HYPERV_EVENTFD(r3, 0x4018aebd, &(0x7f00000000c0)={0x2, r3})
timer_settime(0x0, 0x1, &(0x7f000006b000)={{0x0, 0x1c9c380}, {r5, r6+30000000}}, &(0x7f0000000000))
tkill(r4, 0x1004000000016)
close(r2)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000300), 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
timer_delete(0x0)

[  367.203523][T14338] FAT-fs (loop1): Unrecognized mount option "��������" or missing value
[  367.454142][T14353] netlink: 2 bytes leftover after parsing attributes in process `syz-executor5'.
09:20:15 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(cast5)\x00'}, 0x58)
fcntl$setflags(0xffffffffffffffff, 0x2, 0x1)
r1 = socket(0x10, 0x20001000000003, 0x0)
write(r1, &(0x7f0000000000)="220000001400070500e80000004c03000208030001000000080002004102fff0f054", 0x22)
r2 = socket$netlink(0x10, 0x3, 0x18)
openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="390000001300090468fe0704000000000000ff3f03000000450001070000001419001a0015000a00070007000200000800005d14a4e91ee438", 0x39}], 0x1)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4)
ioctl$RTC_WIE_OFF(0xffffffffffffffff, 0x7010)
connect$inet(r3, &(0x7f0000000040)={0x2, 0x3ffffffffffffffe, @broadcast}, 0x10)
r5 = dup3(r3, r3, 0x80000)
ioctl$VIDIOC_G_STD(r5, 0x80085617, &(0x7f00000002c0))
ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000080)={0x2, {0x2, 0x4e20}, {0x2, 0x4e21, @loopback}, {0x2, 0x4e23, @broadcast}, 0x180, 0x8, 0x5, 0x1000, 0x0, 0x0, 0x800, 0x0, 0x8})
r6 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x94)
sendmmsg(r3, &(0x7f0000007fc0), 0x40000000000002f, 0x0)
ioctl$TIOCGPGRP(r6, 0x540f, &(0x7f0000000240)=<r7=>0x0)
ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000480)={'bond_slave_1\x00', {0x2, 0x4e23, @loopback}})
ioctl$TUNGETIFF(r6, 0x800454d2, &(0x7f0000000200))
ioctl$FS_IOC_FSGETXATTR(r3, 0x801c581f, &(0x7f0000000180)={0x8001, 0x8, 0x6, 0x0, 0x372})
ioctl$VIDIOC_TRY_DECODER_CMD(r4, 0xc0485661, &(0x7f0000000340)={0x3, 0x1, @start={0xda, 0x1}})
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000003c0)='./file0\x00', 0x8000, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000400)=ANY=[@ANYRES64=r7, @ANYRES64=r1])
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005", 0x5)
r8 = accept$alg(r0, 0x0, 0x0)
sendmmsg$alg(r8, &(0x7f0000003e80)=[{0x0, 0x0, &(0x7f0000002a80), 0x359, &(0x7f0000000100)=[@op={0x18}], 0x18}], 0x1, 0x0)
recvmsg(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000080)=""/30, 0x1e}], 0x1}, 0x0)

[  367.666494][T14357] FAT-fs (loop5): Unrecognized mount option "��������" or missing value
09:20:15 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(cast5)\x00'}, 0x58)
fcntl$setflags(0xffffffffffffffff, 0x2, 0x1)
r1 = socket(0x10, 0x20001000000003, 0x0)
write(r1, &(0x7f0000000000)="220000001400070500e80000004c03000208030001000000080002004102fff0f054", 0x22)
r2 = socket$netlink(0x10, 0x3, 0x18)
openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="390000001300090468fe0704000000000000ff3f03000000450001070000001419001a0015000a00070007000200000800005d14a4e91ee438", 0x39}], 0x1)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4)
ioctl$RTC_WIE_OFF(0xffffffffffffffff, 0x7010)
connect$inet(r3, &(0x7f0000000040)={0x2, 0x3ffffffffffffffe, @broadcast}, 0x10)
r5 = dup3(r3, r3, 0x80000)
ioctl$VIDIOC_G_STD(r5, 0x80085617, &(0x7f00000002c0))
ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000080)={0x2, {0x2, 0x4e20}, {0x2, 0x4e21, @loopback}, {0x2, 0x4e23, @broadcast}, 0x180, 0x8, 0x5, 0x1000, 0x0, 0x0, 0x800, 0x0, 0x8})
r6 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x94)
sendmmsg(r3, &(0x7f0000007fc0), 0x40000000000002f, 0x0)
ioctl$TIOCGPGRP(r6, 0x540f, &(0x7f0000000240)=<r7=>0x0)
ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000480)={'bond_slave_1\x00', {0x2, 0x4e23, @loopback}})
ioctl$TUNGETIFF(r6, 0x800454d2, &(0x7f0000000200))
ioctl$FS_IOC_FSGETXATTR(r3, 0x801c581f, &(0x7f0000000180)={0x8001, 0x8, 0x6, 0x0, 0x372})
ioctl$VIDIOC_TRY_DECODER_CMD(r4, 0xc0485661, &(0x7f0000000340)={0x3, 0x1, @start={0xda, 0x1}})
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000003c0)='./file0\x00', 0x8000, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000400)=ANY=[@ANYRES64=r7, @ANYRES64=r1])
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005", 0x5)
r8 = accept$alg(r0, 0x0, 0x0)
sendmmsg$alg(r8, &(0x7f0000003e80)=[{0x0, 0x0, &(0x7f0000002a80), 0x359, &(0x7f0000000100)=[@op={0x18}], 0x18}], 0x1, 0x0)
recvmsg(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000080)=""/30, 0x1e}], 0x1}, 0x0)

09:20:15 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(cast5)\x00'}, 0x58)
fcntl$setflags(0xffffffffffffffff, 0x2, 0x1)
r1 = socket(0x10, 0x20001000000003, 0x0)
write(r1, &(0x7f0000000000)="220000001400070500e80000004c03000208030001000000080002004102fff0f054", 0x22)
r2 = socket$netlink(0x10, 0x3, 0x18)
openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="390000001300090468fe0704000000000000ff3f03000000450001070000001419001a0015000a00070007000200000800005d14a4e91ee438", 0x39}], 0x1)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4)
ioctl$RTC_WIE_OFF(0xffffffffffffffff, 0x7010)
connect$inet(r3, &(0x7f0000000040)={0x2, 0x3ffffffffffffffe, @broadcast}, 0x10)
r5 = dup3(r3, r3, 0x80000)
ioctl$VIDIOC_G_STD(r5, 0x80085617, &(0x7f00000002c0))
ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000080)={0x2, {0x2, 0x4e20}, {0x2, 0x4e21, @loopback}, {0x2, 0x4e23, @broadcast}, 0x180, 0x8, 0x5, 0x1000, 0x0, 0x0, 0x800, 0x0, 0x8})
r6 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x94)
sendmmsg(r3, &(0x7f0000007fc0), 0x40000000000002f, 0x0)
ioctl$TIOCGPGRP(r6, 0x540f, &(0x7f0000000240)=<r7=>0x0)
ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000480)={'bond_slave_1\x00', {0x2, 0x4e23, @loopback}})
ioctl$TUNGETIFF(r6, 0x800454d2, &(0x7f0000000200))
ioctl$FS_IOC_FSGETXATTR(r3, 0x801c581f, &(0x7f0000000180)={0x8001, 0x8, 0x6, 0x0, 0x372})
ioctl$VIDIOC_TRY_DECODER_CMD(r4, 0xc0485661, &(0x7f0000000340)={0x3, 0x1, @start={0xda, 0x1}})
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000003c0)='./file0\x00', 0x8000, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000400)=ANY=[@ANYRES64=r7, @ANYRES64=r1])
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005", 0x5)
r8 = accept$alg(r0, 0x0, 0x0)
sendmmsg$alg(r8, &(0x7f0000003e80)=[{0x0, 0x0, &(0x7f0000002a80), 0x359, &(0x7f0000000100)=[@op={0x18}], 0x18}], 0x1, 0x0)
recvmsg(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000080)=""/30, 0x1e}], 0x1}, 0x0)

09:20:16 executing program 3:
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syz_tun\x00'})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mknod$loop(0x0, 0x0, 0xffffffffffffffff)
write(0xffffffffffffffff, 0x0, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, 0x0, 0xfffffffffffffe38)
r1 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x1, 0x0)
r2 = dup(r1)
ioctl$KVM_GET_ONE_REG(r2, 0x4010aeab, &(0x7f0000000000)={0x0, 0x2000000013})
mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000)
ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0)
syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00')
getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000100)={{{@in=@empty, @in=@empty}}, {{}, 0x0, @in=@local}}, &(0x7f0000000080)=0xe8)
getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000004cc0)={{{@in6=@ipv4={[], [], @loopback}, @in6=@mcast1}}, {{@in=@loopback}, 0x0, @in6=@dev}}, &(0x7f0000004dc0)=0xe8)
getsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f0000005040)={@broadcast}, &(0x7f0000005080)=0xc)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
getsockopt$inet6_mreq(r2, 0x29, 0x0, 0x0, 0x0)
getsockopt$inet6_mreq(r2, 0x29, 0x0, &(0x7f0000005340)={@loopback}, &(0x7f0000005380)=0x14)
clock_gettime(0x0, &(0x7f0000006340))
setsockopt$inet_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x0, 0x2d, 0x0, 0x0)
getsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f0000006480)={@multicast2, @remote}, &(0x7f00000064c0)=0xc)
getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000300)={0x0, @empty, @empty}, &(0x7f0000006540)=0xc)
prctl$PR_GET_CHILD_SUBREAPER(0x25)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000006580)={'team0\x00'})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000067c0)={'veth0_to_bond\x00'})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0)
sendmsg$nl_route(r0, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="0000000000000000140016001000010000000100000000000020000000000000000000000000000000000000000000000000000000000000c3d2648f973aaa77786b628854f3e46e5e2160cfa2bb21907bcfb316c61880e34579dedb980cc7a013097b3f5cde911507c17284f3fb9eb9b4304d708741731dc77f86b98a02990311744b865fb50bad"], 0x1}}, 0x0)

[  367.845172][T14368] netlink: 2 bytes leftover after parsing attributes in process `syz-executor0'.
[  367.903323][T14370] netlink: 2 bytes leftover after parsing attributes in process `syz-executor1'.
[  367.934529][T14371] netlink: 2 bytes leftover after parsing attributes in process `syz-executor4'.
09:20:16 executing program 5:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(cast5)\x00'}, 0x58)
fcntl$setflags(0xffffffffffffffff, 0x2, 0x1)
r1 = socket(0x10, 0x20001000000003, 0x0)
write(r1, &(0x7f0000000000)="220000001400070500e80000004c03000208030001000000080002004102fff0f054", 0x22)
r2 = socket$netlink(0x10, 0x3, 0x18)
openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="390000001300090468fe0704000000000000ff3f03000000450001070000001419001a0015000a00070007000200000800005d14a4e91ee438", 0x39}], 0x1)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4)
ioctl$RTC_WIE_OFF(0xffffffffffffffff, 0x7010)
connect$inet(r3, &(0x7f0000000040)={0x2, 0x3ffffffffffffffe, @broadcast}, 0x10)
r5 = dup3(r3, r3, 0x80000)
ioctl$VIDIOC_G_STD(r5, 0x80085617, &(0x7f00000002c0))
ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000080)={0x2, {0x2, 0x4e20}, {0x2, 0x4e21, @loopback}, {0x2, 0x4e23, @broadcast}, 0x180, 0x8, 0x5, 0x1000, 0x0, 0x0, 0x800, 0x0, 0x8})
r6 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x94)
sendmmsg(r3, &(0x7f0000007fc0), 0x40000000000002f, 0x0)
ioctl$TIOCGPGRP(r6, 0x540f, &(0x7f0000000240)=<r7=>0x0)
ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000480)={'bond_slave_1\x00', {0x2, 0x4e23, @loopback}})
ioctl$TUNGETIFF(r6, 0x800454d2, &(0x7f0000000200))
ioctl$FS_IOC_FSGETXATTR(r3, 0x801c581f, &(0x7f0000000180)={0x8001, 0x8, 0x6, 0x0, 0x372})
ioctl$VIDIOC_TRY_DECODER_CMD(r4, 0xc0485661, &(0x7f0000000340)={0x3, 0x1, @start={0xda, 0x1}})
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000003c0)='./file0\x00', 0x8000, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000400)=ANY=[@ANYRES64=r7, @ANYRES64=r1])
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005", 0x5)
r8 = accept$alg(r0, 0x0, 0x0)
sendmmsg$alg(r8, &(0x7f0000003e80)=[{0x0, 0x0, &(0x7f0000002a80), 0x359, &(0x7f0000000100)=[@op={0x18}], 0x18}], 0x1, 0x0)
recvmsg(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000080)=""/30, 0x1e}], 0x1}, 0x0)

[  368.090057][T14374] FAT-fs (loop1): Unrecognized mount option "��������" or missing value
[  368.104361][T14372] FAT-fs (loop0): Unrecognized mount option "��������" or missing value
[  368.137614][T14371] FAT-fs (loop4): Unrecognized mount option "��������" or missing value
[  368.174688][    C0] net_ratelimit: 20 callbacks suppressed
[  368.174698][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  368.186323][    C0] protocol 88fb is buggy, dev hsr_slave_1
09:20:16 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x3bc, &(0x7f0000000100)={&(0x7f00000001c0)={0x2c, 0x31, 0x829, 0x0, 0x0, {0x2803}, [@nested={0x2c, 0x0, [@typed={0x14, 0x1, @ipv6=@loopback}]}]}, 0x2c}}, 0x0)

[  368.254863][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  368.261850][    C1] protocol 88fb is buggy, dev hsr_slave_1
[  368.407062][T14403] netlink: 'syz-executor2': attribute type 1 has an invalid length.
09:20:16 executing program 3:
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syz_tun\x00'})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mknod$loop(0x0, 0x0, 0xffffffffffffffff)
write(0xffffffffffffffff, 0x0, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, 0x0, 0xfffffffffffffe38)
r1 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x1, 0x0)
r2 = dup(r1)
ioctl$KVM_GET_ONE_REG(r2, 0x4010aeab, &(0x7f0000000000)={0x0, 0x2000000013})
mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000)
ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0)
syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00')
getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000100)={{{@in=@empty, @in=@empty}}, {{}, 0x0, @in=@local}}, &(0x7f0000000080)=0xe8)
getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000004cc0)={{{@in6=@ipv4={[], [], @loopback}, @in6=@mcast1}}, {{@in=@loopback}, 0x0, @in6=@dev}}, &(0x7f0000004dc0)=0xe8)
getsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f0000005040)={@broadcast}, &(0x7f0000005080)=0xc)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
getsockopt$inet6_mreq(r2, 0x29, 0x0, 0x0, 0x0)
getsockopt$inet6_mreq(r2, 0x29, 0x0, &(0x7f0000005340)={@loopback}, &(0x7f0000005380)=0x14)
clock_gettime(0x0, &(0x7f0000006340))
setsockopt$inet_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x0, 0x2d, 0x0, 0x0)
getsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f0000006480)={@multicast2, @remote}, &(0x7f00000064c0)=0xc)
getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000300)={0x0, @empty, @empty}, &(0x7f0000006540)=0xc)
prctl$PR_GET_CHILD_SUBREAPER(0x25)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000006580)={'team0\x00'})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000067c0)={'veth0_to_bond\x00'})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0)
sendmsg$nl_route(r0, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="0000000000000000140016001000010000000100000000000020000000000000000000000000000000000000000000000000000000000000c3d2648f973aaa77786b628854f3e46e5e2160cfa2bb21907bcfb316c61880e34579dedb980cc7a013097b3f5cde911507c17284f3fb9eb9b4304d708741731dc77f86b98a02990311744b865fb50bad"], 0x1}}, 0x0)

09:20:16 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syz_tun\x00'})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mknod$loop(0x0, 0x0, 0xffffffffffffffff)
write(0xffffffffffffffff, 0x0, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, 0x0, 0xfffffffffffffe38)
r1 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x1, 0x0)
r2 = dup(r1)
ioctl$KVM_GET_ONE_REG(r2, 0x4010aeab, &(0x7f0000000000)={0x0, 0x2000000013})
mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000)
ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0)
syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00')
getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000100)={{{@in=@empty, @in=@empty}}, {{}, 0x0, @in=@local}}, &(0x7f0000000080)=0xe8)
getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000004cc0)={{{@in6=@ipv4={[], [], @loopback}, @in6=@mcast1}}, {{@in=@loopback}, 0x0, @in6=@dev}}, &(0x7f0000004dc0)=0xe8)
getsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f0000005040)={@broadcast}, &(0x7f0000005080)=0xc)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
getsockopt$inet6_mreq(r2, 0x29, 0x0, 0x0, 0x0)
getsockopt$inet6_mreq(r2, 0x29, 0x0, &(0x7f0000005340)={@loopback}, &(0x7f0000005380)=0x14)
clock_gettime(0x0, &(0x7f0000006340))
setsockopt$inet_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x0, 0x2d, 0x0, 0x0)
getsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f0000006480)={@multicast2, @remote}, &(0x7f00000064c0)=0xc)
getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000300)={0x0, @empty, @empty}, &(0x7f0000006540)=0xc)
prctl$PR_GET_CHILD_SUBREAPER(0x25)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000006580)={'team0\x00'})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000067c0)={'veth0_to_bond\x00'})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0)
sendmsg$nl_route(r0, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="0000000000000000140016001000010000000100000000000020000000000000000000000000000000000000000000000000000000000000c3d2648f973aaa77786b628854f3e46e5e2160cfa2bb21907bcfb316c61880e34579dedb980cc7a013097b3f5cde911507c17284f3fb9eb9b4304d708741731dc77f86b98a02990311744b865fb50bad"], 0x1}}, 0x0)

[  368.491075][T14407] netlink: 'syz-executor2': attribute type 1 has an invalid length.
[  368.519057][T14393] FAT-fs (loop5): Unrecognized mount option "��������" or missing value
09:20:16 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(cast5)\x00'}, 0x58)
fcntl$setflags(0xffffffffffffffff, 0x2, 0x1)
r1 = socket(0x10, 0x20001000000003, 0x0)
write(r1, &(0x7f0000000000)="220000001400070500e80000004c03000208030001000000080002004102fff0f054", 0x22)
r2 = socket$netlink(0x10, 0x3, 0x18)
openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="390000001300090468fe0704000000000000ff3f03000000450001070000001419001a0015000a00070007000200000800005d14a4e91ee438", 0x39}], 0x1)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4)
ioctl$RTC_WIE_OFF(0xffffffffffffffff, 0x7010)
connect$inet(r3, &(0x7f0000000040)={0x2, 0x3ffffffffffffffe, @broadcast}, 0x10)
r5 = dup3(r3, r3, 0x80000)
ioctl$VIDIOC_G_STD(r5, 0x80085617, &(0x7f00000002c0))
ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000080)={0x2, {0x2, 0x4e20}, {0x2, 0x4e21, @loopback}, {0x2, 0x4e23, @broadcast}, 0x180, 0x8, 0x5, 0x1000, 0x0, 0x0, 0x800, 0x0, 0x8})
r6 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x94)
sendmmsg(r3, &(0x7f0000007fc0), 0x40000000000002f, 0x0)
ioctl$TIOCGPGRP(r6, 0x540f, &(0x7f0000000240)=<r7=>0x0)
ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000480)={'bond_slave_1\x00', {0x2, 0x4e23, @loopback}})
ioctl$TUNGETIFF(r6, 0x800454d2, &(0x7f0000000200))
ioctl$FS_IOC_FSGETXATTR(r3, 0x801c581f, &(0x7f0000000180)={0x8001, 0x8, 0x6, 0x0, 0x372})
ioctl$VIDIOC_TRY_DECODER_CMD(r4, 0xc0485661, &(0x7f0000000340)={0x3, 0x1, @start={0xda, 0x1}})
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000003c0)='./file0\x00', 0x8000, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000400)=ANY=[@ANYRES64=r7, @ANYRES64=r1])
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005", 0x5)
r8 = accept$alg(r0, 0x0, 0x0)
sendmmsg$alg(r8, &(0x7f0000003e80)=[{0x0, 0x0, &(0x7f0000002a80), 0x359, &(0x7f0000000100)=[@op={0x18}], 0x18}], 0x1, 0x0)
recvmsg(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000080)=""/30, 0x1e}], 0x1}, 0x0)

[  368.575179][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  368.581029][    C0] protocol 88fb is buggy, dev hsr_slave_1
09:20:16 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x3bc, &(0x7f0000000100)={&(0x7f00000001c0)={0x2c, 0x31, 0x829, 0x0, 0x0, {0x2803}, [@nested={0x2c, 0x0, [@typed={0x14, 0x1, @ipv6=@loopback}]}]}, 0x2c}}, 0x0)

09:20:16 executing program 3:
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syz_tun\x00'})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mknod$loop(0x0, 0x0, 0xffffffffffffffff)
write(0xffffffffffffffff, 0x0, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, 0x0, 0xfffffffffffffe38)
r1 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x1, 0x0)
r2 = dup(r1)
ioctl$KVM_GET_ONE_REG(r2, 0x4010aeab, &(0x7f0000000000)={0x0, 0x2000000013})
mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000)
ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0)
syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00')
getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000100)={{{@in=@empty, @in=@empty}}, {{}, 0x0, @in=@local}}, &(0x7f0000000080)=0xe8)
getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000004cc0)={{{@in6=@ipv4={[], [], @loopback}, @in6=@mcast1}}, {{@in=@loopback}, 0x0, @in6=@dev}}, &(0x7f0000004dc0)=0xe8)
getsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f0000005040)={@broadcast}, &(0x7f0000005080)=0xc)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
getsockopt$inet6_mreq(r2, 0x29, 0x0, 0x0, 0x0)
getsockopt$inet6_mreq(r2, 0x29, 0x0, &(0x7f0000005340)={@loopback}, &(0x7f0000005380)=0x14)
clock_gettime(0x0, &(0x7f0000006340))
setsockopt$inet_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x0, 0x2d, 0x0, 0x0)
getsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f0000006480)={@multicast2, @remote}, &(0x7f00000064c0)=0xc)
getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000300)={0x0, @empty, @empty}, &(0x7f0000006540)=0xc)
prctl$PR_GET_CHILD_SUBREAPER(0x25)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000006580)={'team0\x00'})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000067c0)={'veth0_to_bond\x00'})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0)
sendmsg$nl_route(r0, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="0000000000000000140016001000010000000100000000000020000000000000000000000000000000000000000000000000000000000000c3d2648f973aaa77786b628854f3e46e5e2160cfa2bb21907bcfb316c61880e34579dedb980cc7a013097b3f5cde911507c17284f3fb9eb9b4304d708741731dc77f86b98a02990311744b865fb50bad"], 0x1}}, 0x0)

09:20:17 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(cast5)\x00'}, 0x58)
fcntl$setflags(0xffffffffffffffff, 0x2, 0x1)
r1 = socket(0x10, 0x20001000000003, 0x0)
write(r1, &(0x7f0000000000)="220000001400070500e80000004c03000208030001000000080002004102fff0f054", 0x22)
r2 = socket$netlink(0x10, 0x3, 0x18)
openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="390000001300090468fe0704000000000000ff3f03000000450001070000001419001a0015000a00070007000200000800005d14a4e91ee438", 0x39}], 0x1)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4)
ioctl$RTC_WIE_OFF(0xffffffffffffffff, 0x7010)
connect$inet(r3, &(0x7f0000000040)={0x2, 0x3ffffffffffffffe, @broadcast}, 0x10)
r5 = dup3(r3, r3, 0x80000)
ioctl$VIDIOC_G_STD(r5, 0x80085617, &(0x7f00000002c0))
ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000080)={0x2, {0x2, 0x4e20}, {0x2, 0x4e21, @loopback}, {0x2, 0x4e23, @broadcast}, 0x180, 0x8, 0x5, 0x1000, 0x0, 0x0, 0x800, 0x0, 0x8})
r6 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x94)
sendmmsg(r3, &(0x7f0000007fc0), 0x40000000000002f, 0x0)
ioctl$TIOCGPGRP(r6, 0x540f, &(0x7f0000000240)=<r7=>0x0)
ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000480)={'bond_slave_1\x00', {0x2, 0x4e23, @loopback}})
ioctl$TUNGETIFF(r6, 0x800454d2, &(0x7f0000000200))
ioctl$FS_IOC_FSGETXATTR(r3, 0x801c581f, &(0x7f0000000180)={0x8001, 0x8, 0x6, 0x0, 0x372})
ioctl$VIDIOC_TRY_DECODER_CMD(r4, 0xc0485661, &(0x7f0000000340)={0x3, 0x1, @start={0xda, 0x1}})
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000003c0)='./file0\x00', 0x8000, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000400)=ANY=[@ANYRES64=r7, @ANYRES64=r1])
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005", 0x5)
r8 = accept$alg(r0, 0x0, 0x0)
sendmmsg$alg(r8, &(0x7f0000003e80)=[{0x0, 0x0, &(0x7f0000002a80), 0x359, &(0x7f0000000100)=[@op={0x18}], 0x18}], 0x1, 0x0)
recvmsg(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000080)=""/30, 0x1e}], 0x1}, 0x0)

[  368.798507][T14421] netlink: 'syz-executor2': attribute type 1 has an invalid length.
09:20:17 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syz_tun\x00'})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mknod$loop(0x0, 0x0, 0xffffffffffffffff)
write(0xffffffffffffffff, 0x0, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, 0x0, 0xfffffffffffffe38)
r1 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x1, 0x0)
r2 = dup(r1)
ioctl$KVM_GET_ONE_REG(r2, 0x4010aeab, &(0x7f0000000000)={0x0, 0x2000000013})
mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000)
ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0)
syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00')
getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000100)={{{@in=@empty, @in=@empty}}, {{}, 0x0, @in=@local}}, &(0x7f0000000080)=0xe8)
getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000004cc0)={{{@in6=@ipv4={[], [], @loopback}, @in6=@mcast1}}, {{@in=@loopback}, 0x0, @in6=@dev}}, &(0x7f0000004dc0)=0xe8)
getsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f0000005040)={@broadcast}, &(0x7f0000005080)=0xc)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
getsockopt$inet6_mreq(r2, 0x29, 0x0, 0x0, 0x0)
getsockopt$inet6_mreq(r2, 0x29, 0x0, &(0x7f0000005340)={@loopback}, &(0x7f0000005380)=0x14)
clock_gettime(0x0, &(0x7f0000006340))
setsockopt$inet_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x0, 0x2d, 0x0, 0x0)
getsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f0000006480)={@multicast2, @remote}, &(0x7f00000064c0)=0xc)
getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000300)={0x0, @empty, @empty}, &(0x7f0000006540)=0xc)
prctl$PR_GET_CHILD_SUBREAPER(0x25)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000006580)={'team0\x00'})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000067c0)={'veth0_to_bond\x00'})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0)
sendmsg$nl_route(r0, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="0000000000000000140016001000010000000100000000000020000000000000000000000000000000000000000000000000000000000000c3d2648f973aaa77786b628854f3e46e5e2160cfa2bb21907bcfb316c61880e34579dedb980cc7a013097b3f5cde911507c17284f3fb9eb9b4304d708741731dc77f86b98a02990311744b865fb50bad"], 0x1}}, 0x0)

[  368.979713][T14427] FAT-fs (loop0): Unrecognized mount option "��������" or missing value
09:20:17 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x3bc, &(0x7f0000000100)={&(0x7f00000001c0)={0x2c, 0x31, 0x829, 0x0, 0x0, {0x2803}, [@nested={0x2c, 0x0, [@typed={0x14, 0x1, @ipv6=@loopback}]}]}, 0x2c}}, 0x0)

09:20:17 executing program 3:
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syz_tun\x00'})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mknod$loop(0x0, 0x0, 0xffffffffffffffff)
write(0xffffffffffffffff, 0x0, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, 0x0, 0xfffffffffffffe38)
r1 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x1, 0x0)
r2 = dup(r1)
ioctl$KVM_GET_ONE_REG(r2, 0x4010aeab, &(0x7f0000000000)={0x0, 0x2000000013})
mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000)
ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0)
syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00')
getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000100)={{{@in=@empty, @in=@empty}}, {{}, 0x0, @in=@local}}, &(0x7f0000000080)=0xe8)
getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000004cc0)={{{@in6=@ipv4={[], [], @loopback}, @in6=@mcast1}}, {{@in=@loopback}, 0x0, @in6=@dev}}, &(0x7f0000004dc0)=0xe8)
getsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f0000005040)={@broadcast}, &(0x7f0000005080)=0xc)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
getsockopt$inet6_mreq(r2, 0x29, 0x0, 0x0, 0x0)
getsockopt$inet6_mreq(r2, 0x29, 0x0, &(0x7f0000005340)={@loopback}, &(0x7f0000005380)=0x14)
clock_gettime(0x0, &(0x7f0000006340))
setsockopt$inet_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x0, 0x2d, 0x0, 0x0)
getsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f0000006480)={@multicast2, @remote}, &(0x7f00000064c0)=0xc)
getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000300)={0x0, @empty, @empty}, &(0x7f0000006540)=0xc)
prctl$PR_GET_CHILD_SUBREAPER(0x25)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000006580)={'team0\x00'})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000067c0)={'veth0_to_bond\x00'})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0)
sendmsg$nl_route(r0, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="0000000000000000140016001000010000000100000000000020000000000000000000000000000000000000000000000000000000000000c3d2648f973aaa77786b628854f3e46e5e2160cfa2bb21907bcfb316c61880e34579dedb980cc7a013097b3f5cde911507c17284f3fb9eb9b4304d708741731dc77f86b98a02990311744b865fb50bad"], 0x1}}, 0x0)

09:20:17 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syz_tun\x00'})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mknod$loop(0x0, 0x0, 0xffffffffffffffff)
write(0xffffffffffffffff, 0x0, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, 0x0, 0xfffffffffffffe38)
r1 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x1, 0x0)
r2 = dup(r1)
ioctl$KVM_GET_ONE_REG(r2, 0x4010aeab, &(0x7f0000000000)={0x0, 0x2000000013})
mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000)
ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0)
syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00')
getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000100)={{{@in=@empty, @in=@empty}}, {{}, 0x0, @in=@local}}, &(0x7f0000000080)=0xe8)
getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000004cc0)={{{@in6=@ipv4={[], [], @loopback}, @in6=@mcast1}}, {{@in=@loopback}, 0x0, @in6=@dev}}, &(0x7f0000004dc0)=0xe8)
getsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f0000005040)={@broadcast}, &(0x7f0000005080)=0xc)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
getsockopt$inet6_mreq(r2, 0x29, 0x0, 0x0, 0x0)
getsockopt$inet6_mreq(r2, 0x29, 0x0, &(0x7f0000005340)={@loopback}, &(0x7f0000005380)=0x14)
clock_gettime(0x0, &(0x7f0000006340))
setsockopt$inet_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x0, 0x2d, 0x0, 0x0)
getsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f0000006480)={@multicast2, @remote}, &(0x7f00000064c0)=0xc)
getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000300)={0x0, @empty, @empty}, &(0x7f0000006540)=0xc)
prctl$PR_GET_CHILD_SUBREAPER(0x25)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000006580)={'team0\x00'})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000067c0)={'veth0_to_bond\x00'})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0)
sendmsg$nl_route(r0, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="0000000000000000140016001000010000000100000000000020000000000000000000000000000000000000000000000000000000000000c3d2648f973aaa77786b628854f3e46e5e2160cfa2bb21907bcfb316c61880e34579dedb980cc7a013097b3f5cde911507c17284f3fb9eb9b4304d708741731dc77f86b98a02990311744b865fb50bad"], 0x1}}, 0x0)

[  369.134740][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  369.140598][    C1] protocol 88fb is buggy, dev hsr_slave_1
[  369.146472][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  369.152253][    C1] protocol 88fb is buggy, dev hsr_slave_1
[  369.220593][T14431] FAT-fs (loop1): Unrecognized mount option "��������" or missing value
[  369.273322][T14448] netlink: 'syz-executor2': attribute type 1 has an invalid length.
09:20:17 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syz_tun\x00'})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mknod$loop(0x0, 0x0, 0xffffffffffffffff)
write(0xffffffffffffffff, 0x0, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, 0x0, 0xfffffffffffffe38)
r1 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x1, 0x0)
r2 = dup(r1)
ioctl$KVM_GET_ONE_REG(r2, 0x4010aeab, &(0x7f0000000000)={0x0, 0x2000000013})
mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000)
ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0)
syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00')
getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000100)={{{@in=@empty, @in=@empty}}, {{}, 0x0, @in=@local}}, &(0x7f0000000080)=0xe8)
getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000004cc0)={{{@in6=@ipv4={[], [], @loopback}, @in6=@mcast1}}, {{@in=@loopback}, 0x0, @in6=@dev}}, &(0x7f0000004dc0)=0xe8)
getsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f0000005040)={@broadcast}, &(0x7f0000005080)=0xc)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
getsockopt$inet6_mreq(r2, 0x29, 0x0, 0x0, 0x0)
getsockopt$inet6_mreq(r2, 0x29, 0x0, &(0x7f0000005340)={@loopback}, &(0x7f0000005380)=0x14)
clock_gettime(0x0, &(0x7f0000006340))
setsockopt$inet_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x0, 0x2d, 0x0, 0x0)
getsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f0000006480)={@multicast2, @remote}, &(0x7f00000064c0)=0xc)
getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000300)={0x0, @empty, @empty}, &(0x7f0000006540)=0xc)
prctl$PR_GET_CHILD_SUBREAPER(0x25)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000006580)={'team0\x00'})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000067c0)={'veth0_to_bond\x00'})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0)
sendmsg$nl_route(r0, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="0000000000000000140016001000010000000100000000000020000000000000000000000000000000000000000000000000000000000000c3d2648f973aaa77786b628854f3e46e5e2160cfa2bb21907bcfb316c61880e34579dedb980cc7a013097b3f5cde911507c17284f3fb9eb9b4304d708741731dc77f86b98a02990311744b865fb50bad"], 0x1}}, 0x0)

09:20:17 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syz_tun\x00'})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mknod$loop(0x0, 0x0, 0xffffffffffffffff)
write(0xffffffffffffffff, 0x0, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, 0x0, 0xfffffffffffffe38)
r1 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x1, 0x0)
r2 = dup(r1)
ioctl$KVM_GET_ONE_REG(r2, 0x4010aeab, &(0x7f0000000000)={0x0, 0x2000000013})
mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000)
ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0)
syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00')
getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000100)={{{@in=@empty, @in=@empty}}, {{}, 0x0, @in=@local}}, &(0x7f0000000080)=0xe8)
getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000004cc0)={{{@in6=@ipv4={[], [], @loopback}, @in6=@mcast1}}, {{@in=@loopback}, 0x0, @in6=@dev}}, &(0x7f0000004dc0)=0xe8)
getsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f0000005040)={@broadcast}, &(0x7f0000005080)=0xc)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
getsockopt$inet6_mreq(r2, 0x29, 0x0, 0x0, 0x0)
getsockopt$inet6_mreq(r2, 0x29, 0x0, &(0x7f0000005340)={@loopback}, &(0x7f0000005380)=0x14)
clock_gettime(0x0, &(0x7f0000006340))
setsockopt$inet_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x0, 0x2d, 0x0, 0x0)
getsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f0000006480)={@multicast2, @remote}, &(0x7f00000064c0)=0xc)
getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000300)={0x0, @empty, @empty}, &(0x7f0000006540)=0xc)
prctl$PR_GET_CHILD_SUBREAPER(0x25)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000006580)={'team0\x00'})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000067c0)={'veth0_to_bond\x00'})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0)
sendmsg$nl_route(r0, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="0000000000000000140016001000010000000100000000000020000000000000000000000000000000000000000000000000000000000000c3d2648f973aaa77786b628854f3e46e5e2160cfa2bb21907bcfb316c61880e34579dedb980cc7a013097b3f5cde911507c17284f3fb9eb9b4304d708741731dc77f86b98a02990311744b865fb50bad"], 0x1}}, 0x0)

09:20:17 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x3bc, &(0x7f0000000100)={&(0x7f00000001c0)={0x2c, 0x31, 0x829, 0x0, 0x0, {0x2803}, [@nested={0x2c, 0x0, [@typed={0x14, 0x1, @ipv6=@loopback}]}]}, 0x2c}}, 0x0)

09:20:17 executing program 3:
r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0)
ioctl$SG_SET_TIMEOUT(r0, 0x227f, &(0x7f0000000080))

09:20:17 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(cast5)\x00'}, 0x58)
fcntl$setflags(0xffffffffffffffff, 0x2, 0x1)
r1 = socket(0x10, 0x20001000000003, 0x0)
write(r1, &(0x7f0000000000)="220000001400070500e80000004c03000208030001000000080002004102fff0f054", 0x22)
r2 = socket$netlink(0x10, 0x3, 0x18)
openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="390000001300090468fe0704000000000000ff3f03000000450001070000001419001a0015000a00070007000200000800005d14a4e91ee438", 0x39}], 0x1)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4)
ioctl$RTC_WIE_OFF(0xffffffffffffffff, 0x7010)
connect$inet(r3, &(0x7f0000000040)={0x2, 0x3ffffffffffffffe, @broadcast}, 0x10)
r5 = dup3(r3, r3, 0x80000)
ioctl$VIDIOC_G_STD(r5, 0x80085617, &(0x7f00000002c0))
ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000080)={0x2, {0x2, 0x4e20}, {0x2, 0x4e21, @loopback}, {0x2, 0x4e23, @broadcast}, 0x180, 0x8, 0x5, 0x1000, 0x0, 0x0, 0x800, 0x0, 0x8})
r6 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x94)
sendmmsg(r3, &(0x7f0000007fc0), 0x40000000000002f, 0x0)
ioctl$TIOCGPGRP(r6, 0x540f, &(0x7f0000000240)=<r7=>0x0)
ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000480)={'bond_slave_1\x00', {0x2, 0x4e23, @loopback}})
ioctl$TUNGETIFF(r6, 0x800454d2, &(0x7f0000000200))
ioctl$FS_IOC_FSGETXATTR(r3, 0x801c581f, &(0x7f0000000180)={0x8001, 0x8, 0x6, 0x0, 0x372})
ioctl$VIDIOC_TRY_DECODER_CMD(r4, 0xc0485661, &(0x7f0000000340)={0x3, 0x1, @start={0xda, 0x1}})
syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000003c0)='./file0\x00', 0x8000, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000400)=ANY=[@ANYRES64=r7, @ANYRES64=r1])
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005", 0x5)
r8 = accept$alg(r0, 0x0, 0x0)
sendmmsg$alg(r8, &(0x7f0000003e80)=[{0x0, 0x0, &(0x7f0000002a80), 0x359, &(0x7f0000000100)=[@op={0x18}], 0x18}], 0x1, 0x0)
recvmsg(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000080)=""/30, 0x1e}], 0x1}, 0x0)

09:20:17 executing program 1:
r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0)
getsockopt$ax25_int(r0, 0x101, 0x0, &(0x7f00000000c0), &(0x7f0000000100)=0x4)

[  369.647999][T14464] netlink: 'syz-executor2': attribute type 1 has an invalid length.
09:20:17 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_gettime(0x96fe161f85743171, 0x0)

