[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 55.698016][ T26] audit: type=1800 audit(1573976646.866:25): pid=8712 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 55.718638][ T26] audit: type=1800 audit(1573976646.866:26): pid=8712 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 55.773637][ T26] audit: type=1800 audit(1573976646.866:27): pid=8712 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.100' (ECDSA) to the list of known hosts. 2019/11/17 07:44:14 fuzzer started 2019/11/17 07:44:16 dialing manager at 10.128.0.26:44591 2019/11/17 07:44:16 syscalls: 2566 2019/11/17 07:44:16 code coverage: enabled 2019/11/17 07:44:16 comparison tracing: enabled 2019/11/17 07:44:16 extra coverage: enabled 2019/11/17 07:44:16 setuid sandbox: enabled 2019/11/17 07:44:16 namespace sandbox: enabled 2019/11/17 07:44:16 Android sandbox: /sys/fs/selinux/policy does not exist 2019/11/17 07:44:16 fault injection: enabled 2019/11/17 07:44:16 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/11/17 07:44:16 net packet injection: enabled 2019/11/17 07:44:16 net device setup: enabled 2019/11/17 07:44:16 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2019/11/17 07:44:16 devlink PCI setup: PCI device 0000:00:10.0 is not available 07:46:45 executing program 0: 07:46:45 executing program 1: syzkaller login: [ 214.576481][ T8878] IPVS: ftp: loaded support on port[0] = 21 [ 214.735401][ T8878] chnl_net:caif_netlink_parms(): no params data found [ 214.737452][ T8880] IPVS: ftp: loaded support on port[0] = 21 07:46:45 executing program 2: [ 214.804966][ T8878] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.813132][ T8878] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.821678][ T8878] device bridge_slave_0 entered promiscuous mode [ 214.843660][ T8878] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.851475][ T8878] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.860007][ T8878] device bridge_slave_1 entered promiscuous mode [ 214.939822][ T8878] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 214.969985][ T8878] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 215.003905][ T8878] team0: Port device team_slave_0 added [ 215.013338][ T8878] team0: Port device team_slave_1 added [ 215.022703][ T8880] chnl_net:caif_netlink_parms(): no params data found [ 215.056891][ T8884] IPVS: ftp: loaded support on port[0] = 21 07:46:46 executing program 3: [ 215.154281][ T8878] device hsr_slave_0 entered promiscuous mode [ 215.210609][ T8878] device hsr_slave_1 entered promiscuous mode [ 215.302283][ T8886] IPVS: ftp: loaded support on port[0] = 21 [ 215.312972][ T8880] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.320925][ T8880] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.328560][ T8880] device bridge_slave_0 entered promiscuous mode [ 215.354175][ T8880] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.364283][ T8880] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.372823][ T8880] device bridge_slave_1 entered promiscuous mode 07:46:46 executing program 4: [ 215.436109][ T8878] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 215.534271][ T8878] netdevsim netdevsim0 netdevsim1: renamed from eth1 07:46:46 executing program 5: [ 215.602951][ T8878] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 215.662138][ T8880] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 215.677505][ T8880] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 215.693876][ T8878] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 215.774908][ T8880] team0: Port device team_slave_0 added [ 215.791735][ T8888] IPVS: ftp: loaded support on port[0] = 21 [ 215.801334][ T8890] IPVS: ftp: loaded support on port[0] = 21 [ 215.811888][ T8880] team0: Port device team_slave_1 added [ 215.901152][ T8880] device hsr_slave_0 entered promiscuous mode [ 215.949535][ T8880] device hsr_slave_1 entered promiscuous mode [ 216.009568][ T8880] debugfs: Directory 'hsr0' with parent '/' already present! [ 216.054213][ T8884] chnl_net:caif_netlink_parms(): no params data found [ 216.188580][ T8880] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 216.241056][ T8880] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 216.291965][ T8880] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 216.352428][ T8880] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 216.403169][ T8884] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.411200][ T8884] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.418889][ T8884] device bridge_slave_0 entered promiscuous mode [ 216.430000][ T8884] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.437054][ T8884] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.445378][ T8884] device bridge_slave_1 entered promiscuous mode [ 216.483971][ T8886] chnl_net:caif_netlink_parms(): no params data found [ 216.518119][ T8890] chnl_net:caif_netlink_parms(): no params data found [ 216.545349][ T8884] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 216.593893][ T8884] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 216.609692][ T8888] chnl_net:caif_netlink_parms(): no params data found [ 216.650990][ T8884] team0: Port device team_slave_0 added [ 216.659877][ T8886] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.666936][ T8886] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.678674][ T8886] device bridge_slave_0 entered promiscuous mode [ 216.703108][ T8884] team0: Port device team_slave_1 added [ 216.717339][ T8886] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.725071][ T8886] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.736547][ T8886] device bridge_slave_1 entered promiscuous mode [ 216.766860][ T8878] 8021q: adding VLAN 0 to HW filter on device bond0 [ 216.773920][ T8890] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.781111][ T8890] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.788753][ T8890] device bridge_slave_0 entered promiscuous mode [ 216.797801][ T8886] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 216.811462][ T8886] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 216.892398][ T8884] device hsr_slave_0 entered promiscuous mode [ 216.949534][ T8884] device hsr_slave_1 entered promiscuous mode [ 216.989809][ T8884] debugfs: Directory 'hsr0' with parent '/' already present! [ 216.997468][ T8890] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.005250][ T8890] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.013423][ T8890] device bridge_slave_1 entered promiscuous mode [ 217.034143][ T8888] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.041377][ T8888] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.049028][ T8888] device bridge_slave_0 entered promiscuous mode [ 217.081326][ T8886] team0: Port device team_slave_0 added [ 217.091247][ T8888] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.098332][ T8888] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.106597][ T8888] device bridge_slave_1 entered promiscuous mode [ 217.132120][ T8886] team0: Port device team_slave_1 added [ 217.156903][ T8890] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 217.173323][ T2910] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 217.183651][ T2910] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 217.205054][ T8878] 8021q: adding VLAN 0 to HW filter on device team0 [ 217.215768][ T8890] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 217.226645][ T8888] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 217.237475][ T8888] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 217.291255][ T8886] device hsr_slave_0 entered promiscuous mode [ 217.329584][ T8886] device hsr_slave_1 entered promiscuous mode [ 217.389317][ T8886] debugfs: Directory 'hsr0' with parent '/' already present! [ 217.413824][ T8884] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 217.475520][ T8884] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 217.525814][ T8884] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 217.595325][ T8884] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 217.662457][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 217.671741][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 217.680450][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.687594][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 217.695714][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 217.704482][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 217.713187][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.720345][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 217.728368][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 217.741453][ T8890] team0: Port device team_slave_0 added [ 217.751113][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 217.768245][ T8880] 8021q: adding VLAN 0 to HW filter on device bond0 [ 217.791937][ T8888] team0: Port device team_slave_0 added [ 217.803473][ T8890] team0: Port device team_slave_1 added [ 217.822786][ T8896] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 217.831768][ T8896] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 