wap:0KB inactive_anon:0KB active_anon:30400KB inactive_file:4KB active_file:0KB unevictable:0KB [ 444.082102][ T7793] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=13016,uid=0 [ 444.124759][ T7793] Memory cgroup out of memory: Killed process 13016 (syz-executor.2) total-vm:72448kB, anon-rss:2204kB, file-rss:35800kB, shmem-rss:0kB [ 444.183931][ T7793] syz-executor.2 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 444.202260][ T7793] CPU: 0 PID: 7793 Comm: syz-executor.2 Not tainted 5.1.0-rc7+ #98 [ 444.210173][ T7793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 444.220232][ T7793] Call Trace: [ 444.223535][ T7793] dump_stack+0x172/0x1f0 [ 444.227879][ T7793] dump_header+0x10f/0xb6c [ 444.232307][ T7793] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 444.238128][ T7793] ? ___ratelimit+0x60/0x595 [ 444.242739][ T7793] ? do_raw_spin_unlock+0x57/0x270 [ 444.247883][ T7793] oom_kill_process.cold+0x10/0x15 [ 444.253006][ T7793] out_of_memory+0x79a/0x1280 [ 444.257693][ T7793] ? lock_downgrade+0x880/0x880 [ 444.262556][ T7793] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 444.268807][ T7793] ? oom_killer_disable+0x280/0x280 [ 444.274010][ T7793] ? find_held_lock+0x35/0x130 [ 444.278793][ T7793] mem_cgroup_out_of_memory+0x1ca/0x230 [ 444.284345][ T7793] ? memcg_event_wake+0x230/0x230 [ 444.289408][ T7793] ? do_raw_spin_unlock+0x57/0x270 [ 444.294529][ T7793] ? _raw_spin_unlock+0x2d/0x50 [ 444.299394][ T7793] try_charge+0x102c/0x15c0 [ 444.303902][ T7793] ? find_held_lock+0x35/0x130 [ 444.308682][ T7793] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 444.314233][ T7793] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 444.319786][ T7793] ? find_held_lock+0x35/0x130 [ 444.324583][ T7793] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 444.330151][ T7793] __memcg_kmem_charge_memcg+0x7c/0x130 [ 444.335703][ T7793] ? memcg_kmem_put_cache+0xb0/0xb0 [ 444.340919][ T7793] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 444.346477][ T7793] __memcg_kmem_charge+0x136/0x300 [ 444.351611][ T7793] __alloc_pages_nodemask+0x4bf/0x8d0 [ 444.357004][ T7793] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 444.363258][ T7793] ? __alloc_pages_slowpath+0x28b0/0x28b0 [ 444.368996][ T7793] ? copy_process.part.0+0x1d08/0x7980 [ 444.374472][ T7793] ? lockdep_hardirqs_on+0x418/0x5d0 [ 444.379771][ T7793] ? trace_hardirqs_on+0x67/0x230 [ 444.382154][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 444.384807][ T7793] ? kasan_check_read+0x11/0x20 [ 444.390561][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 444.395367][ T7793] copy_process.part.0+0x3e0/0x7980 [ 444.395382][ T7793] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 444.395398][ T7793] ? debug_smp_processor_id+0x3c/0x280 [ 444.395415][ T7793] ? perf_trace_lock+0xeb/0x510 [ 444.395434][ T7793] ? __lockdep_free_key_range+0x120/0x120 [ 444.428560][ T7793] ? __might_fault+0x12b/0x1e0 [ 444.433379][ T7793] ? __cleanup_sighand+0x60/0x60 [ 444.438332][ T7793] ? lock_downgrade+0x880/0x880 [ 444.443206][ T7793] _do_fork+0x257/0xfd0 [ 444.447371][ T7793] ? fork_idle+0x1d0/0x1d0 [ 444.451799][ T7793] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 444.457265][ T7793] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 444.462170][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 444.462752][ T7793] ? do_syscall_64+0x26/0x610 [ 444.468495][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 444.473146][ T7793] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 444.473168][ T7793] ? do_syscall_64+0x26/0x610 [ 444.473193][ T7793] __x64_sys_clone+0xbf/0x150 [ 444.473222][ T7793] do_syscall_64+0x103/0x610 [ 444.498918][ T7793] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 444.504817][ T7793] RIP: 0033:0x45737a [ 444.508714][ T7793] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 444.528333][ T7793] RSP: 002b:00007ffc56bb3ff0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 444.536755][ T7793] RAX: ffffffffffffffda RBX: 00007ffc56bb3ff0 RCX: 000000000045737a [ 444.544730][ T7793] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 444.552718][ T7793] RBP: 00007ffc56bb4030 R08: 0000000000000001 R09: 000000000226b940 [ 444.560711][ T7793] R10: 000000000226bc10 R11: 0000000000000246 R12: 0000000000000001 [ 444.568693][ T7793] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffc56bb4080 [ 444.578171][ T7793] memory: usage 40760kB, limit 0kB, failcnt 53 [ 444.584427][ T7793] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 444.593497][ T7793] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 444.600351][ T7793] Memory cgroup stats for /syz2: cache:128KB rss:28280KB rss_huge:26624KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:28240KB inactive_file:0KB active_file:4KB unevictable:0KB [ 444.621852][ T7793] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=13031,uid=0 [ 444.638431][ T7793] Memory cgroup out of memory: Killed process 13031 (syz-executor.2) total-vm:72448kB, anon-rss:2204kB, file-rss:35800kB, shmem-rss:0kB [ 444.671225][ T7793] syz-executor.2 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 444.691802][ T7793] CPU: 0 PID: 7793 Comm: syz-executor.2 Not tainted 5.1.0-rc7+ #98 [ 444.699709][ T7793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 444.709771][ T7793] Call Trace: [ 444.713077][ T7793] dump_stack+0x172/0x1f0 [ 444.717421][ T7793] dump_header+0x10f/0xb6c [ 444.721846][ T7793] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 444.727656][ T7793] ? ___ratelimit+0x60/0x595 [ 444.732257][ T7793] ? do_raw_spin_unlock+0x57/0x270 [ 444.737379][ T7793] oom_kill_process.cold+0x10/0x15 [ 444.742513][ T7793] out_of_memory+0x79a/0x1280 [ 444.747242][ T7793] ? lock_downgrade+0x880/0x880 [ 444.752102][ T7793] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 444.758358][ T7793] ? oom_killer_disable+0x280/0x280 [ 444.763556][ T7793] ? find_held_lock+0x35/0x130 [ 444.768364][ T7793] mem_cgroup_out_of_memory+0x1ca/0x230 [ 444.773924][ T7793] ? memcg_event_wake+0x230/0x230 [ 444.778965][ T7793] ? do_raw_spin_unlock+0x57/0x270 [ 444.784096][ T7793] ? _raw_spin_unlock+0x2d/0x50 [ 444.788956][ T7793] try_charge+0x102c/0x15c0 [ 444.793458][ T7793] ? find_held_lock+0x35/0x130 [ 444.798234][ T7793] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 444.803780][ T7793] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 444.809326][ T7793] ? find_held_lock+0x35/0x130 [ 444.814092][ T7793] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 444.819673][ T7793] __memcg_kmem_charge_memcg+0x7c/0x130 [ 444.825221][ T7793] ? memcg_kmem_put_cache+0xb0/0xb0 [ 444.830420][ T7793] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 444.835970][ T7793] __memcg_kmem_charge+0x136/0x300 [ 444.841083][ T7793] __alloc_pages_nodemask+0x4bf/0x8d0 [ 444.846473][ T7793] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 444.852716][ T7793] ? __alloc_pages_slowpath+0x28b0/0x28b0 [ 444.858441][ T7793] ? copy_process.part.0+0x1d08/0x7980 [ 444.863929][ T7793] ? lockdep_hardirqs_on+0x418/0x5d0 [ 444.869219][ T7793] ? trace_hardirqs_on+0x67/0x230 [ 444.874243][ T7793] ? kasan_check_read+0x11/0x20 [ 444.879103][ T7793] copy_process.part.0+0x3e0/0x7980 [ 444.884300][ T7793] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 444.890542][ T7793] ? debug_smp_processor_id+0x3c/0x280 [ 444.896001][ T7793] ? perf_trace_lock+0xeb/0x510 [ 444.900852][ T7793] ? __lockdep_free_key_range+0x120/0x120 [ 444.906575][ T7793] ? __might_fault+0x12b/0x1e0 [ 444.911347][ T7793] ? __cleanup_sighand+0x60/0x60 [ 444.916287][ T7793] ? lock_downgrade+0x880/0x880 [ 444.921179][ T7793] _do_fork+0x257/0xfd0 [ 444.925344][ T7793] ? fork_idle+0x1d0/0x1d0 [ 444.929773][ T7793] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 444.935233][ T7793] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 444.940702][ T7793] ? do_syscall_64+0x26/0x610 [ 444.945389][ T7793] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 444.951451][ T7793] ? do_syscall_64+0x26/0x610 [ 444.956133][ T7793] __x64_sys_clone+0xbf/0x150 [ 444.960811][ T7793] do_syscall_64+0x103/0x610 [ 444.965426][ T7793] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 444.971332][ T7793] RIP: 0033:0x45737a [ 444.975228][ T7793] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 444.994831][ T7793] RSP: 002b:00007ffc56bb3ff0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 445.003242][ T7793] RAX: ffffffffffffffda RBX: 00007ffc56bb3ff0 RCX: 000000000045737a [ 445.011210][ T7793] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 445.019179][ T7793] RBP: 00007ffc56bb4030 R08: 0000000000000001 R09: 000000000226b940 [ 445.027147][ T7793] R10: 000000000226bc10 R11: 0000000000000246 R12: 0000000000000001 [ 445.035114][ T7793] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffc56bb4080 [ 445.043347][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 445.049145][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 445.066117][ T7793] memory: usage 38424kB, limit 0kB, failcnt 59 [ 445.077847][ T7793] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 445.086938][ T7793] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 445.099742][ T7793] Memory cgroup stats for /syz2: cache:128KB rss:26112KB rss_huge:24576KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:26068KB inactive_file:0KB active_file:4KB unevictable:0KB [ 445.128195][ T7793] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=9576,uid=0 [ 445.151254][ T7793] Memory cgroup out of memory: Killed process 9576 (syz-executor.2) total-vm:72448kB, anon-rss:2204kB, file-rss:35792kB, shmem-rss:0kB [ 445.198721][ T7793] syz-executor.2 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 445.217471][ T7793] CPU: 0 PID: 7793 Comm: syz-executor.2 Not tainted 5.1.0-rc7+ #98 [ 445.225374][ T7793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 445.235441][ T7793] Call Trace: [ 445.238747][ T7793] dump_stack+0x172/0x1f0 [ 445.243092][ T7793] dump_header+0x10f/0xb6c [ 445.247516][ T7793] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 445.253332][ T7793] ? ___ratelimit+0x60/0x595 [ 445.257931][ T7793] ? do_raw_spin_unlock+0x57/0x270 [ 445.263057][ T7793] oom_kill_process.cold+0x10/0x15 [ 445.268178][ T7793] out_of_memory+0x79a/0x1280 [ 445.272869][ T7793] ? lock_downgrade+0x880/0x880 [ 445.277826][ T7793] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 445.284079][ T7793] ? oom_killer_disable+0x280/0x280 [ 445.289283][ T7793] ? find_held_lock+0x35/0x130 [ 445.294065][ T7793] mem_cgroup_out_of_memory+0x1ca/0x230 [ 445.299616][ T7793] ? memcg_event_wake+0x230/0x230 [ 445.304659][ T7793] ? do_raw_spin_unlock+0x57/0x270 [ 445.309781][ T7793] ? _raw_spin_unlock+0x2d/0x50 [ 445.314648][ T7793] try_charge+0x102c/0x15c0 [ 445.319158][ T7793] ? find_held_lock+0x35/0x130 [ 445.323946][ T7793] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 445.329499][ T7793] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 445.335062][ T7793] ? find_held_lock+0x35/0x130 [ 445.339841][ T7793] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 445.345410][ T7793] __memcg_kmem_charge_memcg+0x7c/0x130 [ 445.350976][ T7793] ? memcg_kmem_put_cache+0xb0/0xb0 [ 445.356187][ T7793] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 445.361751][ T7793] __memcg_kmem_charge+0x136/0x300 [ 445.366875][ T7793] __alloc_pages_nodemask+0x4bf/0x8d0 [ 445.372256][ T7793] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 445.378511][ T7793] ? __alloc_pages_slowpath+0x28b0/0x28b0 [ 445.384240][ T7793] ? copy_process.part.0+0x1d08/0x7980 [ 445.389712][ T7793] ? lockdep_hardirqs_on+0x418/0x5d0 [ 445.395013][ T7793] ? trace_hardirqs_on+0x67/0x230 [ 445.400046][ T7793] ? kasan_check_read+0x11/0x20 [ 445.404914][ T7793] copy_process.part.0+0x3e0/0x7980 [ 445.410118][ T7793] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 445.416361][ T7793] ? debug_smp_processor_id+0x3c/0x280 [ 445.421831][ T7793] ? perf_trace_lock+0xeb/0x510 [ 445.426701][ T7793] ? __lockdep_free_key_range+0x120/0x120 [ 445.432442][ T7793] ? __might_fault+0x12b/0x1e0 [ 445.437229][ T7793] ? __cleanup_sighand+0x60/0x60 [ 445.442183][ T7793] ? lock_downgrade+0x880/0x880 [ 445.447056][ T7793] _do_fork+0x257/0xfd0 [ 445.451227][ T7793] ? fork_idle+0x1d0/0x1d0 [ 445.455664][ T7793] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 445.461137][ T7793] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 445.466603][ T7793] ? do_syscall_64+0x26/0x610 [ 445.471293][ T7793] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 445.477369][ T7793] ? do_syscall_64+0x26/0x610 [ 445.482781][ T7793] __x64_sys_clone+0xbf/0x150 [ 445.488350][ T7793] do_syscall_64+0x103/0x610 [ 445.492952][ T7793] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 445.498847][ T7793] RIP: 0033:0x45737a [ 445.502755][ T7793] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 445.522461][ T7793] RSP: 002b:00007ffc56bb3ff0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 445.530883][ T7793] RAX: ffffffffffffffda RBX: 00007ffc56bb3ff0 RCX: 000000000045737a [ 445.538858][ T7793] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 445.546840][ T7793] RBP: 00007ffc56bb4030 R08: 0000000000000001 R09: 000000000226b940 [ 445.554816][ T7793] R10: 000000000226bc10 R11: 0000000000000246 R12: 0000000000000001 [ 445.562803][ T7793] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffc56bb4080 [ 445.575844][ T7793] memory: usage 36060kB, limit 0kB, failcnt 65 [ 445.582017][ T7793] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 445.590370][ T7793] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 445.597752][ T7793] Memory cgroup stats for /syz2: cache:128KB rss:23944KB rss_huge:22528KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:23904KB inactive_file:0KB active_file:4KB unevictable:0KB [ 445.619565][ T7793] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=21006,uid=0 [ 445.635491][ T7793] Memory cgroup out of memory: Killed process 21006 (syz-executor.2) total-vm:72580kB, anon-rss:2212kB, file-rss:35784kB, shmem-rss:0kB [ 445.669091][ T7793] syz-executor.2 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 445.681446][ T7793] CPU: 0 PID: 7793 Comm: syz-executor.2 Not tainted 5.1.0-rc7+ #98 [ 445.689346][ T7793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 445.700110][ T7793] Call Trace: [ 445.703417][ T7793] dump_stack+0x172/0x1f0 [ 445.707763][ T7793] dump_header+0x10f/0xb6c [ 445.712191][ T7793] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 445.718004][ T7793] ? ___ratelimit+0x60/0x595 [ 445.722597][ T7793] ? do_raw_spin_unlock+0x57/0x270 [ 445.727720][ T7793] oom_kill_process.cold+0x10/0x15 [ 445.732853][ T7793] out_of_memory+0x79a/0x1280 [ 445.737540][ T7793] ? lock_downgrade+0x880/0x880 [ 445.742395][ T7793] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 445.748670][ T7793] ? oom_killer_disable+0x280/0x280 [ 445.753876][ T7793] ? find_held_lock+0x35/0x130 [ 445.758656][ T7793] mem_cgroup_out_of_memory+0x1ca/0x230 [ 445.764217][ T7793] ? memcg_event_wake+0x230/0x230 [ 445.769256][ T7793] ? do_raw_spin_unlock+0x57/0x270 [ 445.774379][ T7793] ? _raw_spin_unlock+0x2d/0x50 [ 445.779237][ T7793] try_charge+0x102c/0x15c0 [ 445.783764][ T7793] ? find_held_lock+0x35/0x130 [ 445.788544][ T7793] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 445.794109][ T7793] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 445.799662][ T7793] ? find_held_lock+0x35/0x130 [ 445.804459][ T7793] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 445.810035][ T7793] __memcg_kmem_charge_memcg+0x7c/0x130 [ 445.815595][ T7793] ? memcg_kmem_put_cache+0xb0/0xb0 [ 445.820800][ T7793] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 445.826359][ T7793] __memcg_kmem_charge+0x136/0x300 [ 445.831481][ T7793] __alloc_pages_nodemask+0x4bf/0x8d0 [ 445.836858][ T7793] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 445.843107][ T7793] ? __alloc_pages_slowpath+0x28b0/0x28b0 [ 445.848838][ T7793] ? copy_process.part.0+0x1d08/0x7980 [ 445.854307][ T7793] ? lockdep_hardirqs_on+0x418/0x5d0 [ 445.859600][ T7793] ? trace_hardirqs_on+0x67/0x230 [ 445.864632][ T7793] ? kasan_check_read+0x11/0x20 [ 445.869501][ T7793] copy_process.part.0+0x3e0/0x7980 [ 445.874731][ T7793] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 445.880986][ T7793] ? debug_smp_processor_id+0x3c/0x280 [ 445.886457][ T7793] ? perf_trace_lock+0xeb/0x510 [ 445.891318][ T7793] ? __lockdep_free_key_range+0x120/0x120 [ 445.897056][ T7793] ? __might_fault+0x12b/0x1e0 [ 445.901836][ T7793] ? __cleanup_sighand+0x60/0x60 [ 445.906786][ T7793] ? lock_downgrade+0x880/0x880 [ 445.911658][ T7793] _do_fork+0x257/0xfd0 [ 445.915826][ T7793] ? fork_idle+0x1d0/0x1d0 [ 445.920255][ T7793] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 445.925721][ T7793] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 445.931195][ T7793] ? do_syscall_64+0x26/0x610 [ 445.935910][ T7793] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 445.941978][ T7793] ? do_syscall_64+0x26/0x610 [ 445.946666][ T7793] __x64_sys_clone+0xbf/0x150 [ 445.951357][ T7793] do_syscall_64+0x103/0x610 [ 445.955960][ T7793] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 445.961859][ T7793] RIP: 0033:0x45737a [ 445.965773][ T7793] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 445.985387][ T7793] RSP: 002b:00007ffc56bb3ff0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 445.993806][ T7793] RAX: ffffffffffffffda RBX: 00007ffc56bb3ff0 RCX: 000000000045737a [ 446.001783][ T7793] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 446.009766][ T7793] RBP: 00007ffc56bb4030 R08: 0000000000000001 R09: 000000000226b940 [ 446.017789][ T7793] R10: 000000000226bc10 R11: 0000000000000246 R12: 0000000000000001 [ 446.025782][ T7793] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffc56bb4080 [ 446.043235][ T7793] memory: usage 33688kB, limit 0kB, failcnt 71 [ 446.049408][ T7793] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 446.062095][ T7793] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 446.069008][ T7793] Memory cgroup stats for /syz2: cache:128KB rss:21776KB rss_huge:20480KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:21728KB inactive_file:0KB active_file:4KB unevictable:0KB [ 446.090895][ T7793] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=21015,uid=0 [ 446.107617][ T7793] Memory cgroup out of memory: Killed process 21015 (syz-executor.2) total-vm:72448kB, anon-rss:2204kB, file-rss:35792kB, shmem-rss:0kB [ 446.123709][ T1043] oom_reaper: reaped process 21015 (syz-executor.2), now anon-rss:0kB, file-rss:34832kB, shmem-rss:0kB [ 446.150655][ T7793] syz-executor.2 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 446.164092][ T7793] CPU: 0 PID: 7793 Comm: syz-executor.2 Not tainted 5.1.0-rc7+ #98 [ 446.172032][ T7793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 446.182104][ T7793] Call Trace: [ 446.185409][ T7793] dump_stack+0x172/0x1f0 [ 446.189785][ T7793] dump_header+0x10f/0xb6c [ 446.194222][ T7793] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 446.200034][ T7793] ? ___ratelimit+0x60/0x595 [ 446.204634][ T7793] ? do_raw_spin_unlock+0x57/0x270 [ 446.209766][ T7793] oom_kill_process.cold+0x10/0x15 [ 446.214890][ T7793] out_of_memory+0x79a/0x1280 [ 446.219591][ T7793] ? lock_downgrade+0x880/0x880 [ 446.224448][ T7793] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 446.230702][ T7793] ? oom_killer_disable+0x280/0x280 [ 446.235915][ T7793] ? find_held_lock+0x35/0x130 [ 446.240696][ T7793] mem_cgroup_out_of_memory+0x1ca/0x230 [ 446.246256][ T7793] ? memcg_event_wake+0x230/0x230 [ 446.251302][ T7793] ? do_raw_spin_unlock+0x57/0x270 [ 446.256428][ T7793] ? _raw_spin_unlock+0x2d/0x50 [ 446.261289][ T7793] try_charge+0x102c/0x15c0 [ 446.265802][ T7793] ? find_held_lock+0x35/0x130 [ 446.270583][ T7793] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 446.276139][ T7793] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 446.281690][ T7793] ? find_held_lock+0x35/0x130 [ 446.286485][ T7793] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 446.292053][ T7793] __memcg_kmem_charge_memcg+0x7c/0x130 [ 446.297610][ T7793] ? memcg_kmem_put_cache+0xb0/0xb0 [ 446.302817][ T7793] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 446.308378][ T7793] __memcg_kmem_charge+0x136/0x300 [ 446.313507][ T7793] __alloc_pages_nodemask+0x4bf/0x8d0 [ 446.318883][ T7793] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 446.325133][ T7793] ? __alloc_pages_slowpath+0x28b0/0x28b0 [ 446.330865][ T7793] ? copy_process.part.0+0x1d08/0x7980 [ 446.336332][ T7793] ? lockdep_hardirqs_on+0x418/0x5d0 [ 446.341627][ T7793] ? trace_hardirqs_on+0x67/0x230 [ 446.346660][ T7793] ? kasan_check_read+0x11/0x20 [ 446.351528][ T7793] copy_process.part.0+0x3e0/0x7980 [ 446.356730][ T7793] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 446.362983][ T7793] ? debug_smp_processor_id+0x3c/0x280 [ 446.368456][ T7793] ? perf_trace_lock+0xeb/0x510 [ 446.373322][ T7793] ? __lockdep_free_key_range+0x120/0x120 [ 446.379051][ T7793] ? __might_fault+0x12b/0x1e0 [ 446.383835][ T7793] ? __cleanup_sighand+0x60/0x60 [ 446.388778][ T7793] ? lock_downgrade+0x880/0x880 [ 446.393655][ T7793] _do_fork+0x257/0xfd0 [ 446.397820][ T7793] ? fork_idle+0x1d0/0x1d0 [ 446.402253][ T7793] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 446.407717][ T7793] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 446.413193][ T7793] ? do_syscall_64+0x26/0x610 [ 446.417878][ T7793] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 446.423949][ T7793] ? do_syscall_64+0x26/0x610 [ 446.428638][ T7793] __x64_sys_clone+0xbf/0x150 [ 446.433327][ T7793] do_syscall_64+0x103/0x610 [ 446.437927][ T7793] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 446.443834][ T7793] RIP: 0033:0x45737a [ 446.447746][ T7793] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 446.467471][ T7793] RSP: 002b:00007ffc56bb3ff0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 446.475890][ T7793] RAX: ffffffffffffffda RBX: 00007ffc56bb3ff0 RCX: 000000000045737a [ 446.483864][ T7793] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 446.491843][ T7793] RBP: 00007ffc56bb4030 R08: 0000000000000001 R09: 000000000226b940 [ 446.499821][ T7793] R10: 000000000226bc10 R11: 0000000000000246 R12: 0000000000000001 [ 446.507795][ T7793] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffc56bb4080 [ 446.519139][ T7793] memory: usage 31332kB, limit 0kB, failcnt 131 [ 446.525448][ T7793] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 446.533300][ T7793] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 446.540154][ T7793] Memory cgroup stats for /syz2: cache:128KB rss:19616KB rss_huge:18432KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:19568KB inactive_file:4KB active_file:0KB unevictable:0KB [ 446.562005][ T7793] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=7983,uid=0 [ 446.577435][ T7793] Memory cgroup out of memory: Killed process 7983 (syz-executor.2) total-vm:72712kB, anon-rss:2224kB, file-rss:34816kB, shmem-rss:0kB [ 446.633840][ T7793] syz-executor.2 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 446.653176][ T7793] CPU: 0 PID: 7793 Comm: syz-executor.2 Not tainted 5.1.0-rc7+ #98 [ 446.661096][ T7793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 446.671157][ T7793] Call Trace: [ 446.674467][ T7793] dump_stack+0x172/0x1f0 [ 446.678813][ T7793] dump_header+0x10f/0xb6c [ 446.683242][ T7793] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 446.689061][ T7793] ? ___ratelimit+0x60/0x595 [ 446.693670][ T7793] ? do_raw_spin_unlock+0x57/0x270 [ 446.698797][ T7793] oom_kill_process.cold+0x10/0x15 [ 446.703922][ T7793] out_of_memory+0x79a/0x1280 [ 446.708611][ T7793] ? lock_downgrade+0x880/0x880 [ 446.713469][ T7793] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 446.719804][ T7793] ? oom_killer_disable+0x280/0x280 [ 446.725005][ T7793] ? find_held_lock+0x35/0x130 [ 446.729783][ T7793] mem_cgroup_out_of_memory+0x1ca/0x230 [ 446.735340][ T7793] ? memcg_event_wake+0x230/0x230 [ 446.740376][ T7793] ? do_raw_spin_unlock+0x57/0x270 [ 446.745501][ T7793] ? _raw_spin_unlock+0x2d/0x50 [ 446.750358][ T7793] try_charge+0x102c/0x15c0 [ 446.754867][ T7793] ? find_held_lock+0x35/0x130 [ 446.759645][ T7793] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 446.765720][ T7793] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 446.771283][ T7793] ? find_held_lock+0x35/0x130 [ 446.776058][ T7793] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 446.781623][ T7793] __memcg_kmem_charge_memcg+0x7c/0x130 [ 446.787175][ T7793] ? memcg_kmem_put_cache+0xb0/0xb0 [ 446.792383][ T7793] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 446.797938][ T7793] __memcg_kmem_charge+0x136/0x300 [ 446.803064][ T7793] __alloc_pages_nodemask+0x4bf/0x8d0 [ 446.808440][ T7793] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 446.814691][ T7793] ? __alloc_pages_slowpath+0x28b0/0x28b0 [ 446.820422][ T7793] ? copy_process.part.0+0x1d08/0x7980 [ 446.825891][ T7793] ? lockdep_hardirqs_on+0x418/0x5d0 [ 446.831185][ T7793] ? trace_hardirqs_on+0x67/0x230 [ 446.836223][ T7793] ? kasan_check_read+0x11/0x20 [ 446.841177][ T7793] copy_process.part.0+0x3e0/0x7980 [ 446.846468][ T7793] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 446.852715][ T7793] ? debug_smp_processor_id+0x3c/0x280 [ 446.858188][ T7793] ? perf_trace_lock+0xeb/0x510 [ 446.863050][ T7793] ? __lockdep_free_key_range+0x120/0x120 [ 446.868778][ T7793] ? __might_fault+0x12b/0x1e0 [ 446.873565][ T7793] ? __cleanup_sighand+0x60/0x60 [ 446.878516][ T7793] ? lock_downgrade+0x880/0x880 [ 446.883394][ T7793] _do_fork+0x257/0xfd0 [ 446.887561][ T7793] ? fork_idle+0x1d0/0x1d0 [ 446.891998][ T7793] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 446.897464][ T7793] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 446.902929][ T7793] ? do_syscall_64+0x26/0x610 [ 446.907613][ T7793] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 446.913682][ T7793] ? do_syscall_64+0x26/0x610 [ 446.918375][ T7793] __x64_sys_clone+0xbf/0x150 [ 446.923069][ T7793] do_syscall_64+0x103/0x610 [ 446.927670][ T7793] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 446.933563][ T7793] RIP: 0033:0x45737a [ 446.937461][ T7793] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 446.957075][ T7793] RSP: 002b:00007ffc56bb3ff0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 446.965501][ T7793] RAX: ffffffffffffffda RBX: 00007ffc56bb3ff0 RCX: 000000000045737a [ 446.973477][ T7793] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 446.981452][ T7793] RBP: 00007ffc56bb4030 R08: 0000000000000001 R09: 000000000226b940 [ 446.989427][ T7793] R10: 000000000226bc10 R11: 0000000000000246 R12: 0000000000000001 [ 446.997402][ T7793] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffc56bb4080 [ 447.009317][ T7793] memory: usage 28944kB, limit 0kB, failcnt 137 [ 447.015651][ T7793] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 447.023480][ T7793] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 447.030333][ T7793] Memory cgroup stats for /syz2: cache:128KB rss:17444KB rss_huge:16384KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:17384KB inactive_file:4KB active_file:0KB unevictable:0KB [ 447.052329][ T7793] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=8072,uid=0 [ 447.068022][ T7793] Memory cgroup out of memory: Killed process 8072 (syz-executor.2) total-vm:72580kB, anon-rss:2216kB, file-rss:34816kB, shmem-rss:0kB [ 447.083338][ T1043] oom_reaper: reaped process 8072 (syz-executor.2), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 447.121239][ T7793] syz-executor.2 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 447.178688][ T7793] CPU: 1 PID: 7793 Comm: syz-executor.2 Not tainted 5.1.0-rc7+ #98 [ 447.186623][ T7793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 447.196685][ T7793] Call Trace: [ 447.199998][ T7793] dump_stack+0x172/0x1f0 [ 447.204338][ T7793] dump_header+0x10f/0xb6c [ 447.208764][ T7793] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 447.214581][ T7793] ? ___ratelimit+0x60/0x595 [ 447.219179][ T7793] ? do_raw_spin_unlock+0x57/0x270 [ 447.224304][ T7793] oom_kill_process.cold+0x10/0x15 [ 447.229425][ T7793] out_of_memory+0x79a/0x1280 [ 447.234111][ T7793] ? lock_downgrade+0x880/0x880 [ 447.239053][ T7793] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 447.245301][ T7793] ? oom_killer_disable+0x280/0x280 [ 447.250502][ T7793] ? find_held_lock+0x35/0x130 [ 447.255455][ T7793] mem_cgroup_out_of_memory+0x1ca/0x230 [ 447.261005][ T7793] ? memcg_event_wake+0x230/0x230 [ 447.266041][ T7793] ? do_raw_spin_unlock+0x57/0x270 [ 447.271162][ T7793] ? _raw_spin_unlock+0x2d/0x50 [ 447.276024][ T7793] try_charge+0x102c/0x15c0 [ 447.280529][ T7793] ? find_held_lock+0x35/0x130 [ 447.285308][ T7793] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 447.290864][ T7793] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 447.296415][ T7793] ? find_held_lock+0x35/0x130 [ 447.301186][ T7793] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 447.306761][ T7793] __memcg_kmem_charge_memcg+0x7c/0x130 [ 447.312318][ T7793] ? memcg_kmem_put_cache+0xb0/0xb0 [ 447.317526][ T7793] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 447.323078][ T7793] __memcg_kmem_charge+0x136/0x300 [ 447.328313][ T7793] __alloc_pages_nodemask+0x4bf/0x8d0 [ 447.333692][ T7793] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 447.339950][ T7793] ? __alloc_pages_slowpath+0x28b0/0x28b0 [ 447.345675][ T7793] ? copy_process.part.0+0x1d08/0x7980 [ 447.351141][ T7793] ? lockdep_hardirqs_on+0x418/0x5d0 [ 447.356432][ T7793] ? trace_hardirqs_on+0x67/0x230 [ 447.361461][ T7793] ? kasan_check_read+0x11/0x20 [ 447.366325][ T7793] copy_process.part.0+0x3e0/0x7980 [ 447.371528][ T7793] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 447.377775][ T7793] ? debug_smp_processor_id+0x3c/0x280 [ 447.383342][ T7793] ? perf_trace_lock+0xeb/0x510 [ 447.388205][ T7793] ? __lockdep_free_key_range+0x120/0x120 [ 447.393939][ T7793] ? __might_fault+0x12b/0x1e0 [ 447.398729][ T7793] ? __cleanup_sighand+0x60/0x60 [ 447.403678][ T7793] ? lock_downgrade+0x880/0x880 [ 447.408556][ T7793] _do_fork+0x257/0xfd0 [ 447.412732][ T7793] ? fork_idle+0x1d0/0x1d0 [ 447.417165][ T7793] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 447.422630][ T7793] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 447.428092][ T7793] ? do_syscall_64+0x26/0x610 [ 447.432779][ T7793] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 447.438849][ T7793] ? do_syscall_64+0x26/0x610 [ 447.443540][ T7793] __x64_sys_clone+0xbf/0x150 [ 447.448227][ T7793] do_syscall_64+0x103/0x610 [ 447.452835][ T7793] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 447.458740][ T7793] RIP: 0033:0x45737a [ 447.462642][ T7793] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 447.482257][ T7793] RSP: 002b:00007ffc56bb3ff0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 447.490672][ T7793] RAX: ffffffffffffffda RBX: 00007ffc56bb3ff0 RCX: 000000000045737a [ 447.498644][ T7793] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 447.506618][ T7793] RBP: 00007ffc56bb4030 R08: 0000000000000001 R09: 000000000226b940 [ 447.514594][ T7793] R10: 000000000226bc10 R11: 0000000000000246 R12: 0000000000000001 [ 447.522572][ T7793] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffc56bb4080 [ 447.702123][ T7793] memory: usage 26396kB, limit 0kB, failcnt 233 [ 447.708404][ T7793] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 447.722106][ T7793] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 447.728968][ T7793] Memory cgroup stats for /syz2: cache:128KB rss:15280KB rss_huge:14336KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:15208KB inactive_file:4KB active_file:0KB unevictable:0KB [ 447.761449][ T7793] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=8102,uid=0 [ 447.783846][ T7793] Memory cgroup out of memory: Killed process 8102 (syz-executor.2) total-vm:72580kB, anon-rss:2216kB, file-rss:34816kB, shmem-rss:0kB [ 447.817418][ T7793] syz-executor.2 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 447.829395][ T7793] CPU: 0 PID: 7793 Comm: syz-executor.2 Not tainted 5.1.0-rc7+ #98 [ 447.837291][ T7793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 447.847523][ T7793] Call Trace: [ 447.850830][ T7793] dump_stack+0x172/0x1f0 [ 447.855171][ T7793] dump_header+0x10f/0xb6c [ 447.859609][ T7793] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 447.865425][ T7793] ? ___ratelimit+0x60/0x595 [ 447.870025][ T7793] ? do_raw_spin_unlock+0x57/0x270 [ 447.875150][ T7793] oom_kill_process.cold+0x10/0x15 [ 447.880266][ T7793] out_of_memory+0x79a/0x1280 [ 447.884958][ T7793] ? lock_downgrade+0x880/0x880 [ 447.889837][ T7793] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 447.896086][ T7793] ? oom_killer_disable+0x280/0x280 [ 447.901285][ T7793] ? find_held_lock+0x35/0x130 [ 447.906068][ T7793] mem_cgroup_out_of_memory+0x1ca/0x230 [ 447.911620][ T7793] ? memcg_event_wake+0x230/0x230 [ 447.916930][ T7793] ? do_raw_spin_unlock+0x57/0x270 [ 447.922054][ T7793] ? _raw_spin_unlock+0x2d/0x50 [ 447.926916][ T7793] try_charge+0x102c/0x15c0 [ 447.931424][ T7793] ? find_held_lock+0x35/0x130 [ 447.936207][ T7793] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 447.941765][ T7793] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 447.947321][ T7793] ? find_held_lock+0x35/0x130 [ 447.952098][ T7793] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 447.957669][ T7793] __memcg_kmem_charge_memcg+0x7c/0x130 [ 447.963225][ T7793] ? memcg_kmem_put_cache+0xb0/0xb0 [ 447.968437][ T7793] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 447.973994][ T7793] __memcg_kmem_charge+0x136/0x300 [ 447.979124][ T7793] __alloc_pages_nodemask+0x4bf/0x8d0 [ 447.984503][ T7793] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 447.990757][ T7793] ? __alloc_pages_slowpath+0x28b0/0x28b0 [ 447.996488][ T7793] ? copy_process.part.0+0x1d08/0x7980 [ 448.001957][ T7793] ? lockdep_hardirqs_on+0x418/0x5d0 [ 448.007257][ T7793] ? trace_hardirqs_on+0x67/0x230 [ 448.012295][ T7793] ? kasan_check_read+0x11/0x20 [ 448.017164][ T7793] copy_process.part.0+0x3e0/0x7980 [ 448.022374][ T7793] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 448.028629][ T7793] ? debug_smp_processor_id+0x3c/0x280 [ 448.034096][ T7793] ? perf_trace_lock+0xeb/0x510 [ 448.038954][ T7793] ? __lockdep_free_key_range+0x120/0x120 [ 448.044717][ T7793] ? __might_fault+0x12b/0x1e0 [ 448.049503][ T7793] ? __cleanup_sighand+0x60/0x60 [ 448.054460][ T7793] ? lock_downgrade+0x880/0x880 [ 448.059334][ T7793] _do_fork+0x257/0xfd0 [ 448.063505][ T7793] ? fork_idle+0x1d0/0x1d0 [ 448.067939][ T7793] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 448.073409][ T7793] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 448.078875][ T7793] ? do_syscall_64+0x26/0x610 [ 448.083586][ T7793] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 448.089751][ T7793] ? do_syscall_64+0x26/0x610 [ 448.094446][ T7793] __x64_sys_clone+0xbf/0x150 [ 448.099132][ T7793] do_syscall_64+0x103/0x610 [ 448.103776][ T7793] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 448.109670][ T7793] RIP: 0033:0x45737a [ 448.113582][ T7793] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 448.133210][ T7793] RSP: 002b:00007ffc56bb3ff0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 448.141630][ T7793] RAX: ffffffffffffffda RBX: 00007ffc56bb3ff0 RCX: 000000000045737a [ 448.149607][ T7793] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 448.157585][ T7793] RBP: 00007ffc56bb4030 R08: 0000000000000001 R09: 000000000226b940 [ 448.165567][ T7793] R10: 000000000226bc10 R11: 0000000000000246 R12: 0000000000000001 [ 448.173548][ T7793] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffc56bb4080 [ 448.185050][ T7793] memory: usage 24064kB, limit 0kB, failcnt 239 [ 448.191308][ T7793] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 448.199251][ T7793] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 448.206552][ T7793] Memory cgroup stats for /syz2: cache:128KB rss:13096KB rss_huge:12288KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:13032KB inactive_file:4KB active_file:0KB unevictable:0KB [ 448.228327][ T7793] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=10748,uid=0 [ 448.244217][ T7793] Memory cgroup out of memory: Killed process 10748 (syz-executor.2) total-vm:72580kB, anon-rss:2212kB, file-rss:34816kB, shmem-rss:0kB [ 448.276297][ T7793] syz-executor.2 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 448.288257][ T7793] CPU: 0 PID: 7793 Comm: syz-executor.2 Not tainted 5.1.0-rc7+ #98 [ 448.296151][ T7793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 448.306216][ T7793] Call Trace: [ 448.309521][ T7793] dump_stack+0x172/0x1f0 [ 448.313864][ T7793] dump_header+0x10f/0xb6c [ 448.318288][ T7793] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 448.324108][ T7793] ? ___ratelimit+0x60/0x595 [ 448.328704][ T7793] ? do_raw_spin_unlock+0x57/0x270 [ 448.333834][ T7793] oom_kill_process.cold+0x10/0x15 [ 448.338956][ T7793] out_of_memory+0x79a/0x1280 [ 448.343646][ T7793] ? lock_downgrade+0x880/0x880 [ 448.348507][ T7793] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 448.354759][ T7793] ? oom_killer_disable+0x280/0x280 [ 448.359958][ T7793] ? find_held_lock+0x35/0x130 [ 448.364752][ T7793] mem_cgroup_out_of_memory+0x1ca/0x230 [ 448.370301][ T7793] ? memcg_event_wake+0x230/0x230 [ 448.375343][ T7793] ? do_raw_spin_unlock+0x57/0x270 [ 448.380461][ T7793] ? _raw_spin_unlock+0x2d/0x50 [ 448.385338][ T7793] try_charge+0x102c/0x15c0 [ 448.389846][ T7793] ? find_held_lock+0x35/0x130 [ 448.394628][ T7793] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 448.400178][ T7793] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 448.405786][ T7793] ? find_held_lock+0x35/0x130 [ 448.410556][ T7793] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 448.416121][ T7793] __memcg_kmem_charge_memcg+0x7c/0x130 [ 448.421675][ T7793] ? memcg_kmem_put_cache+0xb0/0xb0 [ 448.426884][ T7793] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 448.432441][ T7793] __memcg_kmem_charge+0x136/0x300 [ 448.437561][ T7793] __alloc_pages_nodemask+0x4bf/0x8d0 [ 448.442945][ T7793] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 448.449197][ T7793] ? __alloc_pages_slowpath+0x28b0/0x28b0 [ 448.454929][ T7793] ? copy_process.part.0+0x1d08/0x7980 [ 448.460394][ T7793] ? lockdep_hardirqs_on+0x418/0x5d0 [ 448.465694][ T7793] ? trace_hardirqs_on+0x67/0x230 [ 448.470738][ T7793] ? kasan_check_read+0x11/0x20 [ 448.475606][ T7793] copy_process.part.0+0x3e0/0x7980 [ 448.480815][ T7793] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 448.487063][ T7793] ? debug_smp_processor_id+0x3c/0x280 [ 448.492527][ T7793] ? perf_trace_lock+0xeb/0x510 [ 448.497388][ T7793] ? __lockdep_free_key_range+0x120/0x120 [ 448.503125][ T7793] ? __might_fault+0x12b/0x1e0 [ 448.507903][ T7793] ? __cleanup_sighand+0x60/0x60 [ 448.512851][ T7793] ? lock_downgrade+0x880/0x880 [ 448.517722][ T7793] _do_fork+0x257/0xfd0 [ 448.521898][ T7793] ? fork_idle+0x1d0/0x1d0 [ 448.526339][ T7793] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 448.531811][ T7793] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 448.537281][ T7793] ? do_syscall_64+0x26/0x610 [ 448.541965][ T7793] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 448.542187][ C1] net_ratelimit: 18 callbacks suppressed [ 448.542195][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 448.548047][ T7793] ? do_syscall_64+0x26/0x610 [ 448.553842][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 448.559406][ T7793] __x64_sys_clone+0xbf/0x150 [ 448.574443][ T7793] do_syscall_64+0x103/0x610 [ 448.579048][ T7793] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 448.584946][ T7793] RIP: 0033:0x45737a [ 448.588856][ T7793] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 448.609963][ T7793] RSP: 002b:00007ffc56bb3ff0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 448.618383][ T7793] RAX: ffffffffffffffda RBX: 00007ffc56bb3ff0 RCX: 000000000045737a [ 448.622150][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 448.626357][ T7793] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 448.626372][ T7793] RBP: 00007ffc56bb4030 R08: 0000000000000001 R09: 000000000226b940 [ 448.632261][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 448.640133][ T7793] R10: 000000000226bc10 R11: 0000000000000246 R12: 0000000000000001 [ 448.640149][ T7793] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffc56bb4080 [ 448.675486][ T7793] memory: usage 21764kB, limit 0kB, failcnt 245 [ 448.681757][ T7793] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 448.689667][ T7793] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 448.697878][ T7793] Memory cgroup stats for /syz2: cache:128KB rss:10944KB rss_huge:10240KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:10892KB inactive_file:4KB active_file:0KB unevictable:0KB [ 448.720865][ T7793] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=8024,uid=0 [ 448.737530][ T7793] Memory cgroup out of memory: Killed process 8024 (syz-executor.2) total-vm:72448kB, anon-rss:2208kB, file-rss:34816kB, shmem-rss:0kB [ 448.753034][ T1043] oom_reaper: reaped process 8024 (syz-executor.2), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 448.774220][ T7793] syz-executor.2 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 448.786502][ T7793] CPU: 0 PID: 7793 Comm: syz-executor.2 Not tainted 5.1.0-rc7+ #98 [ 448.794405][ T7793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 448.804547][ T7793] Call Trace: [ 448.807848][ T7793] dump_stack+0x172/0x1f0 [ 448.812187][ T7793] dump_header+0x10f/0xb6c [ 448.812204][ T7793] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 448.812220][ T7793] ? ___ratelimit+0x60/0x595 [ 448.812234][ T7793] ? do_raw_spin_unlock+0x57/0x270 [ 448.812251][ T7793] oom_kill_process.cold+0x10/0x15 [ 448.812269][ T7793] out_of_memory+0x79a/0x1280 [ 448.812287][ T7793] ? lock_downgrade+0x880/0x880 [ 448.812301][ T7793] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 448.812317][ T7793] ? oom_killer_disable+0x280/0x280 [ 448.812329][ T7793] ? find_held_lock+0x35/0x130 [ 448.812354][ T7793] mem_cgroup_out_of_memory+0x1ca/0x230 [ 448.853475][ T7793] ? memcg_event_wake+0x230/0x230 [ 448.853498][ T7793] ? do_raw_spin_unlock+0x57/0x270 [ 448.853515][ T7793] ? _raw_spin_unlock+0x2d/0x50 [ 448.853534][ T7793] try_charge+0x102c/0x15c0 [ 448.853553][ T7793] ? find_held_lock+0x35/0x130 [ 448.893236][ T7793] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 448.898789][ T7793] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 448.904339][ T7793] ? find_held_lock+0x35/0x130 [ 448.909107][ T7793] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 448.914683][ T7793] __memcg_kmem_charge_memcg+0x7c/0x130 [ 448.920324][ T7793] ? memcg_kmem_put_cache+0xb0/0xb0 [ 448.925531][ T7793] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 448.931089][ T7793] __memcg_kmem_charge+0x136/0x300 [ 448.936213][ T7793] __alloc_pages_nodemask+0x4bf/0x8d0 [ 448.941597][ T7793] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 448.947848][ T7793] ? __alloc_pages_slowpath+0x28b0/0x28b0 [ 448.953574][ T7793] ? copy_process.part.0+0x1d08/0x7980 [ 448.959045][ T7793] ? lockdep_hardirqs_on+0x418/0x5d0 [ 448.964342][ T7793] ? trace_hardirqs_on+0x67/0x230 [ 448.969371][ T7793] ? kasan_check_read+0x11/0x20 [ 448.974237][ T7793] copy_process.part.0+0x3e0/0x7980 [ 448.979446][ T7793] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 448.985692][ T7793] ? debug_smp_processor_id+0x3c/0x280 [ 448.991153][ T7793] ? perf_trace_lock+0xeb/0x510 [ 448.996018][ T7793] ? __lockdep_free_key_range+0x120/0x120 [ 449.001756][ T7793] ? __might_fault+0x12b/0x1e0 [ 449.006540][ T7793] ? __cleanup_sighand+0x60/0x60 [ 449.011488][ T7793] ? lock_downgrade+0x880/0x880 [ 449.016362][ T7793] _do_fork+0x257/0xfd0 [ 449.020533][ T7793] ? fork_idle+0x1d0/0x1d0 [ 449.025029][ T7793] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 449.030516][ T7793] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 449.035982][ T7793] ? do_syscall_64+0x26/0x610 [ 449.040668][ T7793] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 449.046828][ T7793] ? do_syscall_64+0x26/0x610 [ 449.051519][ T7793] __x64_sys_clone+0xbf/0x150 [ 449.056214][ T7793] do_syscall_64+0x103/0x610 [ 449.060822][ T7793] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 449.066720][ T7793] RIP: 0033:0x45737a [ 449.070627][ T7793] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 449.090265][ T7793] RSP: 002b:00007ffc56bb3ff0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 449.098799][ T7793] RAX: ffffffffffffffda RBX: 00007ffc56bb3ff0 RCX: 000000000045737a [ 449.106779][ T7793] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 449.114759][ T7793] RBP: 00007ffc56bb4030 R08: 0000000000000001 R09: 000000000226b940 [ 449.122743][ T7793] R10: 000000000226bc10 R11: 0000000000000246 R12: 0000000000000001 [ 449.130725][ T7793] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffc56bb4080 [ 449.140079][ T7793] memory: usage 19380kB, limit 0kB, failcnt 299 [ 449.146384][ T7793] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 449.153960][ T7793] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 449.160814][ T7793] Memory cgroup stats for /syz2: cache:128KB rss:8764KB rss_huge:8192KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:8712KB inactive_file:4KB active_file:0KB unevictable:0KB [ 449.182221][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 