09:20:18 executing program 2:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x4, &(0x7f0000000180), 0x4)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
geteuid()
mount$fuseblk(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="7f19862c1ad34ca5f45fb5a7a964d712776191a6ef704a84835852a4f9913e758749377adaec440000c0ffffffffffffff0000000062ff269afba86b0faf4c3ed9248f4c822c0dd3d60e67f6454b04c2db01c769f2f6a047eebce0d64b7b2351c55bb8d6295eaaef055799e949c4efdd090795ec0044d651427d2d138dbb1d1912ffef71afa1983e519d057fa83d404141647d4ca0fa34dcb5aa9e3b91e2625e10296144b538e54ebc528be52f4158421ee1b3720c6d7fec2d50962dc2c8b07a05210e1b1d2a8d4a7c07e838cf92ea905141d977267ad6b0bc974ce1264d82dd7b655e40bf02b676d5299de9"])
getpeername$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000080))
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, 0x0, 0x0)
madvise(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0)
write$cgroup_type(0xffffffffffffffff, 0x0, 0x373)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
r3 = getpgrp(0x0)
ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000200)=r3)
write$P9_RREMOVE(0xffffffffffffffff, 0x0, 0x0)
bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e21, 0x0, @rand_addr="2d0be1aa0334b10da0ec57702dbec84b"}, 0x1c)
ioctl$sock_TIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0)
sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
splice(r2, 0x0, r1, 0x0, 0x1000000000000003, 0x0)
inotify_init1(0x0)
write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0)
ioctl$GIO_UNISCRNMAP(0xffffffffffffffff, 0x4b69, 0x0)
sendto$packet(r2, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0)

09:20:18 executing program 1:
r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0)
getsockopt$ax25_int(r0, 0x101, 0x0, &(0x7f00000000c0), &(0x7f0000000100)=0x4)

09:20:18 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syz_tun\x00'})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mknod$loop(0x0, 0x0, 0xffffffffffffffff)
write(0xffffffffffffffff, 0x0, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, 0x0, 0xfffffffffffffe38)
r1 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x1, 0x0)
r2 = dup(r1)
ioctl$KVM_GET_ONE_REG(r2, 0x4010aeab, &(0x7f0000000000)={0x0, 0x2000000013})
mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000)
ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0)
syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00')
getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000100)={{{@in=@empty, @in=@empty}}, {{}, 0x0, @in=@local}}, &(0x7f0000000080)=0xe8)
getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000004cc0)={{{@in6=@ipv4={[], [], @loopback}, @in6=@mcast1}}, {{@in=@loopback}, 0x0, @in6=@dev}}, &(0x7f0000004dc0)=0xe8)
getsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f0000005040)={@broadcast}, &(0x7f0000005080)=0xc)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
getsockopt$inet6_mreq(r2, 0x29, 0x0, 0x0, 0x0)
getsockopt$inet6_mreq(r2, 0x29, 0x0, &(0x7f0000005340)={@loopback}, &(0x7f0000005380)=0x14)
clock_gettime(0x0, &(0x7f0000006340))
setsockopt$inet_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x0, 0x2d, 0x0, 0x0)
getsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f0000006480)={@multicast2, @remote}, &(0x7f00000064c0)=0xc)
getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000300)={0x0, @empty, @empty}, &(0x7f0000006540)=0xc)
prctl$PR_GET_CHILD_SUBREAPER(0x25)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000006580)={'team0\x00'})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000067c0)={'veth0_to_bond\x00'})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0)
sendmsg$nl_route(r0, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="0000000000000000140016001000010000000100000000000020000000000000000000000000000000000000000000000000000000000000c3d2648f973aaa77786b628854f3e46e5e2160cfa2bb21907bcfb316c61880e34579dedb980cc7a013097b3f5cde911507c17284f3fb9eb9b4304d708741731dc77f86b98a02990311744b865fb50bad"], 0x1}}, 0x0)

[  369.876997][T14478] FAT-fs (loop0): Unrecognized mount option "��������" or missing value
09:20:18 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_gettime(0x96fe161f85743171, 0x0)

09:20:18 executing program 1:
r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0)
getsockopt$ax25_int(r0, 0x101, 0x0, &(0x7f00000000c0), &(0x7f0000000100)=0x4)

09:20:18 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_gettime(0x96fe161f85743171, 0x0)

09:20:18 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f0000000000)="360fae08670f01d1b8c80e8ee0f2a566b9af0300000f320fc75ac70f019af5ffba210066ed0fc79e9c5ebaa000b80118ef", 0x31}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1)

09:20:18 executing program 1:
r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0)
getsockopt$ax25_int(r0, 0x101, 0x0, &(0x7f00000000c0), &(0x7f0000000100)=0x4)

09:20:18 executing program 3:
r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0)
ioctl$SG_SET_TIMEOUT(r0, 0x227f, &(0x7f0000000080))

09:20:18 executing program 4:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_gettime(0x96fe161f85743171, 0x0)

09:20:18 executing program 0:
mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x20000000000032, 0xffffffffffffffff, 0x0)
r0 = socket$inet(0x2, 0x3, 0x20000000084)
getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x83, &(0x7f0000001200)={'nat\x00', 0x0, 0x0, 0x90, [], 0x0, &(0x7f00000001c0), &(0x7f0000000200)=""/4096}, &(0x7f0000001280)=0x108)

09:20:18 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='projid_map\x00')
pread64(r0, 0x0, 0x0, 0x21)

09:20:18 executing program 2:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x4, &(0x7f0000000180), 0x4)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
geteuid()
mount$fuseblk(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="7f19862c1ad34ca5f45fb5a7a964d712776191a6ef704a84835852a4f9913e758749377adaec440000c0ffffffffffffff0000000062ff269afba86b0faf4c3ed9248f4c822c0dd3d60e67f6454b04c2db01c769f2f6a047eebce0d64b7b2351c55bb8d6295eaaef055799e949c4efdd090795ec0044d651427d2d138dbb1d1912ffef71afa1983e519d057fa83d404141647d4ca0fa34dcb5aa9e3b91e2625e10296144b538e54ebc528be52f4158421ee1b3720c6d7fec2d50962dc2c8b07a05210e1b1d2a8d4a7c07e838cf92ea905141d977267ad6b0bc974ce1264d82dd7b655e40bf02b676d5299de9"])
getpeername$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000080))
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, 0x0, 0x0)
madvise(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0)
write$cgroup_type(0xffffffffffffffff, 0x0, 0x373)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
r3 = getpgrp(0x0)
ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000200)=r3)
write$P9_RREMOVE(0xffffffffffffffff, 0x0, 0x0)
bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e21, 0x0, @rand_addr="2d0be1aa0334b10da0ec57702dbec84b"}, 0x1c)
ioctl$sock_TIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0)
sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
splice(r2, 0x0, r1, 0x0, 0x1000000000000003, 0x0)
inotify_init1(0x0)
write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0)
ioctl$GIO_UNISCRNMAP(0xffffffffffffffff, 0x4b69, 0x0)
sendto$packet(r2, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0)

09:20:18 executing program 0:
mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x20000000000032, 0xffffffffffffffff, 0x0)
r0 = socket$inet(0x2, 0x3, 0x20000000084)
getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x83, &(0x7f0000001200)={'nat\x00', 0x0, 0x0, 0x90, [], 0x0, &(0x7f00000001c0), &(0x7f0000000200)=""/4096}, &(0x7f0000001280)=0x108)

09:20:18 executing program 4:
syz_mount_image$hfs(&(0x7f0000000180)='hfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB='iocharset=m'])
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)

09:20:18 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='projid_map\x00')
pread64(r0, 0x0, 0x0, 0x21)

09:20:18 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f0000000000)="360fae08670f01d1b8c80e8ee0f2a566b9af0300000f320fc75ac70f019af5ffba210066ed0fc79e9c5ebaa000b80118ef", 0x31}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1)

09:20:19 executing program 0:
mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x20000000000032, 0xffffffffffffffff, 0x0)
r0 = socket$inet(0x2, 0x3, 0x20000000084)
getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x83, &(0x7f0000001200)={'nat\x00', 0x0, 0x0, 0x90, [], 0x0, &(0x7f00000001c0), &(0x7f0000000200)=""/4096}, &(0x7f0000001280)=0x108)

09:20:19 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='projid_map\x00')
pread64(r0, 0x0, 0x0, 0x21)

[  370.938899][T14536] hfs: unable to load iocharset "m"
[  370.949170][T14536] hfs: unable to parse mount options
09:20:19 executing program 0:
mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x20000000000032, 0xffffffffffffffff, 0x0)
r0 = socket$inet(0x2, 0x3, 0x20000000084)
getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x83, &(0x7f0000001200)={'nat\x00', 0x0, 0x0, 0x90, [], 0x0, &(0x7f00000001c0), &(0x7f0000000200)=""/4096}, &(0x7f0000001280)=0x108)

[  371.110850][T14536] hfs: unable to load iocharset "m"
[  371.135354][T14536] hfs: unable to parse mount options
09:20:19 executing program 3:
r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0)
ioctl$SG_SET_TIMEOUT(r0, 0x227f, &(0x7f0000000080))

09:20:19 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f0000000000)="360fae08670f01d1b8c80e8ee0f2a566b9af0300000f320fc75ac70f019af5ffba210066ed0fc79e9c5ebaa000b80118ef", 0x31}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1)

09:20:19 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='projid_map\x00')
pread64(r0, 0x0, 0x0, 0x21)

09:20:19 executing program 4:
syz_mount_image$hfs(&(0x7f0000000180)='hfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB='iocharset=m'])
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)

09:20:19 executing program 0:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x4, &(0x7f0000000180), 0x4)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
geteuid()
mount$fuseblk(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="7f19862c1ad34ca5f45fb5a7a964d712776191a6ef704a84835852a4f9913e758749377adaec440000c0ffffffffffffff0000000062ff269afba86b0faf4c3ed9248f4c822c0dd3d60e67f6454b04c2db01c769f2f6a047eebce0d64b7b2351c55bb8d6295eaaef055799e949c4efdd090795ec0044d651427d2d138dbb1d1912ffef71afa1983e519d057fa83d404141647d4ca0fa34dcb5aa9e3b91e2625e10296144b538e54ebc528be52f4158421ee1b3720c6d7fec2d50962dc2c8b07a05210e1b1d2a8d4a7c07e838cf92ea905141d977267ad6b0bc974ce1264d82dd7b655e40bf02b676d5299de9"])
getpeername$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000080))
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, 0x0, 0x0)
madvise(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0)
write$cgroup_type(0xffffffffffffffff, 0x0, 0x373)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
r3 = getpgrp(0x0)
ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000200)=r3)
write$P9_RREMOVE(0xffffffffffffffff, 0x0, 0x0)
bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e21, 0x0, @rand_addr="2d0be1aa0334b10da0ec57702dbec84b"}, 0x1c)
ioctl$sock_TIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0)
sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
splice(r2, 0x0, r1, 0x0, 0x1000000000000003, 0x0)
inotify_init1(0x0)
write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0)
ioctl$GIO_UNISCRNMAP(0xffffffffffffffff, 0x4b69, 0x0)
sendto$packet(r2, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0)

09:20:19 executing program 2:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x4, &(0x7f0000000180), 0x4)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
geteuid()
mount$fuseblk(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="7f19862c1ad34ca5f45fb5a7a964d712776191a6ef704a84835852a4f9913e758749377adaec440000c0ffffffffffffff0000000062ff269afba86b0faf4c3ed9248f4c822c0dd3d60e67f6454b04c2db01c769f2f6a047eebce0d64b7b2351c55bb8d6295eaaef055799e949c4efdd090795ec0044d651427d2d138dbb1d1912ffef71afa1983e519d057fa83d404141647d4ca0fa34dcb5aa9e3b91e2625e10296144b538e54ebc528be52f4158421ee1b3720c6d7fec2d50962dc2c8b07a05210e1b1d2a8d4a7c07e838cf92ea905141d977267ad6b0bc974ce1264d82dd7b655e40bf02b676d5299de9"])
getpeername$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000080))
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, 0x0, 0x0)
madvise(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0)
write$cgroup_type(0xffffffffffffffff, 0x0, 0x373)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
r3 = getpgrp(0x0)
ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000200)=r3)
write$P9_RREMOVE(0xffffffffffffffff, 0x0, 0x0)
bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e21, 0x0, @rand_addr="2d0be1aa0334b10da0ec57702dbec84b"}, 0x1c)
ioctl$sock_TIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0)
sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
splice(r2, 0x0, r1, 0x0, 0x1000000000000003, 0x0)
inotify_init1(0x0)
write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0)
ioctl$GIO_UNISCRNMAP(0xffffffffffffffff, 0x4b69, 0x0)
sendto$packet(r2, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0)

09:20:19 executing program 1:
r0 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r0, 0x5)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000040)={0x0, 0x0, 0x20}, 0xc)
r1 = socket$inet6_sctp(0xa, 0x8000000001, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000100)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
r2 = accept(r0, 0x0, 0x0)
write$binfmt_misc(r2, &(0x7f0000000000)={'syz0'}, 0x10048)

[  371.598726][T14578] hfs: unable to load iocharset "m"
[  371.604257][T14578] hfs: unable to parse mount options
09:20:19 executing program 4:
syz_mount_image$hfs(&(0x7f0000000180)='hfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB='iocharset=m'])
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)

09:20:20 executing program 0:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x4, &(0x7f0000000180), 0x4)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
geteuid()
mount$fuseblk(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="7f19862c1ad34ca5f45fb5a7a964d712776191a6ef704a84835852a4f9913e758749377adaec440000c0ffffffffffffff0000000062ff269afba86b0faf4c3ed9248f4c822c0dd3d60e67f6454b04c2db01c769f2f6a047eebce0d64b7b2351c55bb8d6295eaaef055799e949c4efdd090795ec0044d651427d2d138dbb1d1912ffef71afa1983e519d057fa83d404141647d4ca0fa34dcb5aa9e3b91e2625e10296144b538e54ebc528be52f4158421ee1b3720c6d7fec2d50962dc2c8b07a05210e1b1d2a8d4a7c07e838cf92ea905141d977267ad6b0bc974ce1264d82dd7b655e40bf02b676d5299de9"])
getpeername$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000080))
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, 0x0, 0x0)
madvise(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0)
write$cgroup_type(0xffffffffffffffff, 0x0, 0x373)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
r3 = getpgrp(0x0)
ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000200)=r3)
write$P9_RREMOVE(0xffffffffffffffff, 0x0, 0x0)
bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e21, 0x0, @rand_addr="2d0be1aa0334b10da0ec57702dbec84b"}, 0x1c)
ioctl$sock_TIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0)
sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
splice(r2, 0x0, r1, 0x0, 0x1000000000000003, 0x0)
inotify_init1(0x0)
write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0)
ioctl$GIO_UNISCRNMAP(0xffffffffffffffff, 0x4b69, 0x0)
sendto$packet(r2, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0)

09:20:20 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f0000000000)="360fae08670f01d1b8c80e8ee0f2a566b9af0300000f320fc75ac70f019af5ffba210066ed0fc79e9c5ebaa000b80118ef", 0x31}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1)

[  372.035636][T14598] hfs: unable to load iocharset "m"
[  372.085826][T14598] hfs: unable to parse mount options
09:20:20 executing program 1:
r0 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r0, 0x5)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000040)={0x0, 0x0, 0x20}, 0xc)
r1 = socket$inet6_sctp(0xa, 0x8000000001, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000100)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
r2 = accept(r0, 0x0, 0x0)
write$binfmt_misc(r2, &(0x7f0000000000)={'syz0'}, 0x10048)

09:20:20 executing program 4:
syz_mount_image$hfs(&(0x7f0000000180)='hfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB='iocharset=m'])
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)

09:20:20 executing program 3:
r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0)
ioctl$SG_SET_TIMEOUT(r0, 0x227f, &(0x7f0000000080))

09:20:20 executing program 5:
r0 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r0, 0x5)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000040)={0x0, 0x0, 0x20}, 0xc)
r1 = socket$inet6_sctp(0xa, 0x8000000001, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000100)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
r2 = accept(r0, 0x0, 0x0)
write$binfmt_misc(r2, &(0x7f0000000000)={'syz0'}, 0x10048)

09:20:20 executing program 2:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x4, &(0x7f0000000180), 0x4)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
geteuid()
mount$fuseblk(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="7f19862c1ad34ca5f45fb5a7a964d712776191a6ef704a84835852a4f9913e758749377adaec440000c0ffffffffffffff0000000062ff269afba86b0faf4c3ed9248f4c822c0dd3d60e67f6454b04c2db01c769f2f6a047eebce0d64b7b2351c55bb8d6295eaaef055799e949c4efdd090795ec0044d651427d2d138dbb1d1912ffef71afa1983e519d057fa83d404141647d4ca0fa34dcb5aa9e3b91e2625e10296144b538e54ebc528be52f4158421ee1b3720c6d7fec2d50962dc2c8b07a05210e1b1d2a8d4a7c07e838cf92ea905141d977267ad6b0bc974ce1264d82dd7b655e40bf02b676d5299de9"])
getpeername$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000080))
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, 0x0, 0x0)
madvise(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0)
write$cgroup_type(0xffffffffffffffff, 0x0, 0x373)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
r3 = getpgrp(0x0)
ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000200)=r3)
write$P9_RREMOVE(0xffffffffffffffff, 0x0, 0x0)
bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e21, 0x0, @rand_addr="2d0be1aa0334b10da0ec57702dbec84b"}, 0x1c)
ioctl$sock_TIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0)
sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
splice(r2, 0x0, r1, 0x0, 0x1000000000000003, 0x0)
inotify_init1(0x0)
write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0)
ioctl$GIO_UNISCRNMAP(0xffffffffffffffff, 0x4b69, 0x0)
sendto$packet(r2, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0)

[  372.462700][T14617] hfs: unable to load iocharset "m"
[  372.469536][T14617] hfs: unable to parse mount options
09:20:20 executing program 1:
r0 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r0, 0x5)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000040)={0x0, 0x0, 0x20}, 0xc)
r1 = socket$inet6_sctp(0xa, 0x8000000001, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000100)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
r2 = accept(r0, 0x0, 0x0)
write$binfmt_misc(r2, &(0x7f0000000000)={'syz0'}, 0x10048)

09:20:20 executing program 0:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x4, &(0x7f0000000180), 0x4)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
geteuid()
mount$fuseblk(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="7f19862c1ad34ca5f45fb5a7a964d712776191a6ef704a84835852a4f9913e758749377adaec440000c0ffffffffffffff0000000062ff269afba86b0faf4c3ed9248f4c822c0dd3d60e67f6454b04c2db01c769f2f6a047eebce0d64b7b2351c55bb8d6295eaaef055799e949c4efdd090795ec0044d651427d2d138dbb1d1912ffef71afa1983e519d057fa83d404141647d4ca0fa34dcb5aa9e3b91e2625e10296144b538e54ebc528be52f4158421ee1b3720c6d7fec2d50962dc2c8b07a05210e1b1d2a8d4a7c07e838cf92ea905141d977267ad6b0bc974ce1264d82dd7b655e40bf02b676d5299de9"])
getpeername$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000080))
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, 0x0, 0x0)
madvise(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0)
write$cgroup_type(0xffffffffffffffff, 0x0, 0x373)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
r3 = getpgrp(0x0)
ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000200)=r3)
write$P9_RREMOVE(0xffffffffffffffff, 0x0, 0x0)
bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e21, 0x0, @rand_addr="2d0be1aa0334b10da0ec57702dbec84b"}, 0x1c)
ioctl$sock_TIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0)
sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
splice(r2, 0x0, r1, 0x0, 0x1000000000000003, 0x0)
inotify_init1(0x0)
write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0)
ioctl$GIO_UNISCRNMAP(0xffffffffffffffff, 0x4b69, 0x0)
sendto$packet(r2, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0)

09:20:20 executing program 4:
r0 = socket$kcm(0x29, 0x2, 0x0)
r1 = socket$kcm(0xa, 0x2, 0x88)
sendmsg$kcm(r1, &(0x7f0000004740)={&(0x7f0000000580)=@in6={0xa, 0x4e21, 0x0, @local}, 0x80, 0x0}, 0xe803)
sendmsg$kcm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000001c80)=[{&(0x7f0000000b80)='9', 0x1}], 0x1}, 0xc000)
sendmsg$kcm(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1c", 0x1}], 0x1}, 0x0)
sendmsg$kcm(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001140)="9f", 0x1}], 0x1}, 0x0)

09:20:21 executing program 5:
r0 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r0, 0x5)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000040)={0x0, 0x0, 0x20}, 0xc)
r1 = socket$inet6_sctp(0xa, 0x8000000001, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000100)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
r2 = accept(r0, 0x0, 0x0)
write$binfmt_misc(r2, &(0x7f0000000000)={'syz0'}, 0x10048)

09:20:21 executing program 1:
r0 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r0, 0x5)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000040)={0x0, 0x0, 0x20}, 0xc)
r1 = socket$inet6_sctp(0xa, 0x8000000001, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000100)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
r2 = accept(r0, 0x0, 0x0)
write$binfmt_misc(r2, &(0x7f0000000000)={'syz0'}, 0x10048)

09:20:21 executing program 4:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff})
r1 = syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/mnt\x00')
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r2, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r3 = dup3(r1, r0, 0x0)
ioctl$VT_RELDISP(r3, 0xb701)

09:20:21 executing program 4:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff})
r1 = syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/mnt\x00')
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r2, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r3 = dup3(r1, r0, 0x0)
ioctl$VT_RELDISP(r3, 0xb701)

[  373.294691][    C1] net_ratelimit: 20 callbacks suppressed
[  373.294701][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  373.306282][    C1] protocol 88fb is buggy, dev hsr_slave_1
[  373.312123][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  373.317939][    C1] protocol 88fb is buggy, dev hsr_slave_1
09:20:21 executing program 2:
mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4000000000000024, 0x32, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1})
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4)
getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x53, 0x0, &(0x7f0000000180))
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
close(r1)
close(r0)

09:20:21 executing program 5:
r0 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r0, 0x5)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000040)={0x0, 0x0, 0x20}, 0xc)
r1 = socket$inet6_sctp(0xa, 0x8000000001, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000100)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
r2 = accept(r0, 0x0, 0x0)
write$binfmt_misc(r2, &(0x7f0000000000)={'syz0'}, 0x10048)

09:20:21 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x2, 0x40030000000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=@bridge_delneigh={0x28, 0x1c, 0xf07, 0x0, 0x0, {0x7, 0x0, 0x6558, r1, 0x93e}, [@NDA_LLADDR={0xa, 0x2, @local}]}, 0x28}}, 0x0)

09:20:21 executing program 3:
r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0xc0a85352, &(0x7f0000000040))

09:20:21 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x2, 0x40030000000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=@bridge_delneigh={0x28, 0x1c, 0xf07, 0x0, 0x0, {0x7, 0x0, 0x6558, r1, 0x93e}, [@NDA_LLADDR={0xa, 0x2, @local}]}, 0x28}}, 0x0)

09:20:21 executing program 4:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff})
r1 = syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/mnt\x00')
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r2, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r3 = dup3(r1, r0, 0x0)
ioctl$VT_RELDISP(r3, 0xb701)

09:20:21 executing program 3:
r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0xc0a85352, &(0x7f0000000040))

09:20:21 executing program 2:
mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4000000000000024, 0x32, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1})
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4)
getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x53, 0x0, &(0x7f0000000180))
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
close(r1)
close(r0)

09:20:21 executing program 0:
r0 = socket$packet(0x11, 0x40800000000003, 0x300)
getsockopt$packet_buf(r0, 0x107, 0xb, 0x0, &(0x7f0000000080))

09:20:22 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x2, 0x40030000000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=@bridge_delneigh={0x28, 0x1c, 0xf07, 0x0, 0x0, {0x7, 0x0, 0x6558, r1, 0x93e}, [@NDA_LLADDR={0xa, 0x2, @local}]}, 0x28}}, 0x0)

09:20:22 executing program 4:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff})
r1 = syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/mnt\x00')
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r2, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r3 = dup3(r1, r0, 0x0)
ioctl$VT_RELDISP(r3, 0xb701)

09:20:22 executing program 3:
r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0xc0a85352, &(0x7f0000000040))

09:20:22 executing program 5:
openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = socket$inet(0x2, 0x200000002, 0x0)
r2 = socket$l2tp(0x18, 0x1, 0x1)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
r4 = socket$l2tp(0x18, 0x1, 0x1)
connect$l2tp(r4, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e)
connect$l2tp(r2, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x3, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x3a)

09:20:22 executing program 0:
r0 = socket$packet(0x11, 0x40800000000003, 0x300)
getsockopt$packet_buf(r0, 0x107, 0xb, 0x0, &(0x7f0000000080))

09:20:22 executing program 3:
r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0xc0a85352, &(0x7f0000000040))

09:20:22 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x2, 0x40030000000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=@bridge_delneigh={0x28, 0x1c, 0xf07, 0x0, 0x0, {0x7, 0x0, 0x6558, r1, 0x93e}, [@NDA_LLADDR={0xa, 0x2, @local}]}, 0x28}}, 0x0)

09:20:22 executing program 2:
mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4000000000000024, 0x32, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1})
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4)
getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x53, 0x0, &(0x7f0000000180))
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
close(r1)
close(r0)

09:20:22 executing program 4:
write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="06000000f9ff000000002d0067844cafe2821a086870ee2b6baeca3b01ffaaaae2f0cd6131ab3a1e00000000eaff053d5cb5c5920a374d4e12"], 0x1)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x33)
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x7, 0x0, 0x9})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x1f, r0, 0x0, 0x0)

[  374.094732][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  374.100586][    C0] protocol 88fb is buggy, dev hsr_slave_1
09:20:22 executing program 5:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = gettid()
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
madvise(&(0x7f0000431000/0x4000)=nil, 0x4000, 0x12)
process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f0000000040)=""/247, 0xffffff50}], 0x1000000000000005, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0)
madvise(&(0x7f000018e000/0x600000)=nil, 0x600000, 0x8)

09:20:22 executing program 0:
r0 = socket$packet(0x11, 0x40800000000003, 0x300)
getsockopt$packet_buf(r0, 0x107, 0xb, 0x0, &(0x7f0000000080))

09:20:22 executing program 3:
io_setup(0x3, &(0x7f0000000400))

09:20:22 executing program 1:
socket(0x1e, 0x4, 0x0)
r0 = socket(0x1e, 0x4, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x8000, 0x0)
ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000440)={0x8, &(0x7f0000000240)=[{<r3=>0x0}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$DRM_IOCTL_LOCK(r2, 0x4008642a, &(0x7f0000000480)={r3, 0x8})
r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000540)='/dev/vcs\x00', 0x20000, 0x0)
syz_mount_image$btrfs(&(0x7f0000000140)='btrfs\x00', &(0x7f0000000900)='./file0\x00', 0x0, 0x0, &(0x7f00000007c0), 0x0, 0x0)
syz_mount_image$ntfs(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, 0x0)
getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f00000002c0)={0x0, 0x0, 0x6, 0x7f, 0x3, 0x1c8}, &(0x7f0000000700)=0x14)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl(0xffffffffffffffff, 0x0, 0x0)
ptrace$getenv(0x4201, 0x0, 0x0, &(0x7f0000000280))
mount$overlay(0x404000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x8, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]})
ioctl$KIOCSOUND(r5, 0x4b2f, 0xff)
setxattr$security_smack_entry(0x0, &(0x7f0000000840)='security.SMACK64MMAP\x00', &(0x7f0000000880)='[}$keyring\x00', 0xb, 0x2)
ioctl$KDGKBMETA(0xffffffffffffffff, 0x4b62, 0x0)
ioctl$BLKRRPART(r5, 0x125f, 0x0)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, <r6=>0x0})
setsockopt$sock_attach_bpf(r6, 0x10f, 0x87, &(0x7f0000000180), 0x127)
getsockopt$IP6T_SO_GET_ENTRIES(r5, 0x29, 0x41, &(0x7f0000000980)={'security\x00', 0xef, "9fc280bf8becfc1678038f77f402f0460a913c58aa925e0b9667101263a7f514f004af204e0175214f02097974b42a9053a293b5903f8d815bbd54a1df572c435c683ff47925c7fc42d1569948bd8c4da2fa393dba834cc25879111a9cddae221487abd8358b5a3277312fbeb1351466b5a6eae7485c8a87914c76d5e780250f45faf72b6981d01545c9bdb415a5da4b3d2e93f5814c059745b2e28a6afe389f25f2374e060291b5ad2ddfd269a211a398a699acccc84625364dc14622d4c9eb8b90c2bf85027e04c82211c72a3f280cb3da9cbc7af4ffbfb19eaf38ca245b282a286b445a819f0ec01d7d73f0a6a5"}, 0x0)
setxattr$system_posix_acl(&(0x7f0000000180)='./file1\x00', &(0x7f0000000380)='system.posix_acl_default\x00', &(0x7f00000003c0)={{}, {0x1, 0x3}, [{}, {0x2, 0x1}, {0x2, 0x1}], {0x4, 0x7}, [{}, {}, {0x8, 0x7}], {0x10, 0x4}, {0x20, 0x3}}, 0x54, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000004a00)=[{{0x0, 0x0, &(0x7f0000004540)=[{&(0x7f0000003480)=""/4096, 0x1000}, {0x0}, {&(0x7f00000044c0)=""/125, 0x7d}], 0x3, &(0x7f0000004580)=""/129, 0x81, 0x1ff}, 0x3}, {{0x0, 0x0, &(0x7f0000004900)=[{&(0x7f0000004640)=""/100, 0x64}, {&(0x7f00000047c0)=""/158, 0x9e}, {&(0x7f0000004880)=""/112, 0x70}], 0x3, &(0x7f0000004940)=""/130, 0x82, 0x5}, 0x8}], 0x2, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r6, 0x84, 0x20, 0x0, &(0x7f0000000940))
ioctl$KVM_NMI(r4, 0xae9a)
sendmsg$unix(r1, &(0x7f0000000740)={&(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000dc0)=[{&(0x7f00000006c0)="3f60a535575e34e8e9e842d0f991f7bfc92f0be6fb05b5d685b7621a0d6f4914", 0x20}], 0x1}, 0x8004)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc}, 0x10)
dup(r0)

09:20:22 executing program 4:
r0 = userfaultfd(0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0)
ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, 0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x930000}, 0x200000})

09:20:22 executing program 2:
mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4000000000000024, 0x32, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1})
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4)
getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x53, 0x0, &(0x7f0000000180))
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
close(r1)
close(r0)

[  374.414841][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  374.420669][    C0] protocol 88fb is buggy, dev hsr_slave_1
09:20:22 executing program 0:
r0 = socket$packet(0x11, 0x40800000000003, 0x300)
getsockopt$packet_buf(r0, 0x107, 0xb, 0x0, &(0x7f0000000080))

[  374.494709][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  374.500624][    C1] protocol 88fb is buggy, dev hsr_slave_1
09:20:22 executing program 3:
perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x800003e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, 0x0)
chdir(&(0x7f0000000000)='./file0\x00')
mkdir(&(0x7f0000000140)='./control\x00', 0x0)
r0 = open(&(0x7f0000000380)='./control\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000100)='./control\x00', 0x101040, 0x0)
rmdir(&(0x7f0000000200)='./control\x00')

09:20:22 executing program 5:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = gettid()
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
madvise(&(0x7f0000431000/0x4000)=nil, 0x4000, 0x12)
process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f0000000040)=""/247, 0xffffff50}], 0x1000000000000005, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0)
madvise(&(0x7f000018e000/0x600000)=nil, 0x600000, 0x8)

[  374.686019][T14738] overlayfs: unrecognized mount option "�" or missing value
09:20:22 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000000140)={'lo\x00', {0x2, 0x0, @multicast2}})

09:20:22 executing program 2:
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_dev$adsp(0x0, 0x7, 0x0)
write$P9_RSETATTR(r0, &(0x7f0000000240)={0x7, 0x1b, 0x1}, 0x7)
getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000100))
setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000005c0)={{{@in6=@mcast2, @in6=@mcast2, 0x4e21, 0x400, 0x4e21, 0x0, 0x2, 0x80, 0xa0, 0xff}, {0x9, 0xe59, 0xfffffffffffffff7, 0x7fffffff, 0x3, 0xd610}, {0x0, 0xffffffffffffffff, 0x7fff}, 0x397, 0x0, 0x0, 0x1, 0x0, 0x3}, {{@in=@loopback, 0x4d2, 0xff}, 0xa, @in=@multicast1, 0x3505, 0x3, 0x3, 0x8, 0x2, 0x4, 0x5}}, 0xe8)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6(0xa, 0x40000080806, 0x0)
ioctl$KDMKTONE(0xffffffffffffffff, 0x4b30, 0x8319)
bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c)
listen(r1, 0x20000000)
r2 = socket$inet6(0xa, 0x6, 0x0)
connect$inet6(r2, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r3 = accept4(r1, 0x0, 0x0, 0x0)
setsockopt$inet6_int(r3, 0x29, 0xb, &(0x7f0000000040)=0x100000000001f, 0x4)
sendmmsg(r3, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x2a, {0x700, 0x0, 0x7}}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}, 0x2000000}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-serpent-sse2\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0)
r5 = accept$alg(0xffffffffffffffff, 0x0, 0x0)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
write(r5, &(0x7f0000000000)="e044c876e9b89b7f08db503169879a75", 0x10)

09:20:23 executing program 4:
r0 = userfaultfd(0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0)
ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, 0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x930000}, 0x200000})

09:20:23 executing program 1:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0)
lsetxattr(&(0x7f0000712ff8)='./file0\x00', &(0x7f0000000080)=@known='security.capability\x00', 0x0, 0x0, 0x0)

09:20:23 executing program 3:
perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x800003e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, 0x0)
chdir(&(0x7f0000000000)='./file0\x00')
mkdir(&(0x7f0000000140)='./control\x00', 0x0)
r0 = open(&(0x7f0000000380)='./control\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000100)='./control\x00', 0x101040, 0x0)
rmdir(&(0x7f0000000200)='./control\x00')

09:20:23 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000000140)={'lo\x00', {0x2, 0x0, @multicast2}})

09:20:23 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000000)={0x1, [0x0]}, 0x0)
mprotect(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x2)
ioctl(r0, 0xfffffffffff3ffbb, &(0x7f0000000000))

09:20:23 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000000140)={'lo\x00', {0x2, 0x0, @multicast2}})

09:20:23 executing program 3:
perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x800003e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, 0x0)
chdir(&(0x7f0000000000)='./file0\x00')
mkdir(&(0x7f0000000140)='./control\x00', 0x0)
r0 = open(&(0x7f0000000380)='./control\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000100)='./control\x00', 0x101040, 0x0)
rmdir(&(0x7f0000000200)='./control\x00')

09:20:23 executing program 4:
r0 = userfaultfd(0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0)
ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, 0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x930000}, 0x200000})

09:20:23 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000000140)={'lo\x00', {0x2, 0x0, @multicast2}})

09:20:23 executing program 5:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = gettid()
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
madvise(&(0x7f0000431000/0x4000)=nil, 0x4000, 0x12)
process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f0000000040)=""/247, 0xffffff50}], 0x1000000000000005, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0)
madvise(&(0x7f000018e000/0x600000)=nil, 0x600000, 0x8)

09:20:23 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000000)={0x1, [0x0]}, 0x0)
mprotect(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x2)
ioctl(r0, 0xfffffffffff3ffbb, &(0x7f0000000000))

09:20:24 executing program 2:
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_dev$adsp(0x0, 0x7, 0x0)
write$P9_RSETATTR(r0, &(0x7f0000000240)={0x7, 0x1b, 0x1}, 0x7)
getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000100))
setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000005c0)={{{@in6=@mcast2, @in6=@mcast2, 0x4e21, 0x400, 0x4e21, 0x0, 0x2, 0x80, 0xa0, 0xff}, {0x9, 0xe59, 0xfffffffffffffff7, 0x7fffffff, 0x3, 0xd610}, {0x0, 0xffffffffffffffff, 0x7fff}, 0x397, 0x0, 0x0, 0x1, 0x0, 0x3}, {{@in=@loopback, 0x4d2, 0xff}, 0xa, @in=@multicast1, 0x3505, 0x3, 0x3, 0x8, 0x2, 0x4, 0x5}}, 0xe8)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6(0xa, 0x40000080806, 0x0)
ioctl$KDMKTONE(0xffffffffffffffff, 0x4b30, 0x8319)
bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c)
listen(r1, 0x20000000)
r2 = socket$inet6(0xa, 0x6, 0x0)
connect$inet6(r2, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r3 = accept4(r1, 0x0, 0x0, 0x0)
setsockopt$inet6_int(r3, 0x29, 0xb, &(0x7f0000000040)=0x100000000001f, 0x4)
sendmmsg(r3, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x2a, {0x700, 0x0, 0x7}}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}, 0x2000000}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-serpent-sse2\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0)
r5 = accept$alg(0xffffffffffffffff, 0x0, 0x0)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
write(r5, &(0x7f0000000000)="e044c876e9b89b7f08db503169879a75", 0x10)

09:20:24 executing program 3:
perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x800003e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, 0x0)
chdir(&(0x7f0000000000)='./file0\x00')
mkdir(&(0x7f0000000140)='./control\x00', 0x0)
r0 = open(&(0x7f0000000380)='./control\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000100)='./control\x00', 0x101040, 0x0)
rmdir(&(0x7f0000000200)='./control\x00')

09:20:24 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000001300)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
flock(r1, 0x4000000001)
flock(r0, 0x2)

09:20:24 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000000)={0x1, [0x0]}, 0x0)
mprotect(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x2)
ioctl(r0, 0xfffffffffff3ffbb, &(0x7f0000000000))

09:20:24 executing program 4:
r0 = userfaultfd(0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0)
ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, 0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x930000}, 0x200000})

09:20:24 executing program 5:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = gettid()
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
madvise(&(0x7f0000431000/0x4000)=nil, 0x4000, 0x12)
process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f0000000040)=""/247, 0xffffff50}], 0x1000000000000005, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0)
madvise(&(0x7f000018e000/0x600000)=nil, 0x600000, 0x8)

09:20:24 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000000)={0x1, [0x0]}, 0x0)
mprotect(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x2)
ioctl(r0, 0xfffffffffff3ffbb, &(0x7f0000000000))

09:20:24 executing program 3:
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_dev$adsp(0x0, 0x7, 0x0)
write$P9_RSETATTR(r0, &(0x7f0000000240)={0x7, 0x1b, 0x1}, 0x7)
getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000100))
setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000005c0)={{{@in6=@mcast2, @in6=@mcast2, 0x4e21, 0x400, 0x4e21, 0x0, 0x2, 0x80, 0xa0, 0xff}, {0x9, 0xe59, 0xfffffffffffffff7, 0x7fffffff, 0x3, 0xd610}, {0x0, 0xffffffffffffffff, 0x7fff}, 0x397, 0x0, 0x0, 0x1, 0x0, 0x3}, {{@in=@loopback, 0x4d2, 0xff}, 0xa, @in=@multicast1, 0x3505, 0x3, 0x3, 0x8, 0x2, 0x4, 0x5}}, 0xe8)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6(0xa, 0x40000080806, 0x0)
ioctl$KDMKTONE(0xffffffffffffffff, 0x4b30, 0x8319)
bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c)
listen(r1, 0x20000000)
r2 = socket$inet6(0xa, 0x6, 0x0)
connect$inet6(r2, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r3 = accept4(r1, 0x0, 0x0, 0x0)
setsockopt$inet6_int(r3, 0x29, 0xb, &(0x7f0000000040)=0x100000000001f, 0x4)
sendmmsg(r3, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x2a, {0x700, 0x0, 0x7}}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}, 0x2000000}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-serpent-sse2\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0)
r5 = accept$alg(0xffffffffffffffff, 0x0, 0x0)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
write(r5, &(0x7f0000000000)="e044c876e9b89b7f08db503169879a75", 0x10)