217.840731][ T8896] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 217.866365][ T8880] 8021q: adding VLAN 0 to HW filter on device team0 [ 217.890490][ T8888] team0: Port device team_slave_1 added [ 217.913032][ T8890] device hsr_slave_0 entered promiscuous mode [ 217.969631][ T8890] device hsr_slave_1 entered promiscuous mode [ 218.009279][ T8890] debugfs: Directory 'hsr0' with parent '/' already present! [ 218.026583][ T8896] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 218.035321][ T8896] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 218.043199][ T8896] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 218.051676][ T8896] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 218.060419][ T8896] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 218.121185][ T8888] device hsr_slave_0 entered promiscuous mode [ 218.169659][ T8888] device hsr_slave_1 entered promiscuous mode [ 218.219296][ T8888] debugfs: Directory 'hsr0' with parent '/' already present! [ 218.237099][ T8878] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 218.249590][ T8878] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 218.261617][ T3082] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 218.271136][ T3082] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 218.280197][ T3082] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.287302][ T3082] bridge0: port 1(bridge_slave_0) entered forwarding state [ 218.295636][ T3082] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 218.304135][ T3082] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 218.313195][ T3082] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 218.321595][ T3082] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 218.330205][ T8886] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 218.361308][ T8886] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 218.402045][ T8886] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 218.465162][ T8886] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 218.521258][ T3082] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 218.530456][ T3082] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 218.577066][ T8888] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 218.611357][ T8888] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 218.673999][ T8888] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 218.732373][ T2910] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 218.742554][ T2910] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 218.751789][ T2910] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.758906][ T2910] bridge0: port 2(bridge_slave_1) entered forwarding state [ 218.779033][ T8878] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 218.793960][ T8888] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 218.854534][ T2910] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 218.863526][ T2910] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 218.871030][ T2910] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 218.897104][ T8884] 8021q: adding VLAN 0 to HW filter on device bond0 [ 218.927197][ T2910] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 218.936364][ T8890] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 218.992439][ T8890] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 219.052333][ T8890] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 219.122953][ T8890] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 219.198211][ T8884] 8021q: adding VLAN 0 to HW filter on device team0 [ 219.207865][ T2910] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 219.216921][ T2910] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 219.278012][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 219.288855][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 219.297931][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 219.307595][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 219.316661][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready 07:46:50 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1}) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f00000004c0)="f21d83", 0x3) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000900)={{{@in=@local, @in6=@mcast2}}, {{@in6=@empty}, 0x0, @in6=@mcast2}}, &(0x7f0000000540)=0xe22a00e413e12ab6) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000380)=0x14) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000480)={0x0, @rand_addr, @local}, 0x5) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYRES16=0x0], 0x1}}, 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000f80)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000700000004000000a8040000800200000000000000000000c0030000c0030000c0030000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f0004001"], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 219.325346][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 219.334254][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 219.343028][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 219.353667][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 219.363010][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 219.371795][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.378955][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 219.404072][ T8886] 8021q: adding VLAN 0 to HW filter on device bond0 [ 219.413226][ T8880] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 219.437436][ T8902] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 219.443001][ T8896] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 219.462585][ T8896] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 219.496600][ T2910] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 219.512946][ T2910] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 219.524143][ T2910] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.531270][ T2910] bridge0: port 2(bridge_slave_1) entered forwarding state [ 219.534888][ T2910] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 219.553201][ T2910] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 219.562990][ T2910] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 219.577297][ T8886] 8021q: adding VLAN 0 to HW filter on device team0 07:46:50 executing program 0: sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="18000500014010000000000000000000e308"], 0x12}}], 0x1, 0x0) sigaltstack(&(0x7f0000001000/0x3000)=nil, 0xfffffffffffffffd) sigaltstack(&(0x7f0000001000/0x2000)=nil, 0x0) [ 219.617184][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 219.626413][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 219.635687][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready 07:46:50 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1}) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000380)=0x14) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000480)={0x0, @rand_addr, @local}, 0x5) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYRES16=0x0], 0x1}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 219.669983][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 219.678757][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 219.695546][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 219.735696][ T8884] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 219.753531][ T8884] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 219.777185][ T8888] 8021q: adding VLAN 0 to HW filter on device bond0 [ 219.787353][ T3082] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 219.795441][ T3082] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 219.826361][ T3082] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 219.835958][ T3082] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 219.844640][ T3082] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.851756][ T3082] bridge0: port 1(bridge_slave_0) entered forwarding state [ 219.860988][ T3082] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 219.869730][ T3082] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 219.878490][ T3082] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 219.887481][ T3082] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 219.910514][ T3082] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 219.918482][ T3082] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready 07:46:51 executing program 0: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) sendto$inet(r0, &(0x7f00000015c0)="731247f8bf09abec01ce", 0xa, 0x8800, &(0x7f0000000000)={0x2, 0x4e23, @remote}, 0x10) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000001640)={0x3c, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x28, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8}]}]}]}, 0x3c}}, 0x0) recvmmsg(r0, &(0x7f0000008100)=[{{0x0, 0x0, &(0x7f0000004580)=[{&(0x7f0000002080)=""/240, 0xf0}], 0x1}}], 0x1, 0x0, 0x0) [ 219.938457][ T8890] 8021q: adding VLAN 0 to HW filter on device bond0 [ 219.959700][ T8880] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 