449.182281][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 449.182389][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 449.182435][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 449.206510][ T7793] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=8892,uid=0 [ 449.221943][ T7793] Memory cgroup out of memory: Killed process 8892 (syz-executor.2) total-vm:72448kB, anon-rss:2204kB, file-rss:34816kB, shmem-rss:0kB [ 449.243447][ T1043] oom_reaper: reaped process 8892 (syz-executor.2), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 449.274441][ T7793] syz-executor.2 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 449.293188][ T7793] CPU: 0 PID: 7793 Comm: syz-executor.2 Not tainted 5.1.0-rc7+ #98 [ 449.301098][ T7793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 449.311153][ T7793] Call Trace: [ 449.314463][ T7793] dump_stack+0x172/0x1f0 [ 449.318821][ T7793] dump_header+0x10f/0xb6c [ 449.323247][ T7793] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 449.329059][ T7793] ? ___ratelimit+0x60/0x595 [ 449.333656][ T7793] ? do_raw_spin_unlock+0x57/0x270 [ 449.338779][ T7793] oom_kill_process.cold+0x10/0x15 [ 449.343899][ T7793] out_of_memory+0x79a/0x1280 [ 449.348584][ T7793] ? lock_downgrade+0x880/0x880 [ 449.353530][ T7793] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 449.359784][ T7793] ? oom_killer_disable+0x280/0x280 [ 449.364986][ T7793] ? find_held_lock+0x35/0x130 [ 449.369775][ T7793] mem_cgroup_out_of_memory+0x1ca/0x230 [ 449.375326][ T7793] ? memcg_event_wake+0x230/0x230 [ 449.380366][ T7793] ? do_raw_spin_unlock+0x57/0x270 [ 449.385489][ T7793] ? _raw_spin_unlock+0x2d/0x50 [ 449.390349][ T7793] try_charge+0x102c/0x15c0 [ 449.394862][ T7793] ? find_held_lock+0x35/0x130 [ 449.399640][ T7793] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 449.405195][ T7793] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 449.410750][ T7793] ? find_held_lock+0x35/0x130 [ 449.415534][ T7793] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 449.421100][ T7793] __memcg_kmem_charge_memcg+0x7c/0x130 [ 449.426651][ T7793] ? memcg_kmem_put_cache+0xb0/0xb0 [ 449.431856][ T7793] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 449.437414][ T7793] __memcg_kmem_charge+0x136/0x300 [ 449.442541][ T7793] __alloc_pages_nodemask+0x4bf/0x8d0 [ 449.447915][ T7793] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 449.454167][ T7793] ? __alloc_pages_slowpath+0x28b0/0x28b0 [ 449.459894][ T7793] ? copy_process.part.0+0x1d08/0x7980 [ 449.465365][ T7793] ? lockdep_hardirqs_on+0x418/0x5d0 [ 449.470658][ T7793] ? trace_hardirqs_on+0x67/0x230 [ 449.475692][ T7793] ? kasan_check_read+0x11/0x20 [ 449.480554][ T7793] copy_process.part.0+0x3e0/0x7980 [ 449.485762][ T7793] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 449.492006][ T7793] ? debug_smp_processor_id+0x3c/0x280 [ 449.497474][ T7793] ? perf_trace_lock+0xeb/0x510 [ 449.502337][ T7793] ? __lockdep_free_key_range+0x120/0x120 [ 449.508064][ T7793] ? __might_fault+0x12b/0x1e0 [ 449.512845][ T7793] ? __cleanup_sighand+0x60/0x60 [ 449.517796][ T7793] ? lock_downgrade+0x880/0x880 [ 449.522671][ T7793] _do_fork+0x257/0xfd0 [ 449.526857][ T7793] ? fork_idle+0x1d0/0x1d0 [ 449.531289][ T7793] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 449.536761][ T7793] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 449.542228][ T7793] ? do_syscall_64+0x26/0x610 [ 449.546910][ T7793] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 449.552978][ T7793] ? do_syscall_64+0x26/0x610 [ 449.557667][ T7793] __x64_sys_clone+0xbf/0x150 [ 449.562359][ T7793] do_syscall_64+0x103/0x610 [ 449.566960][ T7793] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 449.572852][ T7793] RIP: 0033:0x45737a [ 449.576756][ T7793] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 449.596379][ T7793] RSP: 002b:00007ffc56bb3ff0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 449.604822][ T7793] RAX: ffffffffffffffda RBX: 00007ffc56bb3ff0 RCX: 000000000045737a [ 449.614975][ T7793] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 449.622953][ T7793] RBP: 00007ffc56bb4030 R08: 0000000000000001 R09: 000000000226b940 [ 449.630935][ T7793] R10: 000000000226bc10 R11: 0000000000000246 R12: 0000000000000001 [ 449.638940][ T7793] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffc56bb4080 [ 449.652116][ T7793] memory: usage 17008kB, limit 0kB, failcnt 365 [ 449.658375][ T7793] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 449.665986][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 449.666044][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 449.692102][ T7793] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 449.699649][ T7793] Memory cgroup stats for /syz2: cache:128KB rss:6592KB rss_huge:6144KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:6552KB inactive_file:4KB active_file:0KB unevictable:0KB [ 449.728916][ T7793] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=8930,uid=0 [ 449.779300][ T7793] Memory cgroup out of memory: Killed process 8930 (syz-executor.2) total-vm:72448kB, anon-rss:2204kB, file-rss:34816kB, shmem-rss:0kB [ 449.843799][ T7793] syz-executor.2 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 449.863123][ T7793] CPU: 0 PID: 7793 Comm: syz-executor.2 Not tainted 5.1.0-rc7+ #98 [ 449.871026][ T7793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 449.881085][ T7793] Call Trace: [ 449.884386][ T7793] dump_stack+0x172/0x1f0 [ 449.888746][ T7793] dump_header+0x10f/0xb6c [ 449.893221][ T7793] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 449.899064][ T7793] ? ___ratelimit+0x60/0x595 [ 449.903699][ T7793] ? do_raw_spin_unlock+0x57/0x270 [ 449.908833][ T7793] oom_kill_process.cold+0x10/0x15 [ 449.913978][ T7793] out_of_memory+0x79a/0x1280 [ 449.918693][ T7793] ? lock_downgrade+0x880/0x880 [ 449.923609][ T7793] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 449.929889][ T7793] ? oom_killer_disable+0x280/0x280 [ 449.935093][ T7793] ? find_held_lock+0x35/0x130 [ 449.939880][ T7793] mem_cgroup_out_of_memory+0x1ca/0x230 [ 449.945439][ T7793] ? memcg_event_wake+0x230/0x230 [ 449.950479][ T7793] ? do_raw_spin_unlock+0x57/0x270 [ 449.955618][ T7793] ? _raw_spin_unlock+0x2d/0x50 [ 449.960479][ T7793] try_charge+0x102c/0x15c0 [ 449.964986][ T7793] ? find_held_lock+0x35/0x130 [ 449.969772][ T7793] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 449.975324][ T7793] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 449.980871][ T7793] ? find_held_lock+0x35/0x130 [ 449.985645][ T7793] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 449.991209][ T7793] __memcg_kmem_charge_memcg+0x7c/0x130 [ 449.996775][ T7793] ? memcg_kmem_put_cache+0xb0/0xb0 [ 450.001987][ T7793] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 450.007542][ T7793] __memcg_kmem_charge+0x136/0x300 [ 450.012668][ T7793] __alloc_pages_nodemask+0x4bf/0x8d0 [ 450.018041][ T7793] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 450.024293][ T7793] ? __alloc_pages_slowpath+0x28b0/0x28b0 [ 450.030019][ T7793] ? copy_process.part.0+0x1d08/0x7980 [ 450.035487][ T7793] ? lockdep_hardirqs_on+0x418/0x5d0 [ 450.040779][ T7793] ? trace_hardirqs_on+0x67/0x230 [ 450.045811][ T7793] ? kasan_check_read+0x11/0x20 [ 450.050678][ T7793] copy_process.part.0+0x3e0/0x7980 [ 450.055882][ T7793] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 450.062124][ T7793] ? debug_smp_processor_id+0x3c/0x280 [ 450.067586][ T7793] ? perf_trace_lock+0xeb/0x510 [ 450.072445][ T7793] ? __lockdep_free_key_range+0x120/0x120 [ 450.078171][ T7793] ? __might_fault+0x12b/0x1e0 [ 450.082951][ T7793] ? __cleanup_sighand+0x60/0x60 [ 450.087898][ T7793] ? lock_downgrade+0x880/0x880 [ 450.092781][ T7793] _do_fork+0x257/0xfd0 [ 450.096947][ T7793] ? fork_idle+0x1d0/0x1d0 [ 450.101382][ T7793] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 450.106848][ T7793] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 450.112318][ T7793] ? do_syscall_64+0x26/0x610 [ 450.116995][ T7793] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 450.123061][ T7793] ? do_syscall_64+0x26/0x610 [ 450.127780][ T7793] __x64_sys_clone+0xbf/0x150 [ 450.132475][ T7793] do_syscall_64+0x103/0x610 [ 450.137074][ T7793] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 450.142968][ T7793] RIP: 0033:0x45737a [ 450.146869][ T7793] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 450.166483][ T7793] RSP: 002b:00007ffc56bb3ff0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 450.174904][ T7793] RAX: ffffffffffffffda RBX: 00007ffc56bb3ff0 RCX: 000000000045737a [ 450.182884][ T7793] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 450.190856][ T7793] RBP: 00007ffc56bb4030 R08: 0000000000000001 R09: 000000000226b940 [ 450.198828][ T7793] R10: 000000000226bc10 R11: 0000000000000246 R12: 0000000000000001 [ 450.206803][ T7793] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffc56bb4080 [ 450.215880][ T7793] memory: usage 14704kB, limit 0kB, failcnt 371 [ 450.222181][ T7793] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 450.229643][ T7793] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 450.236641][ T7793] Memory cgroup stats for /syz2: cache:128KB rss:4444KB rss_huge:4096KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:4404KB inactive_file:4KB active_file:0KB unevictable:0KB [ 450.257910][ T7793] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=8941,uid=0 [ 450.274583][ T7793] Memory cgroup out of memory: Killed process 8941 (syz-executor.2) total-vm:72448kB, anon-rss:2204kB, file-rss:34816kB, shmem-rss:0kB [ 450.306930][ T7793] syz-executor.2 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 450.318864][ T7793] CPU: 0 PID: 7793 Comm: syz-executor.2 Not tainted 5.1.0-rc7+ #98 [ 450.326765][ T7793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 450.336821][ T7793] Call Trace: [ 450.340149][ T7793] dump_stack+0x172/0x1f0 [ 450.344494][ T7793] dump_header+0x10f/0xb6c [ 450.348921][ T7793] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 450.354744][ T7793] ? ___ratelimit+0x60/0x595 [ 450.359339][ T7793] ? do_raw_spin_unlock+0x57/0x270 [ 450.364467][ T7793] oom_kill_process.cold+0x10/0x15 [ 450.369587][ T7793] out_of_memory+0x79a/0x1280 [ 450.374279][ T7793] ? lock_downgrade+0x880/0x880 [ 450.379160][ T7793] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 450.385422][ T7793] ? oom_killer_disable+0x280/0x280 [ 450.390629][ T7793] ? find_held_lock+0x35/0x130 [ 450.395420][ T7793] mem_cgroup_out_of_memory+0x1ca/0x230 [ 450.400975][ T7793] ? memcg_event_wake+0x230/0x230 [ 450.406021][ T7793] ? do_raw_spin_unlock+0x57/0x270 [ 450.411159][ T7793] ? _raw_spin_unlock+0x2d/0x50 [ 450.416195][ T7793] try_charge+0x102c/0x15c0 [ 450.420703][ T7793] ? find_held_lock+0x35/0x130 [ 450.425490][ T7793] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 450.431042][ T7793] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 450.436598][ T7793] ? find_held_lock+0x35/0x130 [ 450.441386][ T7793] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 450.446972][ T7793] __memcg_kmem_charge_memcg+0x7c/0x130 [ 450.452544][ T7793] ? memcg_kmem_put_cache+0xb0/0xb0 [ 450.457765][ T7793] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 450.463320][ T7793] __memcg_kmem_charge+0x136/0x300 [ 450.468444][ T7793] __alloc_pages_nodemask+0x4bf/0x8d0 [ 450.473825][ T7793] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 450.480091][ T7793] ? __alloc_pages_slowpath+0x28b0/0x28b0 [ 450.485821][ T7793] ? copy_process.part.0+0x1d08/0x7980 [ 450.491313][ T7793] ? lockdep_hardirqs_on+0x418/0x5d0 [ 450.496613][ T7793] ? trace_hardirqs_on+0x67/0x230 [ 450.501654][ T7793] ? kasan_check_read+0x11/0x20 [ 450.506520][ T7793] copy_process.part.0+0x3e0/0x7980 [ 450.511798][ T7793] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 450.518053][ T7793] ? debug_smp_processor_id+0x3c/0x280 [ 450.523526][ T7793] ? perf_trace_lock+0xeb/0x510 [ 450.528468][ T7793] ? __lockdep_free_key_range+0x120/0x120 [ 450.534266][ T7793] ? __might_fault+0x12b/0x1e0 [ 450.539071][ T7793] ? __cleanup_sighand+0x60/0x60 [ 450.544047][ T7793] ? lock_downgrade+0x880/0x880 [ 450.548949][ T7793] _do_fork+0x257/0xfd0 [ 450.553121][ T7793] ? fork_idle+0x1d0/0x1d0 [ 450.557553][ T7793] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 450.563017][ T7793] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 450.568485][ T7793] ? do_syscall_64+0x26/0x610 [ 450.573171][ T7793] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 450.579240][ T7793] ? do_syscall_64+0x26/0x610 [ 450.583931][ T7793] __x64_sys_clone+0xbf/0x150 [ 450.588625][ T7793] do_syscall_64+0x103/0x610 [ 450.594690][ T7793] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 450.600597][ T7793] RIP: 0033:0x45737a [ 450.604500][ T7793] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 450.624200][ T7793] RSP: 002b:00007ffc56bb3ff0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 450.632618][ T7793] RAX: ffffffffffffffda RBX: 00007ffc56bb3ff0 RCX: 000000000045737a [ 450.640591][ T7793] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 450.648573][ T7793] RBP: 00007ffc56bb4030 R08: 0000000000000001 R09: 000000000226b940 [ 450.656547][ T7793] R10: 000000000226bc10 R11: 0000000000000246 R12: 0000000000000001 [ 450.664523][ T7793] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffc56bb4080 [ 450.682179][ T7793] memory: usage 12352kB, limit 0kB, failcnt 377 [ 450.688442][ T7793] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 450.696193][ T7793] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 450.712101][ T7793] Memory cgroup stats for /syz2: cache:128KB rss:2280KB rss_huge:2048KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:2240KB inactive_file:4KB active_file:0KB unevictable:0KB [ 450.733435][ T7793] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=10746,uid=0 [ 450.762160][ T7793] Memory cgroup out of memory: Killed process 10746 (syz-executor.2) total-vm:72448kB, anon-rss:2204kB, file-rss:34816kB, shmem-rss:0kB [ 450.796406][ T7793] syz-executor.2 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 450.808501][ T7793] CPU: 0 PID: 7793 Comm: syz-executor.2 Not tainted 5.1.0-rc7+ #98 [ 450.816404][ T7793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 450.826463][ T7793] Call Trace: [ 450.829770][ T7793] dump_stack+0x172/0x1f0 [ 450.834117][ T7793] dump_header+0x10f/0xb6c [ 450.838548][ T7793] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 450.844364][ T7793] ? ___ratelimit+0x60/0x595 [ 450.848966][ T7793] ? do_raw_spin_unlock+0x57/0x270 [ 450.854212][ T7793] oom_kill_process.cold+0x10/0x15 [ 450.859330][ T7793] out_of_memory+0x79a/0x1280 [ 450.864017][ T7793] ? lock_downgrade+0x880/0x880 [ 450.868872][ T7793] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 450.875125][ T7793] ? oom_killer_disable+0x280/0x280 [ 450.880327][ T7793] ? find_held_lock+0x35/0x130 [ 450.885119][ T7793] mem_cgroup_out_of_memory+0x1ca/0x230 [ 450.890673][ T7793] ? memcg_event_wake+0x230/0x230 [ 450.895712][ T7793] ? do_raw_spin_unlock+0x57/0x270 [ 450.900867][ T7793] ? _raw_spin_unlock+0x2d/0x50 [ 450.905737][ T7793] try_charge+0x102c/0x15c0 [ 450.910284][ T7793] ? find_held_lock+0x35/0x130 [ 450.915075][ T7793] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 450.920624][ T7793] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 450.926174][ T7793] ? find_held_lock+0x35/0x130 [ 450.930946][ T7793] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 450.936512][ T7793] __memcg_kmem_charge_memcg+0x7c/0x130 [ 450.942059][ T7793] ? memcg_kmem_put_cache+0xb0/0xb0 [ 450.947271][ T7793] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 450.952827][ T7793] __memcg_kmem_charge+0x136/0x300 [ 450.957975][ T7793] __alloc_pages_nodemask+0x4bf/0x8d0 [ 450.963352][ T7793] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 450.969603][ T7793] ? __alloc_pages_slowpath+0x28b0/0x28b0 [ 450.975336][ T7793] ? copy_process.part.0+0x1d08/0x7980 [ 450.980890][ T7793] ? lockdep_hardirqs_on+0x418/0x5d0 [ 450.986187][ T7793] ? trace_hardirqs_on+0x67/0x230 [ 450.991256][ T7793] ? kasan_check_read+0x11/0x20 [ 450.996174][ T7793] copy_process.part.0+0x3e0/0x7980 [ 451.001381][ T7793] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 451.007632][ T7793] ? debug_smp_processor_id+0x3c/0x280 [ 451.013102][ T7793] ? perf_trace_lock+0xeb/0x510 [ 451.017961][ T7793] ? __lockdep_free_key_range+0x120/0x120 [ 451.023687][ T7793] ? __might_fault+0x12b/0x1e0 [ 451.028471][ T7793] ? __cleanup_sighand+0x60/0x60 [ 451.033420][ T7793] ? lock_downgrade+0x880/0x880 [ 451.038336][ T7793] _do_fork+0x257/0xfd0 [ 451.042534][ T7793] ? fork_idle+0x1d0/0x1d0 [ 451.046970][ T7793] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 451.052435][ T7793] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 451.057895][ T7793] ? do_syscall_64+0x26/0x610 [ 451.062579][ T7793] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 451.068824][ T7793] ? do_syscall_64+0x26/0x610 [ 451.073512][ T7793] __x64_sys_clone+0xbf/0x150 [ 451.078194][ T7793] do_syscall_64+0x103/0x610 [ 451.082802][ T7793] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 451.088697][ T7793] RIP: 0033:0x45737a [ 451.092609][ T7793] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 451.112223][ T7793] RSP: 002b:00007ffc56bb3ff0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 451.120641][ T7793] RAX: ffffffffffffffda RBX: 00007ffc56bb3ff0 RCX: 000000000045737a [ 451.128617][ T7793] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 451.136592][ T7793] RBP: 00007ffc56bb4030 R08: 0000000000000001 R09: 000000000226b940 [ 451.144580][ T7793] R10: 000000000226bc10 R11: 0000000000000246 R12: 0000000000000001 [ 451.152655][ T7793] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffc56bb4080 [ 451.172197][ T7793] memory: usage 10024kB, limit 0kB, failcnt 383 [ 451.178474][ T7793] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 451.186274][ T7793] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 451.193304][ T7793] Memory cgroup stats for /syz2: cache:128KB rss:112KB rss_huge:0KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:68KB inactive_file:4KB active_file:0KB unevictable:0KB [ 451.222147][ T7793] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=7793,uid=0 [ 451.242146][ T7793] Memory cgroup out of memory: Killed process 7793 (syz-executor.2) total-vm:72316kB, anon-rss:112kB, file-rss:35712kB, shmem-rss:0kB [ 451.263176][ T1043] oom_reaper: reaped process 7793 (syz-executor.2), now anon-rss:0kB, file-rss:34880kB, shmem-rss:0kB 09:17:31 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_SET_THP_DISABLE(0x29, 0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mincore(&(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f0000000540)=""/229) 09:17:31 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm_plock\x00', 0x40082, 0x0) setsockopt$TIPC_MCAST_BROADCAST(r1, 0x10f, 0x85) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) r2 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x400, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000580)='/dev/hwrng\x00', 0x2000, 0x0) fcntl$lock(r2, 0x27, 0x0) syz_open_pts(0xffffffffffffffff, 0x4000) write$P9_RLOPEN(0xffffffffffffffff, &(0x7f00000000c0)={0x18, 0xd, 0x2, {{0x0, 0x0, 0x6}}}, 0x18) perf_event_open(&(0x7f000001d000)={0x8000000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fe, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) close(r1) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='veth1\x00\x00\x00\x00\xff\xff\xff\xff\xff\xef\x00', 0x1000002b3) fsetxattr$security_smack_entry(r0, &(0x7f0000001500)='security.SMACK64IPOUT\x00', &(0x7f0000001540)='{vmnet1cpusetmd5sum\x00', 0x14, 0x1) sendto$inet(r0, &(0x7f0000000000), 0xfffffdef, 0xc0, 0x0, 0x4002) 09:17:31 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56) listen(r0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) accept(r0, 0x0, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070") shutdown(r0, 0x0) 09:17:31 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) r1 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x0, @perf_config_ext, 0x1024}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) gettid() openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) sendmsg(r0, 0x0, 0x0) socket$kcm(0x11, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x30, 0x6, {"6f3096d2a59598e4735d858710b950b57abf7a9428e083"}}}, 0x0, 0x32, 0x0, 0x1}, 0x20) r3 = openat$cgroup_int(r2, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000003c0)=0x3) gettid() bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r2, 0x0, 0x1, 0x3, 0x0}, 0x20) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x24000001) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000380), 0x4) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={0x0}, 0x10) write$cgroup_int(r3, 0x0, 0x0) 09:17:31 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm_plock\x00', 0x40082, 0x0) setsockopt$TIPC_MCAST_BROADCAST(r1, 0x10f, 0x85) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) r2 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x400, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000580)='/dev/hwrng\x00', 0x2000, 0x0) fcntl$lock(r2, 0x27, 0x0) syz_open_pts(0xffffffffffffffff, 0x4000) write$P9_RLOPEN(0xffffffffffffffff, &(0x7f00000000c0)={0x18, 0xd, 0x2, {{0x0, 0x0, 0x6}}}, 0x18) perf_event_open(&(0x7f000001d000)={0x8000000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fe, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) close(r1) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='veth1\x00\x00\x00\x00\xff\xff\xff\xff\xff\xef\x00', 0x1000002b3) fsetxattr$security_smack_entry(r0, &(0x7f0000001500)='security.SMACK64IPOUT\x00', &(0x7f0000001540)='{vmnet1cpusetmd5sum\x00', 0x14, 0x1) sendto$inet(r0, &(0x7f0000000000), 0xfffffdef, 0xc0, 0x0, 0x4002) 09:17:31 executing program 4: r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000003c0)="240000001a0007041dfffd946f610500020000001f000000002008000800090002000000", 0x24}], 0x1}, 0x0) 09:17:31 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56) listen(r0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) accept(r0, 0x0, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070") shutdown(r0, 0x0) 09:17:31 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) r1 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x0, @perf_config_ext, 0x1024}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) gettid() openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) sendmsg(r0, 0x0, 0x0) socket$kcm(0x11, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x30, 0x6, {"6f3096d2a59598e4735d858710b950b57abf7a9428e083"}}}, 0x0, 0x32, 0x0, 0x1}, 0x20) r3 = openat$cgroup_int(r2, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000003c0)=0x3) gettid() bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r2, 0x0, 0x1, 0x3, 0x0}, 0x20) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x24000001) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000380), 0x4) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={0x0}, 0x10) write$cgroup_int(r3, 0x0, 0x0) 09:17:31 executing program 0: openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.swap.current\x00', 0x0, 0x0) openat$cgroup_ro(r0, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_sys\x00\xc7\xec\xac\xd9&{\x0f\x96\xad\xd1\x8fl![\x8f\xb9\f\xca\x1d\xc2{\xee\xb7\x03K\x0f\xa6\xaa;\xf6\x89\xf7b^\xa5\xafI\r\xc4\x9f\v\xf2\x1c\xdc\xddp2\xb7\xbb\x1b\xfev\xea\xed\xe0\xaa\xe8\xceR`\xbb\xf2\xed;pC\x19\xbfn\x16\xaa\x199\xfe.Q\xebvB\xd2\x19&l?