09:20:24 executing program 4:
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_dev$adsp(0x0, 0x7, 0x0)
write$P9_RSETATTR(r0, &(0x7f0000000240)={0x7, 0x1b, 0x1}, 0x7)
getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000100))
setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000005c0)={{{@in6=@mcast2, @in6=@mcast2, 0x4e21, 0x400, 0x4e21, 0x0, 0x2, 0x80, 0xa0, 0xff}, {0x9, 0xe59, 0xfffffffffffffff7, 0x7fffffff, 0x3, 0xd610}, {0x0, 0xffffffffffffffff, 0x7fff}, 0x397, 0x0, 0x0, 0x1, 0x0, 0x3}, {{@in=@loopback, 0x4d2, 0xff}, 0xa, @in=@multicast1, 0x3505, 0x3, 0x3, 0x8, 0x2, 0x4, 0x5}}, 0xe8)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6(0xa, 0x40000080806, 0x0)
ioctl$KDMKTONE(0xffffffffffffffff, 0x4b30, 0x8319)
bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c)
listen(r1, 0x20000000)
r2 = socket$inet6(0xa, 0x6, 0x0)
connect$inet6(r2, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r3 = accept4(r1, 0x0, 0x0, 0x0)
setsockopt$inet6_int(r3, 0x29, 0xb, &(0x7f0000000040)=0x100000000001f, 0x4)
sendmmsg(r3, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x2a, {0x700, 0x0, 0x7}}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}, 0x2000000}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-serpent-sse2\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0)
r5 = accept$alg(0xffffffffffffffff, 0x0, 0x0)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
write(r5, &(0x7f0000000000)="e044c876e9b89b7f08db503169879a75", 0x10)

09:20:24 executing program 1:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'vlan0\x00', 0x1000000802})
ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x1)

09:20:24 executing program 1:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'vlan0\x00', 0x1000000802})
ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x1)

09:20:25 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000001300)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
flock(r1, 0x4000000001)
flock(r0, 0x2)

09:20:25 executing program 2:
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_dev$adsp(0x0, 0x7, 0x0)
write$P9_RSETATTR(r0, &(0x7f0000000240)={0x7, 0x1b, 0x1}, 0x7)
getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000100))
setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000005c0)={{{@in6=@mcast2, @in6=@mcast2, 0x4e21, 0x400, 0x4e21, 0x0, 0x2, 0x80, 0xa0, 0xff}, {0x9, 0xe59, 0xfffffffffffffff7, 0x7fffffff, 0x3, 0xd610}, {0x0, 0xffffffffffffffff, 0x7fff}, 0x397, 0x0, 0x0, 0x1, 0x0, 0x3}, {{@in=@loopback, 0x4d2, 0xff}, 0xa, @in=@multicast1, 0x3505, 0x3, 0x3, 0x8, 0x2, 0x4, 0x5}}, 0xe8)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6(0xa, 0x40000080806, 0x0)
ioctl$KDMKTONE(0xffffffffffffffff, 0x4b30, 0x8319)
bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c)
listen(r1, 0x20000000)
r2 = socket$inet6(0xa, 0x6, 0x0)
connect$inet6(r2, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r3 = accept4(r1, 0x0, 0x0, 0x0)
setsockopt$inet6_int(r3, 0x29, 0xb, &(0x7f0000000040)=0x100000000001f, 0x4)
sendmmsg(r3, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x2a, {0x700, 0x0, 0x7}}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}, 0x2000000}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-serpent-sse2\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0)
r5 = accept$alg(0xffffffffffffffff, 0x0, 0x0)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
write(r5, &(0x7f0000000000)="e044c876e9b89b7f08db503169879a75", 0x10)

09:20:25 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000001300)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
flock(r1, 0x4000000001)
flock(r0, 0x2)

09:20:25 executing program 1:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'vlan0\x00', 0x1000000802})
ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x1)

09:20:25 executing program 3:
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_dev$adsp(0x0, 0x7, 0x0)
write$P9_RSETATTR(r0, &(0x7f0000000240)={0x7, 0x1b, 0x1}, 0x7)
getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000100))
setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000005c0)={{{@in6=@mcast2, @in6=@mcast2, 0x4e21, 0x400, 0x4e21, 0x0, 0x2, 0x80, 0xa0, 0xff}, {0x9, 0xe59, 0xfffffffffffffff7, 0x7fffffff, 0x3, 0xd610}, {0x0, 0xffffffffffffffff, 0x7fff}, 0x397, 0x0, 0x0, 0x1, 0x0, 0x3}, {{@in=@loopback, 0x4d2, 0xff}, 0xa, @in=@multicast1, 0x3505, 0x3, 0x3, 0x8, 0x2, 0x4, 0x5}}, 0xe8)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6(0xa, 0x40000080806, 0x0)
ioctl$KDMKTONE(0xffffffffffffffff, 0x4b30, 0x8319)
bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c)
listen(r1, 0x20000000)
r2 = socket$inet6(0xa, 0x6, 0x0)
connect$inet6(r2, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r3 = accept4(r1, 0x0, 0x0, 0x0)
setsockopt$inet6_int(r3, 0x29, 0xb, &(0x7f0000000040)=0x100000000001f, 0x4)
sendmmsg(r3, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x2a, {0x700, 0x0, 0x7}}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}, 0x2000000}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-serpent-sse2\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0)
r5 = accept$alg(0xffffffffffffffff, 0x0, 0x0)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
write(r5, &(0x7f0000000000)="e044c876e9b89b7f08db503169879a75", 0x10)

09:20:25 executing program 4:
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_dev$adsp(0x0, 0x7, 0x0)
write$P9_RSETATTR(r0, &(0x7f0000000240)={0x7, 0x1b, 0x1}, 0x7)
getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000100))
setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000005c0)={{{@in6=@mcast2, @in6=@mcast2, 0x4e21, 0x400, 0x4e21, 0x0, 0x2, 0x80, 0xa0, 0xff}, {0x9, 0xe59, 0xfffffffffffffff7, 0x7fffffff, 0x3, 0xd610}, {0x0, 0xffffffffffffffff, 0x7fff}, 0x397, 0x0, 0x0, 0x1, 0x0, 0x3}, {{@in=@loopback, 0x4d2, 0xff}, 0xa, @in=@multicast1, 0x3505, 0x3, 0x3, 0x8, 0x2, 0x4, 0x5}}, 0xe8)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6(0xa, 0x40000080806, 0x0)
ioctl$KDMKTONE(0xffffffffffffffff, 0x4b30, 0x8319)
bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c)
listen(r1, 0x20000000)
r2 = socket$inet6(0xa, 0x6, 0x0)
connect$inet6(r2, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r3 = accept4(r1, 0x0, 0x0, 0x0)
setsockopt$inet6_int(r3, 0x29, 0xb, &(0x7f0000000040)=0x100000000001f, 0x4)
sendmmsg(r3, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x2a, {0x700, 0x0, 0x7}}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}, 0x2000000}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-serpent-sse2\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0)
r5 = accept$alg(0xffffffffffffffff, 0x0, 0x0)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
write(r5, &(0x7f0000000000)="e044c876e9b89b7f08db503169879a75", 0x10)

09:20:25 executing program 1:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'vlan0\x00', 0x1000000802})
ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x1)

09:20:26 executing program 1:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc0405519, &(0x7f0000001000))

09:20:26 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000001300)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
flock(r1, 0x4000000001)
flock(r0, 0x2)

09:20:26 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000001300)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
flock(r1, 0x4000000001)
flock(r0, 0x2)

09:20:26 executing program 1:
r0 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x3, @broadcast, 'erspan0\x00'}}, 0x1e)
ioctl$PPPOEIOCSFWD(r0, 0x4008b100, 0xfffffffffffffffd)

09:20:26 executing program 2:
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_dev$adsp(0x0, 0x7, 0x0)
write$P9_RSETATTR(r0, &(0x7f0000000240)={0x7, 0x1b, 0x1}, 0x7)
getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000100))
setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000005c0)={{{@in6=@mcast2, @in6=@mcast2, 0x4e21, 0x400, 0x4e21, 0x0, 0x2, 0x80, 0xa0, 0xff}, {0x9, 0xe59, 0xfffffffffffffff7, 0x7fffffff, 0x3, 0xd610}, {0x0, 0xffffffffffffffff, 0x7fff}, 0x397, 0x0, 0x0, 0x1, 0x0, 0x3}, {{@in=@loopback, 0x4d2, 0xff}, 0xa, @in=@multicast1, 0x3505, 0x3, 0x3, 0x8, 0x2, 0x4, 0x5}}, 0xe8)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6(0xa, 0x40000080806, 0x0)
ioctl$KDMKTONE(0xffffffffffffffff, 0x4b30, 0x8319)
bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c)
listen(r1, 0x20000000)
r2 = socket$inet6(0xa, 0x6, 0x0)
connect$inet6(r2, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r3 = accept4(r1, 0x0, 0x0, 0x0)
setsockopt$inet6_int(r3, 0x29, 0xb, &(0x7f0000000040)=0x100000000001f, 0x4)
sendmmsg(r3, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x2a, {0x700, 0x0, 0x7}}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}, 0x2000000}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-serpent-sse2\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0)
r5 = accept$alg(0xffffffffffffffff, 0x0, 0x0)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
write(r5, &(0x7f0000000000)="e044c876e9b89b7f08db503169879a75", 0x10)

09:20:26 executing program 1:
r0 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x3, @broadcast, 'erspan0\x00'}}, 0x1e)
ioctl$PPPOEIOCSFWD(r0, 0x4008b100, 0xfffffffffffffffd)

09:20:26 executing program 3:
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_dev$adsp(0x0, 0x7, 0x0)
write$P9_RSETATTR(r0, &(0x7f0000000240)={0x7, 0x1b, 0x1}, 0x7)
getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000100))
setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000005c0)={{{@in6=@mcast2, @in6=@mcast2, 0x4e21, 0x400, 0x4e21, 0x0, 0x2, 0x80, 0xa0, 0xff}, {0x9, 0xe59, 0xfffffffffffffff7, 0x7fffffff, 0x3, 0xd610}, {0x0, 0xffffffffffffffff, 0x7fff}, 0x397, 0x0, 0x0, 0x1, 0x0, 0x3}, {{@in=@loopback, 0x4d2, 0xff}, 0xa, @in=@multicast1, 0x3505, 0x3, 0x3, 0x8, 0x2, 0x4, 0x5}}, 0xe8)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6(0xa, 0x40000080806, 0x0)
ioctl$KDMKTONE(0xffffffffffffffff, 0x4b30, 0x8319)
bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c)
listen(r1, 0x20000000)
r2 = socket$inet6(0xa, 0x6, 0x0)
connect$inet6(r2, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r3 = accept4(r1, 0x0, 0x0, 0x0)
setsockopt$inet6_int(r3, 0x29, 0xb, &(0x7f0000000040)=0x100000000001f, 0x4)
sendmmsg(r3, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x2a, {0x700, 0x0, 0x7}}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}, 0x2000000}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-serpent-sse2\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0)
r5 = accept$alg(0xffffffffffffffff, 0x0, 0x0)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
write(r5, &(0x7f0000000000)="e044c876e9b89b7f08db503169879a75", 0x10)

09:20:26 executing program 4:
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_dev$adsp(0x0, 0x7, 0x0)
write$P9_RSETATTR(r0, &(0x7f0000000240)={0x7, 0x1b, 0x1}, 0x7)
getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000100))
setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000005c0)={{{@in6=@mcast2, @in6=@mcast2, 0x4e21, 0x400, 0x4e21, 0x0, 0x2, 0x80, 0xa0, 0xff}, {0x9, 0xe59, 0xfffffffffffffff7, 0x7fffffff, 0x3, 0xd610}, {0x0, 0xffffffffffffffff, 0x7fff}, 0x397, 0x0, 0x0, 0x1, 0x0, 0x3}, {{@in=@loopback, 0x4d2, 0xff}, 0xa, @in=@multicast1, 0x3505, 0x3, 0x3, 0x8, 0x2, 0x4, 0x5}}, 0xe8)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6(0xa, 0x40000080806, 0x0)
ioctl$KDMKTONE(0xffffffffffffffff, 0x4b30, 0x8319)
bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c)
listen(r1, 0x20000000)
r2 = socket$inet6(0xa, 0x6, 0x0)
connect$inet6(r2, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r3 = accept4(r1, 0x0, 0x0, 0x0)
setsockopt$inet6_int(r3, 0x29, 0xb, &(0x7f0000000040)=0x100000000001f, 0x4)
sendmmsg(r3, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x2a, {0x700, 0x0, 0x7}}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}, 0x2000000}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-serpent-sse2\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0)
r5 = accept$alg(0xffffffffffffffff, 0x0, 0x0)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070")
write(r5, &(0x7f0000000000)="e044c876e9b89b7f08db503169879a75", 0x10)

09:20:26 executing program 1:
r0 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x3, @broadcast, 'erspan0\x00'}}, 0x1e)
ioctl$PPPOEIOCSFWD(r0, 0x4008b100, 0xfffffffffffffffd)

[  378.574730][    C0] net_ratelimit: 20 callbacks suppressed
[  378.574740][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  378.586249][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  378.665115][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  378.671552][    C1] protocol 88fb is buggy, dev hsr_slave_1
09:20:26 executing program 1:
r0 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x3, @broadcast, 'erspan0\x00'}}, 0x1e)
ioctl$PPPOEIOCSFWD(r0, 0x4008b100, 0xfffffffffffffffd)

09:20:27 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000001300)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
flock(r1, 0x4000000001)
flock(r0, 0x2)

[  378.974716][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  378.980655][    C0] protocol 88fb is buggy, dev hsr_slave_1
09:20:27 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000001300)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
flock(r1, 0x4000000001)
flock(r0, 0x2)

09:20:27 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, 0x0, 0x0)
ioctl$sock_ifreq(r0, 0x8991, &(0x7f0000000140)={'bond0\x00@@\xea\xff\xff\x80\x00\x00\x02\x00', @ifru_names='bond_slave_1\x00'})
socket$inet6(0xa, 0x400000000001, 0x0)
r2 = dup(0xffffffffffffffff)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000200))
setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, 0x0, &(0x7f0000000100))
getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, &(0x7f00000001c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000040)={@rand_addr="c9c4d4237c42558159c6e4bfaa9dfed1", 0x7, 0x1, 0x0, 0x3, 0x0, 0x8001}, 0x20)
connect$bt_rfcomm(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
semget(0x3, 0x3, 0x20)
fcntl$getownex(r0, 0x10, &(0x7f0000000340))
ioctl$sock_ifreq(r0, 0x8990, &(0x7f0000000240)={'bond0\x00\x00\x00A\xff\xff\xff\xf5\x01\x00', @ifru_names='bond_slave_1\x00'})

[  379.423533][T14927] bond0: Enslaving bond_slave_1 as an active interface with an up link
09:20:27 executing program 2:
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x31, 0xffffffffffffffff, 0x0)
r0 = socket$rxrpc(0x21, 0x2, 0xa)
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r0, 0x110, 0x4, &(0x7f0000001ac0), 0x4)

[  379.534965][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  379.540836][    C1] protocol 88fb is buggy, dev hsr_slave_1
[  379.546723][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  379.552498][    C1] protocol 88fb is buggy, dev hsr_slave_1
[  379.581908][T14927] bond0: Releasing backup interface bond_slave_1
09:20:27 executing program 2:
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x31, 0xffffffffffffffff, 0x0)
r0 = socket$rxrpc(0x21, 0x2, 0xa)
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r0, 0x110, 0x4, &(0x7f0000001ac0), 0x4)

09:20:27 executing program 4:
mknod(&(0x7f0000000140)='./file0\x00', 0x0, 0x0)
lsetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=@known='security.capability\x00', &(0x7f0000000300)='\x00', 0x14, 0x0)

09:20:27 executing program 3:
r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, 0x0)
mount(0x0, 0x0, 0x0, 0x0, 0x0)

09:20:27 executing program 4:
mknod(&(0x7f0000000140)='./file0\x00', 0x0, 0x0)
lsetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=@known='security.capability\x00', &(0x7f0000000300)='\x00', 0x14, 0x0)

09:20:28 executing program 3:
r0 = syz_open_dev$sndctrl(&(0x7f0000000580)='/dev/snd/controlC#\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0xbcda34450b800b7a, 0x40000000000a132, 0xffffffffffffffff, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0xc0045520, &(0x7f0000000080)=""/218)

09:20:28 executing program 2:
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x31, 0xffffffffffffffff, 0x0)
r0 = socket$rxrpc(0x21, 0x2, 0xa)
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r0, 0x110, 0x4, &(0x7f0000001ac0), 0x4)

09:20:28 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = accept$netrom(0xffffffffffffff9c, 0x0, &(0x7f00000002c0))
accept$netrom(r0, &(0x7f0000000300)={{0x3, @bcast}, [@null, @default, @remote, @remote, @bcast]}, &(0x7f0000000380)=0x48)
sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffc}, 0x0)
r1 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0)
r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x4000, 0x0)
close(0xffffffffffffffff)
write(r1, &(0x7f0000000400)="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", 0x200)
sendfile(r1, r2, 0x0, 0x10000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
write$FUSE_IOCTL(r1, &(0x7f0000000180)={0x20, 0x0, 0x7, {0x80e, 0x0, 0x8, 0x7ff}}, 0x20)
r3 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00')
setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}}}, 0xffffffffffffff6e)

09:20:28 executing program 4:
mknod(&(0x7f0000000140)='./file0\x00', 0x0, 0x0)
lsetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=@known='security.capability\x00', &(0x7f0000000300)='\x00', 0x14, 0x0)

09:20:28 executing program 3:
r0 = syz_open_dev$sndctrl(&(0x7f0000000580)='/dev/snd/controlC#\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0xbcda34450b800b7a, 0x40000000000a132, 0xffffffffffffffff, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0xc0045520, &(0x7f0000000080)=""/218)

[  380.021512][   T26] kauditd_printk_skb: 4 callbacks suppressed
[  380.021528][   T26] audit: type=1800 audit(1548840028.183:87): pid=14956 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor0" name="file0" dev="sda1" ino=16833 res=0
[  380.054145][   T26] audit: type=1804 audit(1548840028.213:88): pid=14956 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor0" name="/root/syzkaller-testdir104870057/syzkaller.ufxiq0/261/file0" dev="sda1" ino=16833 res=1
[  380.133065][   T26] audit: type=1800 audit(1548840028.213:89): pid=14956 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor0" name="file0" dev="sda1" ino=16833 res=0
09:20:28 executing program 2:
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x31, 0xffffffffffffffff, 0x0)
r0 = socket$rxrpc(0x21, 0x2, 0xa)
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r0, 0x110, 0x4, &(0x7f0000001ac0), 0x4)

[  380.641479][T14929] bond0: Enslaving bond_slave_1 as an active interface with an up link
09:20:28 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, 0x0, 0x0)
ioctl$sock_ifreq(r0, 0x8991, &(0x7f0000000140)={'bond0\x00@@\xea\xff\xff\x80\x00\x00\x02\x00', @ifru_names='bond_slave_1\x00'})
socket$inet6(0xa, 0x400000000001, 0x0)
r2 = dup(0xffffffffffffffff)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000200))
setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, 0x0, &(0x7f0000000100))
getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, &(0x7f00000001c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000040)={@rand_addr="c9c4d4237c42558159c6e4bfaa9dfed1", 0x7, 0x1, 0x0, 0x3, 0x0, 0x8001}, 0x20)
connect$bt_rfcomm(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
semget(0x3, 0x3, 0x20)
fcntl$getownex(r0, 0x10, &(0x7f0000000340))
ioctl$sock_ifreq(r0, 0x8990, &(0x7f0000000240)={'bond0\x00\x00\x00A\xff\xff\xff\xf5\x01\x00', @ifru_names='bond_slave_1\x00'})

09:20:28 executing program 5:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000005c0)={0x0, <r0=>0x0})
getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000000), &(0x7f0000000ffc)=0x20)
sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x338, &(0x7f0000000140)}}, {{&(0x7f00000000c0)=@un=@abs={0x1}, 0xa, &(0x7f0000000040), 0x287, &(0x7f0000000600)}}], 0x2, 0x0)

09:20:28 executing program 3:
r0 = syz_open_dev$sndctrl(&(0x7f0000000580)='/dev/snd/controlC#\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0xbcda34450b800b7a, 0x40000000000a132, 0xffffffffffffffff, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0xc0045520, &(0x7f0000000080)=""/218)

09:20:28 executing program 4:
mknod(&(0x7f0000000140)='./file0\x00', 0x0, 0x0)
lsetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=@known='security.capability\x00', &(0x7f0000000300)='\x00', 0x14, 0x0)

09:20:28 executing program 2:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000240)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, &(0x7f0000000000), &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}, 0x1a8)
r2 = socket$inet6(0xa, 0x100000002, 0x0)
connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1, 0xd}, 0x1c)
socketpair(0x0, 0x0, 0xfffffffffffffff7, &(0x7f0000000380))
getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000005c0)={{{@in6=@mcast2, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{}, 0x0, @in6=@mcast1}}, &(0x7f00000003c0)=0xe8)
mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000340)='fuse\x00', 0x0, &(0x7f0000000980)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r3}, 0x2c, {'group_id'}, 0x2c, {[{@max_read={'max_read'}}, {@max_read={'max_read'}}, {@allow_other='allow_other'}], [{@fsname={'fsname', 0x3d, 'GPL'}}]}})
sendto$inet6(r2, &(0x7f0000000300), 0xfd90, 0x400806e, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [], @multicast2}}, 0x1c)
ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0xf2, &(0x7f00000004c0)=""/242}, &(0x7f00000006c0), &(0x7f0000000740)=""/77, 0x0, 0x0, 0x0, &(0x7f00000007c0)})
sendto$inet6(r2, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000002c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
io_cancel(0x0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000380)}, &(0x7f0000000440))
write$USERIO_CMD_REGISTER(0xffffffffffffffff, &(0x7f0000000280), 0x2)

09:20:29 executing program 4:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$inet(0x10, 0x3, 0x0)
sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="240000002a0007031dfffd946fa2830020200a000900000006000000000000000d00ff7e280000001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47a6268e3406cf055d90f15a3", 0x4c}], 0x1}, 0x0)

09:20:29 executing program 3:
r0 = syz_open_dev$sndctrl(&(0x7f0000000580)='/dev/snd/controlC#\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0xbcda34450b800b7a, 0x40000000000a132, 0xffffffffffffffff, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0xc0045520, &(0x7f0000000080)=""/218)

09:20:29 executing program 5:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000005c0)={0x0, <r0=>0x0})
getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000000), &(0x7f0000000ffc)=0x20)
sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x338, &(0x7f0000000140)}}, {{&(0x7f00000000c0)=@un=@abs={0x1}, 0xa, &(0x7f0000000040), 0x287, &(0x7f0000000600)}}], 0x2, 0x0)

[  380.990066][T14984] bond0: Releasing backup interface bond_slave_1
[  381.481699][   T26] audit: type=1804 audit(1548840029.643:90): pid=14959 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor0" name="/root/syzkaller-testdir104870057/syzkaller.ufxiq0/261/file0" dev="sda1" ino=16833 res=1
[  381.703388][   T26] audit: type=1800 audit(1548840029.643:91): pid=14959 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor0" name="file0" dev="sda1" ino=16833 res=0
[  381.766616][T14993] bond0: Enslaving bond_slave_1 as an active interface with an up link
[  381.802063][T14995] __nla_parse: 4 callbacks suppressed
[  381.802077][T14995] netlink: 8 bytes leftover after parsing attributes in process `syz-executor4'.
09:20:31 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = accept$netrom(0xffffffffffffff9c, 0x0, &(0x7f00000002c0))
accept$netrom(r0, &(0x7f0000000300)={{0x3, @bcast}, [@null, @default, @remote, @remote, @bcast]}, &(0x7f0000000380)=0x48)
sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffc}, 0x0)
r1 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0)
r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x4000, 0x0)
close(0xffffffffffffffff)
write(r1, &(0x7f0000000400)="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", 0x200)
sendfile(r1, r2, 0x0, 0x10000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
write$FUSE_IOCTL(r1, &(0x7f0000000180)={0x20, 0x0, 0x7, {0x80e, 0x0, 0x8, 0x7ff}}, 0x20)
r3 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00')
setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}}}, 0xffffffffffffff6e)

09:20:31 executing program 4:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$inet(0x10, 0x3, 0x0)
sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="240000002a0007031dfffd946fa2830020200a000900000006000000000000000d00ff7e280000001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47a6268e3406cf055d90f15a3", 0x4c}], 0x1}, 0x0)

09:20:31 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = socket$inet(0x2, 0x3, 0x800000000000b)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000040)=@nat={'nat\x00', 0x19, 0x1, 0x1a0, [0x20000380, 0x0, 0x0, 0x200003b0, 0x200003e0], 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000001000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000006000000000000000000000000000000000000000000000000ffffffff01000000110000000000000000000300736630000010000000000000000064756d6d79300000000000000000000069666230000000000000000f000000006c6f0000000000000000000000000000ffffffffffff000000000000ffffffffffff000000000000000070000000a8000000e0000000736e6174000000000000000000000000000000000000000000000000000000001000000000000000aaaaaaaaaa000000fcffffff00000000736e6174000000000000000000000000000000000000000000000000000000001000000000000000ffffffffffff0000fdffffff00000000"]}, 0x218)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x03\x00', 0x19, 0x1, 0x150, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x0, 0x0, 'ya\x020\x00\x00\x01\x00', 'dummy0\x00', 'ip_vti0\x00', 'ip6tnl0\x00', @remote, [], @link_local, [], 0x70, 0x70, 0xc0}}, @common=@log={'log\x00', 0x28, {{0x0, "f6369f8825cdf9100d4b429182416d1ca44eab45ed633d0f08a7d875af8e"}}}}]}]}, 0x1c8)

09:20:31 executing program 2:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000240)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, &(0x7f0000000000), &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}, 0x1a8)
r2 = socket$inet6(0xa, 0x100000002, 0x0)
connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1, 0xd}, 0x1c)
socketpair(0x0, 0x0, 0xfffffffffffffff7, &(0x7f0000000380))
getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000005c0)={{{@in6=@mcast2, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{}, 0x0, @in6=@mcast1}}, &(0x7f00000003c0)=0xe8)
mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000340)='fuse\x00', 0x0, &(0x7f0000000980)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r3}, 0x2c, {'group_id'}, 0x2c, {[{@max_read={'max_read'}}, {@max_read={'max_read'}}, {@allow_other='allow_other'}], [{@fsname={'fsname', 0x3d, 'GPL'}}]}})
sendto$inet6(r2, &(0x7f0000000300), 0xfd90, 0x400806e, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [], @multicast2}}, 0x1c)
ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0xf2, &(0x7f00000004c0)=""/242}, &(0x7f00000006c0), &(0x7f0000000740)=""/77, 0x0, 0x0, 0x0, &(0x7f00000007c0)})
sendto$inet6(r2, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000002c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
io_cancel(0x0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000380)}, &(0x7f0000000440))
write$USERIO_CMD_REGISTER(0xffffffffffffffff, &(0x7f0000000280), 0x2)

09:20:31 executing program 5:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000005c0)={0x0, <r0=>0x0})
getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000000), &(0x7f0000000ffc)=0x20)
sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x338, &(0x7f0000000140)}}, {{&(0x7f00000000c0)=@un=@abs={0x1}, 0xa, &(0x7f0000000040), 0x287, &(0x7f0000000600)}}], 0x2, 0x0)

09:20:31 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, 0x0, 0x0)
ioctl$sock_ifreq(r0, 0x8991, &(0x7f0000000140)={'bond0\x00@@\xea\xff\xff\x80\x00\x00\x02\x00', @ifru_names='bond_slave_1\x00'})
socket$inet6(0xa, 0x400000000001, 0x0)
r2 = dup(0xffffffffffffffff)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000200))
setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, 0x0, &(0x7f0000000100))
getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, &(0x7f00000001c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000040)={@rand_addr="c9c4d4237c42558159c6e4bfaa9dfed1", 0x7, 0x1, 0x0, 0x3, 0x0, 0x8001}, 0x20)
connect$bt_rfcomm(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
semget(0x3, 0x3, 0x20)
fcntl$getownex(r0, 0x10, &(0x7f0000000340))
ioctl$sock_ifreq(r0, 0x8990, &(0x7f0000000240)={'bond0\x00\x00\x00A\xff\xff\xff\xf5\x01\x00', @ifru_names='bond_slave_1\x00'})

[  383.436822][T15008] netlink: 8 bytes leftover after parsing attributes in process `syz-executor4'.
09:20:31 executing program 5:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000005c0)={0x0, <r0=>0x0})
getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000000), &(0x7f0000000ffc)=0x20)
sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x338, &(0x7f0000000140)}}, {{&(0x7f00000000c0)=@un=@abs={0x1}, 0xa, &(0x7f0000000040), 0x287, &(0x7f0000000600)}}], 0x2, 0x0)

09:20:31 executing program 4:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$inet(0x10, 0x3, 0x0)
sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="240000002a0007031dfffd946fa2830020200a000900000006000000000000000d00ff7e280000001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47a6268e3406cf055d90f15a3", 0x4c}], 0x1}, 0x0)

[  383.555718][T15016] bond0: Releasing backup interface bond_slave_1
[  383.568108][   T26] audit: type=1800 audit(1548840031.733:92): pid=15018 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor0" name="file0" dev="sda1" ino=17267 res=0
09:20:31 executing program 5:
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
getsockopt$EBT_SO_GET_ENTRIES(r1, 0x88, 0x81, &(0x7f0000000240)={'nat\x00', 0x0, 0x0, 0xffffffffffffffa5, [], 0x0, &(0x7f0000000080), &(0x7f00000002c0)=""/129}, 0xffffffffffffffff)

[  383.694714][    C1] net_ratelimit: 20 callbacks suppressed
[  383.694725][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  383.706326][    C1] protocol 88fb is buggy, dev hsr_slave_1
[  383.712202][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  383.718070][    C1] protocol 88fb is buggy, dev hsr_slave_1
09:20:31 executing program 2:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000240)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, &(0x7f0000000000), &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}, 0x1a8)
r2 = socket$inet6(0xa, 0x100000002, 0x0)
connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1, 0xd}, 0x1c)
socketpair(0x0, 0x0, 0xfffffffffffffff7, &(0x7f0000000380))
getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000005c0)={{{@in6=@mcast2, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{}, 0x0, @in6=@mcast1}}, &(0x7f00000003c0)=0xe8)
mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000340)='fuse\x00', 0x0, &(0x7f0000000980)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r3}, 0x2c, {'group_id'}, 0x2c, {[{@max_read={'max_read'}}, {@max_read={'max_read'}}, {@allow_other='allow_other'}], [{@fsname={'fsname', 0x3d, 'GPL'}}]}})
sendto$inet6(r2, &(0x7f0000000300), 0xfd90, 0x400806e, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [], @multicast2}}, 0x1c)
ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0xf2, &(0x7f00000004c0)=""/242}, &(0x7f00000006c0), &(0x7f0000000740)=""/77, 0x0, 0x0, 0x0, &(0x7f00000007c0)})
sendto$inet6(r2, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000002c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
io_cancel(0x0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000380)}, &(0x7f0000000440))
write$USERIO_CMD_REGISTER(0xffffffffffffffff, &(0x7f0000000280), 0x2)

09:20:32 executing program 5:
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
getsockopt$EBT_SO_GET_ENTRIES(r1, 0x88, 0x81, &(0x7f0000000240)={'nat\x00', 0x0, 0x0, 0xffffffffffffffa5, [], 0x0, &(0x7f0000000080), &(0x7f00000002c0)=""/129}, 0xffffffffffffffff)

09:20:32 executing program 5:
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
getsockopt$EBT_SO_GET_ENTRIES(r1, 0x88, 0x81, &(0x7f0000000240)={'nat\x00', 0x0, 0x0, 0xffffffffffffffa5, [], 0x0, &(0x7f0000000080), &(0x7f00000002c0)=""/129}, 0xffffffffffffffff)

[  384.352426][T15021] bond0: Enslaving bond_slave_1 as an active interface with an up link
[  384.379729][T15031] netlink: 8 bytes leftover after parsing attributes in process `syz-executor4'.
09:20:32 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = accept$netrom(0xffffffffffffff9c, 0x0, &(0x7f00000002c0))
accept$netrom(r0, &(0x7f0000000300)={{0x3, @bcast}, [@null, @default, @remote, @remote, @bcast]}, &(0x7f0000000380)=0x48)
sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffc}, 0x0)
r1 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0)
r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x4000, 0x0)
close(0xffffffffffffffff)
write(r1, &(0x7f0000000400)="34fd98aa1d0e7adec937a5f331a75f487934f50242a0751944936972896c29a5068c8ecba1aa0a4e2a631b5180e1fbde79f4502dc4c4a1fba9dcd9ed83e639aefa1b87631c33d1a82cb0c0035676ddfeb0fe7984d7519b0f839d497fc9d64ef14d1de22220ff2623df4950134b9fb734a52adad95f131cce3672a9d7d7b400d2c62810b5f20351639330948107bf8d4534a03ac389455c54d8eb4d609b3e858b7213b38eb01f0eeaba3739ae927916e28da6a79a3fd5e32d30ab30bf959d4596e5ffbff6789a650b9e7d248d1ba849012336a4f3ef8fab07a8f5b81bb0bc45b2174538315ca12b7c723b2157562564a8a1f19d28179f8c565448e0e921b8c3e6fc4adaafa8b929ad077f633325b6a6f71a586cabc4883e03e19315f946b277858593a7367e232202fe9ad656c6768a1517da7f0498b48cb078e929fb11db0cc551f754bffc4859dd89a396915cc809b07d448573098409ea21371056f67ef4114ec10547f498d24513fe594308bf022868ad21e85bba811942fdc45161a1a8a7fe00d5c6b05ed7954f631bbd12a5c9a5cfa5965e0595de608b04ebe02b3fcbf3b9f57807a1a7ad8528992e2ec65949da2f4a0478dfd3ae52639c15d8aeaa351da6d393b58c772168fae604d097fef4d6b9360eb169a0b0ee70cdc22435a003e68698f61b3b63b1f51011bc8f4ef944c1de821785f670124a1c6ed18335d63412", 0x200)
sendfile(r1, r2, 0x0, 0x10000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
write$FUSE_IOCTL(r1, &(0x7f0000000180)={0x20, 0x0, 0x7, {0x80e, 0x0, 0x8, 0x7ff}}, 0x20)
r3 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00')
setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}}}, 0xffffffffffffff6e)

09:20:32 executing program 2:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000240)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, &(0x7f0000000000), &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}, 0x1a8)
r2 = socket$inet6(0xa, 0x100000002, 0x0)
connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1, 0xd}, 0x1c)
socketpair(0x0, 0x0, 0xfffffffffffffff7, &(0x7f0000000380))
getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000005c0)={{{@in6=@mcast2, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{}, 0x0, @in6=@mcast1}}, &(0x7f00000003c0)=0xe8)
mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000340)='fuse\x00', 0x0, &(0x7f0000000980)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r3}, 0x2c, {'group_id'}, 0x2c, {[{@max_read={'max_read'}}, {@max_read={'max_read'}}, {@allow_other='allow_other'}], [{@fsname={'fsname', 0x3d, 'GPL'}}]}})
sendto$inet6(r2, &(0x7f0000000300), 0xfd90, 0x400806e, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [], @multicast2}}, 0x1c)
ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0xf2, &(0x7f00000004c0)=""/242}, &(0x7f00000006c0), &(0x7f0000000740)=""/77, 0x0, 0x0, 0x0, &(0x7f00000007c0)})
sendto$inet6(r2, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000002c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
io_cancel(0x0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000380)}, &(0x7f0000000440))
write$USERIO_CMD_REGISTER(0xffffffffffffffff, &(0x7f0000000280), 0x2)

09:20:32 executing program 5:
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
getsockopt$EBT_SO_GET_ENTRIES(r1, 0x88, 0x81, &(0x7f0000000240)={'nat\x00', 0x0, 0x0, 0xffffffffffffffa5, [], 0x0, &(0x7f0000000080), &(0x7f00000002c0)=""/129}, 0xffffffffffffffff)

09:20:32 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = socket$inet(0x2, 0x3, 0x800000000000b)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000040)=@nat={'nat\x00', 0x19, 0x1, 0x1a0, [0x20000380, 0x0, 0x0, 0x200003b0, 0x200003e0], 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000001000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000006000000000000000000000000000000000000000000000000ffffffff01000000110000000000000000000300736630000010000000000000000064756d6d79300000000000000000000069666230000000000000000f000000006c6f0000000000000000000000000000ffffffffffff000000000000ffffffffffff000000000000000070000000a8000000e0000000736e6174000000000000000000000000000000000000000000000000000000001000000000000000aaaaaaaaaa000000fcffffff00000000736e6174000000000000000000000000000000000000000000000000000000001000000000000000ffffffffffff0000fdffffff00000000"]}, 0x218)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x03\x00', 0x19, 0x1, 0x150, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x0, 0x0, 'ya\x020\x00\x00\x01\x00', 'dummy0\x00', 'ip_vti0\x00', 'ip6tnl0\x00', @remote, [], @link_local, [], 0x70, 0x70, 0xc0}}, @common=@log={'log\x00', 0x28, {{0x0, "f6369f8825cdf9100d4b429182416d1ca44eab45ed633d0f08a7d875af8e"}}}}]}]}, 0x1c8)

09:20:32 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, 0x0, 0x0)
ioctl$sock_ifreq(r0, 0x8991, &(0x7f0000000140)={'bond0\x00@@\xea\xff\xff\x80\x00\x00\x02\x00', @ifru_names='bond_slave_1\x00'})
socket$inet6(0xa, 0x400000000001, 0x0)
r2 = dup(0xffffffffffffffff)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000200))
setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, 0x0, &(0x7f0000000100))
getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, &(0x7f00000001c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000040)={@rand_addr="c9c4d4237c42558159c6e4bfaa9dfed1", 0x7, 0x1, 0x0, 0x3, 0x0, 0x8001}, 0x20)
connect$bt_rfcomm(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0)
semget(0x3, 0x3, 0x20)
fcntl$getownex(r0, 0x10, &(0x7f0000000340))
ioctl$sock_ifreq(r0, 0x8990, &(0x7f0000000240)={'bond0\x00\x00\x00A\xff\xff\xff\xf5\x01\x00', @ifru_names='bond_slave_1\x00'})

[  384.494735][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  384.500565][    C0] protocol 88fb is buggy, dev hsr_slave_1
09:20:32 executing program 4:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$inet(0x10, 0x3, 0x0)
sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="240000002a0007031dfffd946fa2830020200a000900000006000000000000000d00ff7e280000001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47a6268e3406cf055d90f15a3", 0x4c}], 0x1}, 0x0)

[  384.543269][T15059] bond0: Releasing backup interface bond_slave_1
09:20:32 executing program 5:
write(0xffffffffffffffff, 0x0, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0)
mq_notify(0xffffffffffffffff, &(0x7f0000000040)={0x20000000, 0x3, 0x2})
close(0xffffffffffffffff)

09:20:32 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = socket$inet(0x2, 0x3, 0x800000000000b)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000040)=@nat={'nat\x00', 0x19, 0x1, 0x1a0, [0x20000380, 0x0, 0x0, 0x200003b0, 0x200003e0], 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000001000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000006000000000000000000000000000000000000000000000000ffffffff01000000110000000000000000000300736630000010000000000000000064756d6d79300000000000000000000069666230000000000000000f000000006c6f0000000000000000000000000000ffffffffffff000000000000ffffffffffff000000000000000070000000a8000000e0000000736e6174000000000000000000000000000000000000000000000000000000001000000000000000aaaaaaaaaa000000fcffffff00000000736e6174000000000000000000000000000000000000000000000000000000001000000000000000ffffffffffff0000fdffffff00000000"]}, 0x218)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x03\x00', 0x19, 0x1, 0x150, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x0, 0x0, 'ya\x020\x00\x00\x01\x00', 'dummy0\x00', 'ip_vti0\x00', 'ip6tnl0\x00', @remote, [], @link_local, [], 0x70, 0x70, 0xc0}}, @common=@log={'log\x00', 0x28, {{0x0, "f6369f8825cdf9100d4b429182416d1ca44eab45ed633d0f08a7d875af8e"}}}}]}]}, 0x1c8)