219.998272][ T8896] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 220.011708][ T8916] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 220.031978][ T8896] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 220.041076][ T8896] bridge0: port 2(bridge_slave_1) entered blocking state 07:46:51 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x8031, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 220.048126][ T8896] bridge0: port 2(bridge_slave_1) entered forwarding state [ 220.066630][ T8896] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 220.077318][ T8896] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 220.085626][ T8896] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 220.117738][ T8890] 8021q: adding VLAN 0 to HW filter on device team0 [ 220.173614][ T8888] 8021q: adding VLAN 0 to HW filter on device team0 [ 220.182014][ T8893] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 220.200087][ T8893] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 220.207772][ T8893] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 220.230688][ T8893] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 220.245982][ T8893] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 220.254658][ T8893] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 220.270600][ T8893] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 220.351701][ T8884] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 220.369566][ T8893] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 220.377321][ T8893] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 220.395373][ T8893] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 220.405430][ T8893] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.412586][ T8893] bridge0: port 1(bridge_slave_0) entered forwarding state [ 220.427817][ T8893] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 220.436829][ T8893] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready 07:46:51 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f00000002c0)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}]}) [ 220.452400][ T8893] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.459603][ T8893] bridge0: port 2(bridge_slave_1) entered forwarding state [ 220.478702][ T8893] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 220.488097][ T8893] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 220.505259][ T8893] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 220.513976][ T8893] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 220.528265][ T8893] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 220.537434][ T8893] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 220.546952][ T8893] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 220.555655][ T8893] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 220.564255][ T8893] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.571399][ T8893] bridge0: port 1(bridge_slave_0) entered forwarding state [ 220.580913][ T8893] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 220.589745][ T8893] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 220.598193][ T8893] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.605320][ T8893] bridge0: port 2(bridge_slave_1) entered forwarding state [ 220.614949][ T8893] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 220.628800][ T8886] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 220.643921][ T8886] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready 07:46:51 executing program 1: perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getrusage(0x1, &(0x7f00000003c0)) [ 220.677142][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 220.686739][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 220.711058][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready 07:46:51 executing program 0: kcmp(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000fb], 0x0, 0x205211}) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000300)={0x0, 0x0, @pic={0x0, 0x8}}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) socketpair$unix(0x1, 0x0, 0x0, 0x0) dup(0xffffffffffffffff) [ 220.720227][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 220.728600][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 220.780144][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 220.788764][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 220.806375][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 220.815478][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 220.864089][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 220.884956][ C1] hrtimer: interrupt took 28839 ns [ 220.885845][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 220.902817][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 220.911889][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready 07:46:52 executing program 2: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x400000000000010, 0x802, 0x14) sendmsg$TIPC_CMD_DISABLE_BEARER(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x0, 0x4, 0x0, 0x0, {{}, 0x0, 0x4102, 0x0, {0xc, 0x13, @l2={'ib', 0x3a, 'bpq0\x00'}}}}, 0x28}}, 0x0) [ 220.981104][ T8893] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 220.992246][ T8893] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 221.012766][ T8893] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 221.051030][ T8893] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 221.069334][ T8893] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 221.077786][ T8893] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 221.096076][ T8886] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 221.110532][ T2910] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 221.120801][ T2910] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 221.130133][ T2910] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 221.138555][ T2910] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 221.179068][ T8888] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 221.200884][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 221.220407][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 221.230200][ T8890] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 221.302955][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 221.318028][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 221.346374][ T8890] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 221.358428][ T3082] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 221.369415][ T3082] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready 07:46:52 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 221.396330][ T8888] 8021q: adding VLAN 0 to HW filter on device batadv0 07:46:52 executing program 4: 07:46:52 executing program 5: socketpair$unix(0x1, 0x5, 0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000140)={0x0, 0x0}) migrate_pages(r0, 0x0, 0x0, 0x0) migrate_pages(0x0, 0x0, 0x0, 0x0) gettid() inotify_init1(0x0) migrate_pages(0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x373, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r1 = getpid() creat(0x0, 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) tkill(r1, 0x0) timerfd_create(0x8, 0x0) syz_open_procfs(0x0, &(0x7f00000003c0)='nW\x85\x94\xf9\x1ff\xce\xcan\xfaA\xfe\xc1et/if_inet6\x00') ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x10005812}) ioctl$sock_ifreq(0xffffffffffffffff, 0x8914, &(0x7f0000000200)={'eql\x00`\x00\xa9[,\x00\x14\x01\x03\x03\xf0\x00', @ifru_mtu=0x1}) setuid(0x0) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f00000002c0)={0x90, 0xb, 0x3, {0x0, 0x3, 0x7f50, 0x5, 0xc, 0x7, {0x6, 0x77, 0x0, 0x1f, 0x0, 0x7fff, 0x7c, 0x0, 0x5, 0x7660, 0x0, 0x0, 0x0, 0x4, 0x800}}}, 0x90) 07:46:52 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) wait4(0x0, 0x0, 0x8000000a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@remote, 0x3e}) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0x41}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 07:46:52 executing program 0: perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x20, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000480)="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", 0xffa) vmsplice(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000002c0)}, {&(0x7f0000001480)="791183c0acb756fb1fd1696be80456c57400afe302ff350b14f3188904d7304a7b35b645e5", 0x25}, {&(0x7f0000000100)="f45bb4267523dce984db605b59ba13e41e589c9fb0b3a4ad8114eca547a5", 0x1e}], 0x3, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000057fa0)=[{}], 0x18) clone(0x2102201ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(0xffffffffffffffff, &(0x7f0000000240)='\x00', 0x0, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001640)={{{@in=@initdev, @in6=@dev}}, {{@in6=@empty}, 0x0, @in=@multicast1}}, &(0x7f0000001740)=0xe8) fstat(0xffffffffffffffff, &(0x7f0000000480)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000b34ff8), 0x0) getrandom(&(0x7f0000001600)=""/24, 0x18, 0x2) 07:46:52 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='proc\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='schedstat\x00') r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = memfd_create(&(0x7f0000000300)='\xb3\x17MS\xdb\xe0\x91~\xd8\x10\xb3\xd4\x9b\xfa\xdc\x1c\xb2\xc7\xdcp<\xefB\x05J\xe4cE\xbe\xd1C\xb5J\x16\'\xfb~\xfa\xfd\xbd\xdb\xc5\'\x8dmm\x9d\x9d\x1cv\x91y\xca\xec\xc7\xa5\xfa\xdf\xdc\xa7&!