\x87\x17H\x1f.\xdbA\x1b\xafz\xe3\xdc};*\xec\xfe\xfa\xfb/\x18g\x80y\xfe\x89', 0x26e1, 0x0) close(r1) close(r2) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000040)) write$cgroup_type(r2, &(0x7f0000000080)='threaded\x00', 0xfffffc61) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x26e1, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) close(r3) recvmsg(r1, &(0x7f0000000140)={0x0, 0x1d, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/110, 0x2000012e}], 0x1}, 0x3f00) close(r2) socket$kcm(0x2b, 0x0, 0x0) 09:17:31 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000001c0)='io.bfq.weight\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x10) 09:17:31 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56) listen(r0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) accept(r0, 0x0, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070") shutdown(r0, 0x0) 09:17:31 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm_plock\x00', 0x40082, 0x0) setsockopt$TIPC_MCAST_BROADCAST(r1, 0x10f, 0x85) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) r2 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x400, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000580)='/dev/hwrng\x00', 0x2000, 0x0) fcntl$lock(r2, 0x27, 0x0) syz_open_pts(0xffffffffffffffff, 0x4000) write$P9_RLOPEN(0xffffffffffffffff, &(0x7f00000000c0)={0x18, 0xd, 0x2, {{0x0, 0x0, 0x6}}}, 0x18) perf_event_open(&(0x7f000001d000)={0x8000000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fe, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) close(r1) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='veth1\x00\x00\x00\x00\xff\xff\xff\xff\xff\xef\x00', 0x1000002b3) fsetxattr$security_smack_entry(r0, &(0x7f0000001500)='security.SMACK64IPOUT\x00', &(0x7f0000001540)='{vmnet1cpusetmd5sum\x00', 0x14, 0x1) sendto$inet(r0, &(0x7f0000000000), 0xfffffdef, 0xc0, 0x0, 0x4002) 09:17:31 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000440)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000002c0)={{}, 'syz0\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x0) [ 452.679767][T21709] input: syz0 as /devices/virtual/input/input22 09:17:32 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm_plock\x00', 0x40082, 0x0) setsockopt$TIPC_MCAST_BROADCAST(r1, 0x10f, 0x85) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) r2 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x400, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000580)='/dev/hwrng\x00', 0x2000, 0x0) fcntl$lock(r2, 0x27, 0x0) syz_open_pts(0xffffffffffffffff, 0x4000) write$P9_RLOPEN(0xffffffffffffffff, &(0x7f00000000c0)={0x18, 0xd, 0x2, {{0x0, 0x0, 0x6}}}, 0x18) perf_event_open(&(0x7f000001d000)={0x8000000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fe, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) close(r1) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='veth1\x00\x00\x00\x00\xff\xff\xff\xff\xff\xef\x00', 0x1000002b3) fsetxattr$security_smack_entry(r0, &(0x7f0000001500)='security.SMACK64IPOUT\x00', &(0x7f0000001540)='{vmnet1cpusetmd5sum\x00', 0x14, 0x1) sendto$inet(r0, &(0x7f0000000000), 0xfffffdef, 0xc0, 0x0, 0x4002) [ 452.766078][T21713] input: syz0 as /devices/virtual/input/input23 09:17:32 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000001c0)='io.bfq.weight\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x10) 09:17:32 executing program 1: syz_execute_func(&(0x7f00000006c0)="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") 09:17:32 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm_plock\x00', 0x40082, 0x0) setsockopt$TIPC_MCAST_BROADCAST(r1, 0x10f, 0x85) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) r2 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x400, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000580)='/dev/hwrng\x00', 0x2000, 0x0) fcntl$lock(r2, 0x27, 0x0) syz_open_pts(0xffffffffffffffff, 0x4000) write$P9_RLOPEN(0xffffffffffffffff, &(0x7f00000000c0)={0x18, 0xd, 0x2, {{0x0, 0x0, 0x6}}}, 0x18) perf_event_open(&(0x7f000001d000)={0x8000000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fe, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) close(r1) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='veth1\x00\x00\x00\x00\xff\xff\xff\xff\xff\xef\x00', 0x1000002b3) fsetxattr$security_smack_entry(r0, &(0x7f0000001500)='security.SMACK64IPOUT\x00', &(0x7f0000001540)='{vmnet1cpusetmd5sum\x00', 0x14, 0x1) sendto$inet(r0, &(0x7f0000000000), 0xfffffdef, 0xc0, 0x0, 0x4002) 09:17:32 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000001c0)='io.bfq.weight\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x10) 09:17:32 executing program 1: syz_execute_func(&(0x7f00000006c0)="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") [ 453.823804][ C0] net_ratelimit: 22 callbacks suppressed [ 453.823814][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 453.835507][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 453.903540][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 453.910957][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 454.657665][T21742] IPVS: ftp: loaded support on port[0] = 21 [ 454.782170][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 454.788015][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 454.832370][T21742] chnl_net:caif_netlink_parms(): no params data found [ 454.864344][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 454.870150][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 454.887414][T21742] bridge0: port 1(bridge_slave_0) entered blocking state [ 454.894932][T21742] bridge0: port 1(bridge_slave_0) entered disabled state [ 454.903149][T21742] device bridge_slave_0 entered promiscuous mode [ 454.911561][T21742] bridge0: port 2(bridge_slave_1) entered blocking state [ 454.919025][T21742] bridge0: port 2(bridge_slave_1) entered disabled state [ 454.927648][T21742] device bridge_slave_1 entered promiscuous mode [ 454.951269][T21742] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 454.962553][T21742] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 454.986132][T21742] team0: Port device team_slave_0 added [ 454.993966][T21742] team0: Port device team_slave_1 added [ 455.054980][T21742] device hsr_slave_0 entered promiscuous mode [ 455.092476][T21742] device hsr_slave_1 entered promiscuous mode [ 455.142085][T21742] bridge0: port 2(bridge_slave_1) entered blocking state [ 455.149198][T21742] bridge0: port 2(bridge_slave_1) entered forwarding state [ 455.156610][T21742] bridge0: port 1(bridge_slave_0) entered blocking state [ 455.163827][T21742] bridge0: port 1(bridge_slave_0) entered forwarding state [ 455.250653][T21742] 8021q: adding VLAN 0 to HW filter on device bond0 [ 455.265032][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 455.274383][ T17] bridge0: port 1(bridge_slave_0) entered disabled state [ 455.311489][ T17] bridge0: port 2(bridge_slave_1) entered disabled state [ 455.323411][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 455.347436][T21742] 8021q: adding VLAN 0 to HW filter on device team0 [ 455.367006][ T7794] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 455.376432][ T7794] bridge0: port 1(bridge_slave_0) entered blocking state [ 455.383572][ T7794] bridge0: port 1(bridge_slave_0) entered forwarding state [ 455.422150][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 455.427941][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 455.453673][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 455.462568][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 455.469630][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 455.483535][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 455.517549][T21742] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 455.532168][T21742] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 455.563439][ T7794] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 455.581247][ T7794] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 455.601648][ T7794] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 455.620632][ T7794] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 455.633173][ T7794] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 455.663517][T21742] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 455.903637][T21751] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 455.926211][T21751] CPU: 0 PID: 21751 Comm: syz-executor.2 Not tainted 5.1.0-rc7+ #98 [ 455.934269][T21751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 455.944353][T21751] Call Trace: [ 455.947664][T21751] dump_stack+0x172/0x1f0 [ 455.952014][T21751] dump_header+0x10f/0xb6c [ 455.956447][T21751] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 455.962268][T21751] ? ___ratelimit+0x60/0x595 [ 455.966871][T21751] ? do_raw_spin_unlock+0x57/0x270 [ 455.971993][T21751] oom_kill_process.cold+0x10/0x15 [ 455.977111][T21751] out_of_memory+0x79a/0x1280 [ 455.981793][T21751] ? __sched_text_start+0x8/0x8 [ 455.986644][T21751] ? retint_kernel+0x2d/0x2d [ 455.991238][T21751] ? oom_killer_disable+0x280/0x280 [ 455.996451][T21751] mem_cgroup_out_of_memory+0x1ca/0x230 [ 456.001997][T21751] ? memcg_event_wake+0x230/0x230 [ 456.007032][T21751] ? _raw_spin_unlock_irqrestore+0xbd/0xe0 [ 456.012865][T21751] ? cgroup_file_notify+0x140/0x1b0 [ 456.018068][T21751] memory_max_write+0x169/0x300 [ 456.022929][T21751] ? mem_cgroup_write+0x360/0x360 [ 456.027961][T21751] cgroup_file_write+0x245/0x7a0 [ 456.032927][T21751] ? mem_cgroup_write+0x360/0x360 [ 456.037951][T21751] ? cgroup_migrate_add_task+0x8a0/0x8a0 [ 456.043590][T21751] ? cgroup_migrate_add_task+0x8a0/0x8a0 [ 456.049222][T21751] kernfs_fop_write+0x2ba/0x480 [ 456.054085][T21751] __vfs_write+0x8d/0x110 [ 456.058410][T21751] ? kernfs_fop_open+0xd90/0xd90 [ 456.063351][T21751] vfs_write+0x20c/0x580 [ 456.067597][T21751] ksys_write+0x14f/0x2d0 [ 456.071931][T21751] ? __ia32_sys_read+0xb0/0xb0 [ 456.076699][T21751] ? do_syscall_64+0x26/0x610 [ 456.081384][T21751] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 456.087448][T21751] ? do_syscall_64+0x26/0x610 [ 456.092132][T21751] __x64_sys_write+0x73/0xb0 [ 456.096723][T21751] do_syscall_64+0x103/0x610 [ 456.101334][T21751] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 456.107225][T21751] RIP: 0033:0x458da9 [ 456.111124][T21751] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 456.130728][T21751] RSP: 002b:00007fbbb8ad3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 456.139156][T21751] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000458da9 [ 456.147126][T21751] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 456.155104][T21751] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 456.163080][T21751] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fbbb8ad46d4 [ 456.171071][T21751] R13: 00000000004c880e R14: 00000000004def78 R15: 00000000ffffffff [ 456.249267][T21751] memory: usage 11576kB, limit 0kB, failcnt 386 [ 456.270292][T21751] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 456.278851][T21751] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 456.308268][T21751] Memory cgroup stats for /syz2: cache:128KB rss:2104KB rss_huge:2048KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:2156KB inactive_file:4KB active_file:0KB unevictable:0KB [ 456.340754][T21751] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=21750,uid=0 [ 456.512444][T21751] Memory cgroup out of memory: Killed process 21750 (syz-executor.2) total-vm:72452kB, anon-rss:2140kB, file-rss:34816kB, shmem-rss:0kB [ 456.558779][ T1043] oom_reaper: reaped process 21750 (syz-executor.2), now anon-rss:0kB, file-rss:34856kB, shmem-rss:0kB 09:17:36 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='map_files\x00') openat$cgroup_ro(r0, &(0x7f0000000000)='c-roup.events\x00', 0x0, 0x0) [ 456.841785][T21742] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 456.872997][T21742] CPU: 1 PID: 21742 Comm: syz-executor.2 Not tainted 5.1.0-rc7+ #98 [ 456.881006][T21742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 456.891062][T21742] Call Trace: [ 456.894366][T21742] dump_stack+0x172/0x1f0 [ 456.898712][T21742] dump_header+0x10f/0xb6c [ 456.903147][T21742] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 456.908981][T21742] ? ___ratelimit+0x60/0x595 [ 456.913576][T21742] ? do_raw_spin_unlock+0x57/0x270 [ 456.918700][T21742] oom_kill_process.cold+0x10/0x15 [ 456.923829][T21742] out_of_memory+0x79a/0x1280 [ 456.928522][T21742] ? lock_downgrade+0x880/0x880 [ 456.933379][T21742] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 456.939632][T21742] ? oom_killer_disable+0x280/0x280 [ 456.944855][T21742] ? find_held_lock+0x35/0x130 [ 456.949643][T21742] mem_cgroup_out_of_memory+0x1ca/0x230 [ 456.955193][T21742] ? memcg_event_wake+0x230/0x230 [ 456.960245][T21742] ? do_raw_spin_unlock+0x57/0x270 [ 456.965367][T21742] ? _raw_spin_unlock+0x2d/0x50 [ 456.970238][T21742] try_charge+0x102c/0x15c0 [ 456.974752][T21742] ? find_held_lock+0x35/0x130 [ 456.979531][T21742] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 456.985089][T21742] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 456.991347][T21742] ? kasan_check_read+0x11/0x20 [ 456.996228][T21742] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 457.001796][T21742] mem_cgroup_try_charge+0x24d/0x5e0 [ 457.007095][T21742] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 457.012748][T21742] wp_page_copy+0x408/0x1740 [ 457.017349][T21742] ? find_held_lock+0x35/0x130 [ 457.022132][T21742] ? pmd_pfn+0x1d0/0x1d0 [ 457.026380][T21742] ? lock_downgrade+0x880/0x880 [ 457.031299][T21742] ? swp_swapcount+0x540/0x540 [ 457.036083][T21742] ? kasan_check_read+0x11/0x20 [ 457.040940][T21742] ? do_raw_spin_unlock+0x57/0x270 [ 457.046063][T21742] do_wp_page+0x48e/0x1500 [ 457.050496][T21742] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 457.055892][T21742] __handle_mm_fault+0x22e8/0x3ec0 [ 457.061017][T21742] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 457.066576][T21742] ? find_held_lock+0x35/0x130 [ 457.072046][T21742] ? handle_mm_fault+0x322/0xb30 [ 457.077023][T21742] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 457.083277][T21742] ? kasan_check_read+0x11/0x20 [ 457.088144][T21742] handle_mm_fault+0x43f/0xb30 [ 457.092927][T21742] __do_page_fault+0x5ef/0xda0 [ 457.097710][T21742] do_page_fault+0x71/0x581 [ 457.102266][T21742] ? page_fault+0x8/0x30 [ 457.106517][T21742] page_fault+0x1e/0x30 [ 457.110674][T21742] RIP: 0033:0x4032a2 [ 457.114577][T21742] Code: 55 41 54 49 89 fc 55 53 48 81 ec b8 10 00 00 64 48 8b 04 25 28 00 00 00 48 89 84 24 a8 10 00 00 31 c0 be 02 00 00 00 4c 89 e7 49 85 05 00 85 c0 0f 84 00 03 00 00 4c 89 e7 e8 f9 3a 05 00 48 [ 457.134186][T21742] RSP: 002b:00007ffcf8b34bf0 EFLAGS: 00010246 [ 457.140267][T21742] RAX: 0000000000000000 RBX: 000000000006f4b7 RCX: 0000000000412a80 [ 457.148254][T21742] RDX: 000000000000000c RSI: 0000000000000002 RDI: 00007ffcf8b35d20 [ 457.156255][T21742] RBP: 0000000000000002 R08: 0000000000000001 R09: 00000000024f1940 [ 457.165383][T21742] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffcf8b35d20 [ 457.173367][T21742] R13: 00007ffcf8b35d10 R14: 0000000000000000 R15: 00007ffcf8b35d20 [ 457.252153][T21742] memory: usage 8916kB, limit 0kB, failcnt 394 [ 457.258357][T21742] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 457.272098][T21742] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 457.278961][T21742] Memory cgroup stats for /syz2: cache:128KB rss:48KB rss_huge:0KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:36KB inactive_file:0KB active_file:4KB unevictable:0KB [ 457.322120][T21742] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=21742,uid=0 [ 457.362195][T21742] Memory cgroup out of memory: Killed process 21742 (syz-executor.2) total-vm:72320kB, anon-rss:76kB, file-rss:34824kB, shmem-rss:0kB [ 457.376700][ T1043] oom_reaper: reaped process 21742 (syz-executor.2), now anon-rss:0kB, file-rss:34880kB, shmem-rss:0kB [ 458.942161][ C1] net_ratelimit: 28 callbacks suppressed [ 458.942171][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 458.953780][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 459.182161][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 459.187987][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 459.582149][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 459.587985][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 459.594343][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 459.600182][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 460.062152][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 460.067963][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 460.436616][ T163] device bridge_slave_1 left promiscuous mode [ 460.453084][ T163] bridge0: port 2(bridge_slave_1) entered disabled state [ 460.529111][ T163] device bridge_slave_0 left promiscuous mode [ 460.542287][ T163] bridge0: port 1(bridge_slave_0) entered disabled state [ 463.975520][ T163] device hsr_slave_1 left promiscuous mode [ 464.018045][ T163] device hsr_slave_0 left promiscuous mode [ 464.090037][ T163] team0 (unregistering): Port device team_slave_1 removed [ 464.119665][ T163] team0 (unregistering): Port device team_slave_0 removed [ 464.144238][ T163] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 464.194295][ T163] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 464.222150][ C0] net_ratelimit: 24 callbacks suppressed [ 464.222158][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 464.233619][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 464.366441][ T163] bond0 (unregistering): Released all slaves [ 464.462151][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 464.467959][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 465.182186][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 465.187999][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 465.422143][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 465.427956][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 465.822142][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 465.827953][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 469.342169][ C1] net_ratelimit: 18 callbacks suppressed [ 469.342179][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 469.353685][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 469.582176][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 469.588006][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 469.982148][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 469.987966][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 469.993901][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 469.999668][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 470.462147][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 470.467973][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 474.622147][ C0] net_ratelimit: 22 callbacks suppressed [ 474.622156][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 474.633634][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 474.862176][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 474.867983][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 475.582150][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 475.587959][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 475.822163][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 475.827979][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 476.222142][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 476.227946][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 479.742158][ C1] net_ratelimit: 18 callbacks suppressed [ 479.742168][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 479.753721][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 479.982178][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 479.988013][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 480.382164][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 480.388008][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 480.394041][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 480.399861][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 480.862148][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 480.867952][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 485.022151][ C0] net_ratelimit: 22 callbacks suppressed [ 485.022161][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 485.033654][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 485.262149][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 485.267967][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 485.982150][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 485.987961][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 486.222146][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 486.227972][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 486.622144][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 486.627992][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 490.142145][ C1] net_ratelimit: 18 callbacks suppressed [ 490.142153][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 490.153661][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 490.382146][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 490.387963][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 490.782145][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 490.787978][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 490.793865][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 490.799629][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 491.262147][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 491.267971][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 495.422148][ C0] net_ratelimit: 22 callbacks suppressed [ 495.422158][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 495.433756][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 495.662157][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 495.667974][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 