[  384.667704][   T26] audit: type=1800 audit(1548840032.833:93): pid=15064 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor0" name="file0" dev="sda1" ino=17264 res=0
09:20:32 executing program 5:
socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f000000dff8)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffff9c, 0xc0106426, &(0x7f0000000080)={0x9, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}]})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
writev(r0, &(0x7f0000000240)=[{&(0x7f0000000140)}], 0x1)
write(r0, &(0x7f0000805000), 0x0)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000785000), 0x34a)
syz_open_dev$swradio(&(0x7f0000000500)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000003c0), 0x4)
r2 = shmget$private(0x0, 0x3000, 0x40, &(0x7f000058d000/0x3000)=nil)
shmctl$IPC_STAT(r2, 0x2, &(0x7f00000004c0)=""/20)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x200031, 0xffffffffffffffff, 0x0)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0xb, &(0x7f0000000080), &(0x7f00000000c0)=0xc)
writev(r0, &(0x7f000063e000)=[{&(0x7f0000a66000)="da", 0x1}], 0x1)
gettid()
sendmmsg$alg(r1, &(0x7f0000236fc8)=[{0xc00, 0x0, &(0x7f00000fff80), 0xc, &(0x7f00001e1e78)}], 0x4924924924926c8, 0x101d0)

[  384.783888][   T26] audit: type=1804 audit(1548840032.893:94): pid=15064 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor0" name="/root/syzkaller-testdir104870057/syzkaller.ufxiq0/263/file0" dev="sda1" ino=17264 res=1
[  384.820415][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  384.826953][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  384.856417][   T26] audit: type=1800 audit(1548840032.893:95): pid=15064 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor0" name="file0" dev="sda1" ino=17264 res=0
09:20:33 executing program 2:
syz_mount_image$jfs(&(0x7f0000000040)='jfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={<r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)

[  385.214778][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  385.217919][    C0] protocol 88fb is buggy, dev hsr_slave_0
09:20:33 executing program 5:
socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f000000dff8)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffff9c, 0xc0106426, &(0x7f0000000080)={0x9, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}]})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
writev(r0, &(0x7f0000000240)=[{&(0x7f0000000140)}], 0x1)
write(r0, &(0x7f0000805000), 0x0)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000785000), 0x34a)
syz_open_dev$swradio(&(0x7f0000000500)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000003c0), 0x4)
r2 = shmget$private(0x0, 0x3000, 0x40, &(0x7f000058d000/0x3000)=nil)
shmctl$IPC_STAT(r2, 0x2, &(0x7f00000004c0)=""/20)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x200031, 0xffffffffffffffff, 0x0)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0xb, &(0x7f0000000080), &(0x7f00000000c0)=0xc)
writev(r0, &(0x7f000063e000)=[{&(0x7f0000a66000)="da", 0x1}], 0x1)
gettid()
sendmmsg$alg(r1, &(0x7f0000236fc8)=[{0xc00, 0x0, &(0x7f00000fff80), 0xc, &(0x7f00001e1e78)}], 0x4924924924926c8, 0x101d0)

[  385.502739][T15065] bond0: Enslaving bond_slave_1 as an active interface with an up link
[  385.526473][T15075] netlink: 8 bytes leftover after parsing attributes in process `syz-executor4'.
09:20:33 executing program 1:
socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f000000dff8)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffff9c, 0xc0106426, &(0x7f0000000080)={0x9, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}]})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
writev(r0, &(0x7f0000000240)=[{&(0x7f0000000140)}], 0x1)
write(r0, &(0x7f0000805000), 0x0)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000785000), 0x34a)
syz_open_dev$swradio(&(0x7f0000000500)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000003c0), 0x4)
r2 = shmget$private(0x0, 0x3000, 0x40, &(0x7f000058d000/0x3000)=nil)
shmctl$IPC_STAT(r2, 0x2, &(0x7f00000004c0)=""/20)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x200031, 0xffffffffffffffff, 0x0)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0xb, &(0x7f0000000080), &(0x7f00000000c0)=0xc)
writev(r0, &(0x7f000063e000)=[{&(0x7f0000a66000)="da", 0x1}], 0x1)
gettid()
sendmmsg$alg(r1, &(0x7f0000236fc8)=[{0xc00, 0x0, &(0x7f00000fff80), 0xc, &(0x7f00001e1e78)}], 0x4924924924926c8, 0x101d0)

09:20:34 executing program 4:
socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f000000dff8)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffff9c, 0xc0106426, &(0x7f0000000080)={0x9, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}]})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
writev(r0, &(0x7f0000000240)=[{&(0x7f0000000140)}], 0x1)
write(r0, &(0x7f0000805000), 0x0)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000785000), 0x34a)
syz_open_dev$swradio(&(0x7f0000000500)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000003c0), 0x4)
r2 = shmget$private(0x0, 0x3000, 0x40, &(0x7f000058d000/0x3000)=nil)
shmctl$IPC_STAT(r2, 0x2, &(0x7f00000004c0)=""/20)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x200031, 0xffffffffffffffff, 0x0)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0xb, &(0x7f0000000080), &(0x7f00000000c0)=0xc)
writev(r0, &(0x7f000063e000)=[{&(0x7f0000a66000)="da", 0x1}], 0x1)
gettid()
sendmmsg$alg(r1, &(0x7f0000236fc8)=[{0xc00, 0x0, &(0x7f00000fff80), 0xc, &(0x7f00001e1e78)}], 0x4924924924926c8, 0x101d0)

09:20:34 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = accept$netrom(0xffffffffffffff9c, 0x0, &(0x7f00000002c0))
accept$netrom(r0, &(0x7f0000000300)={{0x3, @bcast}, [@null, @default, @remote, @remote, @bcast]}, &(0x7f0000000380)=0x48)
sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffc}, 0x0)
r1 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0)
r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x4000, 0x0)
close(0xffffffffffffffff)
write(r1, &(0x7f0000000400)="34fd98aa1d0e7adec937a5f331a75f487934f50242a0751944936972896c29a5068c8ecba1aa0a4e2a631b5180e1fbde79f4502dc4c4a1fba9dcd9ed83e639aefa1b87631c33d1a82cb0c0035676ddfeb0fe7984d7519b0f839d497fc9d64ef14d1de22220ff2623df4950134b9fb734a52adad95f131cce3672a9d7d7b400d2c62810b5f20351639330948107bf8d4534a03ac389455c54d8eb4d609b3e858b7213b38eb01f0eeaba3739ae927916e28da6a79a3fd5e32d30ab30bf959d4596e5ffbff6789a650b9e7d248d1ba849012336a4f3ef8fab07a8f5b81bb0bc45b2174538315ca12b7c723b2157562564a8a1f19d28179f8c565448e0e921b8c3e6fc4adaafa8b929ad077f633325b6a6f71a586cabc4883e03e19315f946b277858593a7367e232202fe9ad656c6768a1517da7f0498b48cb078e929fb11db0cc551f754bffc4859dd89a396915cc809b07d448573098409ea21371056f67ef4114ec10547f498d24513fe594308bf022868ad21e85bba811942fdc45161a1a8a7fe00d5c6b05ed7954f631bbd12a5c9a5cfa5965e0595de608b04ebe02b3fcbf3b9f57807a1a7ad8528992e2ec65949da2f4a0478dfd3ae52639c15d8aeaa351da6d393b58c772168fae604d097fef4d6b9360eb169a0b0ee70cdc22435a003e68698f61b3b63b1f51011bc8f4ef944c1de821785f670124a1c6ed18335d63412", 0x200)
sendfile(r1, r2, 0x0, 0x10000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
write$FUSE_IOCTL(r1, &(0x7f0000000180)={0x20, 0x0, 0x7, {0x80e, 0x0, 0x8, 0x7ff}}, 0x20)
r3 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00')
setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}}}, 0xffffffffffffff6e)

09:20:34 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = socket$inet(0x2, 0x3, 0x800000000000b)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000040)=@nat={'nat\x00', 0x19, 0x1, 0x1a0, [0x20000380, 0x0, 0x0, 0x200003b0, 0x200003e0], 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000001000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000006000000000000000000000000000000000000000000000000ffffffff01000000110000000000000000000300736630000010000000000000000064756d6d79300000000000000000000069666230000000000000000f000000006c6f0000000000000000000000000000ffffffffffff000000000000ffffffffffff000000000000000070000000a8000000e0000000736e6174000000000000000000000000000000000000000000000000000000001000000000000000aaaaaaaaaa000000fcffffff00000000736e6174000000000000000000000000000000000000000000000000000000001000000000000000ffffffffffff0000fdffffff00000000"]}, 0x218)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x03\x00', 0x19, 0x1, 0x150, [0x200000c0, 0x0, 0x0, 0x200000f0, 0x20000120], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x0, 0x0, 'ya\x020\x00\x00\x01\x00', 'dummy0\x00', 'ip_vti0\x00', 'ip6tnl0\x00', @remote, [], @link_local, [], 0x70, 0x70, 0xc0}}, @common=@log={'log\x00', 0x28, {{0x0, "f6369f8825cdf9100d4b429182416d1ca44eab45ed633d0f08a7d875af8e"}}}}]}]}, 0x1c8)

09:20:34 executing program 2:
syz_mount_image$jfs(&(0x7f0000000040)='jfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={<r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)

09:20:34 executing program 5:
socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f000000dff8)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffff9c, 0xc0106426, &(0x7f0000000080)={0x9, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}]})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
writev(r0, &(0x7f0000000240)=[{&(0x7f0000000140)}], 0x1)
write(r0, &(0x7f0000805000), 0x0)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000785000), 0x34a)
syz_open_dev$swradio(&(0x7f0000000500)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000003c0), 0x4)
r2 = shmget$private(0x0, 0x3000, 0x40, &(0x7f000058d000/0x3000)=nil)
shmctl$IPC_STAT(r2, 0x2, &(0x7f00000004c0)=""/20)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x200031, 0xffffffffffffffff, 0x0)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0xb, &(0x7f0000000080), &(0x7f00000000c0)=0xc)
writev(r0, &(0x7f000063e000)=[{&(0x7f0000a66000)="da", 0x1}], 0x1)
gettid()
sendmmsg$alg(r1, &(0x7f0000236fc8)=[{0xc00, 0x0, &(0x7f00000fff80), 0xc, &(0x7f00001e1e78)}], 0x4924924924926c8, 0x101d0)

09:20:34 executing program 1:
socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f000000dff8)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffff9c, 0xc0106426, &(0x7f0000000080)={0x9, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}]})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
writev(r0, &(0x7f0000000240)=[{&(0x7f0000000140)}], 0x1)
write(r0, &(0x7f0000805000), 0x0)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000785000), 0x34a)
syz_open_dev$swradio(&(0x7f0000000500)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000003c0), 0x4)
r2 = shmget$private(0x0, 0x3000, 0x40, &(0x7f000058d000/0x3000)=nil)
shmctl$IPC_STAT(r2, 0x2, &(0x7f00000004c0)=""/20)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x200031, 0xffffffffffffffff, 0x0)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0xb, &(0x7f0000000080), &(0x7f00000000c0)=0xc)
writev(r0, &(0x7f000063e000)=[{&(0x7f0000a66000)="da", 0x1}], 0x1)
gettid()
sendmmsg$alg(r1, &(0x7f0000236fc8)=[{0xc00, 0x0, &(0x7f00000fff80), 0xc, &(0x7f00001e1e78)}], 0x4924924924926c8, 0x101d0)

09:20:34 executing program 3:
r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000004ffc)=0x1000)
read(r0, 0x0, 0x0)

[  386.272157][   T26] audit: type=1800 audit(1548840034.433:96): pid=15122 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor0" name="file0" dev="sda1" ino=16628 res=0
[  386.348524][   T26] audit: type=1804 audit(1548840034.473:97): pid=15122 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor0" name="/root/syzkaller-testdir104870057/syzkaller.ufxiq0/264/file0" dev="sda1" ino=16628 res=1
[  386.412040][   T26] audit: type=1800 audit(1548840034.483:98): pid=15122 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor0" name="file0" dev="sda1" ino=16628 res=0
09:20:34 executing program 2:
syz_mount_image$jfs(&(0x7f0000000040)='jfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={<r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)

09:20:34 executing program 5:
socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f000000dff8)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffff9c, 0xc0106426, &(0x7f0000000080)={0x9, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}]})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
writev(r0, &(0x7f0000000240)=[{&(0x7f0000000140)}], 0x1)
write(r0, &(0x7f0000805000), 0x0)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000785000), 0x34a)
syz_open_dev$swradio(&(0x7f0000000500)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000003c0), 0x4)
r2 = shmget$private(0x0, 0x3000, 0x40, &(0x7f000058d000/0x3000)=nil)
shmctl$IPC_STAT(r2, 0x2, &(0x7f00000004c0)=""/20)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x200031, 0xffffffffffffffff, 0x0)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0xb, &(0x7f0000000080), &(0x7f00000000c0)=0xc)
writev(r0, &(0x7f000063e000)=[{&(0x7f0000a66000)="da", 0x1}], 0x1)
gettid()
sendmmsg$alg(r1, &(0x7f0000236fc8)=[{0xc00, 0x0, &(0x7f00000fff80), 0xc, &(0x7f00001e1e78)}], 0x4924924924926c8, 0x101d0)

09:20:34 executing program 1:
socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f000000dff8)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffff9c, 0xc0106426, &(0x7f0000000080)={0x9, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}]})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
writev(r0, &(0x7f0000000240)=[{&(0x7f0000000140)}], 0x1)
write(r0, &(0x7f0000805000), 0x0)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000785000), 0x34a)
syz_open_dev$swradio(&(0x7f0000000500)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000003c0), 0x4)
r2 = shmget$private(0x0, 0x3000, 0x40, &(0x7f000058d000/0x3000)=nil)
shmctl$IPC_STAT(r2, 0x2, &(0x7f00000004c0)=""/20)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x200031, 0xffffffffffffffff, 0x0)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0xb, &(0x7f0000000080), &(0x7f00000000c0)=0xc)
writev(r0, &(0x7f000063e000)=[{&(0x7f0000a66000)="da", 0x1}], 0x1)
gettid()
sendmmsg$alg(r1, &(0x7f0000236fc8)=[{0xc00, 0x0, &(0x7f00000fff80), 0xc, &(0x7f00001e1e78)}], 0x4924924924926c8, 0x101d0)

09:20:34 executing program 3:
r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000004ffc)=0x1000)
read(r0, 0x0, 0x0)

09:20:34 executing program 4:
socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f000000dff8)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffff9c, 0xc0106426, &(0x7f0000000080)={0x9, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}]})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
writev(r0, &(0x7f0000000240)=[{&(0x7f0000000140)}], 0x1)
write(r0, &(0x7f0000805000), 0x0)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000785000), 0x34a)
syz_open_dev$swradio(&(0x7f0000000500)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000003c0), 0x4)
r2 = shmget$private(0x0, 0x3000, 0x40, &(0x7f000058d000/0x3000)=nil)
shmctl$IPC_STAT(r2, 0x2, &(0x7f00000004c0)=""/20)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x200031, 0xffffffffffffffff, 0x0)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0xb, &(0x7f0000000080), &(0x7f00000000c0)=0xc)
writev(r0, &(0x7f000063e000)=[{&(0x7f0000a66000)="da", 0x1}], 0x1)
gettid()
sendmmsg$alg(r1, &(0x7f0000236fc8)=[{0xc00, 0x0, &(0x7f00000fff80), 0xc, &(0x7f00001e1e78)}], 0x4924924924926c8, 0x101d0)

09:20:35 executing program 2:
syz_mount_image$jfs(&(0x7f0000000040)='jfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={<r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)

09:20:35 executing program 3:
r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000004ffc)=0x1000)
read(r0, 0x0, 0x0)

09:20:35 executing program 5:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000004f40)='/dev/zero\x00', 0x600000, 0x0)
setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000004f80)=0x440, 0x4)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0)
r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='ip_vti0\x00', 0x10)
sendto$llc(r1, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x1a, 0x300, 0x0, 0x0, 0x0, 0x0, @random="b06de07ad55b"}, 0x10)

09:20:35 executing program 1:
r0 = socket$inet6(0xa, 0x6, 0x0)
socketpair(0x0, 0x0, 0x40, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0)
sendmsg$rds(r1, &(0x7f0000000b40)={&(0x7f00000002c0)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f00000005c0)=[{&(0x7f00000004c0)=""/231, 0xe7}], 0x1, &(0x7f0000000a00)=[@rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000000600)=""/100, 0x64}, &(0x7f0000000680), 0x1}}, @rdma_args={0x48, 0x114, 0x1, {{0x0, 0x1}, {&(0x7f00000006c0)=""/221, 0xdd}, &(0x7f00000008c0)=[{0x0}], 0x1, 0x43, 0x3324}}, @mask_fadd={0x58, 0x114, 0x8, {{0x9, 0x40a51209}, &(0x7f0000000900)=0x1ff, &(0x7f0000000940)=0x9, 0x4, 0x9, 0x8, 0x0, 0x21, 0xfff}}, @fadd={0x58, 0x114, 0x6, {{0x200, 0x9}, &(0x7f0000000980)=0x100, &(0x7f00000009c0), 0x1, 0xc6, 0x0, 0x8, 0x39}}, @rdma_dest={0x18, 0x114, 0x2, {0x3, 0x9}}], 0x140, 0x800}, 0x48001)
getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0)
r2 = geteuid()
getegid()
fchown(r0, r2, 0x0)
r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
getsockopt$inet_sctp_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, 0x0, &(0x7f00000013c0))
r4 = openat(0xffffffffffffff9c, &(0x7f0000001380)='./file0\x00', 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f00000007c0)=@assoc_value={<r5=>0x0}, &(0x7f0000000800)=0x8)
getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x66, &(0x7f0000000840)={r5, 0x8}, &(0x7f0000000880)=0x8)
syz_genetlink_get_family_id$tipc(&(0x7f0000000340)='TIPC\x00')
socket$unix(0x1, 0x2, 0x0)
setsockopt$IP_VS_SO_SET_DELDEST(r3, 0x0, 0x488, &(0x7f0000000b80)={{0x2b, @remote, 0x4e20, 0x4, 'lblcr\x00', 0x0, 0xfffffffffffffffe, 0x1c}, {@loopback, 0x4e21, 0x0, 0x0, 0xfff}}, 0x44)
socket$inet(0x10, 0x3, 0x0)
sendmsg(0xffffffffffffffff, 0x0, 0x0)
creat(&(0x7f0000000240)='./file0\x00', 0x7)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000380)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0xc204, &(0x7f0000000000))
getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, &(0x7f0000000140)={<r6=>0x0, 0x8d6}, &(0x7f00000001c0)=0x8)
getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000440)={r6, 0xebe}, &(0x7f0000000480)=0x8)
getsockname$unix(r3, &(0x7f00000003c0), 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff)

09:20:35 executing program 4:
socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f000000dff8)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffff9c, 0xc0106426, &(0x7f0000000080)={0x9, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}]})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
writev(r0, &(0x7f0000000240)=[{&(0x7f0000000140)}], 0x1)
write(r0, &(0x7f0000805000), 0x0)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000785000), 0x34a)
syz_open_dev$swradio(&(0x7f0000000500)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000003c0), 0x4)
r2 = shmget$private(0x0, 0x3000, 0x40, &(0x7f000058d000/0x3000)=nil)
shmctl$IPC_STAT(r2, 0x2, &(0x7f00000004c0)=""/20)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x200031, 0xffffffffffffffff, 0x0)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0xb, &(0x7f0000000080), &(0x7f00000000c0)=0xc)
writev(r0, &(0x7f000063e000)=[{&(0x7f0000a66000)="da", 0x1}], 0x1)
gettid()
sendmmsg$alg(r1, &(0x7f0000236fc8)=[{0xc00, 0x0, &(0x7f00000fff80), 0xc, &(0x7f00001e1e78)}], 0x4924924924926c8, 0x101d0)

09:20:35 executing program 2:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x81000000000002, &(0x7f00000003c0)=0x74, 0x4)
bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000680)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x10e)
write$binfmt_elf32(r0, &(0x7f0000000b80)=ANY=[@ANYBLOB="7f"], 0x1)
write$binfmt_elf64(r0, &(0x7f0000000d40)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", [[], [], [], [], []]}, 0x578)

09:20:35 executing program 3:
r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000004ffc)=0x1000)
read(r0, 0x0, 0x0)

09:20:36 executing program 0:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x40000000000015, 0x8000000000000010, 0xe68}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000440), &(0x7f0000000500), 0x100000000000000}, 0x20)

09:20:36 executing program 3:
openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
pipe(0x0)
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sched_setattr(0x0, 0x0, 0x0)
ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(0xffffffffffffffff, 0xc0305602, 0x0)
time(&(0x7f00000003c0))
r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0)
ioctl$BLKTRACESTART(r0, 0x1274, 0x0)

[  387.918814][   T26] audit: type=1804 audit(1548840036.083:99): pid=15188 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor1" name="/root/syzkaller-testdir696132803/syzkaller.eL2Zyi/272/file0" dev="sda1" ino=17285 res=1
09:20:36 executing program 5:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000004f40)='/dev/zero\x00', 0x600000, 0x0)
setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000004f80)=0x440, 0x4)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0)
r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='ip_vti0\x00', 0x10)
sendto$llc(r1, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x1a, 0x300, 0x0, 0x0, 0x0, 0x0, @random="b06de07ad55b"}, 0x10)

[  387.971823][T15188] FS-Cache: Duplicate cookie detected
[  387.977436][T15188] FS-Cache: O-cookie c=0000000031722969 [p=00000000d1166a26 fl=222 nc=0 na=1]
[  387.986422][T15188] FS-Cache: O-cookie d=00000000f1d12677 n=00000000415866e1
[  387.993640][T15188] FS-Cache: O-key=[10] '02000200000002000000'
[  387.999845][T15188] FS-Cache: N-cookie c=00000000c2b620bd [p=00000000d1166a26 fl=2 nc=0 na=1]
[  388.008612][T15188] FS-Cache: N-cookie d=00000000f1d12677 n=000000008380ab90
[  388.015892][T15188] FS-Cache: N-key=[10] '02000200000002000000'
09:20:36 executing program 0:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x40000000000015, 0x8000000000000010, 0xe68}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000440), &(0x7f0000000500), 0x100000000000000}, 0x20)

09:20:36 executing program 1:
r0 = socket$inet6(0xa, 0x6, 0x0)
socketpair(0x0, 0x0, 0x40, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0)
sendmsg$rds(r1, &(0x7f0000000b40)={&(0x7f00000002c0)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f00000005c0)=[{&(0x7f00000004c0)=""/231, 0xe7}], 0x1, &(0x7f0000000a00)=[@rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000000600)=""/100, 0x64}, &(0x7f0000000680), 0x1}}, @rdma_args={0x48, 0x114, 0x1, {{0x0, 0x1}, {&(0x7f00000006c0)=""/221, 0xdd}, &(0x7f00000008c0)=[{0x0}], 0x1, 0x43, 0x3324}}, @mask_fadd={0x58, 0x114, 0x8, {{0x9, 0x40a51209}, &(0x7f0000000900)=0x1ff, &(0x7f0000000940)=0x9, 0x4, 0x9, 0x8, 0x0, 0x21, 0xfff}}, @fadd={0x58, 0x114, 0x6, {{0x200, 0x9}, &(0x7f0000000980)=0x100, &(0x7f00000009c0), 0x1, 0xc6, 0x0, 0x8, 0x39}}, @rdma_dest={0x18, 0x114, 0x2, {0x3, 0x9}}], 0x140, 0x800}, 0x48001)
getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0)
r2 = geteuid()
getegid()
fchown(r0, r2, 0x0)
r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
getsockopt$inet_sctp_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, 0x0, &(0x7f00000013c0))
r4 = openat(0xffffffffffffff9c, &(0x7f0000001380)='./file0\x00', 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f00000007c0)=@assoc_value={<r5=>0x0}, &(0x7f0000000800)=0x8)
getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x66, &(0x7f0000000840)={r5, 0x8}, &(0x7f0000000880)=0x8)
syz_genetlink_get_family_id$tipc(&(0x7f0000000340)='TIPC\x00')
socket$unix(0x1, 0x2, 0x0)
setsockopt$IP_VS_SO_SET_DELDEST(r3, 0x0, 0x488, &(0x7f0000000b80)={{0x2b, @remote, 0x4e20, 0x4, 'lblcr\x00', 0x0, 0xfffffffffffffffe, 0x1c}, {@loopback, 0x4e21, 0x0, 0x0, 0xfff}}, 0x44)
socket$inet(0x10, 0x3, 0x0)
sendmsg(0xffffffffffffffff, 0x0, 0x0)
creat(&(0x7f0000000240)='./file0\x00', 0x7)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000380)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0xc204, &(0x7f0000000000))
getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, &(0x7f0000000140)={<r6=>0x0, 0x8d6}, &(0x7f00000001c0)=0x8)
getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000440)={r6, 0xebe}, &(0x7f0000000480)=0x8)
getsockname$unix(r3, &(0x7f00000003c0), 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff)

[  388.053231][   T26] audit: type=1804 audit(1548840036.083:100): pid=15188 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor1" name="/root/syzkaller-testdir696132803/syzkaller.eL2Zyi/272/file0" dev="sda1" ino=17285 res=1
09:20:36 executing program 2:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x81000000000002, &(0x7f00000003c0)=0x74, 0x4)
bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000680)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x10e)
write$binfmt_elf32(r0, &(0x7f0000000b80)=ANY=[@ANYBLOB="7f"], 0x1)
write$binfmt_elf64(r0, &(0x7f0000000d40)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", [[], [], [], [], []]}, 0x578)

09:20:36 executing program 4:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a})
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = shmget$private(0x0, 0x2000, 0xfffffffffffffffe, &(0x7f0000ffb000/0x2000)=nil)
shmctl$IPC_STAT(r3, 0x2, &(0x7f0000000080)=""/19)
r4 = socket$inet(0x2, 0x3, 0x2)
r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x20100, 0x0)
getitimer(0x2, &(0x7f00000002c0))
ioctl$SIOCSIFMTU(r5, 0x8922, &(0x7f0000000200)={'rose0\x00'})
getcwd(&(0x7f0000000300)=""/221, 0xdd)
getsockname(r5, &(0x7f0000000140)=@ipx, &(0x7f00000001c0)=0x80)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r5, 0x28, 0x0, &(0x7f0000000100)=0x1, 0x8)
setsockopt$inet_int(r4, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10)
r6 = dup2(r1, r1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x3e7, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$sock_inet6_tcp_SIOCOUTQNSD(r5, 0x894b, &(0x7f0000000280))
ioctl$TUNDETACHFILTER(r5, 0x401054d6, 0x0)
r7 = syz_open_dev$usbmon(&(0x7f0000000980)='/dev/usbmon#\x00', 0x2, 0x200000)
setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f0000000a40)={&(0x7f00000009c0)=""/74, 0x2000, 0x800, 0x20}, 0x18)
ioctl$BLKGETSIZE64(r6, 0x80081272, &(0x7f0000000240))
r8 = syz_open_procfs(0x0, &(0x7f00000001c0)='clear_refs\x00')
r9 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0)
pwritev(r8, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0)
fsetxattr$security_ima(r5, &(0x7f0000000400)='security.ima\x00', &(0x7f0000000440)=@ng={0x4, 0x9, "bbc832edf0643cac815a38cbda6c93db"}, 0x12, 0x1)
accept4$unix(r8, &(0x7f0000000000), &(0x7f00000000c0)=0x6e, 0x800)
getsockname$packet(r2, &(0x7f0000000540)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14)
ioctl$TUNSETIFINDEX(r8, 0x400454da, &(0x7f00000005c0)=r10)
ioctl$SCSI_IOCTL_DOORLOCK(r9, 0x5380)

09:20:36 executing program 5:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000004f40)='/dev/zero\x00', 0x600000, 0x0)
setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000004f80)=0x440, 0x4)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0)
r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='ip_vti0\x00', 0x10)
sendto$llc(r1, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x1a, 0x300, 0x0, 0x0, 0x0, 0x0, @random="b06de07ad55b"}, 0x10)

09:20:36 executing program 0:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x40000000000015, 0x8000000000000010, 0xe68}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000440), &(0x7f0000000500), 0x100000000000000}, 0x20)

09:20:36 executing program 5:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000004f40)='/dev/zero\x00', 0x600000, 0x0)
setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000004f80)=0x440, 0x4)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0)
r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='ip_vti0\x00', 0x10)
sendto$llc(r1, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x1a, 0x300, 0x0, 0x0, 0x0, 0x0, @random="b06de07ad55b"}, 0x10)

09:20:36 executing program 2:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x81000000000002, &(0x7f00000003c0)=0x74, 0x4)
bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000680)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x10e)
write$binfmt_elf32(r0, &(0x7f0000000b80)=ANY=[@ANYBLOB="7f"], 0x1)
write$binfmt_elf64(r0, &(0x7f0000000d40)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", [[], [], [], [], []]}, 0x578)

09:20:36 executing program 0:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x40000000000015, 0x8000000000000010, 0xe68}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000440), &(0x7f0000000500), 0x100000000000000}, 0x20)

09:20:36 executing program 1:
r0 = socket$inet6(0xa, 0x6, 0x0)
socketpair(0x0, 0x0, 0x40, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0)
sendmsg$rds(r1, &(0x7f0000000b40)={&(0x7f00000002c0)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f00000005c0)=[{&(0x7f00000004c0)=""/231, 0xe7}], 0x1, &(0x7f0000000a00)=[@rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000000600)=""/100, 0x64}, &(0x7f0000000680), 0x1}}, @rdma_args={0x48, 0x114, 0x1, {{0x0, 0x1}, {&(0x7f00000006c0)=""/221, 0xdd}, &(0x7f00000008c0)=[{0x0}], 0x1, 0x43, 0x3324}}, @mask_fadd={0x58, 0x114, 0x8, {{0x9, 0x40a51209}, &(0x7f0000000900)=0x1ff, &(0x7f0000000940)=0x9, 0x4, 0x9, 0x8, 0x0, 0x21, 0xfff}}, @fadd={0x58, 0x114, 0x6, {{0x200, 0x9}, &(0x7f0000000980)=0x100, &(0x7f00000009c0), 0x1, 0xc6, 0x0, 0x8, 0x39}}, @rdma_dest={0x18, 0x114, 0x2, {0x3, 0x9}}], 0x140, 0x800}, 0x48001)
getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0)
r2 = geteuid()
getegid()
fchown(r0, r2, 0x0)
r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
getsockopt$inet_sctp_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, 0x0, &(0x7f00000013c0))
r4 = openat(0xffffffffffffff9c, &(0x7f0000001380)='./file0\x00', 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f00000007c0)=@assoc_value={<r5=>0x0}, &(0x7f0000000800)=0x8)
getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x66, &(0x7f0000000840)={r5, 0x8}, &(0x7f0000000880)=0x8)
syz_genetlink_get_family_id$tipc(&(0x7f0000000340)='TIPC\x00')
socket$unix(0x1, 0x2, 0x0)
setsockopt$IP_VS_SO_SET_DELDEST(r3, 0x0, 0x488, &(0x7f0000000b80)={{0x2b, @remote, 0x4e20, 0x4, 'lblcr\x00', 0x0, 0xfffffffffffffffe, 0x1c}, {@loopback, 0x4e21, 0x0, 0x0, 0xfff}}, 0x44)
socket$inet(0x10, 0x3, 0x0)
sendmsg(0xffffffffffffffff, 0x0, 0x0)
creat(&(0x7f0000000240)='./file0\x00', 0x7)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000380)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0xc204, &(0x7f0000000000))
getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, &(0x7f0000000140)={<r6=>0x0, 0x8d6}, &(0x7f00000001c0)=0x8)
getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000440)={r6, 0xebe}, &(0x7f0000000480)=0x8)
getsockname$unix(r3, &(0x7f00000003c0), 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff)

[  388.612353][T15212] cgroup: fork rejected by pids controller in /syz1
09:20:37 executing program 3:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
socket$inet6_tcp(0xa, 0x1, 0x0)
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mkdir(&(0x7f0000000500)='./bus\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='overlay\x00', 0x0, &(0x7f0000000080)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@metacopy_off='metacopy=off'}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]})

09:20:37 executing program 0:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)='overlay\x00', 0x0, &(0x7f0000000ac0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

09:20:37 executing program 5:
r0 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$VIDIOC_G_ENC_INDEX(r0, 0x8818564c, &(0x7f0000000000))
listen(r0, 0x7)
prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f00000008c0)=@assoc_value={<r2=>0x0}, &(0x7f0000000900)=0x8)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000940)={r2, 0x590}, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, 0x0, 0x0)
r3 = syz_open_dev$audion(&(0x7f00000009c0)='/dev/audio#\x00', 0xc07, 0x40)
syz_open_dev$media(&(0x7f0000000a40)='/dev/media#\x00', 0x9, 0xc0080)
connect$rxrpc(r3, &(0x7f0000000a00)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e24, @multicast1}}, 0x24)

09:20:37 executing program 2:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x81000000000002, &(0x7f00000003c0)=0x74, 0x4)
bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000680)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x10e)
write$binfmt_elf32(r0, &(0x7f0000000b80)=ANY=[@ANYBLOB="7f"], 0x1)
write$binfmt_elf64(r0, &(0x7f0000000d40)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", [[], [], [], [], []]}, 0x578)

09:20:37 executing program 1:
r0 = socket$inet6(0xa, 0x6, 0x0)
socketpair(0x0, 0x0, 0x40, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0)
sendmsg$rds(r1, &(0x7f0000000b40)={&(0x7f00000002c0)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f00000005c0)=[{&(0x7f00000004c0)=""/231, 0xe7}], 0x1, &(0x7f0000000a00)=[@rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000000600)=""/100, 0x64}, &(0x7f0000000680), 0x1}}, @rdma_args={0x48, 0x114, 0x1, {{0x0, 0x1}, {&(0x7f00000006c0)=""/221, 0xdd}, &(0x7f00000008c0)=[{0x0}], 0x1, 0x43, 0x3324}}, @mask_fadd={0x58, 0x114, 0x8, {{0x9, 0x40a51209}, &(0x7f0000000900)=0x1ff, &(0x7f0000000940)=0x9, 0x4, 0x9, 0x8, 0x0, 0x21, 0xfff}}, @fadd={0x58, 0x114, 0x6, {{0x200, 0x9}, &(0x7f0000000980)=0x100, &(0x7f00000009c0), 0x1, 0xc6, 0x0, 0x8, 0x39}}, @rdma_dest={0x18, 0x114, 0x2, {0x3, 0x9}}], 0x140, 0x800}, 0x48001)
getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0)
r2 = geteuid()
getegid()
fchown(r0, r2, 0x0)
r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
getsockopt$inet_sctp_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, 0x0, &(0x7f00000013c0))
r4 = openat(0xffffffffffffff9c, &(0x7f0000001380)='./file0\x00', 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f00000007c0)=@assoc_value={<r5=>0x0}, &(0x7f0000000800)=0x8)
getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x66, &(0x7f0000000840)={r5, 0x8}, &(0x7f0000000880)=0x8)
syz_genetlink_get_family_id$tipc(&(0x7f0000000340)='TIPC\x00')
socket$unix(0x1, 0x2, 0x0)
setsockopt$IP_VS_SO_SET_DELDEST(r3, 0x0, 0x488, &(0x7f0000000b80)={{0x2b, @remote, 0x4e20, 0x4, 'lblcr\x00', 0x0, 0xfffffffffffffffe, 0x1c}, {@loopback, 0x4e21, 0x0, 0x0, 0xfff}}, 0x44)
socket$inet(0x10, 0x3, 0x0)
sendmsg(0xffffffffffffffff, 0x0, 0x0)
creat(&(0x7f0000000240)='./file0\x00', 0x7)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000380)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0xc204, &(0x7f0000000000))
getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, &(0x7f0000000140)={<r6=>0x0, 0x8d6}, &(0x7f00000001c0)=0x8)
getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000440)={r6, 0xebe}, &(0x7f0000000480)=0x8)
getsockname$unix(r3, &(0x7f00000003c0), 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff)

[  388.920833][T15243] overlayfs: bad mount option "redirect_dir=./file0"
[  388.969528][T15243] overlayfs: bad mount option "redirect_dir=./file0"
[  388.984722][    C0] net_ratelimit: 20 callbacks suppressed
[  388.984737][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  388.984801][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  389.374762][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  389.374814][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  389.380609][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  389.386380][    C1] protocol 88fb is buggy, dev hsr_slave_1
[  389.934698][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  389.940598][    C1] protocol 88fb is buggy, dev hsr_slave_1
[  389.946459][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  389.952237][    C1] protocol 88fb is buggy, dev hsr_slave_1
09:20:38 executing program 4:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a})
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = shmget$private(0x0, 0x2000, 0xfffffffffffffffe, &(0x7f0000ffb000/0x2000)=nil)
shmctl$IPC_STAT(r3, 0x2, &(0x7f0000000080)=""/19)
r4 = socket$inet(0x2, 0x3, 0x2)
r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x20100, 0x0)
getitimer(0x2, &(0x7f00000002c0))
ioctl$SIOCSIFMTU(r5, 0x8922, &(0x7f0000000200)={'rose0\x00'})
getcwd(&(0x7f0000000300)=""/221, 0xdd)
getsockname(r5, &(0x7f0000000140)=@ipx, &(0x7f00000001c0)=0x80)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r5, 0x28, 0x0, &(0x7f0000000100)=0x1, 0x8)
setsockopt$inet_int(r4, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10)
r6 = dup2(r1, r1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x3e7, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$sock_inet6_tcp_SIOCOUTQNSD(r5, 0x894b, &(0x7f0000000280))
ioctl$TUNDETACHFILTER(r5, 0x401054d6, 0x0)
r7 = syz_open_dev$usbmon(&(0x7f0000000980)='/dev/usbmon#\x00', 0x2, 0x200000)
setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f0000000a40)={&(0x7f00000009c0)=""/74, 0x2000, 0x800, 0x20}, 0x18)
ioctl$BLKGETSIZE64(r6, 0x80081272, &(0x7f0000000240))
r8 = syz_open_procfs(0x0, &(0x7f00000001c0)='clear_refs\x00')
r9 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0)
pwritev(r8, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0)
fsetxattr$security_ima(r5, &(0x7f0000000400)='security.ima\x00', &(0x7f0000000440)=@ng={0x4, 0x9, "bbc832edf0643cac815a38cbda6c93db"}, 0x12, 0x1)
accept4$unix(r8, &(0x7f0000000000), &(0x7f00000000c0)=0x6e, 0x800)
getsockname$packet(r2, &(0x7f0000000540)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14)
ioctl$TUNSETIFINDEX(r8, 0x400454da, &(0x7f00000005c0)=r10)
ioctl$SCSI_IOCTL_DOORLOCK(r9, 0x5380)

09:20:38 executing program 0:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)='overlay\x00', 0x0, &(0x7f0000000ac0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

09:20:38 executing program 1:
futex(&(0x7f000000cffc)=0x4, 0x0, 0x4, 0x0, 0x0, 0x0)
futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0)

09:20:38 executing program 2:
r0 = perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x400000000001, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0)
mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1)
pipe(&(0x7f0000000100)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
write(r3, &(0x7f00000001c0), 0xfffffef3)
read(r2, &(0x7f0000000200)=""/250, 0x50c7e3e3)

09:20:38 executing program 5:
r0 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$VIDIOC_G_ENC_INDEX(r0, 0x8818564c, &(0x7f0000000000))
listen(r0, 0x7)
prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f00000008c0)=@assoc_value={<r2=>0x0}, &(0x7f0000000900)=0x8)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000940)={r2, 0x590}, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, 0x0, 0x0)
r3 = syz_open_dev$audion(&(0x7f00000009c0)='/dev/audio#\x00', 0xc07, 0x40)
syz_open_dev$media(&(0x7f0000000a40)='/dev/media#\x00', 0x9, 0xc0080)
connect$rxrpc(r3, &(0x7f0000000a00)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e24, @multicast1}}, 0x24)