^\xac\x89a\x8c4\xa6\x85~e< \xc8d\xc4\xce\x7f\xb80\xd3\x03\x97\xea\x98\xfb.x\x1a3\x17\r\x00\xc8\xd0G\x1dq\x9c\x90g7$S8Sw:(+\xd6x$\xd4\xb2L\xf8\xf0<\n-\xe6\xb1\x0e&f\xec{YP%f\x02,M@a{\xe1\xeb*\x93\t', 0x0) write$FUSE_DIRENT(r1, &(0x7f0000000080)=ANY=[], 0x29) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2000089, 0x11, r1, 0x0) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0) pread64(r5, 0x0, 0x0, 0x1ff) 07:46:52 executing program 3: 07:46:53 executing program 4: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./bus/file0\x00', 0x0) setxattr$trusted_overlay_origin(&(0x7f00000001c0)='./bus/file0\x00', &(0x7f0000000200)='trusted.overlay.origin\x00', 0x0, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) dup3(r0, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000140)='./bus/file0\x00') 07:46:53 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x6, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffff7}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) timer_create(0x0, 0x0, &(0x7f0000000340)) 07:46:53 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x2) sendmmsg(r0, &(0x7f00000000c0)=[{{&(0x7f00000004c0)=@in6={0xa, 0x0, 0x0, @mcast2={0xff, 0x3}}, 0x80, 0x0}}], 0x1, 0x0) 07:46:53 executing program 0: perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x20, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000480)="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", 0xffa) vmsplice(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000002c0)}, {&(0x7f0000001480)="791183c0acb756fb1fd1696be80456c57400afe302ff350b14f3188904d7304a7b35b645e5", 0x25}, {&(0x7f0000000100)="f45bb4267523dce984db605b59ba13e41e589c9fb0b3a4ad8114eca547a5", 0x1e}], 0x3, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000057fa0)=[{}], 0x18) clone(0x2102201ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(0xffffffffffffffff, &(0x7f0000000240)='\x00', 0x0, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001640)={{{@in=@initdev, @in6=@dev}}, {{@in6=@empty}, 0x0, @in=@multicast1}}, &(0x7f0000001740)=0xe8) fstat(0xffffffffffffffff, &(0x7f0000000480)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000b34ff8), 0x0) getrandom(&(0x7f0000001600)=""/24, 0x18, 0x2) 07:46:53 executing program 2: r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56) 07:46:53 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x15, 0x1000000010, 0x3}, 0x3c) bpf$MAP_UPDATE_ELEM(0x16, &(0x7f00000002c0)={r0, 0x0, 0x0}, 0x20) 07:46:53 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000001900)) r1 = syz_open_pts(r0, 0x0) perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(r1, 0x0, 0x0) 07:46:53 executing program 5: socketpair$unix(0x1, 0x5, 0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000140)={0x0, 0x0}) migrate_pages(r0, 0x0, 0x0, 0x0) migrate_pages(0x0, 0x0, 0x0, 0x0) gettid() inotify_init1(0x0) migrate_pages(0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x373, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r1 = getpid() creat(0x0, 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) tkill(r1, 0x0) timerfd_create(0x8, 0x0) syz_open_procfs(0x0, &(0x7f00000003c0)='nW\x85\x94\xf9\x1ff\xce\xcan\xfaA\xfe\xc1et/if_inet6\x00') ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x10005812}) ioctl$sock_ifreq(0xffffffffffffffff, 0x8914, &(0x7f0000000200)={'eql\x00`\x00\xa9[,\x00\x14\x01\x03\x03\xf0\x00', @ifru_mtu=0x1}) setuid(0x0) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f00000002c0)={0x90, 0xb, 0x3, {0x0, 0x3, 0x7f50, 0x5, 0xc, 0x7, {0x6, 0x77, 0x0, 0x1f, 0x0, 0x7fff, 0x7c, 0x0, 0x5, 0x7660, 0x0, 0x0, 0x0, 0x4, 0x800}}}, 0x90) 07:46:53 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x19}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 07:46:53 executing program 1: 07:46:53 executing program 4: socketpair$unix(0x1, 0x5, 0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000140)={0x0, 0x0}) migrate_pages(r0, 0x0, 0x0, 0x0) migrate_pages(0x0, 0x0, 0x0, 0x0) gettid() inotify_init1(0x0) migrate_pages(0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x373, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r1 = getpid() creat(0x0, 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) tkill(r1, 0x0) timerfd_create(0x8, 0x0) syz_open_procfs(0x0, &(0x7f00000003c0)='nW\x85\x94\xf9\x1ff\xce\xcan\xfaA\xfe\xc1et/if_inet6\x00') ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x10005812}) ioctl$sock_ifreq(0xffffffffffffffff, 0x8914, &(0x7f0000000200)={'eql\x00`\x00\xa9[,\x00\x14\x01\x03\x03\xf0\x00', @ifru_mtu=0x1}) setuid(0x0) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f00000002c0)={0x90, 0xb, 0x3, {0x0, 0x3, 0x7f50, 0x5, 0xc, 0x7, {0x6, 0x77, 0x0, 0x1f, 0x0, 0x7fff, 0x7c, 0x0, 0x5, 0x7660, 0x0, 0x0, 0x0, 0x4, 0x800}}}, 0x90) 07:46:53 executing program 0: 07:46:53 executing program 1: syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000040)="9a00000000b100660f001deb6f000065260f79b900000080640fc71ab8f5ffffffbaffffffff0f3066b893000f070f01c8b8df000000c744240000000000c744240202000000c7442406000000000f011c240f300f0fd4aec4e27d18c70f06b8000000800f23d00f21f8352000000a0f23f8000000000f10c744240000000000c744240200000000c7c2a406000000000f011424", 0x94}], 0x1, 0x0, 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="a48b12f7284b2b5d2f2fba4fad273b1ea3e46f905080af4cf9f43b1136655aae84d1d2c690ccb15322e20000007c7d87a012bf7e4a2d74a75d00008489ef41b4ef4a6566a55fd4caa8d6c0dee265ea2121b173c73f15984fdd5bd24e99b71a8d7f2c4564001e29106fa8cd40e6b02b7dcd2809fe1e135ab1731fbdf7c2a5fae9acc79f793d07a3a4c1e6544bb07d9d1438733ca9997fb677a0b480f808e1251c0fbac0790ad0cf944599b4b23297e30e613b9597029ec9408003da0c2aca5285838440c370fa8bb7a79b1a26e1d660ce624a67abd9ba41d21070591bad85890db2567cf85cd20d242371e1701af4a43b9928c54d1eaa1c", 0xf7}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 07:46:53 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x18, &(0x7f0000000100)=0xffffffff80000001, 0x4) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) getsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x0, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x264) socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") ioctl(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @mss, @mss, @mss, @timestamp, @sack_perm], 0x132) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x40004007fff, 0x32fe3cf0}, 0x14) shutdown(r0, 0x1) 07:46:53 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() open(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) pipe(0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082) r4 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r4, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r4, 0x0, 0x20000102000007) listen(0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='fd\x00') 07:46:53 executing program 5: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x3}, 0x1c) setsockopt$inet6_udp_int(r3, 0x11, 0x67, &(0x7f0000000100)=0x2e4, 0x4) connect$inet6(r3, &(0x7f0000004540)={0xa, 0x0, 0x0, @mcast2}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 07:46:53 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000300)={0xfffffffffffffe93, 0x0, &(0x7f00000002c0)}) 07:46:54 executing program 2: connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000740)='hugetlb.2MB.usage_ir_bytes\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000040)={0x20}) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x80000000}) write$cgroup_int(r0, &(0x7f0000000240), 0x12) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)) socket$packet(0x11, 0x0, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) socket(0x0, 0x0, 0x0) 07:46:54 executing program 4: syz_mount_image$ceph(&(0x7f0000000380)='ceph\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 07:46:54 executing program 3: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000400)="230000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebcd774a3c374a095dca5285307eadea8653a1cc7e63975c", 0x33a}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000000000), 0x40000d5, 0x0, 0x0) [ 223.072668][ T9077] ceph: device name is missing path (no : separator in /dev/loop4) [ 223.123268][ T9077] ceph: device name is missing path (no : separator in /dev/loop4) 07:46:54 executing program 4: r0 = socket$inet(0x10, 0x80003, 0x0) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="240000001a0003041dfffd946f6105000200000a1f000003006708000800100012000000", 0x24}], 0x1}, 0x0) 07:46:54 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="a48b12f7284b2b5d2f2fba4fad273b1ea3e46f905080af4cf9f43b1136655aae84d1d2c690ccb15322e20000007c7d87a012bf7e4a2d74a75d00008489ef41b4ef4a6566a55fd4caa8d6c0dee265ea2121b173c73f15984fdd5bd24e99b71a8d7f2c4564001e29106fa8cd40e6", 0x6d}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 