496.382145][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 496.387951][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 496.622161][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 496.627972][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 497.022150][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 497.027958][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 500.542182][ C1] net_ratelimit: 18 callbacks suppressed [ 500.542193][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 500.553723][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 500.782169][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 500.788008][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 501.182144][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 501.187960][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 501.193856][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 501.199680][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 501.662147][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 501.667964][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 505.822143][ C0] net_ratelimit: 22 callbacks suppressed [ 505.822159][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 505.833818][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 506.062143][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 506.067939][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 506.782180][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 506.788011][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 507.022160][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 507.027984][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 507.422143][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 507.427949][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 510.942149][ C1] net_ratelimit: 18 callbacks suppressed [ 510.942160][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 510.953665][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 511.182172][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 511.187976][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 511.582148][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 511.587955][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 511.594341][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 511.600109][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 512.062147][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 512.067963][ C0] protocol 88fb is buggy, dev hsr_slave_1 09:18:32 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x201, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x0) write(r0, &(0x7f0000000280), 0xba6c1c86) ioctl$TCSETAF(r1, 0x541b, 0x0) 09:18:32 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm_plock\x00', 0x40082, 0x0) setsockopt$TIPC_MCAST_BROADCAST(r1, 0x10f, 0x85) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) r2 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x400, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000580)='/dev/hwrng\x00', 0x2000, 0x0) fcntl$lock(r2, 0x27, 0x0) syz_open_pts(0xffffffffffffffff, 0x4000) write$P9_RLOPEN(0xffffffffffffffff, &(0x7f00000000c0)={0x18, 0xd, 0x2, {{0x0, 0x0, 0x6}}}, 0x18) perf_event_open(&(0x7f000001d000)={0x8000000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fe, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) close(r1) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='veth1\x00\x00\x00\x00\xff\xff\xff\xff\xff\xef\x00', 0x1000002b3) fsetxattr$security_smack_entry(r0, &(0x7f0000001500)='security.SMACK64IPOUT\x00', &(0x7f0000001540)='{vmnet1cpusetmd5sum\x00', 0x14, 0x1) sendto$inet(r0, &(0x7f0000000000), 0xfffffdef, 0xc0, 0x0, 0x4002) 09:18:32 executing program 1: syz_execute_func(&(0x7f00000006c0)="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") 09:18:32 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000001c0)='io.bfq.weight\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x10) 09:18:32 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) write(r0, &(0x7f0000000500)="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", 0xfc) 09:18:32 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x7) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'veth1_to_bridge\x00', &(0x7f0000000000)=@ethtool_regs}) 09:18:32 executing program 1: syz_execute_func(&(0x7f00000006c0)="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") 09:18:33 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sndpcmc(0x0, 0x3, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000500)='/dev/rfkill\x00', 0x0, 0x0) close(r0) bind$alg(0xffffffffffffffff, 0x0, 0x0) 09:18:33 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000100)) 09:18:33 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sndpcmc(0x0, 0x3, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000500)='/dev/rfkill\x00', 0x0, 0x0) close(r0) bind$alg(0xffffffffffffffff, 0x0, 0x0) 09:18:33 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'nr0\x01\x00', 0x801}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TUNSETLINK(r0, 0x400454cd, 0x308) socket$vsock_stream(0x28, 0x1, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0xbc8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000340)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb96\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\x97\x80\xe9\xa1S\f\xc7?\xa6\x95I\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~\xff\xff\x00\x00#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xd5\x1b\xca\xa9\xc7[\xa2\xef\xacM\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xb4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\x04R\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xafh_\x9c\x91\xc1q_|L\x11\x03\x94\xc0\t=\x17\x95P\xd7\xcdH\x1c8^ARL\x9b\x1f\xf6P\rSj\x95\xd9o\x03\xd4\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x13\x82Rk\x9cAz\xab\rT\xadLO\f\x17Y\x1dg\x10\xe3LL\x1fC\xfa\xd9\xb0\xfb\xb4\xf3[\xdf\xd0\xd6\x82\xf6~0\xb8\xf4\xb0X\xfew\xbdY\n\xd6\x105\x9c\xb7\xe5F\xc1:9\xb8\xc2\x85\b\xfd\x92\xb0k\x93\xd7\xc40J\xc2\xf0=p\xd6\xe3\xe4W:\xd2\xf6\xfc\x83\xb1\xcb\xd1K\xb9(\"9(~\xf4\xf4\x94`\xe8\xdb\x17\xf9\xcf#)T\xcdj^\xa61\x12\x91 \xd7\x92\xc0\xd0s\xa9\xe4\x18:') 09:18:33 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f123c123f719bd070") r1 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0xed5, 0x0) ioctl$VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000180)={0x1, @vbi}) [ 517.022368][T21788] IPVS: ftp: loaded support on port[0] = 21 [ 517.036103][T21790] IPVS: ftp: loaded support on port[0] = 21 [ 517.306878][T21790] chnl_net:caif_netlink_parms(): no params data found [ 517.326059][T21788] chnl_net:caif_netlink_parms(): no params data found [ 517.438832][T21788] bridge0: port 1(bridge_slave_0) entered blocking state [ 517.452211][T21788] bridge0: port 1(bridge_slave_0) entered disabled state [ 517.460306][T21788] device bridge_slave_0 entered promiscuous mode [ 517.478553][T21788] bridge0: port 2(bridge_slave_1) entered blocking state [ 517.492161][T21788] bridge0: port 2(bridge_slave_1) entered disabled state [ 517.500145][T21788] device bridge_slave_1 entered promiscuous mode [ 517.513172][T21790] bridge0: port 1(bridge_slave_0) entered blocking state [ 517.520245][T21790] bridge0: port 1(bridge_slave_0) entered disabled state [ 517.552235][T21790] device bridge_slave_0 entered promiscuous mode [ 517.589169][T21790] bridge0: port 2(bridge_slave_1) entered blocking state [ 517.612271][T21790] bridge0: port 2(bridge_slave_1) entered disabled state [ 517.620367][T21790] device bridge_slave_1 entered promiscuous mode [ 517.660399][T21788] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 517.694459][T21788] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 517.706712][T21790] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 517.730583][T21790] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 517.741858][T21788] team0: Port device team_slave_0 added [ 517.756109][T21788] team0: Port device team_slave_1 added [ 517.770479][T21790] team0: Port device team_slave_0 added [ 517.779001][T21790] team0: Port device team_slave_1 added [ 517.855063][T21788] device hsr_slave_0 entered promiscuous mode [ 517.892510][T21788] device hsr_slave_1 entered promiscuous mode [ 517.973848][T21788] bridge0: port 2(bridge_slave_1) entered blocking state [ 517.980952][T21788] bridge0: port 2(bridge_slave_1) entered forwarding state [ 517.988386][T21788] bridge0: port 1(bridge_slave_0) entered blocking state [ 517.995504][T21788] bridge0: port 1(bridge_slave_0) entered forwarding state [ 518.055925][T21790] device hsr_slave_0 entered promiscuous mode [ 518.122489][T21790] device hsr_slave_1 entered promiscuous mode [ 518.194633][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 518.203763][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 518.348785][T21788] 8021q: adding VLAN 0 to HW filter on device bond0 [ 518.363782][T21790] 8021q: adding VLAN 0 to HW filter on device bond0 [ 518.379249][T21788] 8021q: adding VLAN 0 to HW filter on device team0 [ 518.399595][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 518.408809][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 518.435627][ T2995] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 518.444109][ T2995] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 518.451904][ T2995] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 518.460986][ T2995] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 518.470210][ T2995] bridge0: port 1(bridge_slave_0) entered blocking state [ 518.477344][ T2995] bridge0: port 1(bridge_slave_0) entered forwarding state [ 518.495334][ T2995] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 518.510788][ T2995] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 518.521918][ T2995] bridge0: port 2(bridge_slave_1) entered blocking state [ 518.529033][ T2995] bridge0: port 2(bridge_slave_1) entered forwarding state [ 518.546344][ T2995] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 518.559917][ T2995] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 518.579403][T21790] 8021q: adding VLAN 0 to HW filter on device team0 [ 518.604313][ T7799] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 518.613307][ T7799] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 518.621740][ T7799] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 518.630884][ T7799] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 518.640732][ T7799] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 518.649497][ T7799] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 518.658323][ T7799] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 518.667100][ T7799] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 518.684073][T21788] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 518.695862][ T2995] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 518.704732][ T2995] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 518.714092][ T2995] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 518.723020][ T2995] bridge0: port 1(bridge_slave_0) entered blocking state [ 518.730080][ T2995] bridge0: port 1(bridge_slave_0) entered forwarding state [ 518.738606][ T2995] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 518.747501][ T2995] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 518.756619][ T2995] bridge0: port 2(bridge_slave_1) entered blocking state [ 518.763754][ T2995] bridge0: port 2(bridge_slave_1) entered forwarding state [ 518.771771][ T2995] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 518.803104][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 518.811091][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 518.821140][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 518.830646][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 518.840349][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 518.849905][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 518.858709][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 518.867731][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 518.880238][T21790] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 518.892317][T21790] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 518.904519][T21788] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 518.912782][ T7799] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 518.920603][ T7799] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 518.953010][ T7799] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 518.975387][T21790] 8021q: adding VLAN 0 to HW filter on device batadv0 09:18:39 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'nr0\x01\x00', 0x801}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TUNSETLINK(r0, 0x400454cd, 0x308) socket$vsock_stream(0x28, 0x1, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0xbc8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000340)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb96\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\x97\x80\xe9\xa1S\f\xc7?\xa6\x95I\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~\xff\xff\x00\x00#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xd5\x1b\xca\xa9\xc7[\xa2\xef\xacM\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xb4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\x04R\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xafh_\x9c\x91\xc1q_|L\x11\x03\x94\xc0\t=\x17\x95P\xd7\xcdH\x1c8^ARL\x9b\x1f\xf6P\rSj\x95\xd9o\x03\xd4\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x13\x82Rk\x9cAz\xab\rT\xadLO\f\x17Y\x1dg\x10\xe3LL\x1fC\xfa\xd9\xb0\xfb\xb4\xf3[\xdf\xd0\xd6\x82\xf6~0\xb8\xf4\xb0X\xfew\xbdY\n\xd6\x105\x9c\xb7\xe5F\xc1:9\xb8\xc2\x85\b\xfd\x92\xb0k\x93\xd7\xc40J\xc2\xf0=p\xd6\xe3\xe4W:\xd2\xf6\xfc\x83\xb1\xcb\xd1K\xb9(\"9(~\xf4\xf4\x94`\xe8\xdb\x17\xf9\xcf#)T\xcdj^\xa61\x12\x91 \xd7\x92\xc0\xd0s\xa9\xe4\x18:') 09:18:39 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sndpcmc(0x0, 0x3, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000500)='/dev/rfkill\x00', 0x0, 0x0) close(r0) bind$alg(0xffffffffffffffff, 0x0, 0x0) 09:18:39 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x800001000008912, &(0x7f00000002c0)="0a9c1f133c123f319bd070") bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x5, 0x1, 0x90}]}, &(0x7f0000000100)='GPL\x00'}, 0x48) 09:18:39 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000700)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000140)={0x0, 0x0, 0x0, r2}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x0, &(0x7f0000000000), 0x0, r2}) 09:18:39 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'nr0\x01\x00', 0x801}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TUNSETLINK(r0, 0x400454cd, 0x308) socket$vsock_stream(0x28, 0x1, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0xbc8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000340)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb96\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\x97\x80\xe9\xa1S\f\xc7?\xa6\x95I\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~\xff\xff\x00\x00#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xd5\x1b\xca\xa9\xc7[\xa2\xef\xacM\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xb4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\x04R\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xafh_\x9c\x91\xc1q_|L\x11\x03\x94\xc0\t=\x17\x95P\xd7\xcdH\x1c8^ARL\x9b\x1f\xf6P\rSj\x95\xd9o\x03\xd4\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x13\x82Rk\x9cAz\xab\rT\xadLO\f\x17Y\x1dg\x10\xe3LL\x1fC\xfa\xd9\xb0\xfb\xb4\xf3[\xdf\xd0\xd6\x82\xf6~0\xb8\xf4\xb0X\xfew\xbdY\n\xd6\x105\x9c\xb7\xe5F\xc1:9\xb8\xc2\x85\b\xfd\x92\xb0k\x93\xd7\xc40J\xc2\xf0=p\xd6\xe3\xe4W:\xd2\xf6\xfc\x83\xb1\xcb\xd1K\xb9(\"9(~\xf4\xf4\x94`\xe8\xdb\x17\xf9\xcf#)T\xcdj^\xa61\x12\x91 \xd7\x92\xc0\xd0s\xa9\xe4\x18:') 09:18:39 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'nr0\x01\x00', 0x801}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TUNSETLINK(r0, 0x400454cd, 0x308) socket$vsock_stream(0x28, 0x1, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0xbc8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000340)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb96\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\x97\x80\xe9\xa1S\f\xc7?\xa6\x95I\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~\xff\xff\x00\x00#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xd5\x1b\xca\xa9\xc7[\xa2\xef\xacM\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xb4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\x04R\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xafh_\x9c\x91\xc1q_|L\x11\x03\x94\xc0\t=\x17\x95P\xd7\xcdH\x1c8^ARL\x9b\x1f\xf6P\rSj\x95\xd9o\x03\xd4\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x13\x82Rk\x9cAz\xab\rT\xadLO\f\x17Y\x1dg\x10\xe3LL\x1fC\xfa\xd9\xb0\xfb\xb4\xf3[\xdf\xd0\xd6\x82\xf6~0\xb8\xf4\xb0X\xfew\xbdY\n\xd6\x105\x9c\xb7\xe5F\xc1:9\xb8\xc2\x85\b\xfd\x92\xb0k\x93\xd7\xc40J\xc2\xf0=p\xd6\xe3\xe4W:\xd2\xf6\xfc\x83\xb1\xcb\xd1K\xb9(\"9(~\xf4\xf4\x94`\xe8\xdb\x17\xf9\xcf#)T\xcdj^\xa61\x12\x91 \xd7\x92\xc0\xd0s\xa9\xe4\x18:') 09:18:39 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x800001000008912, &(0x7f00000002c0)="0a9c1f133c123f319bd070") bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x5, 0x1, 0x90}]}, &(0x7f0000000100)='GPL\x00'}, 0x48) 09:18:39 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sndpcmc(0x0, 0x3, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000500)='/dev/rfkill\x00', 0x0, 0x0) close(r0) bind$alg(0xffffffffffffffff, 0x0, 0x0) 09:18:39 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="7781a6b0d13a41122183e88c3648f7663f3c8fefebdeb017276e5c706c49eb"], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 09:18:39 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=@acquire={0x16c, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast1}, @in6=@ipv4={[], [], @dev}, {@in=@loopback, @in6=@local}, {{@in, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}}}, [@tmpl={0x44, 0x5, [{{@in=@remote}, 0x3, @in=@broadcast}]}]}, 0x16c}}, 0x0) 09:18:40 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x800001000008912, &(0x7f00000002c0)="0a9c1f133c123f319bd070") bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x5, 0x1, 0x90}]}, &(0x7f0000000100)='GPL\x00'}, 0x48) 09:18:40 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=@acquire={0x1ac, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast1}, @in6=@ipv4={[], [], @dev}, {@in=@loopback, @in6=@local}, {{@in, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}}}, [@tmpl={0x84, 0x5, [{{@in6=@mcast1, 0x0, 0x3c}, 0x0, @in=@multicast1}, {{@in=@remote, 0x0, 0x3c}, 0x0, @in=@broadcast}]}]}, 0x1ac}}, 0x0) 09:18:46 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'nr0\x01\x00', 0x801}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TUNSETLINK(r0, 0x400454cd, 0x308) socket$vsock_stream(0x28, 0x1, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0xbc8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000340)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb96\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\x97\x80\xe9\xa1S\f\xc7?\xa6\x95I\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~\xff\xff\x00\x00#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xd5\x1b\xca\xa9\xc7[\xa2\xef\xacM\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xb4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\x04R\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xafh_\x9c\x91\xc1q_|L\x11\x03\x94\xc0\t=\x17\x95P\xd7\xcdH\x1c8^ARL\x9b\x1f\xf6P\rSj\x95\xd9o\x03\xd4\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x13\x82Rk\x9cAz\xab\rT\xadLO\f\x17Y\x1dg\x10\xe3LL\x1fC\xfa\xd9\xb0\xfb\xb4\xf3[\xdf\xd0\xd6\x82\xf6~0\xb8\xf4\xb0X\xfew\xbdY\n\xd6\x105\x9c\xb7\xe5F\xc1:9\xb8\xc2\x85\b\xfd\x92\xb0k\x93\xd7\xc40J\xc2\xf0=p\xd6\xe3\xe4W:\xd2\xf6\xfc\x83\xb1\xcb\xd1K\xb9(\"9(~\xf4\xf4\x94`\xe8\xdb\x17\xf9\xcf#)T\xcdj^\xa61\x12\x91 \xd7\x92\xc0\xd0s\xa9\xe4\x18:') 09:18:46 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=@acquire={0x1ac, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast1}, @in6=@ipv4={[], [], @dev}, {@in=@loopback, @in6=@local}, {{@in, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}}}, [@tmpl={0x84, 0x5, [{{@in6=@mcast1, 0x0, 0x3c}, 0x0, @in=@multicast1}, {{@in=@remote, 0x0, 0x3c}, 0x0, @in=@broadcast}]}]}, 0x1ac}}, 0x0) 09:18:46 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x800001000008912, &(0x7f00000002c0)="0a9c1f133c123f319bd070") bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x5, 0x1, 0x90}]}, &(0x7f0000000100)='GPL\x00'}, 0x48) 09:18:46 executing program 1: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000280)='./file0\x00', 0x8000, 0x1, &(0x7f0000000140)=[{&(0x7f0000000340)="eb58906d6b66732e66617400040120000200068000f8", 0x16}], 0x0, 0x0) 09:18:46 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'nr0\x01\x00', 0x801}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TUNSETLINK(r0, 0x400454cd, 0x308) socket$vsock_stream(0x28, 0x1, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0xbc8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000340)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb96\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\x97\x80\xe9\xa1S\f\xc7?\xa6\x95I\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~\xff\xff\x00\x00#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xd5\x1b\xca\xa9\xc7[\xa2\xef\xacM\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xb4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\x04R\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xafh_\x9c\x91\xc1q_|L\x11\x03\x94\xc0\t=\x17\x95P\xd7\xcdH\x1c8^ARL\x9b\x1f\xf6P\rSj\x95\xd9o\x03\xd4\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x13\x82Rk\x9cAz\xab\rT\xadLO\f\x17Y\x1dg\x10\xe3LL\x1fC\xfa\xd9\xb0\xfb\xb4\xf3[\xdf\xd0\xd6\x82\xf6~0\xb8\xf4\xb0X\xfew\xbdY\n\xd6\x105\x9c\xb7\xe5F\xc1:9\xb8\xc2\x85\b\xfd\x92\xb0k\x93\xd7\xc40J\xc2\xf0=p\xd6\xe3\xe4W:\xd2\xf6\xfc\x83\xb1\xcb\xd1K\xb9(\"9(~\xf4\xf4\x94`\xe8\xdb\x17\xf9\xcf#)T\xcdj^\xa61\x12\x91 \xd7\x92\xc0\xd0s\xa9\xe4\x18:') 09:18:46 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'nr0\x01\x00', 0x801}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TUNSETLINK(r0, 0x400454cd, 0x308) socket$vsock_stream(0x28, 0x1, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0xbc8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000340)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb96\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\x97\x80\xe9\xa1S\f\xc7?