09:20:38 executing program 3:
r0 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$VIDIOC_G_ENC_INDEX(r0, 0x8818564c, &(0x7f0000000000))
listen(r0, 0x7)
prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f00000008c0)=@assoc_value={<r2=>0x0}, &(0x7f0000000900)=0x8)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000940)={r2, 0x590}, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, 0x0, 0x0)
r3 = syz_open_dev$audion(&(0x7f00000009c0)='/dev/audio#\x00', 0xc07, 0x40)
syz_open_dev$media(&(0x7f0000000a40)='/dev/media#\x00', 0x9, 0xc0080)
connect$rxrpc(r3, &(0x7f0000000a00)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e24, @multicast1}}, 0x24)

[  390.209470][T15269] overlayfs: bad mount option "redirect_dir=./file0"
09:20:38 executing program 1:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a})
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = shmget$private(0x0, 0x2000, 0xfffffffffffffffe, &(0x7f0000ffb000/0x2000)=nil)
shmctl$IPC_STAT(r3, 0x2, &(0x7f0000000080)=""/19)
r4 = socket$inet(0x2, 0x3, 0x2)
r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x20100, 0x0)
getitimer(0x2, &(0x7f00000002c0))
ioctl$SIOCSIFMTU(r5, 0x8922, &(0x7f0000000200)={'rose0\x00'})
getcwd(&(0x7f0000000300)=""/221, 0xdd)
getsockname(r5, &(0x7f0000000140)=@ipx, &(0x7f00000001c0)=0x80)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r5, 0x28, 0x0, &(0x7f0000000100)=0x1, 0x8)
setsockopt$inet_int(r4, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10)
r6 = dup2(r1, r1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x3e7, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$sock_inet6_tcp_SIOCOUTQNSD(r5, 0x894b, &(0x7f0000000280))
ioctl$TUNDETACHFILTER(r5, 0x401054d6, 0x0)
r7 = syz_open_dev$usbmon(&(0x7f0000000980)='/dev/usbmon#\x00', 0x2, 0x200000)
setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f0000000a40)={&(0x7f00000009c0)=""/74, 0x2000, 0x800, 0x20}, 0x18)
ioctl$BLKGETSIZE64(r6, 0x80081272, &(0x7f0000000240))
r8 = syz_open_procfs(0x0, &(0x7f00000001c0)='clear_refs\x00')
r9 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0)
pwritev(r8, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0)
fsetxattr$security_ima(r5, &(0x7f0000000400)='security.ima\x00', &(0x7f0000000440)=@ng={0x4, 0x9, "bbc832edf0643cac815a38cbda6c93db"}, 0x12, 0x1)
accept4$unix(r8, &(0x7f0000000000), &(0x7f00000000c0)=0x6e, 0x800)
getsockname$packet(r2, &(0x7f0000000540)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14)
ioctl$TUNSETIFINDEX(r8, 0x400454da, &(0x7f00000005c0)=r10)
ioctl$SCSI_IOCTL_DOORLOCK(r9, 0x5380)

09:20:38 executing program 0:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)='overlay\x00', 0x0, &(0x7f0000000ac0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

09:20:38 executing program 5:
r0 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$VIDIOC_G_ENC_INDEX(r0, 0x8818564c, &(0x7f0000000000))
listen(r0, 0x7)
prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f00000008c0)=@assoc_value={<r2=>0x0}, &(0x7f0000000900)=0x8)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000940)={r2, 0x590}, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, 0x0, 0x0)
r3 = syz_open_dev$audion(&(0x7f00000009c0)='/dev/audio#\x00', 0xc07, 0x40)
syz_open_dev$media(&(0x7f0000000a40)='/dev/media#\x00', 0x9, 0xc0080)
connect$rxrpc(r3, &(0x7f0000000a00)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e24, @multicast1}}, 0x24)

[  390.692362][T15286] overlayfs: bad mount option "redirect_dir=./file0"
09:20:39 executing program 0:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)='overlay\x00', 0x0, &(0x7f0000000ac0)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}]})

[  391.278427][T15296] overlayfs: bad mount option "redirect_dir=./file0"
09:20:39 executing program 3:
r0 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$VIDIOC_G_ENC_INDEX(r0, 0x8818564c, &(0x7f0000000000))
listen(r0, 0x7)
prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f00000008c0)=@assoc_value={<r2=>0x0}, &(0x7f0000000900)=0x8)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000940)={r2, 0x590}, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, 0x0, 0x0)
r3 = syz_open_dev$audion(&(0x7f00000009c0)='/dev/audio#\x00', 0xc07, 0x40)
syz_open_dev$media(&(0x7f0000000a40)='/dev/media#\x00', 0x9, 0xc0080)
connect$rxrpc(r3, &(0x7f0000000a00)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e24, @multicast1}}, 0x24)

09:20:39 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a})
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = shmget$private(0x0, 0x2000, 0xfffffffffffffffe, &(0x7f0000ffb000/0x2000)=nil)
shmctl$IPC_STAT(r3, 0x2, &(0x7f0000000080)=""/19)
r4 = socket$inet(0x2, 0x3, 0x2)
r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x20100, 0x0)
getitimer(0x2, &(0x7f00000002c0))
ioctl$SIOCSIFMTU(r5, 0x8922, &(0x7f0000000200)={'rose0\x00'})
getcwd(&(0x7f0000000300)=""/221, 0xdd)
getsockname(r5, &(0x7f0000000140)=@ipx, &(0x7f00000001c0)=0x80)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r5, 0x28, 0x0, &(0x7f0000000100)=0x1, 0x8)
setsockopt$inet_int(r4, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10)
r6 = dup2(r1, r1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x3e7, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$sock_inet6_tcp_SIOCOUTQNSD(r5, 0x894b, &(0x7f0000000280))
ioctl$TUNDETACHFILTER(r5, 0x401054d6, 0x0)
r7 = syz_open_dev$usbmon(&(0x7f0000000980)='/dev/usbmon#\x00', 0x2, 0x200000)
setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f0000000a40)={&(0x7f00000009c0)=""/74, 0x2000, 0x800, 0x20}, 0x18)
ioctl$BLKGETSIZE64(r6, 0x80081272, &(0x7f0000000240))
r8 = syz_open_procfs(0x0, &(0x7f00000001c0)='clear_refs\x00')
r9 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0)
pwritev(r8, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0)
fsetxattr$security_ima(r5, &(0x7f0000000400)='security.ima\x00', &(0x7f0000000440)=@ng={0x4, 0x9, "bbc832edf0643cac815a38cbda6c93db"}, 0x12, 0x1)
accept4$unix(r8, &(0x7f0000000000), &(0x7f00000000c0)=0x6e, 0x800)
getsockname$packet(r2, &(0x7f0000000540)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14)
ioctl$TUNSETIFINDEX(r8, 0x400454da, &(0x7f00000005c0)=r10)
ioctl$SCSI_IOCTL_DOORLOCK(r9, 0x5380)

09:20:41 executing program 4:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a})
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = shmget$private(0x0, 0x2000, 0xfffffffffffffffe, &(0x7f0000ffb000/0x2000)=nil)
shmctl$IPC_STAT(r3, 0x2, &(0x7f0000000080)=""/19)
r4 = socket$inet(0x2, 0x3, 0x2)
r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x20100, 0x0)
getitimer(0x2, &(0x7f00000002c0))
ioctl$SIOCSIFMTU(r5, 0x8922, &(0x7f0000000200)={'rose0\x00'})
getcwd(&(0x7f0000000300)=""/221, 0xdd)
getsockname(r5, &(0x7f0000000140)=@ipx, &(0x7f00000001c0)=0x80)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r5, 0x28, 0x0, &(0x7f0000000100)=0x1, 0x8)
setsockopt$inet_int(r4, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10)
r6 = dup2(r1, r1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x3e7, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$sock_inet6_tcp_SIOCOUTQNSD(r5, 0x894b, &(0x7f0000000280))
ioctl$TUNDETACHFILTER(r5, 0x401054d6, 0x0)
r7 = syz_open_dev$usbmon(&(0x7f0000000980)='/dev/usbmon#\x00', 0x2, 0x200000)
setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f0000000a40)={&(0x7f00000009c0)=""/74, 0x2000, 0x800, 0x20}, 0x18)
ioctl$BLKGETSIZE64(r6, 0x80081272, &(0x7f0000000240))
r8 = syz_open_procfs(0x0, &(0x7f00000001c0)='clear_refs\x00')
r9 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0)
pwritev(r8, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0)
fsetxattr$security_ima(r5, &(0x7f0000000400)='security.ima\x00', &(0x7f0000000440)=@ng={0x4, 0x9, "bbc832edf0643cac815a38cbda6c93db"}, 0x12, 0x1)
accept4$unix(r8, &(0x7f0000000000), &(0x7f00000000c0)=0x6e, 0x800)
getsockname$packet(r2, &(0x7f0000000540)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14)
ioctl$TUNSETIFINDEX(r8, 0x400454da, &(0x7f00000005c0)=r10)
ioctl$SCSI_IOCTL_DOORLOCK(r9, 0x5380)

09:20:41 executing program 2:
r0 = perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x400000000001, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0)
mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1)
pipe(&(0x7f0000000100)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
write(r3, &(0x7f00000001c0), 0xfffffef3)
read(r2, &(0x7f0000000200)=""/250, 0x50c7e3e3)

09:20:41 executing program 5:
r0 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$VIDIOC_G_ENC_INDEX(r0, 0x8818564c, &(0x7f0000000000))
listen(r0, 0x7)
prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f00000008c0)=@assoc_value={<r2=>0x0}, &(0x7f0000000900)=0x8)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000940)={r2, 0x590}, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, 0x0, 0x0)
r3 = syz_open_dev$audion(&(0x7f00000009c0)='/dev/audio#\x00', 0xc07, 0x40)
syz_open_dev$media(&(0x7f0000000a40)='/dev/media#\x00', 0x9, 0xc0080)
connect$rxrpc(r3, &(0x7f0000000a00)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e24, @multicast1}}, 0x24)

09:20:41 executing program 3:
r0 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$VIDIOC_G_ENC_INDEX(r0, 0x8818564c, &(0x7f0000000000))
listen(r0, 0x7)
prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f00000008c0)=@assoc_value={<r2=>0x0}, &(0x7f0000000900)=0x8)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000940)={r2, 0x590}, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, 0x0, 0x0)
r3 = syz_open_dev$audion(&(0x7f00000009c0)='/dev/audio#\x00', 0xc07, 0x40)
syz_open_dev$media(&(0x7f0000000a40)='/dev/media#\x00', 0x9, 0xc0080)
connect$rxrpc(r3, &(0x7f0000000a00)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e24, @multicast1}}, 0x24)

09:20:41 executing program 3:
r0 = perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x400000000001, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0)
mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1)
pipe(&(0x7f0000000100)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
write(r3, &(0x7f00000001c0), 0xfffffef3)
read(r2, &(0x7f0000000200)=""/250, 0x50c7e3e3)

09:20:41 executing program 1:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a})
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = shmget$private(0x0, 0x2000, 0xfffffffffffffffe, &(0x7f0000ffb000/0x2000)=nil)
shmctl$IPC_STAT(r3, 0x2, &(0x7f0000000080)=""/19)
r4 = socket$inet(0x2, 0x3, 0x2)
r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x20100, 0x0)
getitimer(0x2, &(0x7f00000002c0))
ioctl$SIOCSIFMTU(r5, 0x8922, &(0x7f0000000200)={'rose0\x00'})
getcwd(&(0x7f0000000300)=""/221, 0xdd)
getsockname(r5, &(0x7f0000000140)=@ipx, &(0x7f00000001c0)=0x80)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r5, 0x28, 0x0, &(0x7f0000000100)=0x1, 0x8)
setsockopt$inet_int(r4, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10)
r6 = dup2(r1, r1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x3e7, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$sock_inet6_tcp_SIOCOUTQNSD(r5, 0x894b, &(0x7f0000000280))
ioctl$TUNDETACHFILTER(r5, 0x401054d6, 0x0)
r7 = syz_open_dev$usbmon(&(0x7f0000000980)='/dev/usbmon#\x00', 0x2, 0x200000)
setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f0000000a40)={&(0x7f00000009c0)=""/74, 0x2000, 0x800, 0x20}, 0x18)
ioctl$BLKGETSIZE64(r6, 0x80081272, &(0x7f0000000240))
r8 = syz_open_procfs(0x0, &(0x7f00000001c0)='clear_refs\x00')
r9 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0)
pwritev(r8, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0)
fsetxattr$security_ima(r5, &(0x7f0000000400)='security.ima\x00', &(0x7f0000000440)=@ng={0x4, 0x9, "bbc832edf0643cac815a38cbda6c93db"}, 0x12, 0x1)
accept4$unix(r8, &(0x7f0000000000), &(0x7f00000000c0)=0x6e, 0x800)
getsockname$packet(r2, &(0x7f0000000540)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14)
ioctl$TUNSETIFINDEX(r8, 0x400454da, &(0x7f00000005c0)=r10)
ioctl$SCSI_IOCTL_DOORLOCK(r9, 0x5380)

09:20:41 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a})
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = shmget$private(0x0, 0x2000, 0xfffffffffffffffe, &(0x7f0000ffb000/0x2000)=nil)
shmctl$IPC_STAT(r3, 0x2, &(0x7f0000000080)=""/19)
r4 = socket$inet(0x2, 0x3, 0x2)
r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x20100, 0x0)
getitimer(0x2, &(0x7f00000002c0))
ioctl$SIOCSIFMTU(r5, 0x8922, &(0x7f0000000200)={'rose0\x00'})
getcwd(&(0x7f0000000300)=""/221, 0xdd)
getsockname(r5, &(0x7f0000000140)=@ipx, &(0x7f00000001c0)=0x80)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r5, 0x28, 0x0, &(0x7f0000000100)=0x1, 0x8)
setsockopt$inet_int(r4, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10)
r6 = dup2(r1, r1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x3e7, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$sock_inet6_tcp_SIOCOUTQNSD(r5, 0x894b, &(0x7f0000000280))
ioctl$TUNDETACHFILTER(r5, 0x401054d6, 0x0)
r7 = syz_open_dev$usbmon(&(0x7f0000000980)='/dev/usbmon#\x00', 0x2, 0x200000)
setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f0000000a40)={&(0x7f00000009c0)=""/74, 0x2000, 0x800, 0x20}, 0x18)
ioctl$BLKGETSIZE64(r6, 0x80081272, &(0x7f0000000240))
r8 = syz_open_procfs(0x0, &(0x7f00000001c0)='clear_refs\x00')
r9 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0)
pwritev(r8, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0)
fsetxattr$security_ima(r5, &(0x7f0000000400)='security.ima\x00', &(0x7f0000000440)=@ng={0x4, 0x9, "bbc832edf0643cac815a38cbda6c93db"}, 0x12, 0x1)
accept4$unix(r8, &(0x7f0000000000), &(0x7f00000000c0)=0x6e, 0x800)
getsockname$packet(r2, &(0x7f0000000540)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14)
ioctl$TUNSETIFINDEX(r8, 0x400454da, &(0x7f00000005c0)=r10)
ioctl$SCSI_IOCTL_DOORLOCK(r9, 0x5380)

09:20:42 executing program 2:
r0 = perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x400000000001, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0)
mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1)
pipe(&(0x7f0000000100)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
write(r3, &(0x7f00000001c0), 0xfffffef3)
read(r2, &(0x7f0000000200)=""/250, 0x50c7e3e3)

09:20:42 executing program 3:
r0 = perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x400000000001, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0)
mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1)
pipe(&(0x7f0000000100)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
write(r3, &(0x7f00000001c0), 0xfffffef3)
read(r2, &(0x7f0000000200)=""/250, 0x50c7e3e3)

[  394.094744][    C1] net_ratelimit: 19 callbacks suppressed
[  394.094755][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  394.106365][    C1] protocol 88fb is buggy, dev hsr_slave_1
[  394.112202][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  394.118020][    C1] protocol 88fb is buggy, dev hsr_slave_1
09:20:42 executing program 2:
r0 = perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x400000000001, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0)
mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1)
pipe(&(0x7f0000000100)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
write(r3, &(0x7f00000001c0), 0xfffffef3)
read(r2, &(0x7f0000000200)=""/250, 0x50c7e3e3)

09:20:42 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a})
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = shmget$private(0x0, 0x2000, 0xfffffffffffffffe, &(0x7f0000ffb000/0x2000)=nil)
shmctl$IPC_STAT(r3, 0x2, &(0x7f0000000080)=""/19)
r4 = socket$inet(0x2, 0x3, 0x2)
r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x20100, 0x0)
getitimer(0x2, &(0x7f00000002c0))
ioctl$SIOCSIFMTU(r5, 0x8922, &(0x7f0000000200)={'rose0\x00'})
getcwd(&(0x7f0000000300)=""/221, 0xdd)
getsockname(r5, &(0x7f0000000140)=@ipx, &(0x7f00000001c0)=0x80)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r5, 0x28, 0x0, &(0x7f0000000100)=0x1, 0x8)
setsockopt$inet_int(r4, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10)
r6 = dup2(r1, r1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x3e7, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$sock_inet6_tcp_SIOCOUTQNSD(r5, 0x894b, &(0x7f0000000280))
ioctl$TUNDETACHFILTER(r5, 0x401054d6, 0x0)
r7 = syz_open_dev$usbmon(&(0x7f0000000980)='/dev/usbmon#\x00', 0x2, 0x200000)
setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f0000000a40)={&(0x7f00000009c0)=""/74, 0x2000, 0x800, 0x20}, 0x18)
ioctl$BLKGETSIZE64(r6, 0x80081272, &(0x7f0000000240))
r8 = syz_open_procfs(0x0, &(0x7f00000001c0)='clear_refs\x00')
r9 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0)
pwritev(r8, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0)
fsetxattr$security_ima(r5, &(0x7f0000000400)='security.ima\x00', &(0x7f0000000440)=@ng={0x4, 0x9, "bbc832edf0643cac815a38cbda6c93db"}, 0x12, 0x1)
accept4$unix(r8, &(0x7f0000000000), &(0x7f00000000c0)=0x6e, 0x800)
getsockname$packet(r2, &(0x7f0000000540)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14)
ioctl$TUNSETIFINDEX(r8, 0x400454da, &(0x7f00000005c0)=r10)
ioctl$SCSI_IOCTL_DOORLOCK(r9, 0x5380)

09:20:43 executing program 3:
r0 = perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x400000000001, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0)
mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1)
pipe(&(0x7f0000000100)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
write(r3, &(0x7f00000001c0), 0xfffffef3)
read(r2, &(0x7f0000000200)=""/250, 0x50c7e3e3)

[  394.894692][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  394.900583][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  395.454730][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  395.460548][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  395.614792][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  395.614822][    C1] protocol 88fb is buggy, dev hsr_slave_0
09:20:44 executing program 4:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a})
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = shmget$private(0x0, 0x2000, 0xfffffffffffffffe, &(0x7f0000ffb000/0x2000)=nil)
shmctl$IPC_STAT(r3, 0x2, &(0x7f0000000080)=""/19)
r4 = socket$inet(0x2, 0x3, 0x2)
r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x20100, 0x0)
getitimer(0x2, &(0x7f00000002c0))
ioctl$SIOCSIFMTU(r5, 0x8922, &(0x7f0000000200)={'rose0\x00'})
getcwd(&(0x7f0000000300)=""/221, 0xdd)
getsockname(r5, &(0x7f0000000140)=@ipx, &(0x7f00000001c0)=0x80)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r5, 0x28, 0x0, &(0x7f0000000100)=0x1, 0x8)
setsockopt$inet_int(r4, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10)
r6 = dup2(r1, r1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x3e7, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$sock_inet6_tcp_SIOCOUTQNSD(r5, 0x894b, &(0x7f0000000280))
ioctl$TUNDETACHFILTER(r5, 0x401054d6, 0x0)
r7 = syz_open_dev$usbmon(&(0x7f0000000980)='/dev/usbmon#\x00', 0x2, 0x200000)
setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f0000000a40)={&(0x7f00000009c0)=""/74, 0x2000, 0x800, 0x20}, 0x18)
ioctl$BLKGETSIZE64(r6, 0x80081272, &(0x7f0000000240))
r8 = syz_open_procfs(0x0, &(0x7f00000001c0)='clear_refs\x00')
r9 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0)
pwritev(r8, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0)
fsetxattr$security_ima(r5, &(0x7f0000000400)='security.ima\x00', &(0x7f0000000440)=@ng={0x4, 0x9, "bbc832edf0643cac815a38cbda6c93db"}, 0x12, 0x1)
accept4$unix(r8, &(0x7f0000000000), &(0x7f00000000c0)=0x6e, 0x800)
getsockname$packet(r2, &(0x7f0000000540)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14)
ioctl$TUNSETIFINDEX(r8, 0x400454da, &(0x7f00000005c0)=r10)
ioctl$SCSI_IOCTL_DOORLOCK(r9, 0x5380)

09:20:44 executing program 2:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_SET_PHYS(r0, 0x4008556c, &(0x7f0000000000)='syz1\x00')
ioctl$UI_DEV_DESTROY(r0, 0x5502)

09:20:44 executing program 3:
r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r1=>0x0]}, &(0x7f000095dffc)=0x8)
r2 = socket(0xa, 0x1, 0x0)
close(r2)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000000)={r1}, &(0x7f0000000140)=0x8)
fstatfs(r0, &(0x7f00000001c0)=""/248)
sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{&(0x7f0000000180)=@in={0x2f}, 0x3bf, &(0x7f0000000140), 0x3bf, &(0x7f0000000080)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x4}}], 0x30}], 0x1, 0x0)

09:20:44 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a})
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = shmget$private(0x0, 0x2000, 0xfffffffffffffffe, &(0x7f0000ffb000/0x2000)=nil)
shmctl$IPC_STAT(r3, 0x2, &(0x7f0000000080)=""/19)
r4 = socket$inet(0x2, 0x3, 0x2)
r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x20100, 0x0)
getitimer(0x2, &(0x7f00000002c0))
ioctl$SIOCSIFMTU(r5, 0x8922, &(0x7f0000000200)={'rose0\x00'})
getcwd(&(0x7f0000000300)=""/221, 0xdd)
getsockname(r5, &(0x7f0000000140)=@ipx, &(0x7f00000001c0)=0x80)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r5, 0x28, 0x0, &(0x7f0000000100)=0x1, 0x8)
setsockopt$inet_int(r4, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10)
r6 = dup2(r1, r1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x3e7, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$sock_inet6_tcp_SIOCOUTQNSD(r5, 0x894b, &(0x7f0000000280))
ioctl$TUNDETACHFILTER(r5, 0x401054d6, 0x0)
r7 = syz_open_dev$usbmon(&(0x7f0000000980)='/dev/usbmon#\x00', 0x2, 0x200000)
setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f0000000a40)={&(0x7f00000009c0)=""/74, 0x2000, 0x800, 0x20}, 0x18)
ioctl$BLKGETSIZE64(r6, 0x80081272, &(0x7f0000000240))
r8 = syz_open_procfs(0x0, &(0x7f00000001c0)='clear_refs\x00')
r9 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0)
pwritev(r8, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0)
fsetxattr$security_ima(r5, &(0x7f0000000400)='security.ima\x00', &(0x7f0000000440)=@ng={0x4, 0x9, "bbc832edf0643cac815a38cbda6c93db"}, 0x12, 0x1)
accept4$unix(r8, &(0x7f0000000000), &(0x7f00000000c0)=0x6e, 0x800)
getsockname$packet(r2, &(0x7f0000000540)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14)
ioctl$TUNSETIFINDEX(r8, 0x400454da, &(0x7f00000005c0)=r10)
ioctl$SCSI_IOCTL_DOORLOCK(r9, 0x5380)

[  396.448913][T15339] IPVS: ftp: loaded support on port[0] = 21
09:20:44 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a})
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = shmget$private(0x0, 0x2000, 0xfffffffffffffffe, &(0x7f0000ffb000/0x2000)=nil)
shmctl$IPC_STAT(r3, 0x2, &(0x7f0000000080)=""/19)
r4 = socket$inet(0x2, 0x3, 0x2)
r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x20100, 0x0)
getitimer(0x2, &(0x7f00000002c0))
ioctl$SIOCSIFMTU(r5, 0x8922, &(0x7f0000000200)={'rose0\x00'})
getcwd(&(0x7f0000000300)=""/221, 0xdd)
getsockname(r5, &(0x7f0000000140)=@ipx, &(0x7f00000001c0)=0x80)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r5, 0x28, 0x0, &(0x7f0000000100)=0x1, 0x8)
setsockopt$inet_int(r4, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10)
r6 = dup2(r1, r1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x3e7, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$sock_inet6_tcp_SIOCOUTQNSD(r5, 0x894b, &(0x7f0000000280))
ioctl$TUNDETACHFILTER(r5, 0x401054d6, 0x0)
r7 = syz_open_dev$usbmon(&(0x7f0000000980)='/dev/usbmon#\x00', 0x2, 0x200000)
setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f0000000a40)={&(0x7f00000009c0)=""/74, 0x2000, 0x800, 0x20}, 0x18)
ioctl$BLKGETSIZE64(r6, 0x80081272, &(0x7f0000000240))
r8 = syz_open_procfs(0x0, &(0x7f00000001c0)='clear_refs\x00')
r9 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0)
pwritev(r8, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0)
fsetxattr$security_ima(r5, &(0x7f0000000400)='security.ima\x00', &(0x7f0000000440)=@ng={0x4, 0x9, "bbc832edf0643cac815a38cbda6c93db"}, 0x12, 0x1)
accept4$unix(r8, &(0x7f0000000000), &(0x7f00000000c0)=0x6e, 0x800)
getsockname$packet(r2, &(0x7f0000000540)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14)
ioctl$TUNSETIFINDEX(r8, 0x400454da, &(0x7f00000005c0)=r10)
ioctl$SCSI_IOCTL_DOORLOCK(r9, 0x5380)

[  398.777652][T15339] chnl_net:caif_netlink_parms(): no params data found
[  398.975208][T15339] bridge0: port 1(bridge_slave_0) entered blocking state
[  398.982327][T15339] bridge0: port 1(bridge_slave_0) entered disabled state
[  398.990879][T15339] device bridge_slave_0 entered promiscuous mode
[  398.999495][T15339] bridge0: port 2(bridge_slave_1) entered blocking state
[  399.006675][T15339] bridge0: port 2(bridge_slave_1) entered disabled state
[  399.014410][T15339] device bridge_slave_1 entered promiscuous mode
[  399.193150][T15339] bond0: Enslaving bond_slave_0 as an active interface with an up link
[  399.205095][T15339] bond0: Enslaving bond_slave_1 as an active interface with an up link
[  399.228665][T15339] team0: Port device team_slave_0 added
[  399.236385][ T2543] device bridge_slave_1 left promiscuous mode
[  399.242553][ T2543] bridge0: port 2(bridge_slave_1) entered disabled state
[  399.296949][ T2543] device bridge_slave_0 left promiscuous mode
[  399.303117][ T2543] bridge0: port 1(bridge_slave_0) entered disabled state
[  399.614723][    C0] net_ratelimit: 20 callbacks suppressed
[  399.614734][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  399.626266][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  399.774734][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  399.774740][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  399.774841][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  399.780593][    C1] protocol 88fb is buggy, dev hsr_slave_1
[  400.334702][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  400.340517][    C1] protocol 88fb is buggy, dev hsr_slave_1
[  400.346386][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  400.352131][    C1] protocol 88fb is buggy, dev hsr_slave_1
[  403.802386][ T2543] bond4 (unregistering): Released all slaves
[  403.815098][ T2543] bond3 (unregistering): Released all slaves
[  403.830089][ T2543] bond2 (unregistering): Released all slaves
[  403.843474][ T2543] bond1 (unregistering): Released all slaves
[  403.888788][ T2543] device hsr_slave_1 left promiscuous mode
[  403.952089][ T2543] device hsr_slave_0 left promiscuous mode
[  404.011119][ T2543] team0 (unregistering): Port device team_slave_1 removed
[  404.025049][ T2543] team0 (unregistering): Port device team_slave_0 removed
[  404.038842][ T2543] bond0 (unregistering): Releasing backup interface bond_slave_1
[  404.082717][ T2543] bond0 (unregistering): Releasing backup interface bond_slave_0
[  404.191651][ T2543] bond0 (unregistering): Released all slaves
[  404.310449][T15339] team0: Port device team_slave_1 added
[  404.366737][T15339] device hsr_slave_0 entered promiscuous mode
[  404.415242][T15339] device hsr_slave_1 entered promiscuous mode
[  404.498974][T15339] 8021q: adding VLAN 0 to HW filter on device bond0
[  404.517040][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  404.525608][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  404.540244][T15339] 8021q: adding VLAN 0 to HW filter on device team0
[  404.550863][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  404.560936][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  404.569669][   T17] bridge0: port 1(bridge_slave_0) entered blocking state
[  404.576788][   T17] bridge0: port 1(bridge_slave_0) entered forwarding state
[  404.585165][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  404.596762][ T2650] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  404.606194][ T2650] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  404.614466][ T2650] bridge0: port 2(bridge_slave_1) entered blocking state
[  404.621566][ T2650] bridge0: port 2(bridge_slave_1) entered forwarding state
[  404.697224][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  404.706079][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  404.714521][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  404.723113][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  404.732086][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  404.740835][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  404.749505][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  404.758310][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  404.771288][T15339] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  404.782637][T15339] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  404.791562][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  404.815443][T15339] 8021q: adding VLAN 0 to HW filter on device batadv0
[  404.894763][    C0] net_ratelimit: 19 callbacks suppressed
[  404.894773][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  404.906284][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  405.014779][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  405.020655][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  405.135604][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  405.141854][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  405.254723][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  405.260602][    C0] protocol 88fb is buggy, dev hsr_slave_1
09:20:54 executing program 3:
r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r1=>0x0]}, &(0x7f000095dffc)=0x8)
r2 = socket(0xa, 0x1, 0x0)
close(r2)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000000)={r1}, &(0x7f0000000140)=0x8)
fstatfs(r0, &(0x7f00000001c0)=""/248)
sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{&(0x7f0000000180)=@in={0x2f}, 0x3bf, &(0x7f0000000140), 0x3bf, &(0x7f0000000080)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x4}}], 0x30}], 0x1, 0x0)

09:20:54 executing program 1:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a})
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = shmget$private(0x0, 0x2000, 0xfffffffffffffffe, &(0x7f0000ffb000/0x2000)=nil)
shmctl$IPC_STAT(r3, 0x2, &(0x7f0000000080)=""/19)
r4 = socket$inet(0x2, 0x3, 0x2)
r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x20100, 0x0)
getitimer(0x2, &(0x7f00000002c0))
ioctl$SIOCSIFMTU(r5, 0x8922, &(0x7f0000000200)={'rose0\x00'})
getcwd(&(0x7f0000000300)=""/221, 0xdd)
getsockname(r5, &(0x7f0000000140)=@ipx, &(0x7f00000001c0)=0x80)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r5, 0x28, 0x0, &(0x7f0000000100)=0x1, 0x8)
setsockopt$inet_int(r4, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10)
r6 = dup2(r1, r1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x3e7, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$sock_inet6_tcp_SIOCOUTQNSD(r5, 0x894b, &(0x7f0000000280))
ioctl$TUNDETACHFILTER(r5, 0x401054d6, 0x0)
r7 = syz_open_dev$usbmon(&(0x7f0000000980)='/dev/usbmon#\x00', 0x2, 0x200000)
setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f0000000a40)={&(0x7f00000009c0)=""/74, 0x2000, 0x800, 0x20}, 0x18)
ioctl$BLKGETSIZE64(r6, 0x80081272, &(0x7f0000000240))
r8 = syz_open_procfs(0x0, &(0x7f00000001c0)='clear_refs\x00')
r9 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0)
pwritev(r8, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0)
fsetxattr$security_ima(r5, &(0x7f0000000400)='security.ima\x00', &(0x7f0000000440)=@ng={0x4, 0x9, "bbc832edf0643cac815a38cbda6c93db"}, 0x12, 0x1)
accept4$unix(r8, &(0x7f0000000000), &(0x7f00000000c0)=0x6e, 0x800)
getsockname$packet(r2, &(0x7f0000000540)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14)
ioctl$TUNSETIFINDEX(r8, 0x400454da, &(0x7f00000005c0)=r10)
ioctl$SCSI_IOCTL_DOORLOCK(r9, 0x5380)

09:20:54 executing program 2:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_SET_PHYS(r0, 0x4008556c, &(0x7f0000000000)='syz1\x00')
ioctl$UI_DEV_DESTROY(r0, 0x5502)

09:20:54 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a})
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = shmget$private(0x0, 0x2000, 0xfffffffffffffffe, &(0x7f0000ffb000/0x2000)=nil)
shmctl$IPC_STAT(r3, 0x2, &(0x7f0000000080)=""/19)
r4 = socket$inet(0x2, 0x3, 0x2)
r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x20100, 0x0)
getitimer(0x2, &(0x7f00000002c0))
ioctl$SIOCSIFMTU(r5, 0x8922, &(0x7f0000000200)={'rose0\x00'})
getcwd(&(0x7f0000000300)=""/221, 0xdd)
getsockname(r5, &(0x7f0000000140)=@ipx, &(0x7f00000001c0)=0x80)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r5, 0x28, 0x0, &(0x7f0000000100)=0x1, 0x8)
setsockopt$inet_int(r4, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10)
r6 = dup2(r1, r1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x3e7, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$sock_inet6_tcp_SIOCOUTQNSD(r5, 0x894b, &(0x7f0000000280))
ioctl$TUNDETACHFILTER(r5, 0x401054d6, 0x0)
r7 = syz_open_dev$usbmon(&(0x7f0000000980)='/dev/usbmon#\x00', 0x2, 0x200000)
setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f0000000a40)={&(0x7f00000009c0)=""/74, 0x2000, 0x800, 0x20}, 0x18)
ioctl$BLKGETSIZE64(r6, 0x80081272, &(0x7f0000000240))
r8 = syz_open_procfs(0x0, &(0x7f00000001c0)='clear_refs\x00')
r9 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0)
pwritev(r8, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0)
fsetxattr$security_ima(r5, &(0x7f0000000400)='security.ima\x00', &(0x7f0000000440)=@ng={0x4, 0x9, "bbc832edf0643cac815a38cbda6c93db"}, 0x12, 0x1)
accept4$unix(r8, &(0x7f0000000000), &(0x7f00000000c0)=0x6e, 0x800)
getsockname$packet(r2, &(0x7f0000000540)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14)
ioctl$TUNSETIFINDEX(r8, 0x400454da, &(0x7f00000005c0)=r10)
ioctl$SCSI_IOCTL_DOORLOCK(r9, 0x5380)

09:20:54 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="11074143", 0x4)
r1 = accept$alg(r0, 0x0, 0x0)
write$binfmt_script(r1, &(0x7f0000000300)=ANY=[], 0xffffffaa)
recvmmsg(r1, &(0x7f0000004740)=[{{0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000840)=""/82, 0x52}, {&(0x7f0000000940)=""/191, 0xbf}], 0x2}}], 0x1, 0x0, 0x0)

09:20:54 executing program 4:
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000009340)=[{{0xffffffffffffffff, 0x0, &(0x7f0000003280)=[{&(0x7f0000002180)=""/113, 0x71}, {&(0x7f0000002200)=""/66, 0x42}, {&(0x7f0000002280)=""/4096, 0x1000}, {&(0x7f0000001e40)=""/64, 0x40}], 0x4, &(0x7f00000032c0)=""/224, 0xe0, 0x9}, 0xfffffffffffffffe}, {{&(0x7f00000034c0)=@sco, 0x80, &(0x7f0000003700)=[{&(0x7f0000003540)=""/187, 0xbb}, {&(0x7f0000003600)=""/253, 0xfd}], 0x2, &(0x7f0000003740)=""/165, 0xa5}, 0x5}, {{&(0x7f0000003980)=@ipx, 0x80, &(0x7f0000005bc0)=[{&(0x7f0000003a00)=""/181, 0xb5}, {&(0x7f0000003ac0)=""/4, 0x4}, {&(0x7f0000005b00)=""/119, 0x77}, {&(0x7f0000005b80)=""/23, 0x17}], 0x4, &(0x7f0000005c40)=""/4096, 0x1000}, 0x8}, {{&(0x7f0000006c40)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000006ec0)=[{&(0x7f0000006dc0)=""/66, 0x42}, {&(0x7f0000006e40)=""/103, 0x67}], 0x2, &(0x7f0000006f00)=""/245, 0xf5, 0x1000}, 0x5}, {{0x0, 0x0, &(0x7f0000007000), 0x0, 0x0, 0x0, 0x800}, 0x7}], 0x5, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes192\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="6f2dffe9b849348f1b7144ec85f4f93422056d0fce71b3bad2f05f000c000012dea078980ad7a64ba75adbc8a78c1d5053f24170ad41be7452957e5486b99231fd06e2c648d73ed7a48794", 0x4b)
r1 = accept$alg(r0, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000001280)=[{{&(0x7f0000000ec0)=@nl=@proc, 0x34e, &(0x7f0000001180)=[{&(0x7f0000001080)=""/251, 0xfb}], 0x11, &(0x7f00000011c0)=""/157, 0x9d}}], 0x1500, 0x0, &(0x7f0000001380)={0x77359400})

[  405.854956][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  405.860826][    C0] protocol 88fb is buggy, dev hsr_slave_1
09:20:54 executing program 2:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_SET_PHYS(r0, 0x4008556c, &(0x7f0000000000)='syz1\x00')
ioctl$UI_DEV_DESTROY(r0, 0x5502)

09:20:54 executing program 2:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_SET_PHYS(r0, 0x4008556c, &(0x7f0000000000)='syz1\x00')
ioctl$UI_DEV_DESTROY(r0, 0x5502)

09:20:54 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9a9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000180)=ANY=[])
quotactl(0x2080000201, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$fou(&(0x7f0000000600)='fou\x00')
sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x20000000)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.current\x00', 0x0, 0x0)
r1 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r1, &(0x7f0000022ff0)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r1, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f000000a000)='\f', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000580)={0x0, 0x3}, &(0x7f00000005c0)=0x8)
sendmsg(0xffffffffffffffff, &(0x7f000001afc8)={0x0, 0x0, &(0x7f0000007f80)}, 0x0)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$nl_crypto(0xffffffffffffffff, 0x0, 0x20000041)

09:20:54 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9a9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000180)=ANY=[])
quotactl(0x2080000201, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$fou(&(0x7f0000000600)='fou\x00')
sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x20000000)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.current\x00', 0x0, 0x0)
r1 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r1, &(0x7f0000022ff0)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r1, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f000000a000)='\f', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000580)={0x0, 0x3}, &(0x7f00000005c0)=0x8)
sendmsg(0xffffffffffffffff, &(0x7f000001afc8)={0x0, 0x0, &(0x7f0000007f80)}, 0x0)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$nl_crypto(0xffffffffffffffff, 0x0, 0x20000041)