07:46:54 executing program 2: write$FUSE_GETXATTR(0xffffffffffffffff, 0x0, 0x0) r0 = gettid() perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0xee68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) shmat(0x0, &(0x7f0000fed000/0x1000)=nil, 0x0) shmctl$IPC_RMID(0x0, 0x0) 07:46:54 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xa93f) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0xcffa808b513f9ded, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xffcb) ioctl$SIOCX25SENDCALLACCPT(0xffffffffffffffff, 0x89e9) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 07:46:56 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.stet\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x161) sendmsg$kcm(r1, &(0x7f0000000540)={&(0x7f0000000380)=@in={0x2, 0x4e23, @rand_addr=0x7fffffff}, 0x80, 0x0}, 0xfd00) write$cgroup_subtree(r1, &(0x7f0000000280)={[{0x0, 'memory'}]}, 0xfdef) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) 07:46:56 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002011400010000000000", @ANYRES32=0x0, @ANYBLOB="000000a800c76f4503775e3a23a7073abc7e54d66704d2654729"], 0x48}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r5}, [@IFA_LOCAL={0x8, 0x2, @broadcast}]}, 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r5}, [@IFA_LOCAL={0x8, 0x2, @rand_addr=0x6}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x11, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r5}, [@IFA_LOCAL={0x8}]}, 0x20}}, 0x0) 07:46:56 executing program 5: mkdir(0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = gettid() sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0xa0, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_NET_NS_PID={0x8, 0x13, r4}, @IFLA_XDP={0x78, 0x2b, [@IFLA_XDP_FD={0x74, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}}]}]}, 0xa0}}, 0x0) socket(0x0, 0x0, 0x0) 07:46:56 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000380)=0x14) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000480)={0x0, @rand_addr, @local}, 0x5) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:46:56 executing program 3: pipe(&(0x7f0000000280)) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x2, &(0x7f00000004c0)=0x0) dup2(r1, 0xffffffffffffffff) io_submit(r2, 0x0, &(0x7f0000000440)) ioctl$KVM_GET_DEBUGREGS(0xffffffffffffffff, 0x8080aea1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000000)=0x16c, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @local}}, 0x0, 0x5, 0x2, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbb24fec2fba09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000001c0), 0x4) recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x3e8}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) [ 225.719367][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 225.725451][ C1] protocol 88fb is buggy, dev hsr_slave_1 07:46:56 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000008, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0xffffffff, 0x1, 0x13d}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 07:46:57 executing program 0: ioctl$TIOCEXCL(0xffffffffffffffff, 0x540c) open(0x0, 0x0, 0x0) open_by_handle_at(0xffffffffffffffff, 0x0, 0x0) dup(0xffffffffffffffff) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0x14c}, 0x137) request_key(0x0, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000500)={0x0, 0x3, 0x0, 0x2000b000, &(0x7f0000009000/0x2000)=nil}) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000009000/0x3000)=nil}) [ 225.799201][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 225.805084][ C0] protocol 88fb is buggy, dev hsr_slave_1 07:46:57 executing program 1: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x3) [ 226.039266][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 226.045237][ C1] protocol 88fb is buggy, dev hsr_slave_1 07:46:57 executing program 1: r0 = memfd_create(&(0x7f0000000340)='-vboxnet0\x00]\xea\xb0\xe2N\xc6c\x05\x8d\xb5\xc0\n\xad\x0f#+\x17\xd6A\xf4\xdf\x1b\xf9~\x8e\"\r\xff\xbb\xb0\xc3\x86\x97\xaf\xf8\x7f*\xfc\xfd\xe7\xcc\xbc\xddI.\xc3\x9aQ\xc8\x8e8U\xdaX\x06\x92\x1d\xbd\x10\xf9\xe8q\x00\xddr>\xd7\x9f\xf8r\xeeE\xa83K\xf60 \x7f\xcd\xac\x86\x9eT*\xf7\a^L,\x98\xa2(2,\x8c*\xff\x8aA\xa1\x153\x15\b\xcb\xf7\xefw\xa6\xc7c@\xb5\x9b\xdc$`3]\xf9.\xcf\x00', 0x5) ftruncate(r0, 0x0) [ 226.179996][ T9124] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.364905][ T9124] device bridge_slave_1 left promiscuous mode [ 226.371806][ T9124] bridge0: port 2(bridge_slave_1) entered disabled state 07:46:57 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="a48b12f7284b2b5d2f2fba4fad273b1ea3e46f905080af4cf9f43b1136655aae84d1d2c690ccb15322e20000007c7d87a012bf7e4a2d74a75d00008489ef41b4ef4a6566a55fd4caa8d6c0dee265ea2121b173c73f15984fdd5bd24e99b71a8d7f2c4564001e29106fa8cd40e6", 0x6d}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 07:46:57 executing program 0: r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x400806e, &(0x7f00000000c0)={0xa, 0x4e24, 0x0, @dev}, 0x1c) sendto$inet6(r0, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e5d37149eb0f4a333726cf6d5b7647306559155f1c69d6bfd145b83576f2df4d85f271fd4119db923e2412c66dd954eb59dddc7e1fd286a83971b2ba1c63b4f99702cf91f3d1ecffb8ae189c79b403805e83650c251a564942896f205640c23b0cf51fe9bd931f54a343794710a9cd53cef20938edddb2bfa3c1f72f8e79e41e30fb8f9d314abd999ba396521b6c10bec7bc9d0745a80299342f5cf89eb9d94044258fbb18cec1cdbbc016a773d3ae41e3e30248e716fd0873d31454902cbe7dcf7d644dfadc255d99652b5ed5a5b1a75e3ad49cf80178678402e9d3a755d009889b2e6138f81dc02eedcc353aceb2f7781aea08aa91be7e1e2416ba3d555b1f2237f68c5d7dcfcb1b917c292a35d6d7e7cf2cb1dd6dba5a50ce55c4638d7d38cb7afd8da02f281ab69392bc6531eb03eb97c1d075e3342c244861d04bcad8991b8f588e48ad7fe218d2f5e604bb31c59241245b485210fe418af3d6377b59d5ab128497efeced38cc5036b1f34cb89674b5179219f34b9e8e1849695d7c23cce77eb8f038ef9f2cd69d1c9e2d6b46610adbadbdad857a77f59d38cb5120709716b87c52a48de249b231d7e39985b8b58094c0d7b4c6d1671a8ff9d2daaca94df2adcff6420077df0ddbc66d00b141ffc6e28bed09a19056e52a905a72c99a04af56b22da83135808ba2bfe87a39753447e78500d16bdad52d97df73d4852a79e7ec6910701b712cfd58c62b3ade86cf6ff0cd78719fa1ae81640381cb33f4f6b03c913e820cf9eb9b5cf7df9c878596c9ac9444cad118673fe339b4b7287b310ecff4742bfea2612d79d418293f0dfe14bc819c466473438ad71ea3b1386d17a9038b1f5a9285481500f84f4c7eabbf2eb071a101c69cce8e7495bda4c28a4e88f6a258abf58579c290eeb742b2678daab3ecc8c2bf97d89e89472901e254dd63ca7d918f8a7523161e29b28f64b285da7bb4a17d0ad734c321623e246bb0b5aaa08e8e7ac42b74ba83c70a8ca80068400be6adc3f4b01ba1050b54e6e4cf72fb567fbd27b74b2bfa7b7cabc6938851c13c6df7d5aaca79afd89b5e925379b959c7929ddfa3399695343f435772d70e5cfa3550377d23f50011ad5657e94c464cd43eb85496fd3b03bcb2d9278ceb432194d9893ffa747dfe85309f256c910e31e81dcd3cd8a13744fc2874737a2ff34bf8c89f15da7cc0853434117d744e30360b38ef1a063f9ee506f048e9980054e6c5c5688d04ece6067ac55bccc9a7773a2c4e21c039d153622130faff9fd675d64ad7284bd011b9b224713a721b4b731cf342357642a1a0bb846f5be443b7e72e9825b5f3a078c6ae09e4512dd93a5be1af13a49e6a33938509d3557aecf2356ac2329871b662a99cf3fd2486b064e7e6f90c1f8d632186a8bda338b02d45da4ea9041d42a23f40b93346dddc473a9f1a3d9f0285b7e48cbb87bc34d44b090a5e2aaf4764a10a44168f1719eff0b0d9bc1ce07750af4c21d0c67eae0799e91328c8b14869e4edd255a41735a2b1818aa9d3b271ba757af010ae6dbad89aa0d8f5b6f8ef3917adcedf247ffcf9ade407dfb5094", 0x534, 0xc001, 0x0, 0x0) sendto$inet6(r0, &(0x7f00000003c0)="3ce95c98b66a9cdea42aca63276ef1eca3f038047504ba09072b9792bbe041c012d015e0f9cdf7aa7a4d18766deff9a2735edc11437a10c0e9f265c48e7033f01161d5ca1babf5738b4c3df116d964712d2c577d1181a2a242ab4ada0b6cd45c1f36c27a7453575b33cdd7300a74dd585eab465795dccddd26", 0x79, 0x400c000, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000140)=0x4, 0x4) r3 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000040)={@dev}, 0x14) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000000), 0x4) 07:46:57 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x18, &(0x7f0000000100)=0xffffffff80000001, 0x4) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) getsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x0, 0x0) recvfrom(r0, 0x0, 0x0, 0x2001, 0x0, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x264) socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") ioctl(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000000)={0x80000000}, 0x10) write(r2, &(0x7f0000000100), 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @mss, @mss, @mss, @timestamp, @sack_perm], 0x132) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x40004007fff, 0x32fe3cf0}, 0x14) shutdown(r0, 0x1) 07:46:57 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000f40)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006e58c40c2bd34d1d1fec857b8ade326d6b622c9d5b7586365793486d22d0646a5e91912f42c1d1e347387acd3591efce5927578fe8cbb3da4ccd2087978d4"], 0xb8}, 0x1, 0xfffff000}, 0x0) [ 226.440138][ T9136] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 226.448265][ T9136] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. 