\xa6\x95I\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~\xff\xff\x00\x00#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xd5\x1b\xca\xa9\xc7[\xa2\xef\xacM\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xb4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\x04R\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xafh_\x9c\x91\xc1q_|L\x11\x03\x94\xc0\t=\x17\x95P\xd7\xcdH\x1c8^ARL\x9b\x1f\xf6P\rSj\x95\xd9o\x03\xd4\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x13\x82Rk\x9cAz\xab\rT\xadLO\f\x17Y\x1dg\x10\xe3LL\x1fC\xfa\xd9\xb0\xfb\xb4\xf3[\xdf\xd0\xd6\x82\xf6~0\xb8\xf4\xb0X\xfew\xbdY\n\xd6\x105\x9c\xb7\xe5F\xc1:9\xb8\xc2\x85\b\xfd\x92\xb0k\x93\xd7\xc40J\xc2\xf0=p\xd6\xe3\xe4W:\xd2\xf6\xfc\x83\xb1\xcb\xd1K\xb9(\"9(~\xf4\xf4\x94`\xe8\xdb\x17\xf9\xcf#)T\xcdj^\xa61\x12\x91 \xd7\x92\xc0\xd0s\xa9\xe4\x18:') [ 527.173728][T21864] FAT-fs (loop1): Directory bread(block 32) failed 09:18:46 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) clone(0x2000802102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$9p_virtio(&(0x7f0000002180)='*vmnet0+-\x00', &(0x7f00000021c0)='./file0\x00', &(0x7f0000002200)='9p\x00', 0x0, 0x0) 09:18:46 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=@acquire={0x1ac, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast1}, @in6=@ipv4={[], [], @dev}, {@in=@loopback, @in6=@local}, {{@in, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}}}, [@tmpl={0x84, 0x5, [{{@in6=@mcast1, 0x0, 0x3c}, 0x0, @in=@multicast1}, {{@in=@remote, 0x0, 0x3c}, 0x0, @in=@broadcast}]}]}, 0x1ac}}, 0x0) [ 527.218471][T21864] FAT-fs (loop1): Directory bread(block 33) failed [ 527.246462][T21864] FAT-fs (loop1): Directory bread(block 34) failed [ 527.296042][T21864] FAT-fs (loop1): Directory bread(block 35) failed [ 527.337636][T21864] FAT-fs (loop1): Directory bread(block 36) failed [ 527.358516][T21877] 9pnet_virtio: no channels available for device *vmnet0+- [ 527.372577][T21864] FAT-fs (loop1): Directory bread(block 37) failed 09:18:46 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=@acquire={0x1ac, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast1}, @in6=@ipv4={[], [], @dev}, {@in=@loopback, @in6=@local}, {{@in, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}}}, [@tmpl={0x84, 0x5, [{{@in6=@mcast1, 0x0, 0x3c}, 0x0, @in=@multicast1}, {{@in=@remote, 0x0, 0x3c}, 0x0, @in=@broadcast}]}]}, 0x1ac}}, 0x0) 09:18:46 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis256-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r2 = accept$alg(r1, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r2, &(0x7f0000008a00)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000000)=""/48, 0x7510}, {&(0x7f0000000680)=""/120, 0xf}, {&(0x7f0000000300)=""/230, 0xffffff6f}], 0x3, 0x0, 0x3b9ac9ff}}], 0x1, 0x0, &(0x7f0000008bc0)) [ 527.395919][T21864] FAT-fs (loop1): Directory bread(block 38) failed [ 527.459286][T21864] FAT-fs (loop1): Directory bread(block 39) failed [ 527.492367][T21864] FAT-fs (loop1): Directory bread(block 40) failed 09:18:46 executing program 3: syz_emit_ethernet(0x3e, &(0x7f0000000040)={@random="9f5fd736f08c", @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "ca819d", 0x8, 0x3a, 0x0, @dev, @local, {[], @icmpv6=@echo_request}}}}}, 0x0) [ 527.532485][T21864] FAT-fs (loop1): Directory bread(block 41) failed 09:18:46 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'nr0\x01\x00', 0x801}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TUNSETLINK(r0, 0x400454cd, 0x308) socket$vsock_stream(0x28, 0x1, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0xbc8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000340)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb96\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\x97\x80\xe9\xa1S\f\xc7?\xa6\x95I\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~\xff\xff\x00\x00#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xd5\x1b\xca\xa9\xc7[\xa2\xef\xacM\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xb4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\x04R\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xafh_\x9c\x91\xc1q_|L\x11\x03\x94\xc0\t=\x17\x95P\xd7\xcdH\x1c8^ARL\x9b\x1f\xf6P\rSj\x95\xd9o\x03\xd4\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x13\x82Rk\x9cAz\xab\rT\xadLO\f\x17Y\x1dg\x10\xe3LL\x1fC\xfa\xd9\xb0\xfb\xb4\xf3[\xdf\xd0\xd6\x82\xf6~0\xb8\xf4\xb0X\xfew\xbdY\n\xd6\x105\x9c\xb7\xe5F\xc1:9\xb8\xc2\x85\b\xfd\x92\xb0k\x93\xd7\xc40J\xc2\xf0=p\xd6\xe3\xe4W:\xd2\xf6\xfc\x83\xb1\xcb\xd1K\xb9(\"9(~\xf4\xf4\x94`\xe8\xdb\x17\xf9\xcf#)T\xcdj^\xa61\x12\x91 \xd7\x92\xc0\xd0s\xa9\xe4\x18:') 09:18:46 executing program 1: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000280)='./file0\x00', 0x8000, 0x1, &(0x7f0000000140)=[{&(0x7f0000000340)="eb58906d6b66732e66617400040120000200068000f8", 0x16}], 0x0, 0x0) 09:18:47 executing program 3: syz_emit_ethernet(0x3e, &(0x7f0000000040)={@random="9f5fd736f08c", @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "ca819d", 0x8, 0x3a, 0x0, @dev, @local, {[], @icmpv6=@echo_request}}}}}, 0x0) [ 527.785170][T21904] FAT-fs (loop1): Directory bread(block 32) failed [ 527.828208][T21904] FAT-fs (loop1): Directory bread(block 33) failed [ 527.857082][T21904] FAT-fs (loop1): Directory bread(block 34) failed [ 527.871350][T21904] FAT-fs (loop1): Directory bread(block 35) failed 09:18:47 executing program 3: syz_emit_ethernet(0x3e, &(0x7f0000000040)={@random="9f5fd736f08c", @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "ca819d", 0x8, 0x3a, 0x0, @dev, @local, {[], @icmpv6=@echo_request}}}}}, 0x0) [ 527.878382][T21904] FAT-fs (loop1): Directory bread(block 36) failed [ 527.885374][T21904] FAT-fs (loop1): Directory bread(block 37) failed [ 527.898541][T21904] FAT-fs (loop1): Directory bread(block 38) failed [ 527.913844][T21904] FAT-fs (loop1): Directory bread(block 39) failed [ 527.948848][T21904] FAT-fs (loop1): Directory bread(block 40) failed [ 527.976594][T21904] FAT-fs (loop1): Directory bread(block 41) failed 09:18:47 executing program 1: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000280)='./file0\x00', 0x8000, 0x1, &(0x7f0000000140)=[{&(0x7f0000000340)="eb58906d6b66732e66617400040120000200068000f8", 0x16}], 0x0, 0x0) [ 529.390449][T21923] FAT-fs (loop1): Directory bread(block 32) failed [ 529.406349][T21923] FAT-fs (loop1): Directory bread(block 33) failed [ 529.416699][T21923] FAT-fs (loop1): Directory bread(block 34) failed [ 529.428200][T21923] FAT-fs (loop1): Directory bread(block 35) failed [ 529.438570][T21923] FAT-fs (loop1): Directory bread(block 36) failed [ 529.453142][T21923] FAT-fs (loop1): Directory bread(block 37) failed [ 529.465635][T21923] FAT-fs (loop1): Directory bread(block 38) failed [ 529.479516][T21923] FAT-fs (loop1): Directory bread(block 39) failed [ 529.491135][T21923] FAT-fs (loop1): Directory bread(block 40) failed [ 529.503711][T21923] FAT-fs (loop1): Directory bread(block 41) failed 09:18:51 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'nr0\x01\x00', 0x801}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TUNSETLINK(r0, 0x400454cd, 0x308) socket$vsock_stream(0x28, 0x1, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0xbc8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000340)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb96\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\x97\x80\xe9\xa1S\f\xc7?\xa6\x95I\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~\xff\xff\x00\x00#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xd5\x1b\xca\xa9\xc7[\xa2\xef\xacM\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xb4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\x04R\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xafh_\x9c\x91\xc1q_|L\x11\x03\x94\xc0\t=\x17\x95P\xd7\xcdH\x1c8^ARL\x9b\x1f\xf6P\rSj\x95\xd9o\x03\xd4\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x13\x82Rk\x9cAz\xab\rT\xadLO\f\x17Y\x1dg\x10\xe3LL\x1fC\xfa\xd9\xb0\xfb\xb4\xf3[\xdf\xd0\xd6\x82\xf6~0\xb8\xf4\xb0X\xfew\xbdY\n\xd6\x105\x9c\xb7\xe5F\xc1:9\xb8\xc2\x85\b\xfd\x92\xb0k\x93\xd7\xc40J\xc2\xf0=p\xd6\xe3\xe4W:\xd2\xf6\xfc\x83\xb1\xcb\xd1K\xb9(\"9(~\xf4\xf4\x94`\xe8\xdb\x17\xf9\xcf#)T\xcdj^\xa61\x12\x91 \xd7\x92\xc0\xd0s\xa9\xe4\x18:') 09:18:51 executing program 3: syz_emit_ethernet(0x3e, &(0x7f0000000040)={@random="9f5fd736f08c", @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "ca819d", 0x8, 0x3a, 0x0, @dev, @local, {[], @icmpv6=@echo_request}}}}}, 0x0) 09:18:51 executing program 1: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000280)='./file0\x00', 0x8000, 0x1, &(0x7f0000000140)=[{&(0x7f0000000340)="eb58906d6b66732e66617400040120000200068000f8", 0x16}], 0x0, 0x0) 09:18:51 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/kcm\x00\b\x00') getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x69dd6fa7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000380)='/dev/audio\x00', 0x4000, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r1 = epoll_create1(0x80000) ioctl$UI_END_FF_ERASE(r0, 0x400c55cb, &(0x7f0000000040)={0x4, 0x0, 0x5}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, &(0x7f0000000140)) socket$nl_xfrm(0x10, 0x3, 0x6) close(0xffffffffffffffff) socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={'rose0\x00', {0x2, 0x0, @multicast2}}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 09:18:51 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'nr0\x01\x00', 0x801}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TUNSETLINK(r0, 0x400454cd, 0x308) socket$vsock_stream(0x28, 0x1, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0xbc8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000340)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb96\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\x97\x80\xe9\xa1S\f\xc7?\xa6\x95I\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~\xff\xff\x00\x00#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xd5\x1b\xca\xa9\xc7[\xa2\xef\xacM\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xb4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\x04R\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xafh_\x9c\x91\xc1q_|L\x11\x03\x94\xc0\t=\x17\x95P\xd7\xcdH\x1c8^ARL\x9b\x1f\xf6P\rSj\x95\xd9o\x03\xd4\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x13\x82Rk\x9cAz\xab\rT\xadLO\f\x17Y\x1dg\x10\xe3LL\x1fC\xfa\xd9\xb0\xfb\xb4\xf3[\xdf\xd0\xd6\x82\xf6~0\xb8\xf4\xb0X\xfew\xbdY\n\xd6\x105\x9c\xb7\xe5F\xc1:9\xb8\xc2\x85\b\xfd\x92\xb0k\x93\xd7\xc40J\xc2\xf0=p\xd6\xe3\xe4W:\xd2\xf6\xfc\x83\xb1\xcb\xd1K\xb9(\"9(~\xf4\xf4\x94`\xe8\xdb\x17\xf9\xcf#)T\xcdj^\xa61\x12\x91 \xd7\x92\xc0\xd0s\xa9\xe4\x18:') 09:18:51 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis256-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r2 = accept$alg(r1, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r2, &(0x7f0000008a00)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000000)=""/48, 0x7510}, {&(0x7f0000000680)=""/120, 0xf}, {&(0x7f0000000300)=""/230, 0xffffff6f}], 0x3, 0x0, 0x3b9ac9ff}}], 0x1, 0x0, &(0x7f0000008bc0)) [ 532.476003][T21934] FAT-fs (loop1): Directory bread(block 32) failed [ 532.502269][T21934] FAT-fs (loop1): Directory bread(block 33) failed [ 532.509464][T21934] FAT-fs (loop1): Directory bread(block 34) failed [ 532.578195][T21934] FAT-fs (loop1): Directory bread(block 35) failed 09:18:51 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis256-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r2 = accept$alg(r1, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r2, &(0x7f0000008a00)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000000)=""/48, 0x7510}, {&(0x7f0000000680)=""/120, 0xf}, {&(0x7f0000000300)=""/230, 0xffffff6f}], 0x3, 0x0, 0x3b9ac9ff}}], 0x1, 0x0, &(0x7f0000008bc0)) [ 532.625613][T21934] FAT-fs (loop1): Directory bread(block 36) failed [ 532.648874][T21934] FAT-fs (loop1): Directory bread(block 37) failed [ 532.694202][T21934] FAT-fs (loop1): Directory bread(block 38) failed [ 532.711902][T21934] FAT-fs (loop1): Directory bread(block 39) failed [ 532.722000][T21934] FAT-fs (loop1): Directory bread(block 40) failed [ 532.740978][T21934] FAT-fs (loop1): Directory bread(block 41) failed 09:18:52 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={[{@fat=@errors_continue='errors=continue'}, {@fat=@showexec='showexec'}]}) [ 533.058550][T21967] FAT-fs (loop1): bogus number of reserved sectors [ 533.079304][T21967] FAT-fs (loop1): Can't find a valid FAT filesystem 09:18:52 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis256-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r2 = accept$alg(r1, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r2, &(0x7f0000008a00)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000000)=""/48, 0x7510}, {&(0x7f0000000680)=""/120, 0xf}, {&(0x7f0000000300)=""/230, 0xffffff6f}], 0x3, 0x0, 0x3b9ac9ff}}], 0x1, 0x0, &(0x7f0000008bc0)) 09:18:52 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis256-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r2 = accept$alg(r1, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r2, &(0x7f0000008a00)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000000)=""/48, 0x7510}, {&(0x7f0000000680)=""/120, 0xf}, {&(0x7f0000000300)=""/230, 0xffffff6f}], 0x3, 0x0, 0x3b9ac9ff}}], 0x1, 0x0, &(0x7f0000008bc0)) [ 533.809517][T21983] FAT-fs (loop1): bogus number of reserved sectors [ 533.825436][T21983] FAT-fs (loop1): Can't find a valid FAT filesystem 09:18:54 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis256-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r2 = accept$alg(r1, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r2, &(0x7f0000008a00)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000000)=""/48, 0x7510}, {&(0x7f0000000680)=""/120, 0xf}, {&(0x7f0000000300)=""/230, 0xffffff6f}], 0x3, 0x0, 0x3b9ac9ff}}], 0x1, 0x0, &(0x7f0000008bc0)) 09:18:54 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis256-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r2 = accept$alg(r1, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r2, &(0x7f0000008a00)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000000)=""/48, 0x7510}, {&(0x7f0000000680)=""/120, 0xf}, {&(0x7f0000000300)=""/230, 0xffffff6f}], 0x3, 0x0, 0x3b9ac9ff}}], 0x1, 0x0, &(0x7f0000008bc0)) 09:18:55 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x80000000000000e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 09:18:55 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={[{@fat=@errors_continue='errors=continue'}, {@fat=@showexec='showexec'}]}) 09:18:55 executing program 5: mknod(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffff9c, 0x0) getpgrp(0x0) perf_event_open(&(0x7f0000000400)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0xd918, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}}, 0x0, 0x0, r0, 0x1) mount(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000003c0)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x0, &(0x7f0000000000)) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x114, 0x6, 0x0, 0x0) ioctl$VIDIOC_ENUMAUDOUT(0xffffffffffffffff, 0xc0345642, 0x0) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg(r1, 0x0, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x2020) bpf$PROG_LOAD(0x5, &(0x7f0000005dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, [], 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000200)) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 536.030186][T22007] FAT-fs (loop1): bogus number of reserved sectors [ 536.056104][T22007] FAT-fs (loop1): Can't find a valid FAT filesystem [ 537.096513][ T163] device bridge_slave_1 left promiscuous mode [ 537.110754][ T163] bridge0: port 2(bridge_slave_1) entered disabled state [ 537.193669][ T163] device bridge_slave_0 left promiscuous mode [ 537.200877][ T163] bridge0: port 1(bridge_slave_0) entered disabled state [ 541.075469][ T163] device hsr_slave_1 left promiscuous mode [ 541.124359][ T163] device hsr_slave_0 left promiscuous mode [ 541.177650][ T163] team0 (unregistering): Port device team_slave_1 removed [ 541.204883][ T163] team0 (unregistering): Port device team_slave_0 removed [ 541.228144][ T163] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 541.304250][ T163] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 541.483663][ T163] bond0 (unregistering): Released all slaves 09:19:03 executing program 0: r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") connect$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) recvmmsg(r0, &(0x7f0000000dc0)=[{{&(0x7f0000000100)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) writev(r0, &(0x7f0000001380)=[{&(0x7f0000001100)="d2", 0x1}], 0x1) 09:19:03 executing program 4: r0 = socket(0x1e, 0x805, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000000)=@req3={0x80000000}, 0x1c) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10) 09:19:03 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r0, 0xffffffffffffffb1, &(0x7f00000000c0)) 09:19:03 executing program 5: mknod(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffff9c, 0x0) getpgrp(0x0) perf_event_open(&(0x7f0000000400)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0xd918, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}}, 0x0, 0x0, r0, 0x1) mount(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000003c0)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x0, &(0x7f0000000000)) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x114, 0x6, 0x0, 0x0) ioctl$VIDIOC_ENUMAUDOUT(0xffffffffffffffff, 0xc0345642, 0x0) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg(r1, 0x0, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x2020) bpf$PROG_LOAD(0x5, &(0x7f0000005dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, [], 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000200)) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 09:19:03 executing program 3: openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000440)='./file0\x00', 0x0) r0 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000100)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$unlink(0x9, r0, 0xfffffffffffffffd) 09:19:03 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={[{@fat=@errors_continue='errors=continue'}, {@fat=@showexec='showexec'}]}) [ 543.930326][T22030] FAT-fs (loop1): bogus number of reserved sectors [ 543.947795][T22030] FAT-fs (loop1): Can't find a valid FAT filesystem 09:19:03 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) add_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0x0, 0xfffffffffffffff8) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000440)='cgroup2\x00', 0x0, 0x0) mkdir(&(0x7f0000000180)='./file0//ile0\x00', 0x80) ioctl$BLKREPORTZONE(0xffffffffffffffff, 0xc0101282, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_PVERSION(0xffffffffffffffff, 0x80045300, 0x0) rmdir(0x0) 09:19:03 executing program 5: mknod(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffff9c, 0x0) getpgrp(0x0) perf_event_open(&(0x7f0000000400)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0xd918, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}}, 0x0, 0x0, r0, 0x1) mount(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000003c0)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x0, &(0x7f0000000000)) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x114, 0x6, 0x0, 0x0) ioctl$VIDIOC_ENUMAUDOUT(0xffffffffffffffff, 0xc0345642, 0x0) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg(r1, 0x0, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x2020) bpf$PROG_LOAD(0x5, &(0x7f0000005dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, [], 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000200)) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 09:19:03 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r0, 0xffffffffffffffb1, &(0x7f00000000c0)) 09:19:03 executing program 3: openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sync_threshold\x00R\xcf\xbc\t\x00\x00\xd0\xe0\xce=D\x8fW\xb0\x99F\xa7c\\RT\xa0\rf\x8eL\xe6\x98k\xa8\xabt\xab\xc9\xc4\x9b\xe6\xc7\x8bxu1\x89\x04\x00\x00\x00j\xf7E\x8d0\xc7\x148+', 0x2, 0x0) 09:19:03 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={[{@fat=@errors_continue='errors=continue'}, {@fat=@showexec='showexec'}]}) 09:19:03 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) listen(r1, 0x0) 09:19:03 executing program 4: r0 = socket(0x1e, 0x805, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000000)=@req3={0x80000000}, 0x1c) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10) 09:19:03 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r0, 0xffffffffffffffb1, &(0x7f00000000c0)) 09:19:03 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) add_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0x0, 0xfffffffffffffff8) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000440)='cgroup2\x00', 0x0, 0x0) mkdir(&(0x7f0000000180)='./file0//ile0\x00', 0x80) ioctl$BLKREPORTZONE(0xffffffffffffffff, 0xc0101282, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_PVERSION(0xffffffffffffffff, 0x80045300, 0x0) rmdir(0x0) 09:19:03 executing program 5: mknod(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffff9c, 0x0) getpgrp(0x0) perf_event_open(&(0x7f0000000400)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0xd918, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}}, 0x0, 0x0, r0, 0x1) mount(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000003c0)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x0, &(0x7f0000000000)) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x114, 0x6, 0x0, 0x0) ioctl$VIDIOC_ENUMAUDOUT(0xffffffffffffffff, 0xc0345642, 0x0) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg(r1, 0x0, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x2020) bpf$PROG_LOAD(0x5, &(0x7f0000005dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, [], 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000200)) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 09:19:03 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r0, 0xffffffffffffffb1, &(0x7f00000000c0)) [ 544.447828][T22074] FAT-fs (loop1): bogus number of reserved sectors [ 544.472171][T22074] FAT-fs (loop1): Can't find a valid FAT filesystem 09:19:03 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) add_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0x0, 0xfffffffffffffff8) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000440)='cgroup2\x00', 0x0, 0x0) mkdir(&(0x7f0000000180)='./file0//ile0\x00', 0x80) ioctl$BLKREPORTZONE(0xffffffffffffffff, 0xc0101282, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_PVERSION(0xffffffffffffffff, 0x80045300, 0x0) rmdir(0x0) 09:19:04 executing program 2: syz_emit_ethernet(0x36, &(0x7f0000000080)={@random="8db482075da1", @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x28}, @dev}, @tcp={{0xffff8000, 0x6558, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 