09:20:54 executing program 4:
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000009340)=[{{0xffffffffffffffff, 0x0, &(0x7f0000003280)=[{&(0x7f0000002180)=""/113, 0x71}, {&(0x7f0000002200)=""/66, 0x42}, {&(0x7f0000002280)=""/4096, 0x1000}, {&(0x7f0000001e40)=""/64, 0x40}], 0x4, &(0x7f00000032c0)=""/224, 0xe0, 0x9}, 0xfffffffffffffffe}, {{&(0x7f00000034c0)=@sco, 0x80, &(0x7f0000003700)=[{&(0x7f0000003540)=""/187, 0xbb}, {&(0x7f0000003600)=""/253, 0xfd}], 0x2, &(0x7f0000003740)=""/165, 0xa5}, 0x5}, {{&(0x7f0000003980)=@ipx, 0x80, &(0x7f0000005bc0)=[{&(0x7f0000003a00)=""/181, 0xb5}, {&(0x7f0000003ac0)=""/4, 0x4}, {&(0x7f0000005b00)=""/119, 0x77}, {&(0x7f0000005b80)=""/23, 0x17}], 0x4, &(0x7f0000005c40)=""/4096, 0x1000}, 0x8}, {{&(0x7f0000006c40)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000006ec0)=[{&(0x7f0000006dc0)=""/66, 0x42}, {&(0x7f0000006e40)=""/103, 0x67}], 0x2, &(0x7f0000006f00)=""/245, 0xf5, 0x1000}, 0x5}, {{0x0, 0x0, &(0x7f0000007000), 0x0, 0x0, 0x0, 0x800}, 0x7}], 0x5, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes192\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="6f2dffe9b849348f1b7144ec85f4f93422056d0fce71b3bad2f05f000c000012dea078980ad7a64ba75adbc8a78c1d5053f24170ad41be7452957e5486b99231fd06e2c648d73ed7a48794", 0x4b)
r1 = accept$alg(r0, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000001280)=[{{&(0x7f0000000ec0)=@nl=@proc, 0x34e, &(0x7f0000001180)=[{&(0x7f0000001080)=""/251, 0xfb}], 0x11, &(0x7f00000011c0)=""/157, 0x9d}}], 0x1500, 0x0, &(0x7f0000001380)={0x77359400})

09:20:55 executing program 3:
r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r1=>0x0]}, &(0x7f000095dffc)=0x8)
r2 = socket(0xa, 0x1, 0x0)
close(r2)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000000)={r1}, &(0x7f0000000140)=0x8)
fstatfs(r0, &(0x7f00000001c0)=""/248)
sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{&(0x7f0000000180)=@in={0x2f}, 0x3bf, &(0x7f0000000140), 0x3bf, &(0x7f0000000080)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x4}}], 0x30}], 0x1, 0x0)

09:20:55 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="11074143", 0x4)
r1 = accept$alg(r0, 0x0, 0x0)
write$binfmt_script(r1, &(0x7f0000000300)=ANY=[], 0xffffffaa)
recvmmsg(r1, &(0x7f0000004740)=[{{0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000840)=""/82, 0x52}, {&(0x7f0000000940)=""/191, 0xbf}], 0x2}}], 0x1, 0x0, 0x0)

09:20:56 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="11074143", 0x4)
r1 = accept$alg(r0, 0x0, 0x0)
write$binfmt_script(r1, &(0x7f0000000300)=ANY=[], 0xffffffaa)
recvmmsg(r1, &(0x7f0000004740)=[{{0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000840)=""/82, 0x52}, {&(0x7f0000000940)=""/191, 0xbf}], 0x2}}], 0x1, 0x0, 0x0)

09:20:56 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9a9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000180)=ANY=[])
quotactl(0x2080000201, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$fou(&(0x7f0000000600)='fou\x00')
sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x20000000)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.current\x00', 0x0, 0x0)
r1 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r1, &(0x7f0000022ff0)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r1, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f000000a000)='\f', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000580)={0x0, 0x3}, &(0x7f00000005c0)=0x8)
sendmsg(0xffffffffffffffff, &(0x7f000001afc8)={0x0, 0x0, &(0x7f0000007f80)}, 0x0)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$nl_crypto(0xffffffffffffffff, 0x0, 0x20000041)

09:20:56 executing program 3:
r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r1=>0x0]}, &(0x7f000095dffc)=0x8)
r2 = socket(0xa, 0x1, 0x0)
close(r2)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000000)={r1}, &(0x7f0000000140)=0x8)
fstatfs(r0, &(0x7f00000001c0)=""/248)
sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{&(0x7f0000000180)=@in={0x2f}, 0x3bf, &(0x7f0000000140), 0x3bf, &(0x7f0000000080)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x4}}], 0x30}], 0x1, 0x0)

09:20:56 executing program 1:
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000009340)=[{{0xffffffffffffffff, 0x0, &(0x7f0000003280)=[{&(0x7f0000002180)=""/113, 0x71}, {&(0x7f0000002200)=""/66, 0x42}, {&(0x7f0000002280)=""/4096, 0x1000}, {&(0x7f0000001e40)=""/64, 0x40}], 0x4, &(0x7f00000032c0)=""/224, 0xe0, 0x9}, 0xfffffffffffffffe}, {{&(0x7f00000034c0)=@sco, 0x80, &(0x7f0000003700)=[{&(0x7f0000003540)=""/187, 0xbb}, {&(0x7f0000003600)=""/253, 0xfd}], 0x2, &(0x7f0000003740)=""/165, 0xa5}, 0x5}, {{&(0x7f0000003980)=@ipx, 0x80, &(0x7f0000005bc0)=[{&(0x7f0000003a00)=""/181, 0xb5}, {&(0x7f0000003ac0)=""/4, 0x4}, {&(0x7f0000005b00)=""/119, 0x77}, {&(0x7f0000005b80)=""/23, 0x17}], 0x4, &(0x7f0000005c40)=""/4096, 0x1000}, 0x8}, {{&(0x7f0000006c40)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000006ec0)=[{&(0x7f0000006dc0)=""/66, 0x42}, {&(0x7f0000006e40)=""/103, 0x67}], 0x2, &(0x7f0000006f00)=""/245, 0xf5, 0x1000}, 0x5}, {{0x0, 0x0, &(0x7f0000007000), 0x0, 0x0, 0x0, 0x800}, 0x7}], 0x5, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes192\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="6f2dffe9b849348f1b7144ec85f4f93422056d0fce71b3bad2f05f000c000012dea078980ad7a64ba75adbc8a78c1d5053f24170ad41be7452957e5486b99231fd06e2c648d73ed7a48794", 0x4b)
r1 = accept$alg(r0, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000001280)=[{{&(0x7f0000000ec0)=@nl=@proc, 0x34e, &(0x7f0000001180)=[{&(0x7f0000001080)=""/251, 0xfb}], 0x11, &(0x7f00000011c0)=""/157, 0x9d}}], 0x1500, 0x0, &(0x7f0000001380)={0x77359400})

09:20:56 executing program 4:
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000009340)=[{{0xffffffffffffffff, 0x0, &(0x7f0000003280)=[{&(0x7f0000002180)=""/113, 0x71}, {&(0x7f0000002200)=""/66, 0x42}, {&(0x7f0000002280)=""/4096, 0x1000}, {&(0x7f0000001e40)=""/64, 0x40}], 0x4, &(0x7f00000032c0)=""/224, 0xe0, 0x9}, 0xfffffffffffffffe}, {{&(0x7f00000034c0)=@sco, 0x80, &(0x7f0000003700)=[{&(0x7f0000003540)=""/187, 0xbb}, {&(0x7f0000003600)=""/253, 0xfd}], 0x2, &(0x7f0000003740)=""/165, 0xa5}, 0x5}, {{&(0x7f0000003980)=@ipx, 0x80, &(0x7f0000005bc0)=[{&(0x7f0000003a00)=""/181, 0xb5}, {&(0x7f0000003ac0)=""/4, 0x4}, {&(0x7f0000005b00)=""/119, 0x77}, {&(0x7f0000005b80)=""/23, 0x17}], 0x4, &(0x7f0000005c40)=""/4096, 0x1000}, 0x8}, {{&(0x7f0000006c40)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000006ec0)=[{&(0x7f0000006dc0)=""/66, 0x42}, {&(0x7f0000006e40)=""/103, 0x67}], 0x2, &(0x7f0000006f00)=""/245, 0xf5, 0x1000}, 0x5}, {{0x0, 0x0, &(0x7f0000007000), 0x0, 0x0, 0x0, 0x800}, 0x7}], 0x5, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes192\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="6f2dffe9b849348f1b7144ec85f4f93422056d0fce71b3bad2f05f000c000012dea078980ad7a64ba75adbc8a78c1d5053f24170ad41be7452957e5486b99231fd06e2c648d73ed7a48794", 0x4b)
r1 = accept$alg(r0, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000001280)=[{{&(0x7f0000000ec0)=@nl=@proc, 0x34e, &(0x7f0000001180)=[{&(0x7f0000001080)=""/251, 0xfb}], 0x11, &(0x7f00000011c0)=""/157, 0x9d}}], 0x1500, 0x0, &(0x7f0000001380)={0x77359400})

09:20:56 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f00000001c0)={0x7b, 0x600000000000000, [0x10], [0xc2]})

09:20:56 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9a9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000180)=ANY=[])
quotactl(0x2080000201, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$fou(&(0x7f0000000600)='fou\x00')
sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x20000000)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.current\x00', 0x0, 0x0)
r1 = socket$inet(0x2, 0x80001, 0x84)
bind$inet(r1, &(0x7f0000022ff0)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg(r1, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f000000a000)='\f', 0x1}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000580)={0x0, 0x3}, &(0x7f00000005c0)=0x8)
sendmsg(0xffffffffffffffff, &(0x7f000001afc8)={0x0, 0x0, &(0x7f0000007f80)}, 0x0)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$nl_crypto(0xffffffffffffffff, 0x0, 0x20000041)

09:20:56 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f00000001c0)={0x7b, 0x600000000000000, [0x10], [0xc2]})

09:20:56 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = socket$netlink(0x10, 0x3, 0xc)
writev(r1, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000180)={'lo\x00\x03\x00'})

[  408.802934][T15475] device lo entered promiscuous mode
09:20:57 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f00000001c0)={0x7b, 0x600000000000000, [0x10], [0xc2]})

[  408.828100][T15475] device lo left promiscuous mode
09:20:57 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="11074143", 0x4)
r1 = accept$alg(r0, 0x0, 0x0)
write$binfmt_script(r1, &(0x7f0000000300)=ANY=[], 0xffffffaa)
recvmmsg(r1, &(0x7f0000004740)=[{{0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000840)=""/82, 0x52}, {&(0x7f0000000940)=""/191, 0xbf}], 0x2}}], 0x1, 0x0, 0x0)

09:20:57 executing program 3:
r0 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r0, &(0x7f000001d000)={0x0, 0x0, &(0x7f0000024000)=[{&(0x7f0000000100)="24000000100007031dff22946fa2830020200a0009000300001d85687f0000000400ff7e280000000b0a43ba5d806055b6fdd80b40000000060001000029ec2400020cd37e99d69cda45a95e", 0x4c}], 0x1}, 0x0)

09:20:57 executing program 4:
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000009340)=[{{0xffffffffffffffff, 0x0, &(0x7f0000003280)=[{&(0x7f0000002180)=""/113, 0x71}, {&(0x7f0000002200)=""/66, 0x42}, {&(0x7f0000002280)=""/4096, 0x1000}, {&(0x7f0000001e40)=""/64, 0x40}], 0x4, &(0x7f00000032c0)=""/224, 0xe0, 0x9}, 0xfffffffffffffffe}, {{&(0x7f00000034c0)=@sco, 0x80, &(0x7f0000003700)=[{&(0x7f0000003540)=""/187, 0xbb}, {&(0x7f0000003600)=""/253, 0xfd}], 0x2, &(0x7f0000003740)=""/165, 0xa5}, 0x5}, {{&(0x7f0000003980)=@ipx, 0x80, &(0x7f0000005bc0)=[{&(0x7f0000003a00)=""/181, 0xb5}, {&(0x7f0000003ac0)=""/4, 0x4}, {&(0x7f0000005b00)=""/119, 0x77}, {&(0x7f0000005b80)=""/23, 0x17}], 0x4, &(0x7f0000005c40)=""/4096, 0x1000}, 0x8}, {{&(0x7f0000006c40)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000006ec0)=[{&(0x7f0000006dc0)=""/66, 0x42}, {&(0x7f0000006e40)=""/103, 0x67}], 0x2, &(0x7f0000006f00)=""/245, 0xf5, 0x1000}, 0x5}, {{0x0, 0x0, &(0x7f0000007000), 0x0, 0x0, 0x0, 0x800}, 0x7}], 0x5, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes192\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="6f2dffe9b849348f1b7144ec85f4f93422056d0fce71b3bad2f05f000c000012dea078980ad7a64ba75adbc8a78c1d5053f24170ad41be7452957e5486b99231fd06e2c648d73ed7a48794", 0x4b)
r1 = accept$alg(r0, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000001280)=[{{&(0x7f0000000ec0)=@nl=@proc, 0x34e, &(0x7f0000001180)=[{&(0x7f0000001080)=""/251, 0xfb}], 0x11, &(0x7f00000011c0)=""/157, 0x9d}}], 0x1500, 0x0, &(0x7f0000001380)={0x77359400})

[  409.049669][T15485] netlink: 12 bytes leftover after parsing attributes in process `syz-executor3'.
09:20:57 executing program 1:
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000009340)=[{{0xffffffffffffffff, 0x0, &(0x7f0000003280)=[{&(0x7f0000002180)=""/113, 0x71}, {&(0x7f0000002200)=""/66, 0x42}, {&(0x7f0000002280)=""/4096, 0x1000}, {&(0x7f0000001e40)=""/64, 0x40}], 0x4, &(0x7f00000032c0)=""/224, 0xe0, 0x9}, 0xfffffffffffffffe}, {{&(0x7f00000034c0)=@sco, 0x80, &(0x7f0000003700)=[{&(0x7f0000003540)=""/187, 0xbb}, {&(0x7f0000003600)=""/253, 0xfd}], 0x2, &(0x7f0000003740)=""/165, 0xa5}, 0x5}, {{&(0x7f0000003980)=@ipx, 0x80, &(0x7f0000005bc0)=[{&(0x7f0000003a00)=""/181, 0xb5}, {&(0x7f0000003ac0)=""/4, 0x4}, {&(0x7f0000005b00)=""/119, 0x77}, {&(0x7f0000005b80)=""/23, 0x17}], 0x4, &(0x7f0000005c40)=""/4096, 0x1000}, 0x8}, {{&(0x7f0000006c40)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000006ec0)=[{&(0x7f0000006dc0)=""/66, 0x42}, {&(0x7f0000006e40)=""/103, 0x67}], 0x2, &(0x7f0000006f00)=""/245, 0xf5, 0x1000}, 0x5}, {{0x0, 0x0, &(0x7f0000007000), 0x0, 0x0, 0x0, 0x800}, 0x7}], 0x5, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes192\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="6f2dffe9b849348f1b7144ec85f4f93422056d0fce71b3bad2f05f000c000012dea078980ad7a64ba75adbc8a78c1d5053f24170ad41be7452957e5486b99231fd06e2c648d73ed7a48794", 0x4b)
r1 = accept$alg(r0, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000001280)=[{{&(0x7f0000000ec0)=@nl=@proc, 0x34e, &(0x7f0000001180)=[{&(0x7f0000001080)=""/251, 0xfb}], 0x11, &(0x7f00000011c0)=""/157, 0x9d}}], 0x1500, 0x0, &(0x7f0000001380)={0x77359400})

09:20:57 executing program 3:
r0 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r0, &(0x7f000001d000)={0x0, 0x0, &(0x7f0000024000)=[{&(0x7f0000000100)="24000000100007031dff22946fa2830020200a0009000300001d85687f0000000400ff7e280000000b0a43ba5d806055b6fdd80b40000000060001000029ec2400020cd37e99d69cda45a95e", 0x4c}], 0x1}, 0x0)

[  409.372879][T15496] netlink: 12 bytes leftover after parsing attributes in process `syz-executor3'.
09:20:57 executing program 3:
r0 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r0, &(0x7f000001d000)={0x0, 0x0, &(0x7f0000024000)=[{&(0x7f0000000100)="24000000100007031dff22946fa2830020200a0009000300001d85687f0000000400ff7e280000000b0a43ba5d806055b6fdd80b40000000060001000029ec2400020cd37e99d69cda45a95e", 0x4c}], 0x1}, 0x0)

[  409.682979][T15502] netlink: 12 bytes leftover after parsing attributes in process `syz-executor3'.
09:20:58 executing program 3:
r0 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r0, &(0x7f000001d000)={0x0, 0x0, &(0x7f0000024000)=[{&(0x7f0000000100)="24000000100007031dff22946fa2830020200a0009000300001d85687f0000000400ff7e280000000b0a43ba5d806055b6fdd80b40000000060001000029ec2400020cd37e99d69cda45a95e", 0x4c}], 0x1}, 0x0)

09:20:58 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0x3, &(0x7f00000000c0)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2a, 0x27}}, &(0x7f00000002c0)='syzkaller\x00', 0x9, 0x4ae, &(0x7f0000000340)=""/207}, 0x29)

09:20:58 executing program 4:
socket$inet_udplite(0x2, 0x2, 0x88)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet(0x2, 0x4000000000000001, 0x0)
clone(0x2000013102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
socket(0x0, 0x8000000000000803, 0x0)
tkill(r0, 0x1b)
ptrace$cont(0x18, r0, 0x0, 0x0)
openat$dsp(0xffffffffffffff9c, 0x0, 0x2a8003, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3e})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x1f, r0, 0x0, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x1d9)
r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x2000, 0x0)
ioctl$VIDIOC_S_STD(r1, 0x40085618, &(0x7f00000000c0))
ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x2288, 0x712000)

[  409.969331][T15509] netlink: 12 bytes leftover after parsing attributes in process `syz-executor3'.
[  410.014694][    C0] net_ratelimit: 22 callbacks suppressed
[  410.014703][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  410.026228][    C0] protocol 88fb is buggy, dev hsr_slave_1
09:20:58 executing program 4:
socket$inet_udplite(0x2, 0x2, 0x88)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet(0x2, 0x4000000000000001, 0x0)
clone(0x2000013102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
socket(0x0, 0x8000000000000803, 0x0)
tkill(r0, 0x1b)
ptrace$cont(0x18, r0, 0x0, 0x0)
openat$dsp(0xffffffffffffff9c, 0x0, 0x2a8003, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3e})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x1f, r0, 0x0, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x1d9)
r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x2000, 0x0)
ioctl$VIDIOC_S_STD(r1, 0x40085618, &(0x7f00000000c0))
ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x2288, 0x712000)

[  410.122485][T15499] device lo entered promiscuous mode
[  410.150029][T15500] device lo left promiscuous mode
[  410.174711][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  410.174738][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  410.180514][    C1] protocol 88fb is buggy, dev hsr_slave_1
[  410.186248][    C0] protocol 88fb is buggy, dev hsr_slave_1
09:20:58 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = socket$netlink(0x10, 0x3, 0xc)
writev(r1, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000180)={'lo\x00\x03\x00'})

09:20:58 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0x3, &(0x7f00000000c0)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2a, 0x27}}, &(0x7f00000002c0)='syzkaller\x00', 0x9, 0x4ae, &(0x7f0000000340)=""/207}, 0x29)

09:20:58 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f00000001c0)={0x7b, 0x600000000000000, [0x10], [0xc2]})

09:20:58 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xc006}]]}}}]}, 0x3c}}, 0x0)

09:20:58 executing program 1:
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000009340)=[{{0xffffffffffffffff, 0x0, &(0x7f0000003280)=[{&(0x7f0000002180)=""/113, 0x71}, {&(0x7f0000002200)=""/66, 0x42}, {&(0x7f0000002280)=""/4096, 0x1000}, {&(0x7f0000001e40)=""/64, 0x40}], 0x4, &(0x7f00000032c0)=""/224, 0xe0, 0x9}, 0xfffffffffffffffe}, {{&(0x7f00000034c0)=@sco, 0x80, &(0x7f0000003700)=[{&(0x7f0000003540)=""/187, 0xbb}, {&(0x7f0000003600)=""/253, 0xfd}], 0x2, &(0x7f0000003740)=""/165, 0xa5}, 0x5}, {{&(0x7f0000003980)=@ipx, 0x80, &(0x7f0000005bc0)=[{&(0x7f0000003a00)=""/181, 0xb5}, {&(0x7f0000003ac0)=""/4, 0x4}, {&(0x7f0000005b00)=""/119, 0x77}, {&(0x7f0000005b80)=""/23, 0x17}], 0x4, &(0x7f0000005c40)=""/4096, 0x1000}, 0x8}, {{&(0x7f0000006c40)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000006ec0)=[{&(0x7f0000006dc0)=""/66, 0x42}, {&(0x7f0000006e40)=""/103, 0x67}], 0x2, &(0x7f0000006f00)=""/245, 0xf5, 0x1000}, 0x5}, {{0x0, 0x0, &(0x7f0000007000), 0x0, 0x0, 0x0, 0x800}, 0x7}], 0x5, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes192\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="6f2dffe9b849348f1b7144ec85f4f93422056d0fce71b3bad2f05f000c000012dea078980ad7a64ba75adbc8a78c1d5053f24170ad41be7452957e5486b99231fd06e2c648d73ed7a48794", 0x4b)
r1 = accept$alg(r0, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000001280)=[{{&(0x7f0000000ec0)=@nl=@proc, 0x34e, &(0x7f0000001180)=[{&(0x7f0000001080)=""/251, 0xfb}], 0x11, &(0x7f00000011c0)=""/157, 0x9d}}], 0x1500, 0x0, &(0x7f0000001380)={0x77359400})

[  410.596534][T15529] netlink: 'syz-executor3': attribute type 6 has an invalid length.
09:20:58 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0x3, &(0x7f00000000c0)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2a, 0x27}}, &(0x7f00000002c0)='syzkaller\x00', 0x9, 0x4ae, &(0x7f0000000340)=""/207}, 0x29)

[  410.711606][T15536] device lo entered promiscuous mode
[  410.735539][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  410.741726][    C1] protocol 88fb is buggy, dev hsr_slave_1
[  410.748369][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  410.754656][    C1] protocol 88fb is buggy, dev hsr_slave_1
09:20:58 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xc006}]]}}}]}, 0x3c}}, 0x0)

09:20:59 executing program 5:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002480)={0x1, 0x8000000000000038, 0x7, 0x2}, 0x28)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f0000ab2000), &(0x7f0000da1000)}, 0x20)
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f00004f1ff0)={r0, &(0x7f0000068000)}, 0x10)

[  410.811112][T15536] device lo left promiscuous mode
09:20:59 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0x3, &(0x7f00000000c0)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2a, 0x27}}, &(0x7f00000002c0)='syzkaller\x00', 0x9, 0x4ae, &(0x7f0000000340)=""/207}, 0x29)

09:20:59 executing program 5:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002480)={0x1, 0x8000000000000038, 0x7, 0x2}, 0x28)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f0000ab2000), &(0x7f0000da1000)}, 0x20)
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f00004f1ff0)={r0, &(0x7f0000068000)}, 0x10)

09:20:59 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000340)={0x20000000007b, 0x0, [0x200000490]})

[  411.615250][T15544] netlink: 'syz-executor3': attribute type 6 has an invalid length.
09:21:01 executing program 1:
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
lsetxattr$trusted_overlay_opaque(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.opaque\x00', 0x0, 0x2, 0x0)

09:21:01 executing program 4:
socket$inet_udplite(0x2, 0x2, 0x88)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet(0x2, 0x4000000000000001, 0x0)
clone(0x2000013102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
socket(0x0, 0x8000000000000803, 0x0)
tkill(r0, 0x1b)
ptrace$cont(0x18, r0, 0x0, 0x0)
openat$dsp(0xffffffffffffff9c, 0x0, 0x2a8003, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3e})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x1f, r0, 0x0, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x1d9)
r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x2000, 0x0)
ioctl$VIDIOC_S_STD(r1, 0x40085618, &(0x7f00000000c0))
ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x2288, 0x712000)

09:21:01 executing program 5:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002480)={0x1, 0x8000000000000038, 0x7, 0x2}, 0x28)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f0000ab2000), &(0x7f0000da1000)}, 0x20)
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f00004f1ff0)={r0, &(0x7f0000068000)}, 0x10)

09:21:01 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000340)={0x20000000007b, 0x0, [0x200000490]})

09:21:01 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xc006}]]}}}]}, 0x3c}}, 0x0)

09:21:01 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = socket$netlink(0x10, 0x3, 0xc)
writev(r1, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000180)={'lo\x00\x03\x00'})

[  413.239290][T15571] netlink: 'syz-executor3': attribute type 6 has an invalid length.
[  413.278808][T15573] device lo entered promiscuous mode
09:21:01 executing program 1:
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
lsetxattr$trusted_overlay_opaque(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.opaque\x00', 0x0, 0x2, 0x0)

09:21:01 executing program 5:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002480)={0x1, 0x8000000000000038, 0x7, 0x2}, 0x28)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f0000ab2000), &(0x7f0000da1000)}, 0x20)
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f00004f1ff0)={r0, &(0x7f0000068000)}, 0x10)

[  413.317361][T15573] device lo left promiscuous mode
09:21:01 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xc006}]]}}}]}, 0x3c}}, 0x0)

09:21:01 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000340)={0x20000000007b, 0x0, [0x200000490]})

09:21:01 executing program 5:
r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
mremap(&(0x7f0000008000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000005000/0x1000)=nil)
fallocate(r1, 0x0, 0x0, 0x5c0d)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r0, r1, 0x0, 0x8000)
madvise(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x9)

09:21:01 executing program 1:
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
lsetxattr$trusted_overlay_opaque(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.opaque\x00', 0x0, 0x2, 0x0)

09:21:01 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000340)={0x20000000007b, 0x0, [0x200000490]})

[  414.046974][T15585] netlink: 'syz-executor3': attribute type 6 has an invalid length.
[  415.614780][    C0] net_ratelimit: 24 callbacks suppressed
[  415.614787][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  415.626314][    C0] protocol 88fb is buggy, dev hsr_slave_1
09:21:04 executing program 4:
socket$inet_udplite(0x2, 0x2, 0x88)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet(0x2, 0x4000000000000001, 0x0)
clone(0x2000013102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
socket(0x0, 0x8000000000000803, 0x0)
tkill(r0, 0x1b)
ptrace$cont(0x18, r0, 0x0, 0x0)
openat$dsp(0xffffffffffffff9c, 0x0, 0x2a8003, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3e})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x1f, r0, 0x0, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x1d9)
r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x2000, 0x0)
ioctl$VIDIOC_S_STD(r1, 0x40085618, &(0x7f00000000c0))
ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x2288, 0x712000)

09:21:04 executing program 1:
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
lsetxattr$trusted_overlay_opaque(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.opaque\x00', 0x0, 0x2, 0x0)

09:21:04 executing program 0:
r0 = semget(0xffffffffffffffff, 0x0, 0x0)
semctl$IPC_INFO(r0, 0x4000000100003, 0x3, &(0x7f0000000080)=""/205)
mkdir(&(0x7f0000000040)='./file1\x00', 0x0)
mknodat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x8024, 0x6)
renameat2(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000380)='./file1\x00', 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600), 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
connect$inet6(r1, &(0x7f0000000540)={0xa, 0x0, 0x2000000000000, @ipv4={[], [], @loopback}, 0x2}, 0xffbb)
r2 = socket$l2tp(0x18, 0x1, 0x1)
connect$l2tp(r2, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x26)
r3 = open(&(0x7f0000000500)='./file0\x00', 0x410240, 0x166)
r4 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x84, @remote, 0x0, 0x2000000000, 'wrr\x00', 0x20, 0xfffffffffffff0b5, 0x67}, 0x2c)
ioctl$PERF_EVENT_IOC_RESET(r4, 0x2403, 0x2)
setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(0xffffffffffffffff, 0x28, 0x2, &(0x7f0000000380)=0x80000000010001, 0xfffffffffffffd9e)
r6 = fcntl$dupfd(r4, 0x406, r4)
setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r6, 0x84, 0x12, &(0x7f0000000300)=0x8, 0x4)
linkat(r3, &(0x7f00000003c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000440)='./file1\x00', 0x400)
setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000080)={0x0, 'veth0_to_bridge\x00'}, 0x9)
sendfile(r4, r4, &(0x7f00000000c0), 0x6)
pselect6(0x40, &(0x7f0000000100)={0x3f, 0xfffffffffffffffc, 0x5, 0x200, 0x401, 0x2, 0x607153fe, 0x100000001}, &(0x7f0000000140)={0x5, 0x1, 0xc53, 0x401, 0x9, 0x2, 0xd75c, 0x100}, &(0x7f0000000180)={0x2197, 0xbc, 0x40, 0x400, 0x3, 0x7}, &(0x7f00000001c0)={0x0, 0x1c9c380}, &(0x7f00000002c0)={&(0x7f0000000280)={0x2}, 0x8})
ioctl(r5, 0x800000000008982, &(0x7f0000000080))
signalfd4(r6, &(0x7f0000000480)={0x4}, 0x132, 0x80000)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000740)='/dev/ppp\x00', 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x8000, 0x0)
ioctl$EVIOCGABS2F(r6, 0x8018456f, &(0x7f0000000680)=""/179)
r7 = socket(0x80000000000018, 0x1, 0x1)
ioctl(r7, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f")
openat$urandom(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/urandom\x00', 0x40000, 0x0)

09:21:04 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = socket$netlink(0x10, 0x3, 0xc)
writev(r1, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00', 0x101})
ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000180)={'lo\x00\x03\x00'})

09:21:04 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1200008912, &(0x7f0000000140)="0bdc39023c323f3188a070")
sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="2f0000001c0005c5ff1f0b000000ec0007c913000100f0ffff0000006f263f44000000000000000000000000000000", 0x2f}], 0x1}, 0x0)
r1 = socket(0x10, 0x80002, 0x0)
sendmmsg$alg(r1, &(0x7f0000000140)=[{0x6000000000000000, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0)

09:21:04 executing program 5:
r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
mremap(&(0x7f0000008000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000005000/0x1000)=nil)
fallocate(r1, 0x0, 0x0, 0x5c0d)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r0, r1, 0x0, 0x8000)
madvise(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x9)

[  416.254736][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  416.260542][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  416.345220][T15611] netlink: 19 bytes leftover after parsing attributes in process `syz-executor3'.
[  416.391680][T15615] device lo entered promiscuous mode
09:21:04 executing program 1:
r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
mremap(&(0x7f0000008000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000005000/0x1000)=nil)
fallocate(r1, 0x0, 0x0, 0x5c0d)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r0, r1, 0x0, 0x8000)
madvise(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x9)

[  416.415161][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  416.415229][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  416.420944][    C1] protocol 88fb is buggy, dev hsr_slave_1
[  416.432873][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  416.442039][T15623] device lo left promiscuous mode
09:21:04 executing program 5:
r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
mremap(&(0x7f0000008000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000005000/0x1000)=nil)
fallocate(r1, 0x0, 0x0, 0x5c0d)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r0, r1, 0x0, 0x8000)
madvise(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x9)

09:21:04 executing program 1:
r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
mremap(&(0x7f0000008000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000005000/0x1000)=nil)
fallocate(r1, 0x0, 0x0, 0x5c0d)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r0, r1, 0x0, 0x8000)
madvise(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x9)

09:21:05 executing program 5:
r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
mremap(&(0x7f0000008000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000005000/0x1000)=nil)
fallocate(r1, 0x0, 0x0, 0x5c0d)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r0, r1, 0x0, 0x8000)
madvise(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x9)

09:21:05 executing program 1:
r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
mremap(&(0x7f0000008000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000005000/0x1000)=nil)
fallocate(r1, 0x0, 0x0, 0x5c0d)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r0, r1, 0x0, 0x8000)
madvise(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x9)

[  416.984697][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  416.990603][    C1] protocol 88fb is buggy, dev hsr_slave_1
09:21:05 executing program 5:
perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xa, 0x8000000000000002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sloppy_tcp\x00', 0x2, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f0000000200)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getpid()
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600)=[{0x0}], 0x1}, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000000))
perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$kcm(0xa, 0x2, 0x11)
close(0xffffffffffffffff)

[  417.296195][T15636] netlink: 19 bytes leftover after parsing attributes in process `syz-executor3'.
09:21:07 executing program 2:
pipe(&(0x7f0000000500)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0)
openat$nullb(0xffffffffffffff9c, &(0x7f0000002ac0)='/dev/nullb0\x00', 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
splice(r0, 0x0, r2, 0x0, 0x810005, 0x0)

09:21:07 executing program 1:
r0 = syz_open_dev$sndtimer(&(0x7f0000000fc0)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x1}})
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)
dup3(r2, r0, 0x0)

09:21:07 executing program 0:
r0 = semget(0xffffffffffffffff, 0x0, 0x0)
semctl$IPC_INFO(r0, 0x4000000100003, 0x3, &(0x7f0000000080)=""/205)
mkdir(&(0x7f0000000040)='./file1\x00', 0x0)
mknodat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x8024, 0x6)
renameat2(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000380)='./file1\x00', 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600), 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
connect$inet6(r1, &(0x7f0000000540)={0xa, 0x0, 0x2000000000000, @ipv4={[], [], @loopback}, 0x2}, 0xffbb)
r2 = socket$l2tp(0x18, 0x1, 0x1)
connect$l2tp(r2, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x26)
r3 = open(&(0x7f0000000500)='./file0\x00', 0x410240, 0x166)
r4 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x84, @remote, 0x0, 0x2000000000, 'wrr\x00', 0x20, 0xfffffffffffff0b5, 0x67}, 0x2c)
ioctl$PERF_EVENT_IOC_RESET(r4, 0x2403, 0x2)
setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(0xffffffffffffffff, 0x28, 0x2, &(0x7f0000000380)=0x80000000010001, 0xfffffffffffffd9e)
r6 = fcntl$dupfd(r4, 0x406, r4)
setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r6, 0x84, 0x12, &(0x7f0000000300)=0x8, 0x4)
linkat(r3, &(0x7f00000003c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000440)='./file1\x00', 0x400)
setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000080)={0x0, 'veth0_to_bridge\x00'}, 0x9)
sendfile(r4, r4, &(0x7f00000000c0), 0x6)
pselect6(0x40, &(0x7f0000000100)={0x3f, 0xfffffffffffffffc, 0x5, 0x200, 0x401, 0x2, 0x607153fe, 0x100000001}, &(0x7f0000000140)={0x5, 0x1, 0xc53, 0x401, 0x9, 0x2, 0xd75c, 0x100}, &(0x7f0000000180)={0x2197, 0xbc, 0x40, 0x400, 0x3, 0x7}, &(0x7f00000001c0)={0x0, 0x1c9c380}, &(0x7f00000002c0)={&(0x7f0000000280)={0x2}, 0x8})
ioctl(r5, 0x800000000008982, &(0x7f0000000080))
signalfd4(r6, &(0x7f0000000480)={0x4}, 0x132, 0x80000)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000740)='/dev/ppp\x00', 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x8000, 0x0)
ioctl$EVIOCGABS2F(r6, 0x8018456f, &(0x7f0000000680)=""/179)
r7 = socket(0x80000000000018, 0x1, 0x1)
ioctl(r7, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f")
openat$urandom(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/urandom\x00', 0x40000, 0x0)

09:21:07 executing program 3:
r0 = semget(0xffffffffffffffff, 0x0, 0x0)
semctl$IPC_INFO(r0, 0x4000000100003, 0x3, &(0x7f0000000080)=""/205)
mkdir(&(0x7f0000000040)='./file1\x00', 0x0)
mknodat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x8024, 0x6)
renameat2(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000380)='./file1\x00', 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600), 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
connect$inet6(r1, &(0x7f0000000540)={0xa, 0x0, 0x2000000000000, @ipv4={[], [], @loopback}, 0x2}, 0xffbb)
r2 = socket$l2tp(0x18, 0x1, 0x1)
connect$l2tp(r2, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x26)
r3 = open(&(0x7f0000000500)='./file0\x00', 0x410240, 0x166)
r4 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x84, @remote, 0x0, 0x2000000000, 'wrr\x00', 0x20, 0xfffffffffffff0b5, 0x67}, 0x2c)
ioctl$PERF_EVENT_IOC_RESET(r4, 0x2403, 0x2)
setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(0xffffffffffffffff, 0x28, 0x2, &(0x7f0000000380)=0x80000000010001, 0xfffffffffffffd9e)
r6 = fcntl$dupfd(r4, 0x406, r4)
setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r6, 0x84, 0x12, &(0x7f0000000300)=0x8, 0x4)
linkat(r3, &(0x7f00000003c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000440)='./file1\x00', 0x400)
setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000080)={0x0, 'veth0_to_bridge\x00'}, 0x9)
sendfile(r4, r4, &(0x7f00000000c0), 0x6)
pselect6(0x40, &(0x7f0000000100)={0x3f, 0xfffffffffffffffc, 0x5, 0x200, 0x401, 0x2, 0x607153fe, 0x100000001}, &(0x7f0000000140)={0x5, 0x1, 0xc53, 0x401, 0x9, 0x2, 0xd75c, 0x100}, &(0x7f0000000180)={0x2197, 0xbc, 0x40, 0x400, 0x3, 0x7}, &(0x7f00000001c0)={0x0, 0x1c9c380}, &(0x7f00000002c0)={&(0x7f0000000280)={0x2}, 0x8})
ioctl(r5, 0x800000000008982, &(0x7f0000000080))
signalfd4(r6, &(0x7f0000000480)={0x4}, 0x132, 0x80000)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000740)='/dev/ppp\x00', 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x8000, 0x0)
ioctl$EVIOCGABS2F(r6, 0x8018456f, &(0x7f0000000680)=""/179)
r7 = socket(0x80000000000018, 0x1, 0x1)
ioctl(r7, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f")
openat$urandom(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/urandom\x00', 0x40000, 0x0)

09:21:07 executing program 5:
perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xa, 0x8000000000000002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sloppy_tcp\x00', 0x2, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f0000000200)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getpid()
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600)=[{0x0}], 0x1}, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000000))
perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$kcm(0xa, 0x2, 0x11)
close(0xffffffffffffffff)

09:21:07 executing program 4:
mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x2000004, 0x31, 0xffffffffffffffff, 0x0)
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
listen(r0, 0x0)
shutdown(r0, 0x2)
setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x3, &(0x7f0000000600), 0x4)

09:21:07 executing program 1:
r0 = syz_open_dev$sndtimer(&(0x7f0000000fc0)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x1}})
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)
dup3(r2, r0, 0x0)

09:21:07 executing program 4:
mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x2000004, 0x31, 0xffffffffffffffff, 0x0)
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
listen(r0, 0x0)
shutdown(r0, 0x2)
setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x3, &(0x7f0000000600), 0x4)

09:21:07 executing program 3:
r0 = semget(0xffffffffffffffff, 0x0, 0x0)
semctl$IPC_INFO(r0, 0x4000000100003, 0x3, &(0x7f0000000080)=""/205)
mkdir(&(0x7f0000000040)='./file1\x00', 0x0)
mknodat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x8024, 0x6)
renameat2(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000380)='./file1\x00', 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600), 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
connect$inet6(r1, &(0x7f0000000540)={0xa, 0x0, 0x2000000000000, @ipv4={[], [], @loopback}, 0x2}, 0xffbb)
r2 = socket$l2tp(0x18, 0x1, 0x1)
connect$l2tp(r2, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x26)
r3 = open(&(0x7f0000000500)='./file0\x00', 0x410240, 0x166)
r4 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x84, @remote, 0x0, 0x2000000000, 'wrr\x00', 0x20, 0xfffffffffffff0b5, 0x67}, 0x2c)
ioctl$PERF_EVENT_IOC_RESET(r4, 0x2403, 0x2)
setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(0xffffffffffffffff, 0x28, 0x2, &(0x7f0000000380)=0x80000000010001, 0xfffffffffffffd9e)
r6 = fcntl$dupfd(r4, 0x406, r4)
setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r6, 0x84, 0x12, &(0x7f0000000300)=0x8, 0x4)
linkat(r3, &(0x7f00000003c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000440)='./file1\x00', 0x400)
setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000080)={0x0, 'veth0_to_bridge\x00'}, 0x9)
sendfile(r4, r4, &(0x7f00000000c0), 0x6)
pselect6(0x40, &(0x7f0000000100)={0x3f, 0xfffffffffffffffc, 0x5, 0x200, 0x401, 0x2, 0x607153fe, 0x100000001}, &(0x7f0000000140)={0x5, 0x1, 0xc53, 0x401, 0x9, 0x2, 0xd75c, 0x100}, &(0x7f0000000180)={0x2197, 0xbc, 0x40, 0x400, 0x3, 0x7}, &(0x7f00000001c0)={0x0, 0x1c9c380}, &(0x7f00000002c0)={&(0x7f0000000280)={0x2}, 0x8})
ioctl(r5, 0x800000000008982, &(0x7f0000000080))
signalfd4(r6, &(0x7f0000000480)={0x4}, 0x132, 0x80000)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000740)='/dev/ppp\x00', 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x8000, 0x0)
ioctl$EVIOCGABS2F(r6, 0x8018456f, &(0x7f0000000680)=""/179)
r7 = socket(0x80000000000018, 0x1, 0x1)
ioctl(r7, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f")
openat$urandom(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/urandom\x00', 0x40000, 0x0)