07:46:57 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002011400010000000000", @ANYRES32=0x0, @ANYBLOB="000000a800c76f4503775e3a23a7073abc7e54d66704d2654729"], 0x48}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r5}, [@IFA_LOCAL={0x8, 0x2, @broadcast}]}, 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r5}, [@IFA_LOCAL={0x8, 0x2, @rand_addr=0x6}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x11, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r5}, [@IFA_LOCAL={0x8}]}, 0x20}}, 0x0) 07:46:57 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="006d256d00027920"], 0xda00) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) 07:46:57 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="4c714c41060005000101ce0d7c5638870919"], 0x12) close(r2) socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfd6e) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 07:46:57 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TIOCSSOFTCAR(r0, 0x541a, 0x0) 07:46:57 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;!\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'}) write$sndseq(r2, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xfcc8) 07:46:58 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, 0x0, &(0x7f00000000c0)) 07:46:58 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_open_dev$mice(0x0, 0x0, 0x0) socket$pptp(0x18, 0x1, 0x2) socket$xdp(0x2c, 0x3, 0x0) ptrace$getregset(0x4205, 0x0, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x600) getdents64(0xffffffffffffffff, 0x0, 0x600) setuid(0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000fb], 0x0, 0x205211}) syz_genetlink_get_family_id$ipvs(0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000300)={0x0, 0x0, @pic={0x0, 0x8}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) dup(0xffffffffffffffff) 07:46:58 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6(0xa, 0x400000000803, 0x5f) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340)='/dev/net/tun\x00', 0x400000001, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x1}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f00000006c0)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6\xf23F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0_\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\xa9\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&k\x80K\xd1>\xa6\xff(\xb1\x01\xe7\xa5\xce-A\xb0\xec\x190r-q\x83\xb3mN\x91\'\xc5\xf8\xfe\x18\x16\xb7R6\xa9R\xf4H\xa7\x84\x98\xfc\xf9\xa6\xd6\x8d\xa7\xd5_\xc0\x93\xde\x1f`\xff\xcf\xe1)N\x85&\x8b\x06I\xa2\x13\x02\x00\x00\x00\x00\x00\x00\x00[\xae5\x82}\xb7h!\xd9\xce\xe9\x06\b\rs^\x8d\x14\xc1\x97m@6\x1d\xfc\x92@-\xb6\xe5N\x84\xbc\xc0\x1f\xfbI\'M\xdd\xc6*\x06&\f\b\xa6\x92)D}\x87\x80\xea\xb9l\x80H\xea\x82o6\xfa)\x15\xdc@\xf4\x86\xd6_\xf9+/Q\xd5\x8a;\x8b\xe1\x1d\xd0\xec\x8ek\xdb\xa8\xf3Ir\xdb1`B&\xe8A\xd1\xea\xb4$5%aL\xc1\xbd\x91\xc3\x90\x06i <1\xaa\"\xd5\xbb\xe9\xc7SX\xbfm{>\xd4\xc3(E[\xb0J13\xbbG\x8a\xb4\x8aMs\x9f\xcf\xb8g\xab\x12\x8cj\x95}\xb1\bc\xc4u\xf4\xe2\x88\xfa\xde\xec\xdf\xb9\x98\x84\x028\xd9_n\x9f\x86\x88\xe6\x15b\x01]\x01a\xe7\xb9\xb0\xbdk\xaa\xa1\xc1') r3 = open(&(0x7f0000000040)='./bus\x00', 0x143042, 0x0) ftruncate(r3, 0x200004) sendfile(r1, r3, 0x0, 0x80001d00c0d0) [ 227.381341][ T9197] team0: Port device team_slave_0 removed [ 227.396325][ T9212] device nr0 entered promiscuous mode [ 227.813921][ T9208] device nr0 entered promiscuous mode 07:47:00 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="a48b12f7284b2b5d2f2fba4fad273b1ea3e46f905080af4cf9f43b1136655aae84d1d2c690ccb15322e20000007c7d87a012bf7e4a2d74a75d00008489ef41b4ef4a6566a55fd4caa8d6c0dee265ea2121b173c73f15984fdd5bd24e99b71a8d7f2c4564001e29106fa8cd40e6", 0x6d}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 07:47:00 executing program 0: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1200000002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r3}]]}}}]}, 0x38}}, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000340)={@empty, r3}, 0x14) 07:47:00 executing program 5: r0 = open(&(0x7f0000000000)='./bus\x00', 0x40000141042, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x9004) 07:47:00 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000200)={'bond_slave_0\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB="1d"]}) 07:47:00 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002011400010000000000", @ANYRES32=0x0, @ANYBLOB="000000a800c76f4503775e3a23a7073abc7e54d66704d2654729"], 0x48}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r5}, [@IFA_LOCAL={0x8, 0x2, @broadcast}]}, 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r5}, [@IFA_LOCAL={0x8, 0x2, @rand_addr=0x6}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x11, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r5}, [@IFA_LOCAL={0x8}]}, 0x20}}, 0x0) 07:47:00 executing program 1: clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000100)=@nat={'Sat\x00', 0x19, 0x4, 0x1b8, [0x200001c0, 0x0, 0x0, 0x20000500, 0x20000530], 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"]}, 0x230) 07:47:00 executing program 1: r0 = gettid() r1 = creat(&(0x7f0000000100)='./file0\x00', 0x10003) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="01"], 0x1) prctl$PR_SET_PTRACER(0x59616d61, r0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r1) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x40) 07:47:00 executing program 5: socketpair$unix(0x1, 0x0, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000300)={0x100000011, @multicast2, 0x0, 0x0, 'c\xf9\x00'}, 0x2c) 07:47:00 executing program 1: r0 = getpgid(0x0) prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) tkill(r1, 0x17) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x78cc75c3, 0x800000000000000, 0x1c}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r1, 0x0, 0x0) 07:47:01 executing program 5: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000640)=[@in6={0xa, 0x4e23, 0x0, @ipv4={[], [], @dev}}, @in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}], 0x38) 07:47:01 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r1, &(0x7f00000006c0)=ANY=[@ANYBLOB="a7724bdef64346bc14b7b0f781d1d3abf9d1a51c4bfce1e77551a8bd678625f508300200000040847bc2fdffe8cd918b035041291559f2ee3aacfb33c6af9680d512f4d8a5c51817c3ff01a1f62ac71e85445d8f244f6be479ffffffffff8756ea7d486588272169d8b90f1d7106f5776f7894ee47382b8811e658a4c901bbce28f38a9a0eba9b9d6a05995f5ed199fcf8722be75fa42c080601d48e793d1429196b4d9182f7c4"], 0xa7) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) [ 229.850469][ T9256] IPVS: Scheduler module ip_vs_cù not found [ 229.975272][ T9262] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 17) [ 229.990285][ T9262] FAT-fs (loop1): Filesystem has been set read-only [ 229.997252][ T9262] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 17) 07:47:01 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() open(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setattr(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) pipe(0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082) r5 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r5, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r4, r5, 0x0, 0x20000102000007) listen(0xffffffffffffffff, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='fd\x00') getdents(r6, &(0x7f00000000c0)=""/31, 0x1f) [ 230.449725][ T9227] team0: Port device team_slave_1 removed 07:47:03 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="a48b12f7284b2b5d2f2fba4fad273b1ea3e46f905080af4cf9f43b1136655aae84d1d2c690ccb15322e20000007c7d87a012bf7e4a2d74a75d00008489ef41b4ef4a6566a55fd4caa8d6c0dee265ea2121b173c73f15984fdd5bd24e99b71a8d7f2c4564001e29106fa8cd40e6", 0x6d}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 07:47:03 executing program 5: mknod(&(0x7f00000000c0)='./file0\x00', 0x1041, 0x0) 07:47:03 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x44000) pipe(0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) connect$inet(r1, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000001300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)\x00'}, 0x58) r3 = accept$alg(r2, 0x0, 0x0) fcntl$setstatus(r3, 0x4, 0x2800) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="8b", 0x1) recvmmsg(r3, &(0x7f0000006100)=[{{&(0x7f0000000100)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x80, &(0x7f0000000300), 0x0, &(0x7f0000000340)=""/120, 0x6f}}], 0x400000000000653, 0x0, 0x0) 07:47:03 executing program 0: r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) close(r0) socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet_sctp(r0, &(0x7f0000006380)=[{&(0x7f0000000000)=@in={0x2, 0x0, @remote}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000140)="97", 0x1}], 0x1, &(0x7f0000000080)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x41}}], 0x30}], 0x1, 0x0) 07:47:03 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002011400010000000000", @ANYRES32=0x0, @ANYBLOB="000000a800c76f4503775e3a23a7073abc7e54d66704d2654729"], 0x48}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r5}, [@IFA_LOCAL={0x8, 0x2, @broadcast}]}, 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r5}, [@IFA_LOCAL={0x8, 