09:19:04 executing program 5: epoll_create1(0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f319bd070") syz_execute_func(&(0x7f0000000000)="994a2ae92c02964c0f05bf03000000c4a37bf0c5fe41e2e9c422e9aabb3c0000004a0fc7a4ea70db000000000f383a9e02000000110f4e5bc4a265aa104b26660f38091e2fa2631bc421045f4607c421dd589fc4e10bf8e426f2f045f619640f0f6f43a038fd52262e2e66450f7d64c60865f2ad0383397fd3ff3a0065f20f7cd8efa1a12ad764d38f53efaf6766f2ab440fec3f67ddea660f79cec462b1f72ec3c4899294d800000000000fc4634148f70000c2a0c10b00cca27a0e0fc442cd376d000f9f3c6436b2aa66450fc4650000c4e39978c104d9a1e8719e70ddcdcda2660f38346800c4e3295d4c3dc8a3c4c1045ccc7d75c4426507af0f0000000f5fd25cf3460f2ad0f30f5ea5a9a50000ffff660f79ca553131b83a00a2f1fbfb766208cf") openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) 09:19:04 executing program 4: r0 = socket(0x1e, 0x805, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000000)=@req3={0x80000000}, 0x1c) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10) 09:19:04 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) add_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz'}, 0x0, 0x0, 0xfffffffffffffff8) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000440)='cgroup2\x00', 0x0, 0x0) mkdir(&(0x7f0000000180)='./file0//ile0\x00', 0x80) ioctl$BLKREPORTZONE(0xffffffffffffffff, 0xc0101282, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_PVERSION(0xffffffffffffffff, 0x80045300, 0x0) rmdir(0x0) 09:19:04 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc12123c123ff89bd070") syz_open_dev$dmmidi(&(0x7f0000000140)='/dev/dmmidi#\x00', 0x2000000000000000, 0x0) r1 = syz_open_dev$loop(0x0, 0x0, 0x20042) ppoll(&(0x7f0000000000)=[{r1}], 0x1, 0x0, 0x0, 0x0) 09:19:04 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) listen(r1, 0x0) 09:19:04 executing program 2: r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @remote}, 0x14) 09:19:04 executing program 4: r0 = socket(0x1e, 0x805, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000000)=@req3={0x80000000}, 0x1c) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10) 09:19:04 executing program 5: epoll_create1(0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f319bd070") syz_execute_func(&(0x7f0000000000)="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") openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) 09:19:04 executing program 2: r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @remote}, 0x14) 09:19:04 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) write$cgroup_subtree(r1, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x80000) 09:19:04 executing program 2: r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @remote}, 0x14) 09:19:04 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000800)={0x68, r1, 0x815, 0x0, 0x0, {{}, 0x0, 0x4109, 0x0, {0x4c, 0x18, {0x300, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) 09:19:04 executing program 2: r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @remote}, 0x14) 09:19:04 executing program 2: syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000000600)='/dev/snd/seq\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x0, 0x40) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000068f50)={{0x80}, 'por\xff\a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\xff\xff\xff\xff\xff\xff\xff\xef\x00\x00\x03\xff\x00\x00\x00\x00\x00\x00\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00', 0x0, 0x80003}) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x406, 0x0) dup2(r0, r1) set_thread_area(&(0x7f0000000000)={0x8, 0x20001000, 0xffffffffffffffff, 0xa7, 0x8, 0x0, 0x461, 0xfffffffffffffff7, 0x3f, 0xf1}) 09:19:05 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) listen(r1, 0x0) 09:19:05 executing program 0: syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000000600)='/dev/snd/seq\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x0, 0x40) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000068f50)={{0x80}, 'por\xff\a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\xff\xff\xff\xff\xff\xff\xff\xef\x00\x00\x03\xff\x00\x00\x00\x00\x00\x00\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00', 0x0, 0x80003}) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x406, 0x0) dup2(r0, r1) set_thread_area(&(0x7f0000000000)={0x8, 0x20001000, 0xffffffffffffffff, 0xa7, 0x8, 0x0, 0x461, 0xfffffffffffffff7, 0x3f, 0xf1}) 09:19:05 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @ipv4}}}, 0x108) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r1, &(0x7f0000000100), 0x2df, 0x80000000000) write$P9_RWRITE(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) prctl$PR_MCE_KILL_GET(0x22) timer_getoverrun(0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000140)={0x0, 0x0, 0x1, 0x0, 0x11}) ioctl(0xffffffffffffffff, 0x1000008912, 0x0) r2 = syz_open_dev$sndtimer(0x0, 0x0, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uhid\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x40485404, 0x0) 09:19:05 executing program 2: syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000000600)='/dev/snd/seq\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x0, 0x40) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000068f50)={{0x80}, 'por\xff\a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\xff\xff\xff\xff\xff\xff\xff\xef\x00\x00\x03\xff\x00\x00\x00\x00\x00\x00\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00', 0x0, 0x80003}) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x406, 0x0) dup2(r0, r1) set_thread_area(&(0x7f0000000000)={0x8, 0x20001000, 0xffffffffffffffff, 0xa7, 0x8, 0x0, 0x461, 0xfffffffffffffff7, 0x3f, 0xf1}) 09:19:05 executing program 5: epoll_create1(0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f319bd070") syz_execute_func(&(0x7f0000000000)="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") openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) 09:19:05 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) listen(r1, 0x0) 09:19:05 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000800)={0x68, r1, 0x815, 0x0, 0x0, {{}, 0x0, 0x4109, 0x0, {0x4c, 0x18, {0x300, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) 09:19:05 executing program 0: syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000000600)='/dev/snd/seq\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x0, 0x40) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000068f50)={{0x80}, 'por\xff\a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\xff\xff\xff\xff\xff\xff\xff\xef\x00\x00\x03\xff\x00\x00\x00\x00\x00\x00\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00', 0x0, 0x80003}) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x406, 0x0) dup2(r0, r1) set_thread_area(&(0x7f0000000000)={0x8, 0x20001000, 0xffffffffffffffff, 0xa7, 0x8, 0x0, 0x461, 0xfffffffffffffff7, 0x3f, 0xf1}) 09:19:05 executing program 2: syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000000600)='/dev/snd/seq\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x0, 0x40) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000068f50)={{0x80}, 'por\xff\a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\xff\xff\xff\xff\xff\xff\xff\xef\x00\x00\x03\xff\x00\x00\x00\x00\x00\x00\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00', 0x0, 0x80003}) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x406, 0x0) dup2(r0, r1) set_thread_area(&(0x7f0000000000)={0x8, 0x20001000, 0xffffffffffffffff, 0xa7, 0x8, 0x0, 0x461, 0xfffffffffffffff7, 0x3f, 0xf1}) 09:19:05 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r1, 0x4024700a, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xd, 0x0, 0x87}) 09:19:05 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @ipv4}}}, 0x108) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r1, &(0x7f0000000100), 0x2df, 0x80000000000) write$P9_RWRITE(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) prctl$PR_MCE_KILL_GET(0x22) timer_getoverrun(0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000140)={0x0, 0x0, 0x1, 0x0, 0x11}) ioctl(0xffffffffffffffff, 0x1000008912, 0x0) r2 = syz_open_dev$sndtimer(0x0, 0x0, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uhid\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x40485404, 0x0) 09:19:05 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000800)={0x68, r1, 0x815, 0x0, 0x0, {{}, 0x0, 0x4109, 0x0, {0x4c, 0x18, {0x300, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) 09:19:06 executing program 2: syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000000600)='/dev/snd/seq\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x0, 0x40) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000068f50)={{0x80}, 'por\xff\a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\xff\xff\xff\xff\xff\xff\xff\xef\x00\x00\x03\xff\x00\x00\x00\x00\x00\x00\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00', 0x0, 0x80003}) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x406, 0x0) dup2(r0, r1) set_thread_area(&(0x7f0000000000)={0x8, 0x20001000, 0xffffffffffffffff, 0xa7, 0x8, 0x0, 0x461, 0xfffffffffffffff7, 0x3f, 0xf1}) 09:19:06 executing program 0: syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000000600)='/dev/snd/seq\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x0, 0x40) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000068f50)={{0x80}, 'por\xff\a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\xff\xff\xff\xff\xff\xff\xff\xef\x00\x00\x03\xff\x00\x00\x00\x00\x00\x00\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00', 0x0, 0x80003}) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x406, 0x0) dup2(r0, r1) set_thread_area(&(0x7f0000000000)={0x8, 0x20001000, 0xffffffffffffffff, 0xa7, 0x8, 0x0, 0x461, 0xfffffffffffffff7, 0x3f, 0xf1}) 09:19:06 executing program 5: epoll_create1(0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f319bd070") syz_execute_func(&(0x7f0000000000)="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") openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) 09:19:06 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r1, 0x4024700a, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xd, 0x0, 0x87}) 09:19:06 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @ipv4}}}, 0x108) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r1, &(0x7f0000000100), 0x2df, 0x80000000000) write$P9_RWRITE(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) prctl$PR_MCE_KILL_GET(0x22) timer_getoverrun(0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000140)={0x0, 0x0, 0x1, 0x0, 0x11}) ioctl(0xffffffffffffffff, 0x1000008912, 0x0) r2 = syz_open_dev$sndtimer(0x0, 0x0, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uhid\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x40485404, 0x0) 09:19:06 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x402) ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f0000000040)=0x73) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000180)={0x30}, 0x30) 09:19:06 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000800)={0x68, r1, 0x815, 0x0, 0x0, {{}, 0x0, 0x4109, 0x0, {0x4c, 0x18, {0x300, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) 09:19:06 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x402) ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f0000000040)=0x73) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000180)={0x30}, 0x30) 09:19:06 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @ipv4}}}, 0x108) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r1, &(0x7f0000000100), 0x2df, 0x80000000000) write$P9_RWRITE(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) prctl$PR_MCE_KILL_GET(0x22) timer_getoverrun(0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000140)={0x0, 0x0, 0x1, 0x0, 0x11}) ioctl(0xffffffffffffffff, 0x1000008912, 0x0) r2 = syz_open_dev$sndtimer(0x0, 0x0, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uhid\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x40485404, 0x0) 09:19:06 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r1, 0x4024700a, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xd, 0x0, 0x87}) 09:19:06 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @ipv4}}}, 0x108) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r1, &(0x7f0000000100), 0x2df, 0x80000000000) write$P9_RWRITE(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) prctl$PR_MCE_KILL_GET(0x22) timer_getoverrun(0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000140)={0x0, 0x0, 0x1, 0x0, 0x11}) ioctl(0xffffffffffffffff, 0x1000008912, 0x0) r2 = syz_open_dev$sndtimer(0x0, 0x0, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uhid\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x40485404, 0x0) 09:19:06 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x402) ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f0000000040)=0x73) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000180)={0x30}, 0x30) 09:19:06 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x402) ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f0000000040)=0x73) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000180)={0x30}, 0x30) 09:19:07 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000080), 0x14) 09:19:07 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) r1 = creat(&(0x7f0000000140)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000180)) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f00000001c0)={0x0, r1}) 09:19:07 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r1, 0x4024700a, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xd, 0x0, 0x87}) 09:19:07 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @ipv4}}}, 0x108) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r1, &(0x7f0000000100), 0x2df, 0x80000000000) write$P9_RWRITE(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) prctl$PR_MCE_KILL_GET(0x22) timer_getoverrun(0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000140)={0x0, 0x0, 0x1, 0x0, 0x11}) ioctl(0xffffffffffffffff, 0x1000008912, 0x0) r2 = syz_open_dev$sndtimer(0x0, 0x0, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uhid\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x40485404, 0x0) 09:19:07 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @ipv4}}}, 0x108) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r1, &(0x7f0000000100), 0x2df, 0x80000000000) write$P9_RWRITE(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) prctl$PR_MCE_KILL_GET(0x22) timer_getoverrun(0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000140)={0x0, 0x0, 0x1, 0x0, 0x11}) ioctl(0xffffffffffffffff, 0x1000008912, 0x0) r2 = syz_open_dev$sndtimer(0x0, 0x0, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uhid\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x40485404, 0x0) 09:19:07 executing program 4: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0) readv(r0, &(0x7f0000000480)=[{&(0x7f0000000000)=""/43, 0x2b}], 0x1) ioctl$int_in(r0, 0x800000c0045005, &(0x7f0000000040)) 09:19:07 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x90000, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f0000000400)={'broute\x00', 0x0, 0x4, 0xfffffffffffffc87, [], 0x8, &(0x7f0000000200)=[{}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000480)=""/110}, &(0x7f00000001c0)=0x78) getsockname(r1, &(0x7f00000002c0)=@ax25={{0x3, @rose}, [@null, @bcast, @rose, @rose, @netrom, @remote, @rose, @netrom]}, &(0x7f0000000140)=0xcb) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f0000000900)=@req3={0x3, 0x9, 0x3, 0x621, 0x0, 0x1, 0xfff}, 0x163) socket$packet(0x11, 0x4, 0x300) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = getpgrp(0x0) sched_setparam(r3, &(0x7f0000000640)=0xfff) mknod(&(0x7f0000000540)='./file0\x00', 0x1041, 0xfffff46f) openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) sendto(r1, &(0x7f0000000980)="909c7732b5c232e8f2eb973410a9176ff9288434a84d00a3e3edac9022f5ab6b795422af7a28948bdff66d7c01bf823f0e0497c0e693c18f72792ac41659775644975aca7f3fd53e33fba2d3208ac4eb61e0f344f52d5f31a142de48961437741e5e080e71b3c89507a963bb0bb0bc7d171609d29b4ed9", 0x77, 0x40, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x8000000000000a6, 0x9}, 0x2c) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xd, 0xc, 0x4, 0x100000001, 0x0, r4}, 0x2c) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r6, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000037c0)=ANY=[@ANYBLOB="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"], 0x0, 0x1271}, 0x20) ioctl$int_out(r4, 0x5462, &(0x7f00000000c0)) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001340)={r5, &(0x7f0000000040)}, 0x10) write$P9_RREADDIR(r0, &(0x7f0000000380)={0x49, 0x29, 0x9, {0x1, [{{0x98, 0x3, 0x1}, 0x0, 0x5, 0x7, './file0'}, {{0x11, 0x2, 0x8}, 0x100000001, 0xff, 0x7, './file0'}]}}, 0x49) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000340)='/proc/self/net/pfkey\x00', 0x40000, 0x0) clone(0x24000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) 09:19:07 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000080), 0x14) [ 548.222778][ C0] net_ratelimit: 2 callbacks suppressed [ 548.222791][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 548.234466][ C0] protocol 88fb is buggy, dev hsr_slave_1 09:19:07 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x90000, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f0000000400)={'broute\x00', 0x0, 0x4, 0xfffffffffffffc87, [], 0x8, &(0x7f0000000200)=[{}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000480)=""/110}, &(0x7f00000001c0)=0x78) getsockname(r1, &(0x7f00000002c0)=@ax25={{0x3, @rose}, [@null, @bcast, @rose, @rose, @netrom, @remote, @rose, @netrom]}, &(0x7f0000000140)=0xcb) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f0000000900)=@req3={0x3, 0x9, 0x3, 0x621, 0x0, 0x1, 0xfff}, 0x163) socket$packet(0x11, 0x4, 0x300) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = getpgrp(0x0) sched_setparam(r3, &(0x7f0000000640)=0xfff) mknod(&(0x7f0000000540)='./file0\x00', 0x1041, 0xfffff46f) openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) sendto(r1, &(0x7f0000000980)="909c7732b5c232e8f2eb973410a9176ff9288434a84d00a3e3edac9022f5ab6b795422af7a28948bdff66d7c01bf823f0e0497c0e693c18f72792ac41659775644975aca7f3fd53e33fba2d3208ac4eb61e0f344f52d5f31a142de48961437741e5e080e71b3c89507a963bb0bb0bc7d171609d29b4ed9", 0x77, 0x40, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x8000000000000a6, 0x9}, 0x2c) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xd, 0xc, 0x4, 0x100000001, 0x0, r4}, 0x2c) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r6, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000037c0)=ANY=[@ANYBLOB="9feb0100180000000000000000100000181000000900000034c1caba5b11c982c0bb7feda0c75c4667394154bd6c4da13955e104fca4a119bb7b3d17ee0fa5b2c2fe5ab486619f8859613046721b2a39a9f6915d4a4d49cec88348a81048f36a12f1007dc3741a4ab4591a7170732d9eb45da985747c88276910565b8cdf33f1832198ba6a304e31021a6a1074084daa5ace2618b39819673d31d3c6bf8851e8c1ff6feb36e6797f3096dc4ea01df6bbc92c87892baa4153aceca87d6f199d35b67cb8d1feba2ccdf16e44a547f3fa19f223582476095944d1b15ff685ab15d6c7aadb4b42d93328add6b6ccef33594ec6aa38833e76455996bcf2833e2aa0ce3cae2568ed25600f7243757d7cc5b89c4b31183f7c240efb5e1f50a8969810ada5e98cf0e1f847d8954c05b2438df00ccf973d031a7f8c21dcda33c1ab81c8fa5a8dcca6c6540521d3242a3831d1ae1c0bf75c5f09f237608d307330adf0dd6e5c8e727eb51ce19ac8098247374ad41d6201f8431a4969636b8e20cdc34ea6b7b245e986a2fdd4d79fd7e0508b71ba76007d366e085867a5b16818705c03c0fd822a04e3738619f90aeb64b18a4a06f1965b674caacbb898c7c836a2a065540d8ec1f93e5ab18a7cfe55a0e24639051c5d71e3dee419a041be182af3fe09da3c3c9b5e8b7857c670fc1eee87017a1c3e83491eaa9299d692008da12a6f6898027f57eacf81458bdccf77e18edda03849ad6ae3d1c9413d13fb6439b6d388fde7d9a78557b37f8c613966339bb1cae4c0f40678fe66165b5b0665364f68e43cb47ed1630389363bc5b0b425138ec86b52e2631b25a691d90ce926891f4f71c436a49b91d3673d3ecdf4ce0545bd3750c1e18a7c0ede88a4165b92c4dd5801cd94d8e1ef990b768fd19cade3de3910f0e00d944ae62a44169053dceece6031247d755a32bcd0a7e1c107e2af8a8b863d69f414874f30bc55e27c529374f97db418e396d82ac0c4166df1e139a715cd04086b38476dbae2d9f48c55b12dc27a2b893df62b4d0e324aa25c29299ffc4cb4350a63b4112492bf03a1d0e5ad0f5262de3df33455900c190729dcdb41486524622e07e01579c29938c878f451a87ad6efc6653be18bf60e2f813f0981a9cda1ef0b32cbfc610cc35e12995cb847c7a0ac6bcf51bbd8993e0932bc322583c132035eb754a279cf8fd181a238633e2e96a70107cb084a06a04c4f5ea306e5080d0f67bcdb0ef876389cec45779bdecee4f6aa6d7a5e0626613a626045086a490d9c2c15e4091998986babd06f8e5f010b4b6dd93a113a2f65e9b47d1520a00e4d2f74d1ba3caf07086ff17a125d7b69f499f866923d6b12571debfe99cbbfce9a161adcdaf3732a2882fc11affdf5bb84b74e54bfe96a8fba78cb6ca63c9e7cf02b06736434a675d8fc0b749985a2bd49365f0f4627973e8bc9ef058170f71544f939a43fde2149a4e0cf5f7e7ca79d72b32328453ac7043e978e685a3b8aae963360aa431ffa2b38cd48ac33088b8309dd8b69bd4453277dc07c01205d32640624f58a79e454ae2c3f96d3e7a18e1bc4b25a4886d6e705ab5f496331150476784312e5d8954a881a9cb08915778ee2f0e6b7ed138e8d85d7720320e12965c38fd9fc236ce0746282679f98b0aeeca7fe8c6e8f196e40545d4920d0e4fd57cb54edae88fee0a2143c4f0f3e9d65926445f1cb06a52279edd5fd3ef6c0cf94cc2ad523747471c61028b2b0b0dcf2cc8d6373f80975e66902fbc52fdfefe80de69b924b983aea2d801f0d55ba3b066dc3fa6686383034dc8837dfdebbff250bdf273d4ae65e77e4ec20071c827a7bedab2e278f12ce00a338b795c209069449aca5ddeb6a95001da0f8cbed3f951db5b637d4298cf8525245ce94f7714b2f553fb814413f7ae2d6132b1e9062ae30b0954244172ae00af16eb5551c72153007b27df3b93b5e0099813d74d83eb4da8fda653fa94dc6648b59b79bdbba0abf452fd2fb1882e9759b51e3ea0b5fd828f0066ffaa84edf447ab36bb423d2be33701eab5c43c331933dd026dfec5834222bee7256f57a9149e743608baeb344826d9f73acaea6149e99b18ac242b5929e9e79c2d5439dd37b98274a8b12f6b8473cda298f89dd128f7e016ea7959e6e4fe91831096b85a9741a936ad38b6adbdb15bbf26f384175df3ce5f7295af1187b8e00781fa4dd24ca8a3b0a0c06b64e394988c248036a05422acbbab3a77206fc50ce63f331aa54008fd718c438937c3499a6e23d478dc09fc82a41da0991f7eeec9e7518248867122061dd1a2412d2a546f48e7ce857090154954f85b49aeebdcd7965a01bff752504d819cbdc33793f88260dc6e9ed6dc190c327ff480ec295424f0d5d64d6c73d9d181160eb2cbd0a8cf72b6584223333f3a6f202880b744c4e34d105a5ca991998e93070421d6d3899a432843bcd0fdbd102df1015c32bd2655d862b99c234a22371238de223def8612d52bff9b07e47dd1b8eea23c2a4a4ef3a66981fa24b53e4dc4b8e787a9bc51a3e06e09169664b8856e27a1128d06d3f5aadbd75dd64eecc11e2351f1ac0ad47b9d59b94194feadab3eebbbce3a81ac6acfcba5179506f442690ea93975a13e2ec60ae8c6c948181aee56e7f749ae9f7930c687678c29c27ff0a209609b603cd13dcc0fe82ff4cff4169f99d9e8dc051741b1e8fb757ac3a0b2b118ebb2f38697257500bb1ff92c6fda4060b72502ff6bffa3752e13fbf065f571e71933e17d5fb634e9ddfb99e50c837a2c29a5c6da0ce3b43fb0e749d3b7bfecb288a4004ca339bd65d08aef7f8fd13ffe3dbd202329a34899ebbcb2082700137599fad8337d0f4065c2fecba4ccffed127fb0ed8f4f9fb49cfb1bde2f515c39a97a95b513589230abb37e6ac9cc7b38c94fb5a22b24e8fe9e2902e56ab3e0db3065b648a7cfd