09:21:07 executing program 0:
r0 = semget(0xffffffffffffffff, 0x0, 0x0)
semctl$IPC_INFO(r0, 0x4000000100003, 0x3, &(0x7f0000000080)=""/205)
mkdir(&(0x7f0000000040)='./file1\x00', 0x0)
mknodat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x8024, 0x6)
renameat2(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000380)='./file1\x00', 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600), 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
connect$inet6(r1, &(0x7f0000000540)={0xa, 0x0, 0x2000000000000, @ipv4={[], [], @loopback}, 0x2}, 0xffbb)
r2 = socket$l2tp(0x18, 0x1, 0x1)
connect$l2tp(r2, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x26)
r3 = open(&(0x7f0000000500)='./file0\x00', 0x410240, 0x166)
r4 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x84, @remote, 0x0, 0x2000000000, 'wrr\x00', 0x20, 0xfffffffffffff0b5, 0x67}, 0x2c)
ioctl$PERF_EVENT_IOC_RESET(r4, 0x2403, 0x2)
setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(0xffffffffffffffff, 0x28, 0x2, &(0x7f0000000380)=0x80000000010001, 0xfffffffffffffd9e)
r6 = fcntl$dupfd(r4, 0x406, r4)
setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r6, 0x84, 0x12, &(0x7f0000000300)=0x8, 0x4)
linkat(r3, &(0x7f00000003c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000440)='./file1\x00', 0x400)
setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000080)={0x0, 'veth0_to_bridge\x00'}, 0x9)
sendfile(r4, r4, &(0x7f00000000c0), 0x6)
pselect6(0x40, &(0x7f0000000100)={0x3f, 0xfffffffffffffffc, 0x5, 0x200, 0x401, 0x2, 0x607153fe, 0x100000001}, &(0x7f0000000140)={0x5, 0x1, 0xc53, 0x401, 0x9, 0x2, 0xd75c, 0x100}, &(0x7f0000000180)={0x2197, 0xbc, 0x40, 0x400, 0x3, 0x7}, &(0x7f00000001c0)={0x0, 0x1c9c380}, &(0x7f00000002c0)={&(0x7f0000000280)={0x2}, 0x8})
ioctl(r5, 0x800000000008982, &(0x7f0000000080))
signalfd4(r6, &(0x7f0000000480)={0x4}, 0x132, 0x80000)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000740)='/dev/ppp\x00', 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x8000, 0x0)
ioctl$EVIOCGABS2F(r6, 0x8018456f, &(0x7f0000000680)=""/179)
r7 = socket(0x80000000000018, 0x1, 0x1)
ioctl(r7, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f")
openat$urandom(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/urandom\x00', 0x40000, 0x0)

09:21:07 executing program 1:
r0 = syz_open_dev$sndtimer(&(0x7f0000000fc0)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x1}})
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)
dup3(r2, r0, 0x0)

09:21:08 executing program 4:
mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x2000004, 0x31, 0xffffffffffffffff, 0x0)
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
listen(r0, 0x0)
shutdown(r0, 0x2)
setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x3, &(0x7f0000000600), 0x4)

09:21:08 executing program 4:
mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x2000004, 0x31, 0xffffffffffffffff, 0x0)
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
listen(r0, 0x0)
shutdown(r0, 0x2)
setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x3, &(0x7f0000000600), 0x4)

09:21:08 executing program 1:
r0 = syz_open_dev$sndtimer(&(0x7f0000000fc0)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x1}})
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)
dup3(r2, r0, 0x0)

09:21:08 executing program 5:
perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xa, 0x8000000000000002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sloppy_tcp\x00', 0x2, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f0000000200)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getpid()
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600)=[{0x0}], 0x1}, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000000))
perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$kcm(0xa, 0x2, 0x11)
close(0xffffffffffffffff)

09:21:08 executing program 2:
r0 = syz_open_dev$sndtimer(&(0x7f0000000fc0)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x1}})
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)
dup3(r2, r0, 0x0)

09:21:08 executing program 3:
r0 = semget(0xffffffffffffffff, 0x0, 0x0)
semctl$IPC_INFO(r0, 0x4000000100003, 0x3, &(0x7f0000000080)=""/205)
mkdir(&(0x7f0000000040)='./file1\x00', 0x0)
mknodat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x8024, 0x6)
renameat2(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000380)='./file1\x00', 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600), 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
connect$inet6(r1, &(0x7f0000000540)={0xa, 0x0, 0x2000000000000, @ipv4={[], [], @loopback}, 0x2}, 0xffbb)
r2 = socket$l2tp(0x18, 0x1, 0x1)
connect$l2tp(r2, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x26)
r3 = open(&(0x7f0000000500)='./file0\x00', 0x410240, 0x166)
r4 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x84, @remote, 0x0, 0x2000000000, 'wrr\x00', 0x20, 0xfffffffffffff0b5, 0x67}, 0x2c)
ioctl$PERF_EVENT_IOC_RESET(r4, 0x2403, 0x2)
setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(0xffffffffffffffff, 0x28, 0x2, &(0x7f0000000380)=0x80000000010001, 0xfffffffffffffd9e)
r6 = fcntl$dupfd(r4, 0x406, r4)
setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r6, 0x84, 0x12, &(0x7f0000000300)=0x8, 0x4)
linkat(r3, &(0x7f00000003c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000440)='./file1\x00', 0x400)
setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000080)={0x0, 'veth0_to_bridge\x00'}, 0x9)
sendfile(r4, r4, &(0x7f00000000c0), 0x6)
pselect6(0x40, &(0x7f0000000100)={0x3f, 0xfffffffffffffffc, 0x5, 0x200, 0x401, 0x2, 0x607153fe, 0x100000001}, &(0x7f0000000140)={0x5, 0x1, 0xc53, 0x401, 0x9, 0x2, 0xd75c, 0x100}, &(0x7f0000000180)={0x2197, 0xbc, 0x40, 0x400, 0x3, 0x7}, &(0x7f00000001c0)={0x0, 0x1c9c380}, &(0x7f00000002c0)={&(0x7f0000000280)={0x2}, 0x8})
ioctl(r5, 0x800000000008982, &(0x7f0000000080))
signalfd4(r6, &(0x7f0000000480)={0x4}, 0x132, 0x80000)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000740)='/dev/ppp\x00', 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x8000, 0x0)
ioctl$EVIOCGABS2F(r6, 0x8018456f, &(0x7f0000000680)=""/179)
r7 = socket(0x80000000000018, 0x1, 0x1)
ioctl(r7, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f")
openat$urandom(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/urandom\x00', 0x40000, 0x0)

09:21:08 executing program 0:
r0 = semget(0xffffffffffffffff, 0x0, 0x0)
semctl$IPC_INFO(r0, 0x4000000100003, 0x3, &(0x7f0000000080)=""/205)
mkdir(&(0x7f0000000040)='./file1\x00', 0x0)
mknodat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x8024, 0x6)
renameat2(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000380)='./file1\x00', 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600), 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
connect$inet6(r1, &(0x7f0000000540)={0xa, 0x0, 0x2000000000000, @ipv4={[], [], @loopback}, 0x2}, 0xffbb)
r2 = socket$l2tp(0x18, 0x1, 0x1)
connect$l2tp(r2, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x26)
r3 = open(&(0x7f0000000500)='./file0\x00', 0x410240, 0x166)
r4 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x84, @remote, 0x0, 0x2000000000, 'wrr\x00', 0x20, 0xfffffffffffff0b5, 0x67}, 0x2c)
ioctl$PERF_EVENT_IOC_RESET(r4, 0x2403, 0x2)
setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(0xffffffffffffffff, 0x28, 0x2, &(0x7f0000000380)=0x80000000010001, 0xfffffffffffffd9e)
r6 = fcntl$dupfd(r4, 0x406, r4)
setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r6, 0x84, 0x12, &(0x7f0000000300)=0x8, 0x4)
linkat(r3, &(0x7f00000003c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000440)='./file1\x00', 0x400)
setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000080)={0x0, 'veth0_to_bridge\x00'}, 0x9)
sendfile(r4, r4, &(0x7f00000000c0), 0x6)
pselect6(0x40, &(0x7f0000000100)={0x3f, 0xfffffffffffffffc, 0x5, 0x200, 0x401, 0x2, 0x607153fe, 0x100000001}, &(0x7f0000000140)={0x5, 0x1, 0xc53, 0x401, 0x9, 0x2, 0xd75c, 0x100}, &(0x7f0000000180)={0x2197, 0xbc, 0x40, 0x400, 0x3, 0x7}, &(0x7f00000001c0)={0x0, 0x1c9c380}, &(0x7f00000002c0)={&(0x7f0000000280)={0x2}, 0x8})
ioctl(r5, 0x800000000008982, &(0x7f0000000080))
signalfd4(r6, &(0x7f0000000480)={0x4}, 0x132, 0x80000)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000740)='/dev/ppp\x00', 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x8000, 0x0)
ioctl$EVIOCGABS2F(r6, 0x8018456f, &(0x7f0000000680)=""/179)
r7 = socket(0x80000000000018, 0x1, 0x1)
ioctl(r7, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f")
openat$urandom(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/urandom\x00', 0x40000, 0x0)

09:21:08 executing program 4:
r0 = syz_open_dev$sndtimer(&(0x7f0000000fc0)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x1}})
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)
dup3(r2, r0, 0x0)

09:21:08 executing program 1:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000100)={'bridge_slave_0\x00\x04'})
r2 = socket$inet6(0xa, 0x803, 0x3)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', <r3=>0x0})
ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000140)={@dev, 0x0, r3})
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0)

09:21:08 executing program 2:
r0 = syz_open_dev$sndtimer(&(0x7f0000000fc0)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x1}})
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)
dup3(r2, r0, 0x0)

09:21:08 executing program 0:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x48, &(0x7f0000000100)=0x3, 0x4)

09:21:08 executing program 4:
r0 = syz_open_dev$sndtimer(&(0x7f0000000fc0)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x1}})
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)
dup3(r2, r0, 0x0)

09:21:08 executing program 3:
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3ea}, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000680)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
msgget$private(0x0, 0x64)
getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000340)={{{@in=@local, @in6=@dev}}, {{@in6=@ipv4}, 0x0, @in6=@loopback}}, &(0x7f0000000100)=0xe8)
fstat(0xffffffffffffffff, &(0x7f0000000440))
geteuid()
r2 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
msgctl$IPC_SET(0x0, 0x1, &(0x7f00000014c0))
msgsnd(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="028ef59bd5a6932427cf36ef1ef09b7e0e0360524a5efc770805ef1210c2096d5cc88663545ecb7b6518fc0f8d04326f32c67b5cef098434da7a7ba48cf3f06c5dfdef06000000000000df191870ba8312866ea6e02daae043e7bfbfae79ec4254063528013c46de9836cb6462af7c5ee778b6f0737e0c8af6f7cf5ab71b301aa84187eba037efb5fe9ad0752f0610bfab333a79b109fe68c4e954fffafa11956265e92265510703f5ebd0f8fb9552e033f589c88331e7a5f26e1d6531165940c06f01e27610744a26a0e0de580000000000"], 0x1, 0x0)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000))
tkill(r2, 0x1000000000016)
msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000240)={{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81})

09:21:09 executing program 0:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x48, &(0x7f0000000100)=0x3, 0x4)

09:21:09 executing program 0:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x48, &(0x7f0000000100)=0x3, 0x4)

09:21:09 executing program 5:
perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xa, 0x8000000000000002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sloppy_tcp\x00', 0x2, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f0000000200)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getpid()
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600)=[{0x0}], 0x1}, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000000))
perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$kcm(0xa, 0x2, 0x11)
close(0xffffffffffffffff)

09:21:09 executing program 3:
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3ea}, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000680)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
msgget$private(0x0, 0x64)
getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000340)={{{@in=@local, @in6=@dev}}, {{@in6=@ipv4}, 0x0, @in6=@loopback}}, &(0x7f0000000100)=0xe8)
fstat(0xffffffffffffffff, &(0x7f0000000440))
geteuid()
r2 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
msgctl$IPC_SET(0x0, 0x1, &(0x7f00000014c0))
msgsnd(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="028ef59bd5a6932427cf36ef1ef09b7e0e0360524a5efc770805ef1210c2096d5cc88663545ecb7b6518fc0f8d04326f32c67b5cef098434da7a7ba48cf3f06c5dfdef06000000000000df191870ba8312866ea6e02daae043e7bfbfae79ec4254063528013c46de9836cb6462af7c5ee778b6f0737e0c8af6f7cf5ab71b301aa84187eba037efb5fe9ad0752f0610bfab333a79b109fe68c4e954fffafa11956265e92265510703f5ebd0f8fb9552e033f589c88331e7a5f26e1d6531165940c06f01e27610744a26a0e0de580000000000"], 0x1, 0x0)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000))
tkill(r2, 0x1000000000016)
msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000240)={{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81})

09:21:09 executing program 0:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x48, &(0x7f0000000100)=0x3, 0x4)

[  421.134756][    C1] net_ratelimit: 22 callbacks suppressed
[  421.134765][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  421.146343][    C1] protocol 88fb is buggy, dev hsr_slave_1
[  421.152186][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  421.157990][    C1] protocol 88fb is buggy, dev hsr_slave_1
09:21:09 executing program 0:
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3ea}, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000680)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
msgget$private(0x0, 0x64)
getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000340)={{{@in=@local, @in6=@dev}}, {{@in6=@ipv4}, 0x0, @in6=@loopback}}, &(0x7f0000000100)=0xe8)
fstat(0xffffffffffffffff, &(0x7f0000000440))
geteuid()
r2 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
msgctl$IPC_SET(0x0, 0x1, &(0x7f00000014c0))
msgsnd(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="028ef59bd5a6932427cf36ef1ef09b7e0e0360524a5efc770805ef1210c2096d5cc88663545ecb7b6518fc0f8d04326f32c67b5cef098434da7a7ba48cf3f06c5dfdef06000000000000df191870ba8312866ea6e02daae043e7bfbfae79ec4254063528013c46de9836cb6462af7c5ee778b6f0737e0c8af6f7cf5ab71b301aa84187eba037efb5fe9ad0752f0610bfab333a79b109fe68c4e954fffafa11956265e92265510703f5ebd0f8fb9552e033f589c88331e7a5f26e1d6531165940c06f01e27610744a26a0e0de580000000000"], 0x1, 0x0)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000))
tkill(r2, 0x1000000000016)
msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000240)={{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81})

09:21:09 executing program 3:
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3ea}, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000680)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
msgget$private(0x0, 0x64)
getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000340)={{{@in=@local, @in6=@dev}}, {{@in6=@ipv4}, 0x0, @in6=@loopback}}, &(0x7f0000000100)=0xe8)
fstat(0xffffffffffffffff, &(0x7f0000000440))
geteuid()
r2 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
msgctl$IPC_SET(0x0, 0x1, &(0x7f00000014c0))
msgsnd(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="028ef59bd5a6932427cf36ef1ef09b7e0e0360524a5efc770805ef1210c2096d5cc88663545ecb7b6518fc0f8d04326f32c67b5cef098434da7a7ba48cf3f06c5dfdef06000000000000df191870ba8312866ea6e02daae043e7bfbfae79ec4254063528013c46de9836cb6462af7c5ee778b6f0737e0c8af6f7cf5ab71b301aa84187eba037efb5fe9ad0752f0610bfab333a79b109fe68c4e954fffafa11956265e92265510703f5ebd0f8fb9552e033f589c88331e7a5f26e1d6531165940c06f01e27610744a26a0e0de580000000000"], 0x1, 0x0)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000))
tkill(r2, 0x1000000000016)
msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000240)={{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81})

[  421.686296][T15722] bridge0: port 1(bridge_slave_0) entered disabled state
09:21:09 executing program 1:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f0000bd7000)={&(0x7f0000c07e98)=@newsa={0xf0, 0x1e, 0x713, 0x0, 0x0, {{@in, @in6=@ipv4={[], [], @local={0xac, 0x14, 0xffffffffffffffff}}}, {@in6}, @in=@broadcast}}, 0xf0}}, 0x0)

09:21:09 executing program 0:
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3ea}, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000680)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
msgget$private(0x0, 0x64)
getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000340)={{{@in=@local, @in6=@dev}}, {{@in6=@ipv4}, 0x0, @in6=@loopback}}, &(0x7f0000000100)=0xe8)
fstat(0xffffffffffffffff, &(0x7f0000000440))
geteuid()
r2 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
msgctl$IPC_SET(0x0, 0x1, &(0x7f00000014c0))
msgsnd(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="028ef59bd5a6932427cf36ef1ef09b7e0e0360524a5efc770805ef1210c2096d5cc88663545ecb7b6518fc0f8d04326f32c67b5cef098434da7a7ba48cf3f06c5dfdef06000000000000df191870ba8312866ea6e02daae043e7bfbfae79ec4254063528013c46de9836cb6462af7c5ee778b6f0737e0c8af6f7cf5ab71b301aa84187eba037efb5fe9ad0752f0610bfab333a79b109fe68c4e954fffafa11956265e92265510703f5ebd0f8fb9552e033f589c88331e7a5f26e1d6531165940c06f01e27610744a26a0e0de580000000000"], 0x1, 0x0)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000))
tkill(r2, 0x1000000000016)
msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000240)={{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81})

09:21:09 executing program 3:
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3ea}, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000680)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
msgget$private(0x0, 0x64)
getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000340)={{{@in=@local, @in6=@dev}}, {{@in6=@ipv4}, 0x0, @in6=@loopback}}, &(0x7f0000000100)=0xe8)
fstat(0xffffffffffffffff, &(0x7f0000000440))
geteuid()
r2 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
msgctl$IPC_SET(0x0, 0x1, &(0x7f00000014c0))
msgsnd(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="028ef59bd5a6932427cf36ef1ef09b7e0e0360524a5efc770805ef1210c2096d5cc88663545ecb7b6518fc0f8d04326f32c67b5cef098434da7a7ba48cf3f06c5dfdef06000000000000df191870ba8312866ea6e02daae043e7bfbfae79ec4254063528013c46de9836cb6462af7c5ee778b6f0737e0c8af6f7cf5ab71b301aa84187eba037efb5fe9ad0752f0610bfab333a79b109fe68c4e954fffafa11956265e92265510703f5ebd0f8fb9552e033f589c88331e7a5f26e1d6531165940c06f01e27610744a26a0e0de580000000000"], 0x1, 0x0)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000))
tkill(r2, 0x1000000000016)
msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000240)={{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81})

09:21:09 executing program 5:
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3ea}, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000680)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
msgget$private(0x0, 0x64)
getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000340)={{{@in=@local, @in6=@dev}}, {{@in6=@ipv4}, 0x0, @in6=@loopback}}, &(0x7f0000000100)=0xe8)
fstat(0xffffffffffffffff, &(0x7f0000000440))
geteuid()
r2 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
msgctl$IPC_SET(0x0, 0x1, &(0x7f00000014c0))
msgsnd(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="028ef59bd5a6932427cf36ef1ef09b7e0e0360524a5efc770805ef1210c2096d5cc88663545ecb7b6518fc0f8d04326f32c67b5cef098434da7a7ba48cf3f06c5dfdef06000000000000df191870ba8312866ea6e02daae043e7bfbfae79ec4254063528013c46de9836cb6462af7c5ee778b6f0737e0c8af6f7cf5ab71b301aa84187eba037efb5fe9ad0752f0610bfab333a79b109fe68c4e954fffafa11956265e92265510703f5ebd0f8fb9552e033f589c88331e7a5f26e1d6531165940c06f01e27610744a26a0e0de580000000000"], 0x1, 0x0)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000))
tkill(r2, 0x1000000000016)
msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000240)={{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81})

09:21:09 executing program 4:
r0 = syz_open_dev$sndtimer(&(0x7f0000000fc0)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x1}})
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)
dup3(r2, r0, 0x0)

09:21:09 executing program 2:
r0 = syz_open_dev$sndtimer(&(0x7f0000000fc0)='/dev/snd/timer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x1}})
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)
dup3(r2, r0, 0x0)

09:21:10 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000280)={0x77, 0x0, [0xce, 0x8b000000]})

09:21:10 executing program 2:
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x528}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000184000)=ANY=[@ANYBLOB="020d00001000000000000000000000000800120000000300000000000000000006000000000000000000000000000000000000000000000000000000000000000000020000009807d7060000000000000000030005000000000002000000ac14ffbb000000000000000000000000000000000000000000000000000000000000"], 0x80}}, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="02062000020000000000001800000000"], 0x10}}, 0x0)
sendmmsg(r0, &(0x7f0000000180), 0x4000000000002dc, 0x0)

[  421.854702][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  421.860693][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  421.870852][T15785] netlink: 176 bytes leftover after parsing attributes in process `syz-executor1'.
09:21:10 executing program 0:
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3ea}, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000680)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
msgget$private(0x0, 0x64)
getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000340)={{{@in=@local, @in6=@dev}}, {{@in6=@ipv4}, 0x0, @in6=@loopback}}, &(0x7f0000000100)=0xe8)
fstat(0xffffffffffffffff, &(0x7f0000000440))
geteuid()
r2 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
msgctl$IPC_SET(0x0, 0x1, &(0x7f00000014c0))
msgsnd(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="028ef59bd5a6932427cf36ef1ef09b7e0e0360524a5efc770805ef1210c2096d5cc88663545ecb7b6518fc0f8d04326f32c67b5cef098434da7a7ba48cf3f06c5dfdef06000000000000df191870ba8312866ea6e02daae043e7bfbfae79ec4254063528013c46de9836cb6462af7c5ee778b6f0737e0c8af6f7cf5ab71b301aa84187eba037efb5fe9ad0752f0610bfab333a79b109fe68c4e954fffafa11956265e92265510703f5ebd0f8fb9552e033f589c88331e7a5f26e1d6531165940c06f01e27610744a26a0e0de580000000000"], 0x1, 0x0)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000))
tkill(r2, 0x1000000000016)
msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000240)={{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81})

09:21:10 executing program 3:
r0 = socket(0x80000000010, 0x2, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000100), 0x2}], 0x2ec, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)

09:21:10 executing program 5:
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3ea}, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000680)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
msgget$private(0x0, 0x64)
getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000340)={{{@in=@local, @in6=@dev}}, {{@in6=@ipv4}, 0x0, @in6=@loopback}}, &(0x7f0000000100)=0xe8)
fstat(0xffffffffffffffff, &(0x7f0000000440))
geteuid()
r2 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
msgctl$IPC_SET(0x0, 0x1, &(0x7f00000014c0))
msgsnd(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="028ef59bd5a6932427cf36ef1ef09b7e0e0360524a5efc770805ef1210c2096d5cc88663545ecb7b6518fc0f8d04326f32c67b5cef098434da7a7ba48cf3f06c5dfdef06000000000000df191870ba8312866ea6e02daae043e7bfbfae79ec4254063528013c46de9836cb6462af7c5ee778b6f0737e0c8af6f7cf5ab71b301aa84187eba037efb5fe9ad0752f0610bfab333a79b109fe68c4e954fffafa11956265e92265510703f5ebd0f8fb9552e033f589c88331e7a5f26e1d6531165940c06f01e27610744a26a0e0de580000000000"], 0x1, 0x0)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000))
tkill(r2, 0x1000000000016)
msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000240)={{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81})

09:21:10 executing program 1:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f0000bd7000)={&(0x7f0000c07e98)=@newsa={0xf0, 0x1e, 0x713, 0x0, 0x0, {{@in, @in6=@ipv4={[], [], @local={0xac, 0x14, 0xffffffffffffffff}}}, {@in6}, @in=@broadcast}}, 0xf0}}, 0x0)

09:21:10 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f00000002c0)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, 0xfffffffffffffffe)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100)}], 0x1, 0x0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x9a, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r1, r2}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={'crc32-generic\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0f\x00'}})

[  422.178564][T15812] netlink: 176 bytes leftover after parsing attributes in process `syz-executor1'.
09:21:10 executing program 5:
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3ea}, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000680)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
msgget$private(0x0, 0x64)
getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000340)={{{@in=@local, @in6=@dev}}, {{@in6=@ipv4}, 0x0, @in6=@loopback}}, &(0x7f0000000100)=0xe8)
fstat(0xffffffffffffffff, &(0x7f0000000440))
geteuid()
r2 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
msgctl$IPC_SET(0x0, 0x1, &(0x7f00000014c0))
msgsnd(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="028ef59bd5a6932427cf36ef1ef09b7e0e0360524a5efc770805ef1210c2096d5cc88663545ecb7b6518fc0f8d04326f32c67b5cef098434da7a7ba48cf3f06c5dfdef06000000000000df191870ba8312866ea6e02daae043e7bfbfae79ec4254063528013c46de9836cb6462af7c5ee778b6f0737e0c8af6f7cf5ab71b301aa84187eba037efb5fe9ad0752f0610bfab333a79b109fe68c4e954fffafa11956265e92265510703f5ebd0f8fb9552e033f589c88331e7a5f26e1d6531165940c06f01e27610744a26a0e0de580000000000"], 0x1, 0x0)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000))
tkill(r2, 0x1000000000016)
msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000240)={{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81})

09:21:10 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000280)={0x77, 0x0, [0xce, 0x8b000000]})

09:21:10 executing program 2:
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x528}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000184000)=ANY=[@ANYBLOB="020d00001000000000000000000000000800120000000300000000000000000006000000000000000000000000000000000000000000000000000000000000000000020000009807d7060000000000000000030005000000000002000000ac14ffbb000000000000000000000000000000000000000000000000000000000000"], 0x80}}, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="02062000020000000000001800000000"], 0x10}}, 0x0)
sendmmsg(r0, &(0x7f0000000180), 0x4000000000002dc, 0x0)

09:21:10 executing program 1:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f0000bd7000)={&(0x7f0000c07e98)=@newsa={0xf0, 0x1e, 0x713, 0x0, 0x0, {{@in, @in6=@ipv4={[], [], @local={0xac, 0x14, 0xffffffffffffffff}}}, {@in6}, @in=@broadcast}}, 0xf0}}, 0x0)

09:21:10 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f00000002c0)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, 0xfffffffffffffffe)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100)}], 0x1, 0x0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x9a, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r1, r2}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={'crc32-generic\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0f\x00'}})

09:21:10 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000001080)='/dev/dri/card#\x00', 0x0, 0x0)
r1 = gettid()
timer_create(0x0, &(0x7f0000000440)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000))
timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
readv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/35, 0x50}], 0x1)
r2 = openat$vcs(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/vcs\x00', 0x0, 0x0)
dup2(r2, r0)
tkill(r1, 0x16)

[  422.417334][T15830] netlink: 176 bytes leftover after parsing attributes in process `syz-executor1'.
[  422.494728][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  422.500626][    C0] protocol 88fb is buggy, dev hsr_slave_1
09:21:10 executing program 2:
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x528}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000184000)=ANY=[@ANYBLOB="020d00001000000000000000000000000800120000000300000000000000000006000000000000000000000000000000000000000000000000000000000000000000020000009807d7060000000000000000030005000000000002000000ac14ffbb000000000000000000000000000000000000000000000000000000000000"], 0x80}}, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="02062000020000000000001800000000"], 0x10}}, 0x0)
sendmmsg(r0, &(0x7f0000000180), 0x4000000000002dc, 0x0)

09:21:10 executing program 1:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f0000bd7000)={&(0x7f0000c07e98)=@newsa={0xf0, 0x1e, 0x713, 0x0, 0x0, {{@in, @in6=@ipv4={[], [], @local={0xac, 0x14, 0xffffffffffffffff}}}, {@in6}, @in=@broadcast}}, 0xf0}}, 0x0)

[  422.654700][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  422.654706][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  422.674970][T15844] netlink: 176 bytes leftover after parsing attributes in process `syz-executor1'.
09:21:11 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f00000002c0)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, 0xfffffffffffffffe)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100)}], 0x1, 0x0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x9a, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r1, r2}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={'crc32-generic\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0f\x00'}})

09:21:11 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000280)={0x77, 0x0, [0xce, 0x8b000000]})

09:21:11 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000001080)='/dev/dri/card#\x00', 0x0, 0x0)
r1 = gettid()
timer_create(0x0, &(0x7f0000000440)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000))
timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
readv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/35, 0x50}], 0x1)
r2 = openat$vcs(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/vcs\x00', 0x0, 0x0)
dup2(r2, r0)
tkill(r1, 0x16)

09:21:11 executing program 1:
mkdir(&(0x7f0000000580)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@default_permissions='default_permissions'}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]})

09:21:11 executing program 3:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="020b000007000000000021002d54036205001a00000c9a934d4fe600001000e0c99f3d653c00f0ff9da499df0005dc437eed486dd6000000"], 0x38}}, 0x0)
sendmmsg(r0, &(0x7f0000000180), 0x20, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000000c0), 0x35f)
clock_gettime(0x0, &(0x7f0000000400)={0x0, <r1=>0x0})
recvmmsg(r0, &(0x7f00000009c0), 0x4000000000002ab, 0x22, &(0x7f0000000a80)={0x0, r1+10000000})
r2 = creat(&(0x7f0000000140)='./file0\x00', 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
ioctl$SCSI_IOCTL_DOORLOCK(r2, 0x5380)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)

09:21:11 executing program 2:
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x528}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000184000)=ANY=[@ANYBLOB="020d00001000000000000000000000000800120000000300000000000000000006000000000000000000000000000000000000000000000000000000000000000000020000009807d7060000000000000000030005000000000002000000ac14ffbb000000000000000000000000000000000000000000000000000000000000"], 0x80}}, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="02062000020000000000001800000000"], 0x10}}, 0x0)
sendmmsg(r0, &(0x7f0000000180), 0x4000000000002dc, 0x0)

09:21:11 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000001080)='/dev/dri/card#\x00', 0x0, 0x0)
r1 = gettid()
timer_create(0x0, &(0x7f0000000440)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000))
timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
readv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/35, 0x50}], 0x1)
r2 = openat$vcs(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/vcs\x00', 0x0, 0x0)
dup2(r2, r0)
tkill(r1, 0x16)

09:21:11 executing program 2:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$sock_int(r1, 0x1, 0x200000010, &(0x7f0000000080)=0x5, 0x4)
write$binfmt_elf32(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="7f"], 0x1)
getgroups(0x2, &(0x7f0000000280)=[0x0, <r2=>0xee01])
setresgid(r2, 0x0, 0x0)
recvmsg(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=""/148, 0x94}, 0x0)
sendmmsg(r0, &(0x7f0000000000), 0x40000000000037f, 0x0)

09:21:11 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f00000002c0)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, 0xfffffffffffffffe)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100)}], 0x1, 0x0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x9a, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r1, r2}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={'crc32-generic\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0f\x00'}})

[  422.999649][T15864] overlayfs: filesystem on './bus' not supported as upperdir
09:21:11 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000280)={0x77, 0x0, [0xce, 0x8b000000]})

09:21:11 executing program 1:
mkdir(&(0x7f0000000580)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@default_permissions='default_permissions'}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]})

09:21:11 executing program 2:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$sock_int(r1, 0x1, 0x200000010, &(0x7f0000000080)=0x5, 0x4)
write$binfmt_elf32(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="7f"], 0x1)
getgroups(0x2, &(0x7f0000000280)=[0x0, <r2=>0xee01])
setresgid(r2, 0x0, 0x0)
recvmsg(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=""/148, 0x94}, 0x0)
sendmmsg(r0, &(0x7f0000000000), 0x40000000000037f, 0x0)

09:21:11 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000001080)='/dev/dri/card#\x00', 0x0, 0x0)
r1 = gettid()
timer_create(0x0, &(0x7f0000000440)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000))
timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
readv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/35, 0x50}], 0x1)
r2 = openat$vcs(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/vcs\x00', 0x0, 0x0)
dup2(r2, r0)
tkill(r1, 0x16)

09:21:11 executing program 0:
syz_read_part_table(0x0, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000140)="02005500000001007400ff070000000000000000000000000000000000000000000000800000000000f8ffffffffffffff0000000000000000000000000055aa", 0x40, 0x1c0}])

09:21:11 executing program 3:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="020b000007000000000021002d54036205001a00000c9a934d4fe600001000e0c99f3d653c00f0ff9da499df0005dc437eed486dd6000000"], 0x38}}, 0x0)
sendmmsg(r0, &(0x7f0000000180), 0x20, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000000c0), 0x35f)
clock_gettime(0x0, &(0x7f0000000400)={0x0, <r1=>0x0})
recvmmsg(r0, &(0x7f00000009c0), 0x4000000000002ab, 0x22, &(0x7f0000000a80)={0x0, r1+10000000})
r2 = creat(&(0x7f0000000140)='./file0\x00', 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
ioctl$SCSI_IOCTL_DOORLOCK(r2, 0x5380)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)

09:21:11 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="020b000007000000000021002d54036205001a00000c9a934d4fe600001000e0c99f3d653c00f0ff9da499df0005dc437eed486dd6000000"], 0x38}}, 0x0)
sendmmsg(r0, &(0x7f0000000180), 0x20, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000000c0), 0x35f)
clock_gettime(0x0, &(0x7f0000000400)={0x0, <r1=>0x0})
recvmmsg(r0, &(0x7f00000009c0), 0x4000000000002ab, 0x22, &(0x7f0000000a80)={0x0, r1+10000000})
r2 = creat(&(0x7f0000000140)='./file0\x00', 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
ioctl$SCSI_IOCTL_DOORLOCK(r2, 0x5380)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)

09:21:11 executing program 2:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$sock_int(r1, 0x1, 0x200000010, &(0x7f0000000080)=0x5, 0x4)
write$binfmt_elf32(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="7f"], 0x1)
getgroups(0x2, &(0x7f0000000280)=[0x0, <r2=>0xee01])
setresgid(r2, 0x0, 0x0)
recvmsg(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=""/148, 0x94}, 0x0)
sendmmsg(r0, &(0x7f0000000000), 0x40000000000037f, 0x0)

09:21:11 executing program 1:
mkdir(&(0x7f0000000580)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@default_permissions='default_permissions'}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]})

[  423.506085][T15897] Dev loop0: unable to read RDB block 1
09:21:11 executing program 5:
r0 = syz_open_dev$video(&(0x7f0000000880)='/dev/video#\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video37\x00', 0x2, 0x0)
dup2(r2, r0)
ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc058565d, &(0x7f0000000180)={0x0, 0xa, "2a8f58658ec041f1ce9722bfd15349fd661800af11b1ea24f44d1200", 0x0, 0x0, 0x0, 0x70effc, 0x100000001})

[  423.560748][T15897]  loop0: unable to read partition table
[  423.645826][T15897] loop0: partition table beyond EOD, truncated
[  423.709290][T15897] loop_reread_partitions: partition scan of loop0 () failed (rc=-5)
09:21:11 executing program 5:
r0 = syz_open_dev$video(&(0x7f0000000880)='/dev/video#\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video37\x00', 0x2, 0x0)
dup2(r2, r0)
ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc058565d, &(0x7f0000000180)={0x0, 0xa, "2a8f58658ec041f1ce9722bfd15349fd661800af11b1ea24f44d1200", 0x0, 0x0, 0x0, 0x70effc, 0x100000001})

09:21:11 executing program 2:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$sock_int(r1, 0x1, 0x200000010, &(0x7f0000000080)=0x5, 0x4)
write$binfmt_elf32(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="7f"], 0x1)
getgroups(0x2, &(0x7f0000000280)=[0x0, <r2=>0xee01])
setresgid(r2, 0x0, 0x0)
recvmsg(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=""/148, 0x94}, 0x0)
sendmmsg(r0, &(0x7f0000000000), 0x40000000000037f, 0x0)

[  423.805495][T15897] __loop_clr_fd: partition scan of loop0 failed (rc=-22)
09:21:12 executing program 1:
mkdir(&(0x7f0000000580)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@default_permissions='default_permissions'}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]})

09:21:12 executing program 5:
r0 = syz_open_dev$video(&(0x7f0000000880)='/dev/video#\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video37\x00', 0x2, 0x0)
dup2(r2, r0)
ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc058565d, &(0x7f0000000180)={0x0, 0xa, "2a8f58658ec041f1ce9722bfd15349fd661800af11b1ea24f44d1200", 0x0, 0x0, 0x0, 0x70effc, 0x100000001})

09:21:12 executing program 2:
r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x4, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000000)={0x0, 0x1, 0x0, [], &(0x7f0000000040)={0x98f905, 0x1000, [], @ptr}})

[  423.922672][T15897] Dev loop0: unable to read RDB block 1
[  423.942127][T15897]  loop0: unable to read partition table
09:21:12 executing program 3:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="020b000007000000000021002d54036205001a00000c9a934d4fe600001000e0c99f3d653c00f0ff9da499df0005dc437eed486dd6000000"], 0x38}}, 0x0)
sendmmsg(r0, &(0x7f0000000180), 0x20, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000000c0), 0x35f)
clock_gettime(0x0, &(0x7f0000000400)={0x0, <r1=>0x0})
recvmmsg(r0, &(0x7f00000009c0), 0x4000000000002ab, 0x22, &(0x7f0000000a80)={0x0, r1+10000000})
r2 = creat(&(0x7f0000000140)='./file0\x00', 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
ioctl$SCSI_IOCTL_DOORLOCK(r2, 0x5380)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)

[  423.968469][T15897] loop0: partition table beyond EOD, truncated
[  424.004809][T15897] loop_reread_partitions: partition scan of loop0 () failed (rc=-5)
09:21:12 executing program 0:
syz_read_part_table(0x0, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000140)="02005500000001007400ff070000000000000000000000000000000000000000000000800000000000f8ffffffffffffff0000000000000000000000000055aa", 0x40, 0x1c0}])

09:21:12 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="020b000007000000000021002d54036205001a00000c9a934d4fe600001000e0c99f3d653c00f0ff9da499df0005dc437eed486dd6000000"], 0x38}}, 0x0)
sendmmsg(r0, &(0x7f0000000180), 0x20, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000000c0), 0x35f)
clock_gettime(0x0, &(0x7f0000000400)={0x0, <r1=>0x0})
recvmmsg(r0, &(0x7f00000009c0), 0x4000000000002ab, 0x22, &(0x7f0000000a80)={0x0, r1+10000000})
r2 = creat(&(0x7f0000000140)='./file0\x00', 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
ioctl$SCSI_IOCTL_DOORLOCK(r2, 0x5380)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)

09:21:12 executing program 2:
r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x4, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000000)={0x0, 0x1, 0x0, [], &(0x7f0000000040)={0x98f905, 0x1000, [], @ptr}})

09:21:12 executing program 5:
r0 = syz_open_dev$video(&(0x7f0000000880)='/dev/video#\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video37\x00', 0x2, 0x0)
dup2(r2, r0)
ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc058565d, &(0x7f0000000180)={0x0, 0xa, "2a8f58658ec041f1ce9722bfd15349fd661800af11b1ea24f44d1200", 0x0, 0x0, 0x0, 0x70effc, 0x100000001})

[  424.225370][ T8246] __loop_clr_fd: partition scan of loop0 failed (rc=-22)
09:21:12 executing program 2:
r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x4, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000000)={0x0, 0x1, 0x0, [], &(0x7f0000000040)={0x98f905, 0x1000, [], @ptr}})

[  424.435711][T15951] Dev loop0: unable to read RDB block 1
09:21:12 executing program 1:
clock_getres(0x80000003, 0x0)