0x2, @rand_addr=0x6}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x11, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r5}, [@IFA_LOCAL={0x8}]}, 0x20}}, 0x0) 07:47:03 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x6db6e559) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x0, &(0x7f0000000140), 0x4) getsockopt$inet6_buf(r2, 0x29, 0x36, 0x0, &(0x7f0000000000)=0xfffffffffffffee9) 07:47:03 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0x20601, 0x0) 07:47:03 executing program 0: connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket$packet(0x11, 0x20000003, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x80010000, 0x1, 0x0, 0x0, 0x2}, 0x1c) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCRTMSG(r1, 0x890d, 0x0) write(0xffffffffffffffff, 0x0, 0x0) socketpair$nbd(0x2, 0x1, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e20, @remote}, 0x10) sendto$inet(r2, 0x0, 0xff1b, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) sendto$inet(r2, &(0x7f0000000240), 0x1192aca8268c9077, 0x3, 0x0, 0xffffffffffffff06) setsockopt$inet_tcp_int(r2, 0x6, 0xc, &(0x7f0000000000)=0x100, 0x4) 07:47:04 executing program 3: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r4 = openat$cgroup_subtree(r3, &(0x7f0000000340)='cgroup.subtree_control\x00', 0x2, 0x0) write$cgroup_subtree(r4, 0x0, 0x0) [ 233.341992][ T9297] device hsr_slave_0 left promiscuous mode 07:47:04 executing program 3: creat(&(0x7f0000000580)='./bus\x00', 0x0) creat(&(0x7f0000000200)='./bus\x00', 0x0) 07:47:04 executing program 5: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5, 0x20000000000000}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, 0x0, 0x0) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x17) ptrace$cont(0xffffffffffffffff, r3, 0x0, 0x0) ptrace$cont(0x1f, r3, 0x0, 0x0) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r4, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) recvmmsg(r4, &(0x7f0000005540)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001340)=""/4067, 0xfffffd89}], 0x1}}], 0x1, 0x100, 0x0) sendto$inet(r4, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x170) 07:47:04 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) io_setup(0x0, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r1, &(0x7f00000006c0)=ANY=[@ANYBLOB="a7724bdef64346bc14b7b0f781d1d3abf9d1a51c4bfce1e77551a8bd678625f508300200000040847bc2fdffe8cd918b035041291559f2ee3aacfb33c6af9680d5"], 0x41) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) socket$bt_bnep(0x1f, 0x3, 0x4) open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) [ 233.917009][ T9334] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 17) [ 233.928317][ T9334] FAT-fs (loop1): Filesystem has been set read-only [ 233.935412][ T9334] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 17) 07:47:06 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) 07:47:06 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xa93f) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0xcffa808b513f9ded, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xffcb) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:47:06 executing program 0: sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="18600500014010000000008000000000e308"], 0x12}}], 0x1, 0x0) sigaltstack(&(0x7f0000001000/0x3000)=nil, 0xfffffffffffffffd) sigaltstack(&(0x7f0000001000/0x2000)=nil, 0x0) 07:47:06 executing program 2: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002011400010000000000", @ANYRES32=0x0, @ANYBLOB="000000a800c76f4503775e3a23a7073abc7e54d66704d2654729"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @broadcast}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @rand_addr=0x6}]}, 0x20}}, 0x0) 07:47:06 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r1, &(0x7f00000006c0)=ANY=[@ANYBLOB="a7724bdef64346bc14b7b0f781d1d3abf9d1a51c4bfce1e77551a8bd678625f508300200000040847bc2fdffe8cd918b035041291559f2ee3aacfb33c6af9680d512f4d8a5c51817c3ff01a1f62ac71e85445d8f244f6be479ffffffffff8756ea7d486588272169d8b90f1d7106f5776f7894ee47382b8811e658a4c901bbce28f38a9a0eba9b9d6a05995f5ed199fcf8722be75fa42c080601d48e793d1429196b4d9182f7c463"], 0xa8) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) 07:47:06 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000001c0)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x0, 0x0, 0xffffffff}, 0x1c) r1 = socket$inet6(0xa, 0x22000000002, 0x0) connect$inet6(r1, &(0x7f00000004c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @remote}}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x80000db, 0x0) [ 235.761962][ T9350] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 17) [ 235.772100][ T9350] FAT-fs (loop1): Filesystem has been set read-only [ 235.778989][ T9350] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 17) [ 235.796816][ T9351] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 07:47:07 executing program 2: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002011400010000000000", @ANYRES32=0x0, @ANYBLOB="000000a800c76f4503775e3a23a7073abc7e54d66704d2654729"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x8, 0x2, @rand_addr=0x6}]}, 0x20}}, 0x0) 07:47:07 executing program 0: sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="18600500014010000000008000000000e308"], 0x12}}], 0x1, 0x0) sigaltstack(&(0x7f0000001000/0x3000)=nil, 0xfffffffffffffffd) sigaltstack(&(0x7f0000001000/0x2000)=nil, 0x0) 07:47:07 executing program 2: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002011400010000000000", @ANYRES32=0x0, @ANYBLOB="000000a800c76f4503775e3a23a7073abc7e54d66704d2654729"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x8, 0x2, @rand_addr=0x6}]}, 0x20}}, 0x0) 07:47:07 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x800010000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @local}, 0x5a) 07:47:07 executing program 0: sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="18600500014010000000008000000000e308"], 0x12}}], 0x1, 0x0) sigaltstack(&(0x7f0000001000/0x3000)=nil, 0xfffffffffffffffd) sigaltstack(&(0x7f0000001000/0x2000)=nil, 0x0) 07:47:07 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00'}, 0x48) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b62, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000140)=r1, 0x4) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) sendmmsg(r2, &(0x7f000000ac80), 0x66, 0x0) 07:47:07 executing program 2: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002011400010000000000", @ANYRES32=0x0, @ANYBLOB="000000a800c76f4503775e3a23a7073abc7e54d66704d2654729"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x8, 0x2, @rand_addr=0x6}]}, 0x20}}, 0x0) 07:47:07 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) clock_adjtime(0x0, &(0x7f0000000480)={0xffff}) 07:47:07 executing program 0: sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="18600500014010000000008000000000e308"], 0x12}}], 0x1, 0x0) sigaltstack(&(0x7f0000001000/0x3000)=nil, 0xfffffffffffffffd) sigaltstack(&(0x7f0000001000/0x2000)=nil, 0x0) 07:47:07 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() open(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, 0x0, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) pipe(0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082) r5 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r5, &(0x7f0000001400)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1, 0x8180a) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r4, r5, 0x0, 0x20000102000007) listen(0xffffffffffffffff, 0x0) getdents(0xffffffffffffffff, &(0x7f00000000c0)=""/31, 0x1f) 07:47:07 executing program 5: sched_setattr(0x0, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) recvmmsg(r0, &(0x7f0000005540)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001340)=""/4067, 0xfffffd89}], 0x1}}], 0x1, 0x100, 0x0) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x170) [ 236.281685][ T9394] BPF:hdr_len not found 07:47:07 executing program 0: sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="18600500014010000000008000000000e308"], 0x12}}], 0x1, 0x0) sigaltstack(&(0x7f0000001000/0x2000)=nil, 0x0) 07:47:07 executing program 3: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1200000002, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000340)={@empty}, 0x14) 07:47:07 executing program 2: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x8, 0x2, @broadcast}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x8, 0x2, @rand_addr=0x6}]}, 0x20}}, 0x0) 07:47:07 executing program 0: sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="18600500014010000000008000000000e308"], 0x12}}], 0x1, 0x0) sigaltstack(&(0x7f0000001000/0x2000)=nil, 0x0) 07:47:07 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3) write$binfmt_script(r0, &(0x7f00000009c0)=ANY=[@ANYBLOB="23ff1f0a8117fb62d5eb1b3c750c75c5533f018823a16997c30e069cb5b742686128af8baad097514187691d92010000009e3db9e86db57e1d384bfe3042c49ef9134937af481f2b44e023b3884e0efb76d2659a715f3b513e33fd96c9d3c9afed9390b357a4000000000000000a010000000003000000000832ff0769dea9ed32487d2bf1ac37afcf98d817857774004608d609000000701f793b97fdcccc622708000000e69857745a810000be8900009755979c72f645e9898fb9d669af77550098329a0aa58aa5"], 0xc9) sendmmsg$inet(r0, &(0x7f0000000b40)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000004c0)="8c93b369b4485a9c10410940b32f0e27d945c8c14b33d632252983591bb93b689d6e39110602c2742c532b470d9fa7322ac1690e5df60e8062db873b9560fc588ed49aba2b2527da322e73b77d95bb0444859638ca691f4b3a357a", 0x5b}], 0x1}}], 0x1, 0x0) socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 07:47:07 executing program 2: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x8, 0x2, @broadcast}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x8, 0x2, @rand_addr=0x6}]}, 0x20}}, 0x0) 07:47:07 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x100000001) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmmsg(r0, &(0x7f0000007e00), 0x400000000000058, 0x0) 07:47:07 executing program 0: sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="18600500014010000000008000000000e308"], 0x12}}], 0x1, 0x0) sigaltstack(&(0x7f0000001000/0x2000)=nil, 0x0) 07:47:07 executing program 2: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x8, 0x2, @broadcast}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x8, 0x2, @rand_addr=0x6}]}, 0x20}}, 0x0) 07:47:08 executing program 0: sigaltstack(&(0x7f0000001000/0x3000)=nil, 0xfffffffffffffffd) sigaltstack(&(0x7f0000001000/0x2000)=nil, 0x0) 07:47:08 executing program 4: 07:47:08 executing program 2: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002011400010000000000", @ANYRES32=0x0, @ANYBLOB="000000a800c76f4503775e3a23a7073abc7e54d66704d2654729"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x401, 0x0, 0x0, {}, [@IFA_LOCAL={0x8, 0x2, @broadcast}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x401, 0x0, 0x0, {}, [@IFA_LOCAL={0x8, 0x2, @rand_addr=0x6}]}, 0x20}}, 0x0) 07:47:08 executing program 3: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) futex(&(0x7f000000cffc), 0x800000000006, 0x0, &(0x7f0000000040)={0x77359400}, 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) gettid() timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x0) 07:47:08 executing program 0: sigaltstack(&(0x7f0000001000/0x3000)=nil, 0xfffffffffffffffd) sigaltstack(&(0x7f0000001000/0x2000)=nil, 0x0) 07:47:08 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x100000400000003a) connect$inet6(r0, &(0x7f0000000340)={0xa, 0x0, 0x0, @mcast2, 0x3}, 0x1c) writev(r0, &(0x7f0000000800)=[{&(0x7f00000013c0)="95555c0e", 0x4}], 0x1) 07:47:08 executing program 0: sigaltstack(&(0x7f0000001000/0x3000)=nil, 0xfffffffffffffffd) sigaltstack(&(0x7f0000001000/0x2000)=nil, 0x0) 07:47:08 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f00000000c0)={[{0x2b, 'memory'}]}, 0x3) 07:47:08 executing program 5: 07:47:08 executing program 3: 07:47:08 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) socket$inet6(0xa, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r3, 0x4, 0x42000) semget$private(0x0, 0x2000000010a, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r4 = socket$packet(0x11, 0x0, 0x300) bind$packet(r4, 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) 07:47:08 executing program 2: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002011400010000000000", @ANYRES32=0x0, @ANYBLOB="000000a800c76f4503775e3a23a7073abc7e54d66704d2654729"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x401, 0x0, 0x0, {}, [@IFA_LOCAL={0x8, 0x2, @broadcast}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x401, 0x0, 0x0, {}, [@IFA_LOCAL={0x8, 0x2, @rand_addr=0x6}]}, 0x20}}, 0x0) 07:47:08 executing program 0: sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) sigaltstack(&(0x7f0000001000/0x3000)=nil, 0xfffffffffffffffd) sigaltstack(&(0x7f0000001000/0x2000)=nil, 0x0) 07:47:08 executing program 0: sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) sigaltstack(&(0x7f0000001000/0x3000)=nil, 0xfffffffffffffffd) sigaltstack(&(0x7f0000001000/0x2000)=nil, 0x0) 07:47:08 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x62a, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) symlink(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000440), 0x15}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r1) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000000c0), 0x80800) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0406618, 0x0) umount2(&(0x7f0000000540)='./file0\x00', 0x0) syz_genetlink_get_family_id$tipc(0x0) 07:47:08 executing program 5: 07:47:08 executing program 3: 07:47:09 executing program 5: 07:47:09 executing program 0: sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) sigaltstack(&(0x7f0000001000/0x3000)=nil, 0xfffffffffffffffd) sigaltstack(&(0x7f0000001000/0x2000)=nil, 0x0) 07:47:09 executing program 3: 07:47:09 executing program 5: 07:47:09 executing program 0: sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x0, 0x0) sigaltstack(&(0x7f0000001000/0x3000)=nil, 0xfffffffffffffffd) sigaltstack(&(0x7f0000001000/0x2000)=nil, 0x0) [ 345.519102][ C0] rcu: INFO: rcu_preempt self-detected stall on CPU [ 345.525981][ C0] rcu: 0-....: (10657 ticks this GP) idle=54e/1/0x4000000000000002 softirq=13216/13218 fqs=5241 [ 345.536850][ C0] (t=10500 jiffies g=11217 q=861) [ 345.541942][ C0] NMI backtrace for cpu 0 [ 345.546253][ C0] CPU: 0 PID: 9472 Comm: syz-executor.4 Not tainted 5.4.0-rc7-next-20191115 #0 [ 345.555196][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 345.565227][ C0] Call Trace: [ 345.568513][ C0] [ 345.571412][ C0] dump_stack+0x197/0x210 [ 345.575830][ C0] nmi_cpu_backtrace.cold+0x70/0xb2 [ 345.581013][ C0] ? lapic_can_unplug_cpu.cold+0x3a/0x3a [ 345.586632][ C0] nmi_trigger_cpumask_backtrace+0x23b/0x28b [ 345.592599][ C0] arch_trigger_cpumask_backtrace+0x14/0x20 [ 345.598490][ C0] rcu_dump_cpu_stacks+0x183/0x1cf [ 345.603636][ C0] ? find_next_bit+0x107/0x130 [ 345.608381][ C0] rcu_sched_clock_irq.cold+0x509/0xc02 [ 345.613914][ C0] ? raise_softirq+0x138/0x340 [ 345.618748][ C0] update_process_times+0x2d/0x70 [ 345.623759][ C0] tick_sched_handle+0xa2/0x190 [ 345.628586][ C0] tick_sched_timer+0x53/0x140 [ 345.633329][ C0] __hrtimer_run_queues+0x364/0xe40 [ 345.638509][ C0] ? tick_sched_do_timer+0x1b0/0x1b0 [ 345.643785][ C0] ? hrtimer_init+0x330/0x330 [ 345.648439][ C0] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 345.654162][ C0] ? ktime_get_update_offsets_now+0x2ce/0x430 [ 345.660209][ C0] hrtimer_interrupt+0x314/0x770 [ 345.665176][ C0] smp_apic_timer_interrupt+0x160/0x610 [ 345.670701][ C0] apic_timer_interrupt+0xf/0x20 [ 345.675626][ C0] [ 345.678543][ C0] RIP: 0010:irq_work_sync+0xd3/0x1d0 [ 345.683817][ C0] Code: f5 ff 4d 89 e6 4d 89 e5 48 b8 00 00 00 00 00 fc ff df 49 c1 ee 03 41 83 e5 07 49 01 c6 41 83 c5 03 eb 07 e8 7f 87 f5 ff f3 90 78 87 f5 ff be 04 00 00 00 4c 89 e7 e8 ab a6 31 00 41 0f b6 06 [ 345.703398][ C0] RSP: 0018:ffff8880575d7c08 EFLAGS: 00000293 ORIG_RAX: ffffffffffffff13 [ 345.711791][ C0] RAX: ffff888095468540 RBX: 0000000000000002 RCX: ffffffff817e51f6 [ 345.719784][ C0] RDX: 0000000000000000 RSI: ffffffff817e51c1 RDI: 0000000000000005 [ 345.727730][ C0] RBP: ffff8880575d7c28 R08: ffff888095468540 R09: ffffed1014218082 [ 345.735678][ C0] R10: ffffed1014218081 R11: ffff8880a10c040b R12: ffff8880a10c0408 [ 345.743625][ C0] R13: 0000000000000003 R14: ffffed1014218081 R15: ffff8880575d7cc8 [ 345.751583][ C0] ? irq_work_sync+0x106/0x1d0 [ 345.756330][ C0] ? irq_work_sync+0xd1/0x1d0 [ 345.760996][ C0] ? irq_work_sync+0xd1/0x1d0 [ 345.765663][ C0] _free_event+0x89/0x13b0 [ 345.770058][ C0] ? __kasan_check_write+0x14/0x20 [ 345.775147][ C0] ? __mutex_unlock_slowpath+0xf0/0x6a0 [ 345.780669][ C0] ? mark_held_locks+0xa4/0xf0 [ 345.785409][ C0] ? ring_buffer_attach+0x650/0x650 [ 345.790583][ C0] ? wait_for_completion+0x440/0x440 [ 345.795849][ C0] put_event+0x47/0x60 [ 345.799894][ C0] perf_event_release_kernel+0x6d5/0xd70 [ 345.805527][ C0] ? __perf_event_exit_context+0x170/0x170 [ 345.811308][ C0] ? fasync_helper+0x6e/0xb2 [ 345.815888][ C0] perf_release+0x37/0x50 [ 345.820194][ C0] __fput+0x2ff/0x890 [ 345.824154][ C0] ? perf_event_release_kernel+0xd70/0xd70 [ 345.829944][ C0] ____fput+0x16/0x20 [ 345.833901][ C0] task_work_run+0x145/0x1c0 [ 345.838471][ C0] exit_to_usermode_loop+0x316/0x380 [ 345.843733][ C0] do_syscall_64+0x676/0x790 [ 345.848322][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 345.854262][ C0] RIP: 0033:0x4141d1 [ 345.858192][ C0] Code: 75 14 b8 03 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 1b 00 00 c3 48 83 ec 08 e8 0a fc ff ff 48 89 04 24 b8 03 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 345.877817][ C0] RSP: 002b:00007ffc01ac3c90 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 345.886203][ C0] RAX: 0000000000000000 RBX: 0000000000000006 RCX: 00000000004141d1 [ 345.894152][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 345.902101][ C0] RBP: 0000000000000001 R08: 000000004a7bb64d R09: 000000004a7bb651 [ 345.910060][ C0] R10: 00007ffc01ac3d70 R11: 0000000000000293 R12: 000000000075c9a0 [ 345.918015][ C0] R13: 000000000075c9a0 R14: 00000000007613a0 R15: 000000000075c124