[  424.481726][T15951]  loop0: unable to read partition table
09:21:12 executing program 5:
syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5)
r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000700)='./\xe8_\x02\xde\x10\xb5\x14\xb9v\xbf8p\xeb\x11\x96\xd6$\x14p\x8cZ\x0f\xfc*\xa3kj\x01:\xcd{R\x97\xbd\x05&\xad\x13\xfcW#>\\I&m\x96W\x02\xb33X\x16Z\x82\xd7\x8a(n\xbc\x82gOEc\xd8V\x1b\xc8\\\xb4\atjsf\xf0:\xd5\xc2_\xf3f6\xfc\xb0\x06\xf9\f\xb5\xd4#\xf9J\xf0\xd8\xfe_\x1c\xff\xe0\"8\xdf\xf5^\\\xd6\x13\x85or#\xf38\xd9\xeeh\xb0%\xcc\xf7\xe5.\x8c\xa3\x7f\x84\x17l\r\x18\xd1\xea\x14\xa0\xcc\xd9\xb5\xc3_\x84\x93\xd1UG\xb3\x88*\x8a\xc7I\bD\riO\xe4\r\xfd\xbf\x98\xbd%\xc9(\xbe\xcd\b\x1b\x14\x8a\\\xdd\xd0\x86\x89\xed\xe9\xb09\xa3\xf4F%@&w\x89(\xb1\xeei\xf7\xde\xa1\xee\xbbj\xeb\x12', 0x200002, 0x0)
perf_event_open(&(0x7f0000000540)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', 0x4000, 0x28)
write$P9_RSETATTR(r1, 0x0, 0x3e7)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0)
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)=0x20042, 0x7)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0)
write$USERIO_CMD_SEND_INTERRUPT(r1, 0x0, 0xfffffffffffffecc)
keyctl$join(0x1, &(0x7f00000005c0))
r2 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x0, 0x880)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz0\x00', 0x1ff)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x5, &(0x7f0000000040)=0x6, 0x4)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4)
r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47744279}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
timerfd_settime(r5, 0x0, 0x0, 0x0)
lstat(&(0x7f0000000280)='./file0\x00', 0x0)
close(0xffffffffffffffff)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
userfaultfd(0x0)
r6 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x0, 0x0)
ioctl$VIDIOC_SUBDEV_S_SELECTION(r6, 0xc040563e, 0x0)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000080)={'bond_slave_0\x00', 0x400})
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x4})

[  424.524836][T15951] loop0: partition table beyond EOD, truncated
[  424.531684][T15951] loop_reread_partitions: partition scan of loop0 () failed (rc=-5)
09:21:12 executing program 1:
clock_getres(0x80000003, 0x0)

09:21:12 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="020b000007000000000021002d54036205001a00000c9a934d4fe600001000e0c99f3d653c00f0ff9da499df0005dc437eed486dd6000000"], 0x38}}, 0x0)
sendmmsg(r0, &(0x7f0000000180), 0x20, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000000c0), 0x35f)
clock_gettime(0x0, &(0x7f0000000400)={0x0, <r1=>0x0})
recvmmsg(r0, &(0x7f00000009c0), 0x4000000000002ab, 0x22, &(0x7f0000000a80)={0x0, r1+10000000})
r2 = creat(&(0x7f0000000140)='./file0\x00', 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
ioctl$SCSI_IOCTL_DOORLOCK(r2, 0x5380)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)

09:21:12 executing program 2:
r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x4, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000000)={0x0, 0x1, 0x0, [], &(0x7f0000000040)={0x98f905, 0x1000, [], @ptr}})

[  424.610365][T15951] __loop_clr_fd: partition scan of loop0 failed (rc=-22)
09:21:12 executing program 3:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="020b000007000000000021002d54036205001a00000c9a934d4fe600001000e0c99f3d653c00f0ff9da499df0005dc437eed486dd6000000"], 0x38}}, 0x0)
sendmmsg(r0, &(0x7f0000000180), 0x20, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000000c0), 0x35f)
clock_gettime(0x0, &(0x7f0000000400)={0x0, <r1=>0x0})
recvmmsg(r0, &(0x7f00000009c0), 0x4000000000002ab, 0x22, &(0x7f0000000a80)={0x0, r1+10000000})
r2 = creat(&(0x7f0000000140)='./file0\x00', 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
ioctl$SCSI_IOCTL_DOORLOCK(r2, 0x5380)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)

09:21:12 executing program 1:
clock_getres(0x80000003, 0x0)

09:21:12 executing program 0:
syz_read_part_table(0x0, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000140)="02005500000001007400ff070000000000000000000000000000000000000000000000800000000000f8ffffffffffffff0000000000000000000000000055aa", 0x40, 0x1c0}])

09:21:13 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0)
ioctl$int_out(r1, 0x2000000080004519, 0x0)

[  424.793326][T15975] QAT: Invalid ioctl
09:21:13 executing program 0:
syz_read_part_table(0x0, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000140)="02005500000001007400ff070000000000000000000000000000000000000000000000800000000000f8ffffffffffffff0000000000000000000000000055aa", 0x40, 0x1c0}])

09:21:13 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/wireless\x00')
ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f00000000c0)=r1)
bind$alg(r0, &(0x7f0000002640)={0x26, 'aead\x00', 0x0, 0x0, 'rfc7539(cfb(twofish),rmd128-generic)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001400)="b7d9288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_ENABLE_CAP(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000480)={0x79})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000080)={0x7b})
r3 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r3, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001340)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r3, &(0x7f0000008cc0)=[{{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f00000002c0)=""/4096, 0x1000}], 0x1, 0x0, 0x232}}], 0x1, 0x0, 0x0)

09:21:13 executing program 0:
r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100)='/dev/capi20\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$CAPI_NCCI_OPENCOUNT(r0, 0xc0404309, 0x0)

09:21:13 executing program 1:
clock_getres(0x80000003, 0x0)

[  425.469268][T15972] QAT: Invalid ioctl
09:21:13 executing program 5:
syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5)
r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000700)='./\xe8_\x02\xde\x10\xb5\x14\xb9v\xbf8p\xeb\x11\x96\xd6$\x14p\x8cZ\x0f\xfc*\xa3kj\x01:\xcd{R\x97\xbd\x05&\xad\x13\xfcW#>\\I&m\x96W\x02\xb33X\x16Z\x82\xd7\x8a(n\xbc\x82gOEc\xd8V\x1b\xc8\\\xb4\atjsf\xf0:\xd5\xc2_\xf3f6\xfc\xb0\x06\xf9\f\xb5\xd4#\xf9J\xf0\xd8\xfe_\x1c\xff\xe0\"8\xdf\xf5^\\\xd6\x13\x85or#\xf38\xd9\xeeh\xb0%\xcc\xf7\xe5.\x8c\xa3\x7f\x84\x17l\r\x18\xd1\xea\x14\xa0\xcc\xd9\xb5\xc3_\x84\x93\xd1UG\xb3\x88*\x8a\xc7I\bD\riO\xe4\r\xfd\xbf\x98\xbd%\xc9(\xbe\xcd\b\x1b\x14\x8a\\\xdd\xd0\x86\x89\xed\xe9\xb09\xa3\xf4F%@&w\x89(\xb1\xeei\xf7\xde\xa1\xee\xbbj\xeb\x12', 0x200002, 0x0)
perf_event_open(&(0x7f0000000540)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', 0x4000, 0x28)
write$P9_RSETATTR(r1, 0x0, 0x3e7)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0)
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)=0x20042, 0x7)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0)
write$USERIO_CMD_SEND_INTERRUPT(r1, 0x0, 0xfffffffffffffecc)
keyctl$join(0x1, &(0x7f00000005c0))
r2 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x0, 0x880)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz0\x00', 0x1ff)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x5, &(0x7f0000000040)=0x6, 0x4)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4)
r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47744279}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
timerfd_settime(r5, 0x0, 0x0, 0x0)
lstat(&(0x7f0000000280)='./file0\x00', 0x0)
close(0xffffffffffffffff)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
userfaultfd(0x0)
r6 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x0, 0x0)
ioctl$VIDIOC_SUBDEV_S_SELECTION(r6, 0xc040563e, 0x0)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000080)={'bond_slave_0\x00', 0x400})
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x4})

09:21:13 executing program 0:
r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100)='/dev/capi20\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$CAPI_NCCI_OPENCOUNT(r0, 0xc0404309, 0x0)

09:21:13 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0)
ioctl$int_out(r1, 0x2000000080004519, 0x0)

09:21:13 executing program 3:
r0 = socket$netlink(0x10, 0x3, 0x8000000004)
socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0)
writev(r0, &(0x7f0000e11ff0)=[{&(0x7f0000000140)="580000001300add427323b470c458c560a067fffffff81004e220000000058000b4824ca945f64009400050028925aa80000000000000080000efffe1b0000000000fff5dd00000010000100090a1000410400000000fcff", 0x58}], 0x1)

09:21:13 executing program 1:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x802})
ioctl$TUNSETPERSIST(r0, 0x400454c8, 0x0)

09:21:13 executing program 0:
r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100)='/dev/capi20\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$CAPI_NCCI_OPENCOUNT(r0, 0xc0404309, 0x0)

09:21:13 executing program 3:
r0 = socket$netlink(0x10, 0x3, 0x8000000004)
socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0)
writev(r0, &(0x7f0000e11ff0)=[{&(0x7f0000000140)="580000001300add427323b470c458c560a067fffffff81004e220000000058000b4824ca945f64009400050028925aa80000000000000080000efffe1b0000000000fff5dd00000010000100090a1000410400000000fcff", 0x58}], 0x1)

09:21:13 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0)
ioctl$int_out(r1, 0x2000000080004519, 0x0)

09:21:13 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/wireless\x00')
ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f00000000c0)=r1)
bind$alg(r0, &(0x7f0000002640)={0x26, 'aead\x00', 0x0, 0x0, 'rfc7539(cfb(twofish),rmd128-generic)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001400)="b7d9288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_ENABLE_CAP(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000480)={0x79})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000080)={0x7b})
r3 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r3, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001340)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r3, &(0x7f0000008cc0)=[{{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f00000002c0)=""/4096, 0x1000}], 0x1, 0x0, 0x232}}], 0x1, 0x0, 0x0)

09:21:13 executing program 1:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x802})
ioctl$TUNSETPERSIST(r0, 0x400454c8, 0x0)

09:21:13 executing program 0:
r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100)='/dev/capi20\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$CAPI_NCCI_OPENCOUNT(r0, 0xc0404309, 0x0)

09:21:14 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/wireless\x00')
ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f00000000c0)=r1)
bind$alg(r0, &(0x7f0000002640)={0x26, 'aead\x00', 0x0, 0x0, 'rfc7539(cfb(twofish),rmd128-generic)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001400)="b7d9288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_ENABLE_CAP(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000480)={0x79})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000080)={0x7b})
r3 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r3, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001340)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r3, &(0x7f0000008cc0)=[{{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f00000002c0)=""/4096, 0x1000}], 0x1, 0x0, 0x232}}], 0x1, 0x0, 0x0)

[  425.856780][T16033] QAT: Invalid ioctl
09:21:14 executing program 5:
syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5)
r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000700)='./\xe8_\x02\xde\x10\xb5\x14\xb9v\xbf8p\xeb\x11\x96\xd6$\x14p\x8cZ\x0f\xfc*\xa3kj\x01:\xcd{R\x97\xbd\x05&\xad\x13\xfcW#>\\I&m\x96W\x02\xb33X\x16Z\x82\xd7\x8a(n\xbc\x82gOEc\xd8V\x1b\xc8\\\xb4\atjsf\xf0:\xd5\xc2_\xf3f6\xfc\xb0\x06\xf9\f\xb5\xd4#\xf9J\xf0\xd8\xfe_\x1c\xff\xe0\"8\xdf\xf5^\\\xd6\x13\x85or#\xf38\xd9\xeeh\xb0%\xcc\xf7\xe5.\x8c\xa3\x7f\x84\x17l\r\x18\xd1\xea\x14\xa0\xcc\xd9\xb5\xc3_\x84\x93\xd1UG\xb3\x88*\x8a\xc7I\bD\riO\xe4\r\xfd\xbf\x98\xbd%\xc9(\xbe\xcd\b\x1b\x14\x8a\\\xdd\xd0\x86\x89\xed\xe9\xb09\xa3\xf4F%@&w\x89(\xb1\xeei\xf7\xde\xa1\xee\xbbj\xeb\x12', 0x200002, 0x0)
perf_event_open(&(0x7f0000000540)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', 0x4000, 0x28)
write$P9_RSETATTR(r1, 0x0, 0x3e7)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0)
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)=0x20042, 0x7)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0)
write$USERIO_CMD_SEND_INTERRUPT(r1, 0x0, 0xfffffffffffffecc)
keyctl$join(0x1, &(0x7f00000005c0))
r2 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x0, 0x880)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz0\x00', 0x1ff)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x5, &(0x7f0000000040)=0x6, 0x4)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4)
r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47744279}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
timerfd_settime(r5, 0x0, 0x0, 0x0)
lstat(&(0x7f0000000280)='./file0\x00', 0x0)
close(0xffffffffffffffff)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
userfaultfd(0x0)
r6 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x0, 0x0)
ioctl$VIDIOC_SUBDEV_S_SELECTION(r6, 0xc040563e, 0x0)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000080)={'bond_slave_0\x00', 0x400})
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x4})

09:21:14 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0)
ioctl$int_out(r1, 0x2000000080004519, 0x0)

09:21:14 executing program 1:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x802})
ioctl$TUNSETPERSIST(r0, 0x400454c8, 0x0)

09:21:14 executing program 3:
r0 = socket$netlink(0x10, 0x3, 0x8000000004)
socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0)
writev(r0, &(0x7f0000e11ff0)=[{&(0x7f0000000140)="580000001300add427323b470c458c560a067fffffff81004e220000000058000b4824ca945f64009400050028925aa80000000000000080000efffe1b0000000000fff5dd00000010000100090a1000410400000000fcff", 0x58}], 0x1)

09:21:14 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/wireless\x00')
ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f00000000c0)=r1)
bind$alg(r0, &(0x7f0000002640)={0x26, 'aead\x00', 0x0, 0x0, 'rfc7539(cfb(twofish),rmd128-generic)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001400)="b7d9288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_ENABLE_CAP(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000480)={0x79})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000080)={0x7b})
r3 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r3, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001340)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r3, &(0x7f0000008cc0)=[{{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f00000002c0)=""/4096, 0x1000}], 0x1, 0x0, 0x232}}], 0x1, 0x0, 0x0)

09:21:14 executing program 3:
r0 = socket$netlink(0x10, 0x3, 0x8000000004)
socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0)
writev(r0, &(0x7f0000e11ff0)=[{&(0x7f0000000140)="580000001300add427323b470c458c560a067fffffff81004e220000000058000b4824ca945f64009400050028925aa80000000000000080000efffe1b0000000000fff5dd00000010000100090a1000410400000000fcff", 0x58}], 0x1)

[  426.654717][    C0] net_ratelimit: 20 callbacks suppressed
[  426.654726][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  426.666241][    C0] protocol 88fb is buggy, dev hsr_slave_1
09:21:14 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/wireless\x00')
ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f00000000c0)=r1)
bind$alg(r0, &(0x7f0000002640)={0x26, 'aead\x00', 0x0, 0x0, 'rfc7539(cfb(twofish),rmd128-generic)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001400)="b7d9288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_ENABLE_CAP(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000480)={0x79})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000080)={0x7b})
r3 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r3, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001340)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r3, &(0x7f0000008cc0)=[{{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f00000002c0)=""/4096, 0x1000}], 0x1, 0x0, 0x232}}], 0x1, 0x0, 0x0)

09:21:14 executing program 1:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x802})
ioctl$TUNSETPERSIST(r0, 0x400454c8, 0x0)

09:21:14 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/wireless\x00')
ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f00000000c0)=r1)
bind$alg(r0, &(0x7f0000002640)={0x26, 'aead\x00', 0x0, 0x0, 'rfc7539(cfb(twofish),rmd128-generic)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001400)="b7d9288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_ENABLE_CAP(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000480)={0x79})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000080)={0x7b})
r3 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r3, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001340)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r3, &(0x7f0000008cc0)=[{{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f00000002c0)=""/4096, 0x1000}], 0x1, 0x0, 0x232}}], 0x1, 0x0, 0x0)

[  426.814735][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  426.814754][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  426.820602][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  426.826401][    C1] protocol 88fb is buggy, dev hsr_slave_1
09:21:15 executing program 3:
syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5)
r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000700)='./\xe8_\x02\xde\x10\xb5\x14\xb9v\xbf8p\xeb\x11\x96\xd6$\x14p\x8cZ\x0f\xfc*\xa3kj\x01:\xcd{R\x97\xbd\x05&\xad\x13\xfcW#>\\I&m\x96W\x02\xb33X\x16Z\x82\xd7\x8a(n\xbc\x82gOEc\xd8V\x1b\xc8\\\xb4\atjsf\xf0:\xd5\xc2_\xf3f6\xfc\xb0\x06\xf9\f\xb5\xd4#\xf9J\xf0\xd8\xfe_\x1c\xff\xe0\"8\xdf\xf5^\\\xd6\x13\x85or#\xf38\xd9\xeeh\xb0%\xcc\xf7\xe5.\x8c\xa3\x7f\x84\x17l\r\x18\xd1\xea\x14\xa0\xcc\xd9\xb5\xc3_\x84\x93\xd1UG\xb3\x88*\x8a\xc7I\bD\riO\xe4\r\xfd\xbf\x98\xbd%\xc9(\xbe\xcd\b\x1b\x14\x8a\\\xdd\xd0\x86\x89\xed\xe9\xb09\xa3\xf4F%@&w\x89(\xb1\xeei\xf7\xde\xa1\xee\xbbj\xeb\x12', 0x200002, 0x0)
perf_event_open(&(0x7f0000000540)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', 0x4000, 0x28)
write$P9_RSETATTR(r1, 0x0, 0x3e7)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0)
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)=0x20042, 0x7)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0)
write$USERIO_CMD_SEND_INTERRUPT(r1, 0x0, 0xfffffffffffffecc)
keyctl$join(0x1, &(0x7f00000005c0))
r2 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x0, 0x880)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz0\x00', 0x1ff)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x5, &(0x7f0000000040)=0x6, 0x4)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4)
r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47744279}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
timerfd_settime(r5, 0x0, 0x0, 0x0)
lstat(&(0x7f0000000280)='./file0\x00', 0x0)
close(0xffffffffffffffff)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
userfaultfd(0x0)
r6 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x0, 0x0)
ioctl$VIDIOC_SUBDEV_S_SELECTION(r6, 0xc040563e, 0x0)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000080)={'bond_slave_0\x00', 0x400})
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x4})

[  426.955195][T16052] QAT: Invalid ioctl
09:21:15 executing program 1:
syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5)
r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000700)='./\xe8_\x02\xde\x10\xb5\x14\xb9v\xbf8p\xeb\x11\x96\xd6$\x14p\x8cZ\x0f\xfc*\xa3kj\x01:\xcd{R\x97\xbd\x05&\xad\x13\xfcW#>\\I&m\x96W\x02\xb33X\x16Z\x82\xd7\x8a(n\xbc\x82gOEc\xd8V\x1b\xc8\\\xb4\atjsf\xf0:\xd5\xc2_\xf3f6\xfc\xb0\x06\xf9\f\xb5\xd4#\xf9J\xf0\xd8\xfe_\x1c\xff\xe0\"8\xdf\xf5^\\\xd6\x13\x85or#\xf38\xd9\xeeh\xb0%\xcc\xf7\xe5.\x8c\xa3\x7f\x84\x17l\r\x18\xd1\xea\x14\xa0\xcc\xd9\xb5\xc3_\x84\x93\xd1UG\xb3\x88*\x8a\xc7I\bD\riO\xe4\r\xfd\xbf\x98\xbd%\xc9(\xbe\xcd\b\x1b\x14\x8a\\\xdd\xd0\x86\x89\xed\xe9\xb09\xa3\xf4F%@&w\x89(\xb1\xeei\xf7\xde\xa1\xee\xbbj\xeb\x12', 0x200002, 0x0)
perf_event_open(&(0x7f0000000540)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', 0x4000, 0x28)
write$P9_RSETATTR(r1, 0x0, 0x3e7)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0)
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)=0x20042, 0x7)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0)
write$USERIO_CMD_SEND_INTERRUPT(r1, 0x0, 0xfffffffffffffecc)
keyctl$join(0x1, &(0x7f00000005c0))
r2 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x0, 0x880)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz0\x00', 0x1ff)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x5, &(0x7f0000000040)=0x6, 0x4)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4)
r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47744279}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
timerfd_settime(r5, 0x0, 0x0, 0x0)
lstat(&(0x7f0000000280)='./file0\x00', 0x0)
close(0xffffffffffffffff)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
userfaultfd(0x0)
r6 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x0, 0x0)
ioctl$VIDIOC_SUBDEV_S_SELECTION(r6, 0xc040563e, 0x0)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000080)={'bond_slave_0\x00', 0x400})
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x4})

[  427.374717][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  427.380559][    C1] protocol 88fb is buggy, dev hsr_slave_1
[  427.386457][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  427.392245][    C1] protocol 88fb is buggy, dev hsr_slave_1
[  427.454924][T16077] QAT: Invalid ioctl
[  427.498691][T16078] QAT: Invalid ioctl
09:21:15 executing program 5:
syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5)
r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000700)='./\xe8_\x02\xde\x10\xb5\x14\xb9v\xbf8p\xeb\x11\x96\xd6$\x14p\x8cZ\x0f\xfc*\xa3kj\x01:\xcd{R\x97\xbd\x05&\xad\x13\xfcW#>\\I&m\x96W\x02\xb33X\x16Z\x82\xd7\x8a(n\xbc\x82gOEc\xd8V\x1b\xc8\\\xb4\atjsf\xf0:\xd5\xc2_\xf3f6\xfc\xb0\x06\xf9\f\xb5\xd4#\xf9J\xf0\xd8\xfe_\x1c\xff\xe0\"8\xdf\xf5^\\\xd6\x13\x85or#\xf38\xd9\xeeh\xb0%\xcc\xf7\xe5.\x8c\xa3\x7f\x84\x17l\r\x18\xd1\xea\x14\xa0\xcc\xd9\xb5\xc3_\x84\x93\xd1UG\xb3\x88*\x8a\xc7I\bD\riO\xe4\r\xfd\xbf\x98\xbd%\xc9(\xbe\xcd\b\x1b\x14\x8a\\\xdd\xd0\x86\x89\xed\xe9\xb09\xa3\xf4F%@&w\x89(\xb1\xeei\xf7\xde\xa1\xee\xbbj\xeb\x12', 0x200002, 0x0)
perf_event_open(&(0x7f0000000540)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', 0x4000, 0x28)
write$P9_RSETATTR(r1, 0x0, 0x3e7)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0)
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)=0x20042, 0x7)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0)
write$USERIO_CMD_SEND_INTERRUPT(r1, 0x0, 0xfffffffffffffecc)
keyctl$join(0x1, &(0x7f00000005c0))
r2 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x0, 0x880)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz0\x00', 0x1ff)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x5, &(0x7f0000000040)=0x6, 0x4)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4)
r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47744279}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
timerfd_settime(r5, 0x0, 0x0, 0x0)
lstat(&(0x7f0000000280)='./file0\x00', 0x0)
close(0xffffffffffffffff)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
userfaultfd(0x0)
r6 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x0, 0x0)
ioctl$VIDIOC_SUBDEV_S_SELECTION(r6, 0xc040563e, 0x0)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000080)={'bond_slave_0\x00', 0x400})
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x4})

09:21:16 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/wireless\x00')
ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f00000000c0)=r1)
bind$alg(r0, &(0x7f0000002640)={0x26, 'aead\x00', 0x0, 0x0, 'rfc7539(cfb(twofish),rmd128-generic)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001400)="b7d9288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_ENABLE_CAP(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000480)={0x79})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000080)={0x7b})
r3 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r3, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001340)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r3, &(0x7f0000008cc0)=[{{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f00000002c0)=""/4096, 0x1000}], 0x1, 0x0, 0x232}}], 0x1, 0x0, 0x0)

09:21:16 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/wireless\x00')
ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f00000000c0)=r1)
bind$alg(r0, &(0x7f0000002640)={0x26, 'aead\x00', 0x0, 0x0, 'rfc7539(cfb(twofish),rmd128-generic)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001400)="b7d9288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_ENABLE_CAP(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000480)={0x79})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000080)={0x7b})
r3 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r3, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001340)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r3, &(0x7f0000008cc0)=[{{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f00000002c0)=""/4096, 0x1000}], 0x1, 0x0, 0x232}}], 0x1, 0x0, 0x0)

09:21:16 executing program 3:
syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5)
r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000700)='./\xe8_\x02\xde\x10\xb5\x14\xb9v\xbf8p\xeb\x11\x96\xd6$\x14p\x8cZ\x0f\xfc*\xa3kj\x01:\xcd{R\x97\xbd\x05&\xad\x13\xfcW#>\\I&m\x96W\x02\xb33X\x16Z\x82\xd7\x8a(n\xbc\x82gOEc\xd8V\x1b\xc8\\\xb4\atjsf\xf0:\xd5\xc2_\xf3f6\xfc\xb0\x06\xf9\f\xb5\xd4#\xf9J\xf0\xd8\xfe_\x1c\xff\xe0\"8\xdf\xf5^\\\xd6\x13\x85or#\xf38\xd9\xeeh\xb0%\xcc\xf7\xe5.\x8c\xa3\x7f\x84\x17l\r\x18\xd1\xea\x14\xa0\xcc\xd9\xb5\xc3_\x84\x93\xd1UG\xb3\x88*\x8a\xc7I\bD\riO\xe4\r\xfd\xbf\x98\xbd%\xc9(\xbe\xcd\b\x1b\x14\x8a\\\xdd\xd0\x86\x89\xed\xe9\xb09\xa3\xf4F%@&w\x89(\xb1\xeei\xf7\xde\xa1\xee\xbbj\xeb\x12', 0x200002, 0x0)
perf_event_open(&(0x7f0000000540)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', 0x4000, 0x28)
write$P9_RSETATTR(r1, 0x0, 0x3e7)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0)
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)=0x20042, 0x7)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0)
write$USERIO_CMD_SEND_INTERRUPT(r1, 0x0, 0xfffffffffffffecc)
keyctl$join(0x1, &(0x7f00000005c0))
r2 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x0, 0x880)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz0\x00', 0x1ff)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x5, &(0x7f0000000040)=0x6, 0x4)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4)
r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47744279}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
timerfd_settime(r5, 0x0, 0x0, 0x0)
lstat(&(0x7f0000000280)='./file0\x00', 0x0)
close(0xffffffffffffffff)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
userfaultfd(0x0)
r6 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x0, 0x0)
ioctl$VIDIOC_SUBDEV_S_SELECTION(r6, 0xc040563e, 0x0)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000080)={'bond_slave_0\x00', 0x400})
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x4})

09:21:16 executing program 1:
syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5)
r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000700)='./\xe8_\x02\xde\x10\xb5\x14\xb9v\xbf8p\xeb\x11\x96\xd6$\x14p\x8cZ\x0f\xfc*\xa3kj\x01:\xcd{R\x97\xbd\x05&\xad\x13\xfcW#>\\I&m\x96W\x02\xb33X\x16Z\x82\xd7\x8a(n\xbc\x82gOEc\xd8V\x1b\xc8\\\xb4\atjsf\xf0:\xd5\xc2_\xf3f6\xfc\xb0\x06\xf9\f\xb5\xd4#\xf9J\xf0\xd8\xfe_\x1c\xff\xe0\"8\xdf\xf5^\\\xd6\x13\x85or#\xf38\xd9\xeeh\xb0%\xcc\xf7\xe5.\x8c\xa3\x7f\x84\x17l\r\x18\xd1\xea\x14\xa0\xcc\xd9\xb5\xc3_\x84\x93\xd1UG\xb3\x88*\x8a\xc7I\bD\riO\xe4\r\xfd\xbf\x98\xbd%\xc9(\xbe\xcd\b\x1b\x14\x8a\\\xdd\xd0\x86\x89\xed\xe9\xb09\xa3\xf4F%@&w\x89(\xb1\xeei\xf7\xde\xa1\xee\xbbj\xeb\x12', 0x200002, 0x0)
perf_event_open(&(0x7f0000000540)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', 0x4000, 0x28)
write$P9_RSETATTR(r1, 0x0, 0x3e7)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0)
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)=0x20042, 0x7)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0)
write$USERIO_CMD_SEND_INTERRUPT(r1, 0x0, 0xfffffffffffffecc)
keyctl$join(0x1, &(0x7f00000005c0))
r2 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x0, 0x880)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz0\x00', 0x1ff)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x5, &(0x7f0000000040)=0x6, 0x4)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4)
r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47744279}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
timerfd_settime(r5, 0x0, 0x0, 0x0)
lstat(&(0x7f0000000280)='./file0\x00', 0x0)
close(0xffffffffffffffff)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
userfaultfd(0x0)
r6 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x0, 0x0)
ioctl$VIDIOC_SUBDEV_S_SELECTION(r6, 0xc040563e, 0x0)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000080)={'bond_slave_0\x00', 0x400})
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x4})

[  428.115796][T16091] QAT: Invalid ioctl
09:21:16 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/wireless\x00')
ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f00000000c0)=r1)
bind$alg(r0, &(0x7f0000002640)={0x26, 'aead\x00', 0x0, 0x0, 'rfc7539(cfb(twofish),rmd128-generic)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001400)="b7d9288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_ENABLE_CAP(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000480)={0x79})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000080)={0x7b})
r3 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r3, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001340)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r3, &(0x7f0000008cc0)=[{{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f00000002c0)=""/4096, 0x1000}], 0x1, 0x0, 0x232}}], 0x1, 0x0, 0x0)

[  428.430213][T16098] QAT: Invalid ioctl
[  428.788632][T16108] QAT: Invalid ioctl
09:21:17 executing program 5:
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000000)=[{&(0x7f0000000500)="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", 0x101, 0x400}], 0x0, 0x0)

09:21:17 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
dup2(r0, r2)
dup3(r2, r1, 0x0)

09:21:17 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x1d4)
connect$inet6(r0, &(0x7f0000000080), 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000140)='tls\x00', 0x3b2)
setsockopt$inet6_opts(r0, 0x29, 0x3b, 0x0, 0x0)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000100), 0x28)

09:21:17 executing program 1:
syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5)
r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000700)='./\xe8_\x02\xde\x10\xb5\x14\xb9v\xbf8p\xeb\x11\x96\xd6$\x14p\x8cZ\x0f\xfc*\xa3kj\x01:\xcd{R\x97\xbd\x05&\xad\x13\xfcW#>\\I&m\x96W\x02\xb33X\x16Z\x82\xd7\x8a(n\xbc\x82gOEc\xd8V\x1b\xc8\\\xb4\atjsf\xf0:\xd5\xc2_\xf3f6\xfc\xb0\x06\xf9\f\xb5\xd4#\xf9J\xf0\xd8\xfe_\x1c\xff\xe0\"8\xdf\xf5^\\\xd6\x13\x85or#\xf38\xd9\xeeh\xb0%\xcc\xf7\xe5.\x8c\xa3\x7f\x84\x17l\r\x18\xd1\xea\x14\xa0\xcc\xd9\xb5\xc3_\x84\x93\xd1UG\xb3\x88*\x8a\xc7I\bD\riO\xe4\r\xfd\xbf\x98\xbd%\xc9(\xbe\xcd\b\x1b\x14\x8a\\\xdd\xd0\x86\x89\xed\xe9\xb09\xa3\xf4F%@&w\x89(\xb1\xeei\xf7\xde\xa1\xee\xbbj\xeb\x12', 0x200002, 0x0)
perf_event_open(&(0x7f0000000540)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', 0x4000, 0x28)
write$P9_RSETATTR(r1, 0x0, 0x3e7)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0)
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)=0x20042, 0x7)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0)
write$USERIO_CMD_SEND_INTERRUPT(r1, 0x0, 0xfffffffffffffecc)
keyctl$join(0x1, &(0x7f00000005c0))
r2 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x0, 0x880)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz0\x00', 0x1ff)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x5, &(0x7f0000000040)=0x6, 0x4)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4)
r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47744279}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
timerfd_settime(r5, 0x0, 0x0, 0x0)
lstat(&(0x7f0000000280)='./file0\x00', 0x0)
close(0xffffffffffffffff)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
userfaultfd(0x0)
r6 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x0, 0x0)
ioctl$VIDIOC_SUBDEV_S_SELECTION(r6, 0xc040563e, 0x0)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000080)={'bond_slave_0\x00', 0x400})
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x4})

[  429.325783][T16107] kasan: CONFIG_KASAN_INLINE enabled
[  429.341265][T16107] kasan: GPF could be caused by NULL-ptr deref or user memory access
[  429.361976][T16107] general protection fault: 0000 [#1] PREEMPT SMP KASAN
[  429.368938][T16107] CPU: 0 PID: 16107 Comm: syz-executor3 Not tainted 5.0.0-rc4-next-20190130 #22
[  429.377959][T16107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  429.388043][T16107] RIP: 0010:debugfs_create_files+0x2e/0x140
[  429.393939][T16107] Code: 41 56 49 89 fe 41 55 41 54 49 89 f4 53 48 89 d3 e8 87 d0 f3 fd 49 8d 7e 58 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 e3 00 00 00 48 b8 00 00 00 00 00 fc ff df 4d 8b
[  429.413535][T16107] RSP: 0018:ffff888089417868 EFLAGS: 00010203
[  429.419597][T16107] RAX: dffffc0000000000 RBX: ffffffff8881d400 RCX: ffffc9000ca45000
[  429.427561][T16107] RDX: 0000000000000008 RSI: ffffffff838e48c9 RDI: 0000000000000047
[  429.435526][T16107] RBP: ffff888089417888 R08: ffff888060ff0300 R09: fffffbfff13024e6
[  429.443491][T16107] R10: fffffbfff13024e5 R11: ffffffff8981272b R12: ffff8880a33e4680
[  429.451460][T16107] R13: ffff8880a33e4680 R14: ffffffffffffffef R15: ffff8880a33e4748
[  429.459447][T16107] FS:  00007f83d02c4700(0000) GS:ffff8880ae600000(0000) knlGS:0000000000000000
[  429.468365][T16107] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  429.474972][T16107] CR2: 00007ffe41149f78 CR3: 0000000094256000 CR4: 00000000001426f0
[  429.482956][T16107] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  429.490937][T16107] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  429.498913][T16107] Call Trace:
[  429.502205][T16107]  blk_mq_debugfs_register+0xec/0x4e0
[  429.507580][T16107]  blk_register_queue+0x1bc/0x370
[  429.512607][T16107]  __device_add_disk+0xe9f/0x13c0
[  429.517637][T16107]  ? blk_alloc_devt+0x2e0/0x2e0
[  429.522491][T16107]  ? sprintf+0xc0/0x100
[  429.526660][T16107]  ? scnprintf+0x140/0x140
[  429.531075][T16107]  ? disk_expand_part_tbl+0x3d0/0x3d0
[  429.536460][T16107]  device_add_disk+0x2b/0x40
[  429.541049][T16107]  loop_add+0x71d/0xa30
[  429.545205][T16107]  ? loop_queue_rq+0x730/0x730
[  429.549969][T16107]  loop_control_ioctl+0x18e/0x470
[  429.555005][T16107]  ? loop_add+0xa30/0xa30
[  429.559368][T16107]  ? ksys_dup3+0x660/0x660
[  429.563791][T16107]  ? lock_release+0xc40/0xc40
[  429.568479][T16107]  ? loop_add+0xa30/0xa30
[  429.572823][T16107]  do_vfs_ioctl+0x107b/0x17d0
[  429.577517][T16107]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[  429.582973][T16107]  ? lockdep_hardirqs_on+0x418/0x5d0
[  429.588254][T16107]  ? ioctl_preallocate+0x2f0/0x2f0
[  429.593383][T16107]  ? __fget_light+0x2db/0x420
[  429.598057][T16107]  ? fget_raw+0x20/0x20
[  429.602227][T16107]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[  429.607687][T16107]  ? security_file_ioctl+0x93/0xc0
[  429.612812][T16107]  ksys_ioctl+0xab/0xd0
[  429.616970][T16107]  __x64_sys_ioctl+0x73/0xb0
[  429.621554][T16107]  ? do_syscall_64+0x18d/0x800
[  429.626358][T16107]  do_syscall_64+0x1a3/0x800
[  429.630952][T16107]  ? syscall_return_slowpath+0x5f0/0x5f0
[  429.636580][T16107]  ? prepare_exit_to_usermode+0x232/0x3b0
[  429.642296][T16107]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  429.647856][T16107]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  429.653753][T16107] RIP: 0033:0x458089
[  429.657641][T16107] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  429.677235][T16107] RSP: 002b:00007f83d02c3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  429.685644][T16107] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000458089
[  429.693625][T16107] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000006
[  429.701589][T16107] RBP: 000000000073c0e0 R08: 0000000000000000 R09: 0000000000000000
[  429.709556][T16107] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f83d02c46d4
[  429.717535][T16107] R13: 00000000004c136e R14: 00000000004d3130 R15: 00000000ffffffff
[  429.725508][T16107] Modules linked in:
[  429.749026][T16099] kobject: 'kvm' (00000000549ae838): kobject_uevent_env
[  429.756045][T16099] kobject: 'kvm' (00000000549ae838): fill_kobj_path: path = '/devices/virtual/misc/kvm'
[  429.774729][T16107] ---[ end trace 89606fb3f353322d ]---
[  429.783357][T16107] RIP: 0010:debugfs_create_files+0x2e/0x140
09:21:17 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/wireless\x00')
ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f00000000c0)=r1)
bind$alg(r0, &(0x7f0000002640)={0x26, 'aead\x00', 0x0, 0x0, 'rfc7539(cfb(twofish),rmd128-generic)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001400)="b7d9288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_ENABLE_CAP(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000480)={0x79})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000080)={0x7b})
r3 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r3, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001340)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
recvmmsg(r3, &(0x7f0000008cc0)=[{{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f00000002c0)=""/4096, 0x1000}], 0x1, 0x0, 0x232}}], 0x1, 0x0, 0x0)

[  429.794701][T16107] Code: 41 56 49 89 fe 41 55 41 54 49 89 f4 53 48 89 d3 e8 87 d0 f3 fd 49 8d 7e 58 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 e3 00 00 00 48 b8 00 00 00 00 00 fc ff df 4d 8b
[  429.814736][T16107] RSP: 0018:ffff888089417868 EFLAGS: 00010203
[  429.820881][T16107] RAX: dffffc0000000000 RBX: ffffffff8881d400 RCX: ffffc9000ca45000
[  429.829570][T16107] RDX: 0000000000000008 RSI: ffffffff838e48c9 RDI: 0000000000000047
[  429.837713][T16107] RBP: ffff888089417888 R08: ffff888060ff0300 R09: fffffbfff13024e6
[  429.851935][T16107] R10: fffffbfff13024e5 R11: ffffffff8981272b R12: ffff8880a33e4680
[  429.859964][T16107] R13: ffff8880a33e4680 R14: ffffffffffffffef R15: ffff8880a33e4748
[  429.868494][T16107] FS:  00007f83d02c4700(0000) GS:ffff8880ae600000(0000) knlGS:0000000000000000
[  429.877478][T16107] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  429.884057][T16107] CR2: 0000001b31d2a000 CR3: 0000000094256000 CR4: 00000000001406f0
[  429.892077][T16107] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  429.900102][T16107] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  429.901020][T16115] QAT: Invalid ioctl
[  429.908133][T16107] Kernel panic - not syncing: Fatal exception
[  429.909171][T16107] Kernel Offset: disabled
[  429.923397][T16107] Rebooting in 86400 seconds..