9f56d425ebb2b95e260a8f19396794e711253f00b1742ae5f5f03c85986408cf71b3ce268902e6442c14f5cb3435e1ae15eb8270d85a4fafa5ea0245aaeb57ff811f286411ae8445034633819e234d8a880a4d70b0ebd8d74814bd1f8994fa8277f5bfd38495b77f06cc6689fb5fb18e6adfc1dc9987a7ead5d8fd42c4128007ea483961af69812bb64b1387d605f2da002ee25cb49540a2622e4b249a996681baf12eb0a9635a08f5646c448ab62acf0cb4a23a3c2836802420c5ccc83fc3c25d5b89e6ca8db6c5bf0f95bd7675c0d4e80566485baac5d8c62a36ac1d410ce8a0ee4b58bd312e4449949f3d73f46bce73537afe5554e5356be511cfc969fd84506efaf7545928109c93dea01d982d9f6fc3e4b649caaa1b8c79c988c9b7af72039f0f62c3561819205b885b28e4b7ecacbc4146a024c8008232f486359b816a05f8659499a9c88f0a52a878230eda24116355487fd25ccbffd9e2c79aed0d273e76c5095359059e8345ce0f98da043fa807e0536adea99a6c667af2f58fe1333d504d405134719e7ee24174bb87afa807f569cf6a666c4f3f930b120ad651f11b69277ffb415592177d4ddadcf145a18de503bd6bd99bc47b4cb577f58949f0ccb0baadad8c572d401f5717ae08ffca21b57afb7908a58bc1235d339d2f13119d20a729e2b71765a7016dc6114a66ae919bfdc0f5f8ad2d10721fe0423e2806a4d15c29f54d52f8344ec1e4d2fb03320eef2ac518d7ca2a48f5328c23556921a6cbf3d0709599a8ecb375d861beb1aabbd351cc45b96bdcb3b705e3ac5e6ddbf768f328f33dec7b8d172d4ea9e8e91053e78893ea45e7d54311ae0c039f0c7a7be58940fa383183d68ef21b2e2fd51e4d7d76767e7d3efa8ebfca6774a1a975f2762e69555022d5af6132ae28d63ef61ebfc0269ba0e317898027eb60128730c72f5a7b7eeeab6f957215aa355760d9fb68d9d76bd3199ea6d59dd66fd673bd964cb887532359a290e2d5b0d7a718b4cf8e8d543554772c053e621c2a2f10ea135b162964fb335cd6d5ab34388f0a133f7f7c5cbe235a7a94f325075f78cb209fc04ca6235001a2917cb6a9976c0d34ba460b98512cce7619fa1b8a2395be618e97d5f453ce9c8939deb3a801e42a52270c134e7b366e60d3226092196da65198062b0efe73fdb57053f579d8182ce12e7166487dd87357619ee7f7b8a76c3a7f4ddfdded1355836821b1cba5303f7b3d5f9cd20aa453bdfca017bcd3dda1d8be5de03acd97975e56171bf34b2b8d563133bdce8d1e51a508a3e8684aa94043ee84545acf6430ee6931f94bf93a3799941c78d94ddbbaaa497739b098437f9e50c0722c3070719ce375e436b073151cc576a02265fcbec5090bd4cb40b8da55041ccede88a7f3f50f46b21da4d9d717df7c2b808fd04a72f0e2e7b50a8a81257d67ff779e14b572f8e1cd01f9a4195805a27eb780bf147cee47f4ab33e15ddae475f4b825a8590f967011c9922360df1708934efcf8595ead971250d815f5c772cf36f606939b166140e971dd7f1c38ed95c62007aba10d27903437b7011ed0b28a9b5c95cfd0a8a62282b9f2bcd97a29a912f7b4b73d9e789baed4210e52e54631300c67a44d40717178787a84885cab0f2925f338734a165bfbc851b90684be245cb00c7a99debc35f2915033ba942b77183e9fb63973ff173dfcea05b4b27e1d5d72127f5e90393c9268df6e61cc1cc737f0aa6f6b005caedc58d75ae80793f3e0f67388d16d263cbafda17faff915c5426a7f6cbe7c76373113302c0a9e4739f8aa6f3b40dfe5058c1d0c6b647c8e563f6a4bb7b25b4795b83cd76d62b0a5be29d1dbd961a45ec4f7cb534b952d6872ca2a0d9cd55f4df88d3cf8a30e733a2e32f74a3055303358cb4be0e2293547ef2bf419610d3009874848eaa99fbbf9393cea71084d338add39cca4c535d917be23ec896446e9a2c1aca64eb01e6812ff9d65c65140777d2c44b0b94b6079f15a7fab43d6042063d10492e621d52163d71e2899f1ede49e0bd4d3e07d9a35f6256cd9887fd2fb7da42cab39bd6e39e10a540552f53aa294b0e3e22d2980f2121aef6717663c5b3050f8664681471f29fc01048841cdc21777a1278465b01a3b50c26e14c42ed9110fa404a6e2c29d7d691f12ceaf5a28ad6f822b4d67c59ebbbf13458529e68a571eb524608c0ab43d008370dbbc5396d02bcb68b0ed89272746e18fcd999e6bb0338f38842da1994a375052d10092e4a500153215d0baedf066afc1c894a345121b0dd6d56108a69d4667ca09ced30511d68941ed0402a55e77f1bca985843c7a7e896dad019f1a4e0c774995e373dc5ab48b3fcaae903570a54e9a5e1fafed0e8f7c1cc5af12d3492850853edfec66604c43e112025ac2b62af725d33aff1574d2428cd5fe4e4cc0928202a85928781eff5d1f67133898e3f40209bc8f94b33e438504f07f0ec7234227570c64a6adcca8c873eacedef32f5321f53dfb8ce31e123ff3e08bea6f3e9801cee8aea3eb0f04a0f4386176ee1596a8bfc908225a3feb6c6c31021a44bc183225c5e3b91fc6e9879593c258267b75f12edf47bdaf44ac84a3c298f51c1a073c54189f07c4a76a3031b73327b65e8ca1cfbf8f7d081bd714455e1f6f0227e8101efd0974884b9f381a4139de96fdddb1b281bb2a1b9ac91361af4fb4a7638848cc950b2ae300724adcb8422e088c183684e66b42c1d4e7f084e2d822ca64a29d98cab350e246dada5dffeee459c2751d6ae64c0ff5eea9942d8bb1be53fcf314692d216d89f2ad9ee6520ad8660ae47e0b66ef43ca3acba6accf867b4b978059c8000711df82f33f4f51f90021a3ee6b2d1184097fd13aaf94c0ef41ca4e7bbae62bdf2aeef3e61f717ac0e194ab718a4ebaa9208f3cb0dab2a69b58f86a9bfab503abb60b23cd9996b2f52c5fac80498c013ee96fbe4fcd16dae282227c7a796fad09d527e6d4080873b3316ddc755019467819d34b6ed7137ad1a4207e9f707e1ab72a789e0261ad24be2ac23a2e9547e393cba701c499a64cee1c97804d8c6fd552fa476632c34e3876dced441816663476da168faacf0a59db783fdd6b0785784fe7c1ea1a06549dc612301364662c6ef962fd53b0b0bf0795829f2a3f2639ba5121cc77eb81318d571ccbedb0beeeb25ee8087c1b4be8f1252672822d000000000000006224422972282d4a1a78e555c2b34cb1ef83a66bc1734ff5e64054fd317fbc1ebfc7817316ae1ae37633c720ec5c17edea3f7e4cfa73588a49b7e9fa9128be18a579186f87048dad32ae0b9138323a9cf5cd12d54472b875fc9127e766dab493f3e2f1c96eab5effbc31881d7440a6398a68e73bc83e6878a174f716e40b3464c8687b43f460f37801025ab52ede5be8dafad14263ad35dcc3129ac7862b4177d3b6ca0bfae95be8bd7455b9d265469e24d53c6fbef0459004000000000000000b582a8f27e2b012a4bb71bff8b3685dbacbce6ef7745572bc9c6e90d048a7376a816895734b060e83c7d5846277d76d2a670f8fe68ec3eee8a2e860dabc0e08ec632dd5852b4507ce1759f34a86fadc6928315acbc2f1d443e61c0aa337fd9d8c2728c6518f9f20e175b958cf9eaec633e6f40bf630a4e036bbeb06213ee9df0d4ddc43051eae980aba21eac8bdc3e93038414064d272af6e62"], 0x0, 0x1271}, 0x20) ioctl$int_out(r4, 0x5462, &(0x7f00000000c0)) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001340)={r5, &(0x7f0000000040)}, 0x10) write$P9_RREADDIR(r0, &(0x7f0000000380)={0x49, 0x29, 0x9, {0x1, [{{0x98, 0x3, 0x1}, 0x0, 0x5, 0x7, './file0'}, {{0x11, 0x2, 0x8}, 0x100000001, 0xff, 0x7, './file0'}]}}, 0x49) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000340)='/proc/self/net/pfkey\x00', 0x40000, 0x0) clone(0x24000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) [ 548.382220][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 548.382340][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 548.388017][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 548.400369][ C1] protocol 88fb is buggy, dev hsr_slave_1 09:19:07 executing program 3: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_ifreq(r0, 0x8991, &(0x7f00000000c0)={'bond0\x00 @\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00\x00\x00\xff'}) ioctl$sock_ifreq(r0, 0x8990, &(0x7f0000000240)={'bond0\x00\xcf\x00\n\x00!!\x00\x01p\x03', @ifru_names='bond_slave_1\x00\x00\x01\xb1'}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, 0x0) 09:19:07 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000080), 0x14) [ 548.622232][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 548.628129][ C1] protocol 88fb is buggy, dev hsr_slave_1 09:19:08 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x90000, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f0000000400)={'broute\x00', 0x0, 0x4, 0xfffffffffffffc87, [], 0x8, &(0x7f0000000200)=[{}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000480)=""/110}, &(0x7f00000001c0)=0x78) getsockname(r1, &(0x7f00000002c0)=@ax25={{0x3, @rose}, [@null, @bcast, @rose, @rose, @netrom, @remote, @rose, @netrom]}, &(0x7f0000000140)=0xcb) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f0000000900)=@req3={0x3, 0x9, 0x3, 0x621, 0x0, 0x1, 0xfff}, 0x163) socket$packet(0x11, 0x4, 0x300) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = getpgrp(0x0) sched_setparam(r3, &(0x7f0000000640)=0xfff) mknod(&(0x7f0000000540)='./file0\x00', 0x1041, 0xfffff46f) openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) sendto(r1, &(0x7f0000000980)="909c7732b5c232e8f2eb973410a9176ff9288434a84d00a3e3edac9022f5ab6b795422af7a28948bdff66d7c01bf823f0e0497c0e693c18f72792ac41659775644975aca7f3fd53e33fba2d3208ac4eb61e0f344f52d5f31a142de48961437741e5e080e71b3c89507a963bb0bb0bc7d171609d29b4ed9", 0x77, 0x40, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x8000000000000a6, 0x9}, 0x2c) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xd, 0xc, 0x4, 0x100000001, 0x0, r4}, 0x2c) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r6, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000037c0)=ANY=[@ANYBLOB="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"], 0x0, 0x1271}, 0x20) ioctl$int_out(r4, 0x5462, &(0x7f00000000c0)) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001340)={r5, &(0x7f0000000040)}, 0x10) write$P9_RREADDIR(r0, &(0x7f0000000380)={0x49, 0x29, 0x9, {0x1, [{{0x98, 0x3, 0x1}, 0x0, 0x5, 0x7, './file0'}, {{0x11, 0x2, 0x8}, 0x100000001, 0xff, 0x7, './file0'}]}}, 0x49) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000340)='/proc/self/net/pfkey\x00', 0x40000, 0x0) clone(0x24000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) [ 548.775150][T22303] bond0: Releasing backup interface bond_slave_1 09:19:08 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vbi(&(0x7f0000000200)='/dev/vbi#\x00', 0x3, 0x2) r1 = memfd_create(&(0x7f0000000000)='\xac\x00\x00', 0x4) ftruncate(r1, 0x1000000) sendfile(r0, r1, &(0x7f00000000c0)=0xf10001, 0xeefffdef) close(r0) r2 = socket$pptp(0x18, 0x1, 0x2) fgetxattr(r2, &(0x7f0000001300)=@known='system.sockprotoname\x00', 0x0, 0x0) 09:19:08 executing program 1: r0 = socket$kcm(0xa, 0x2, 0x73) r1 = dup(r0) sendmsg$tipc(r1, &(0x7f00000002c0)={&(0x7f0000000100)=@id, 0x10, 0x0}, 0x0) 09:19:08 executing program 1: r0 = socket$kcm(0xa, 0x2, 0x73) r1 = dup(r0) sendmsg$tipc(r1, &(0x7f00000002c0)={&(0x7f0000000100)=@id, 0x10, 0x0}, 0x0) [ 549.024099][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 549.030418][ C0] protocol 88fb is buggy, dev hsr_slave_1 09:19:08 executing program 1: r0 = socket$kcm(0xa, 0x2, 0x73) r1 = dup(r0) sendmsg$tipc(r1, &(0x7f00000002c0)={&(0x7f0000000100)=@id, 0x10, 0x0}, 0x0) 09:19:08 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000080), 0x14) 09:19:08 executing program 4: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0) readv(r0, &(0x7f0000000480)=[{&(0x7f0000000000)=""/43, 0x2b}], 0x1) ioctl$int_in(r0, 0x800000c0045005, &(0x7f0000000040)) 09:19:08 executing program 1: r0 = socket$kcm(0xa, 0x2, 0x73) r1 = dup(r0) sendmsg$tipc(r1, &(0x7f00000002c0)={&(0x7f0000000100)=@id, 0x10, 0x0}, 0x0) 09:19:08 executing program 1: r0 = socket$unix(0x1, 0x2, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) close(r0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)) connect$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) [ 549.492814][T22307] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 549.518968][ T7848] device bridge_slave_1 left promiscuous mode [ 549.531050][ T7848] bridge0: port 2(bridge_slave_1) entered disabled state 09:19:08 executing program 1: mkdir(&(0x7f0000000200)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000180)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000040c0), 0x1000) read$FUSE(r0, &(0x7f0000000340), 0x1000) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000040)={0x30, 0x5, 0x0, {0x0, 0x1}}, 0x30) write$FUSE_INTERRUPT(r0, &(0x7f0000000240)={0x10, 0x0, 0x2}, 0x10) [ 549.594427][ T7848] device bridge_slave_0 left promiscuous mode [ 549.606635][ T7848] bridge0: port 1(bridge_slave_0) entered disabled state [ 553.902155][ C0] net_ratelimit: 26 callbacks suppressed [ 553.902164][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 553.913667][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 553.924485][ T7848] device hsr_slave_1 left promiscuous mode [ 553.967990][ T7848] device hsr_slave_0 left promiscuous mode [ 554.027222][ T7848] team0 (unregistering): Port device team_slave_1 removed [ 554.048142][ T7848] team0 (unregistering): Port device team_slave_0 removed [ 554.068520][ T7848] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 554.151950][ T7848] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 554.300113][ T7848] bond0 (unregistering): Released all slaves [ 554.433613][T22308] bond0: Releasing backup interface bond_slave_1 [ 554.462145][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 554.467950][ C0] protocol 88fb is buggy, dev hsr_slave_1 09:19:13 executing program 3: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_ifreq(r0, 0x8991, &(0x7f00000000c0)={'bond0\x00 @\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00\x00\x00\xff'}) ioctl$sock_ifreq(r0, 0x8990, &(0x7f0000000240)={'bond0\x00\xcf\x00\n\x00!!\x00\x01p\x03', @ifru_names='bond_slave_1\x00\x00\x01\xb1'}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, 0x0) 09:19:13 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) 09:19:13 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vbi(&(0x7f0000000200)='/dev/vbi#\x00', 0x3, 0x2) r1 = memfd_create(&(0x7f0000000000)='\xac\x00\x00', 0x4) ftruncate(r1, 0x1000000) sendfile(r0, r1, &(0x7f00000000c0)=0xf10001, 0xeefffdef) close(r0) r2 = socket$pptp(0x18, 0x1, 0x2) fgetxattr(r2, &(0x7f0000001300)=@known='system.sockprotoname\x00', 0x0, 0x0) 09:19:13 executing program 4: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0) readv(r0, &(0x7f0000000480)=[{&(0x7f0000000000)=""/43, 0x2b}], 0x1) ioctl$int_in(r0, 0x800000c0045005, &(0x7f0000000040)) 09:19:13 executing program 1: mkdir(&(0x7f0000000200)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000180)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000040c0), 0x1000) read$FUSE(r0, &(0x7f0000000340), 0x1000) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000040)={0x30, 0x5, 0x0, {0x0, 0x1}}, 0x30) write$FUSE_INTERRUPT(r0, &(0x7f0000000240)={0x10, 0x0, 0x2}, 0x10) 09:19:13 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x90000, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f0000000400)={'broute\x00', 0x0, 0x4, 0xfffffffffffffc87, [], 0x8, &(0x7f0000000200)=[{}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000480)=""/110}, &(0x7f00000001c0)=0x78) getsockname(r1, &(0x7f00000002c0)=@ax25={{0x3, @rose}, [@null, @bcast, @rose, @rose, @netrom, @remote, @rose, @netrom]}, &(0x7f0000000140)=0xcb) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f0000000900)=@req3={0x3, 0x9, 0x3, 0x621, 0x0, 0x1, 0xfff}, 0x163) socket$packet(0x11, 0x4, 0x300) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = getpgrp(0x0) sched_setparam(r3, &(0x7f0000000640)=0xfff) mknod(&(0x7f0000000540)='./file0\x00', 0x1041, 0xfffff46f) openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) sendto(r1, &(0x7f0000000980)="909c7732b5c232e8f2eb973410a9176ff9288434a84d00a3e3edac9022f5ab6b795422af7a28948bdff66d7c01bf823f0e0497c0e693c18f72792ac41659775644975aca7f3fd53e33fba2d3208ac4eb61e0f344f52d5f31a142de48961437741e5e080e71b3c89507a963bb0bb0bc7d171609d29b4ed9", 0x77, 0x40, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x8000000000000a6, 0x9}, 0x2c) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xd, 0xc, 0x4, 0x100000001, 0x0, r4}, 0x2c) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r6, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000037c0)=ANY=[@ANYBLOB="9feb0100180000000000000000100000181000000900000034c1caba5b11c982c0bb7feda0c75c4667394154bd6c4da13955e104fca4a119bb7b3d17ee0fa5b2c2fe5ab486619f8859613046721b2a39a9f6915d4a4d49cec88348a81048f36a12f1007dc3741a4ab4591a7170732d9eb45da985747c88276910565b8cdf33f1832198ba6a304e31021a6a1074084daa5ace2618b39819673d31d3c6bf8851e8c1ff6feb36e6797f3096dc4ea01df6bbc92c87892baa4153aceca87d6f199d35b67cb8d1feba2ccdf16e44a547f3fa19f223582476095944d1b15ff685ab15d6c7aadb4b42d93328add6b6ccef33594ec6aa38833e76455996bcf2833e2aa0ce3cae2568ed25600f7243757d7cc5b89c4b31183f7c240efb5e1f50a8969810ada5e98cf0e1f847d8954c05b2438df00ccf973d031a7f8c21dcda33c1ab81c8fa5a8dcca6c6540521d3242a3831d1ae1c0bf75c5f09f237608d307330adf0dd6e5c8e727eb51ce19ac8098247374ad41d6201f8431a4969636b8e20cdc34ea6b7b245e986a2fdd4d79fd7e0508b71ba76007d366e085867a5b16818705c03c0fd822a04e3738619f90aeb64b18a4a06f1965b674caacbb898c7c836a2a065540d8ec1f93e5ab18a7cfe55a0e24639051c5d71e3dee419a041be182af3fe09da3c3c9b5e8b7857c670fc1eee87017a1c3e83491eaa9299d692008da12a6f6898027f57eacf81458bdccf77e18edda03849ad6ae3d1c9413d13fb6439b6d388fde7d9a78557b37f8c613966339bb1cae4c0f40678fe66165b5b0665364f68e43cb47ed1630389363bc5b0b425138ec86b52e2631b25a691d90ce926891f4f71c436a49b91d3673d3ecdf4ce0545bd3750c1e18a7c0ede88a4165b92c4dd5801cd94d8e1ef990b768fd19cade3de3910f0e00d944ae62a44169053dceece6031247d755a32bcd0a7e1c107e2af8a8b863d69f414874f30bc55e27c529374f97db418e396d82ac0c4166df1e139a715cd04086b38476dbae2d9f48c55b12dc27a2b893df62b4d0e324aa25c29299ffc4cb4350a63b4112492bf03a1d0e5ad0f5262de3df33455900c190729dcdb41486524622e07e01579c29938c878f451a87ad6efc6653be18bf60e2f813f0981a9cda1ef0b32cbfc610cc35e12995cb847c7a0ac6bcf51bbd8993e0932bc322583c132035eb754a279cf8fd181a238633e2e96a70107cb084a06a04c4f5ea306e5080d0f67bcdb0ef876389cec45779bdecee4f6aa6d7a5e0626613a626045086a490d9c2c15e4091998986babd06f8e5f010b4b6dd93a113a2f65e9b47d1520a00e4d2f74d1ba3caf07086ff17a125d7b69f499f866923d6b12571debfe99cbbfce9a161adcdaf3732a2882fc11affdf5bb84b74e54bfe96a8fba78cb6ca63c9e7cf02b06736434a675d8fc0b749985a2bd49365f0f4627973e8bc9ef058170f71544f939a43fde2149a4e0cf5f7e7ca79d72b32328453ac7043e978e685a3b8aae963360aa431ffa2b38cd48ac33088b8309dd8b69bd4453277dc07c01205d32640624f58a79e454ae2c3f96d3e7a18e1bc4b25a4886d6e705ab5f496331150476784312e5d8954a881a9cb08915778ee2f0e6b7ed138e8d85d7720320e12965c38fd9fc236ce0746282679f98b0aeeca7fe8c6e8f196e40545d4920d0e4fd57cb54edae88fee0a2143c4f0f3e9d65926445f1cb06a52279edd5fd3ef6c0cf94cc2ad523747471c61028b2b0b0dcf2cc8d6373f80975e66902fbc52fdfefe80de69b924b983aea2d801f0d55ba3b066dc3fa6686383034dc8837dfdebbff250bdf273d4ae65e77e4ec20071c827a7bedab2e278f12ce00a338b795c209069449aca5ddeb6a95001da0f8cbed3f951db5b637d4298cf8525245ce94f7714b2f553fb814413f7ae2d6132b1e9062ae30b0954244172ae00af16eb5551c72153007b27df3b93b5e0099813d74d83eb4da8fda653fa94dc6648b59b79bdbba0abf452fd2fb1882e9759b51e3ea0b5fd828f0066ffaa84edf447ab36bb423d2be33701eab5c43c331933dd026dfec5834222bee7256f57a9149e743608baeb344826d9f73acaea6149e99b18ac242b5929e9e79c2d5439dd37b98274a8b12f6b8473cda298f89dd128f7e016ea7959e6e4fe91831096b85a9741a936ad38b6adbdb15bbf26f384175df3ce5f7295af1187b8e00781fa4dd24ca8a3b0a0c06b64e394988c248036a05422acbbab3a77206fc50ce63f331aa54008fd718c438937c3499a6e23d478dc09fc82a41da0991f7eeec9e7518248867122061dd1a2412d2a546f48e7ce857090154954f85b49aeebdcd7965a01bff752504d819cbdc33793f88260dc6e9ed6dc190c327ff480ec295424f0d5d64d6c73d9d181160eb2cbd0a8cf72b6584223333f3a6f202880b744c4e34d105a5ca991998e93070421d6d3899a432843bcd0fdbd102df1015c32bd2655d862b99c234a22371238de223def8612d52bff9b07e47dd1b8eea23c2a4a4ef3a66981fa24b53e4dc4b8e787a9bc51a3e06e09169664b8856e27a1128d06d3f5aadbd75dd64eecc11e2351f1ac0ad47b9d59b94194feadab3eebbbce3a81ac6acfcba5179506f442690ea93975a13e2ec60ae8c6c948181aee56e7f749ae9f7930c687678c29c27ff0a209609b603cd13dcc0fe82ff4cff4169f99d9e8dc051741b1e8fb757ac3a0b2b118ebb2f38697257500bb1ff92c6fda4060b72502ff6bffa3752e13fbf065f571e71933e17d5fb634e9ddfb99e50c837a2c29a5c6da0ce3b43fb0e749d3b7bfecb288a4004ca339bd65d08aef7f8fd13ffe3dbd202329a34899ebbcb2082700137599fad8337d0f4065c2fecba4ccffed127fb0ed8f4f9fb49cfb1bde2f515c39a97a95b513589230abb37e6ac9cc7b38c94fb5a22b24e8fe9e2902e56ab3e0db3065b648a7cfd9f56d425ebb2b95e260a8f19396794e711253f00b1742ae5f5f03c85986408cf71b3ce268902e6442c14f5cb3435e1ae15eb8270d85a4fafa5ea0245aaeb57ff811f286411ae8445034633819e234d8a880a4d70b0ebd8d74814bd1f8994fa8277f5bfd38495b77f06cc6689fb5fb18e6adfc1dc9987a7ead5d8fd42c4128007ea483961af69812bb64b1387d605f2da002ee25cb49540a2622e4b249a996681baf12eb0a9635a08f5646c448ab62acf0cb4a23a3c2836802420c5ccc83fc3c25d5b89e6ca8db6c5bf0f95bd7675c0d4e80566485baac5d8c62a36ac1d410ce8a0ee4b58bd312e4449949f3d73f46bce73537afe5554e5356be511cfc969fd84506efaf7545928109c93dea01d982d9f6fc3e4b649caaa1b8c79c988c9b7af72039f0f62c3561819205b885b28e4b7ecacbc4146a024c8008232f486359b816a05f8659499a9c88f0a52a878230eda24116355487fd25ccbffd9e2c79aed0d273e76c5095359059e8345ce0f98da043fa807e0536adea99a6c667af2f58fe1333d504d405134719e7ee24174bb87afa807f569cf6a666c4f3f930b120ad651f11b69277ffb415592177d4ddadcf145a18de503bd6bd99bc47b4cb577f58949f0ccb0baadad8c572d401f5717ae08ffca21b57afb7908a58bc1235d339d2f13119d20a729e2b71765a7016dc6114a66ae919bfdc0f5f8ad2d10721fe0423e2806a4d15c29f54d52f8344ec1e4d2fb03320eef2ac518d7ca2a48f5328c23556921a6cbf3d0709599a8ecb375d861beb1aabbd351cc45b96bdcb3b705e3ac5e6ddbf768f328f33dec7b8d172d4ea9e8e91053e78893ea45e7d54311ae0c039f0c7a7be58940fa383183d68ef21b2e2fd51e4d7d76767e7d3efa8ebfca6774a1a975f2762e69555022d5af6132ae28d63ef61ebfc0269ba0e317898027eb60128730c72f5a7b7eeeab6f957215aa355760d9fb68d9d76bd3199ea6d59dd66fd673bd964cb887532359a290e2d5b0d7a718b4cf8e8d543554772c053e621c2a2f10ea135b162964fb335cd6d5ab34388f0a133f7f7c5cbe235a7a94f325075f78cb209fc04ca6235001a2917cb6a9976c0d34ba460b98512cce7619fa1b8a2395be618e97d5f453ce9c8939deb3a801e42a52270c134e7b366e60d3226092196da65198062b0efe73fdb57053f579d8182ce12e7166487dd87357619ee7f7b8a76c3a7f4ddfdded1355836821b1cba5303f7b3d5f9cd20aa453bdfca017bcd3dda1d8be5de03acd97975e56171bf34b2b8d563133bdce8d1e51a508a3e8684aa94043ee84545acf6430ee6931f94bf93a3799941c78d94ddbbaaa497739b098437f9e50c0722c3070719ce375e436b073151cc576a02265fcbec5090bd4cb40b8da55041ccede88a7f3f50f46b21da4d9d717df7c2b808fd04a72f0e2e7b50a8a81257d67ff779e14b572f8e1cd01f9a4195805a27eb780bf147cee47f4ab33e15ddae475f4b825a8590f967011c9922360df1708934efcf8595ead971250d815f5c772cf36f606939b166140e971dd7f1c38ed95c62007aba10d27903437b7011ed0b28a9b5c95cfd0a8a62282b9f2bcd97a29a912f7b4b73d9e789baed4210e52e54631300c67a44d40717178787a84885cab0f2925f338734a165bfbc851b90684be245cb00c7a99debc35f2915033ba942b77183e9fb63973ff173dfcea05b4b27e1d5d72127f5e90393c9268df6e61cc1cc737f0aa6f6b005caedc58d75ae80793f3e0f67388d16d263cbafda17faff915c5426a7f6cbe7c76373113302c0a9e4739f8aa6f3b40dfe5058c1d0c6b647c8e563f6a4bb7b25b4795b83cd76d62b0a5be29d1dbd961a45ec4f7cb534b952d6872ca2a0d9cd55f4df88d3cf8a30e733a2e32f74a3055303358cb4be0e2293547ef2bf419610d3009874848eaa99fbbf9393cea71084d338add39cca4c535d917be23ec896446e9a2c1aca64eb01e6812ff9d65c65140777d2c44b0b94b6079f15a7fab43d6042063d10492e621d52163d71e2899f1ede49e0bd4d3e07d9a35f6256cd9887fd2fb7da42cab39bd6e39e10a540552f53aa294b0e3e22d2980f2121aef6717663c5b3050f8664681471f29fc01048841cdc21777a1278465b01a3b50c26e14c42ed9110fa404a6e2c29d7d691f12ceaf5a28ad6f822b4d67c59ebbbf13458529e68a571eb524608c0ab43d008370dbbc5396d02bcb68b0ed89272746e18fcd999e6bb0338f38842da1994a375052d10092e4a500153215d0baedf066afc1c894a345121b0dd6d56108a69d4667ca09ced30511d68941ed0402a55e77f1bca985843c7a7e896dad019f1a4e0c774995e373dc5ab48b3fcaae903570a54e9a5e1fafed0e8f7c1cc5af12d3492850853edfec66604c43e112025ac2b62af725d33aff1574d2428cd5fe4e4cc0928202a85928781eff5d1f67133898e3f40209bc8f94b33e438504f07f0ec7234227570c64a6adcca8c873eacedef32f5321f53dfb8ce31e123ff3e08bea6f3e9801cee8aea3eb0f04a0f4386176ee1596a8bfc908225a3feb6c6c31021a44bc183225c5e3b91fc6e9879593c258267b75f12edf47bdaf44ac84a3c298f51c1a073c54189f07c4a76a3031b73327b65e8ca1cfbf8f7d081bd714455e1f6f0227e8101efd0974884b9f381a4139de96fdddb1b281bb2a1b9ac91361af4fb4a7638848cc950b2ae300724adcb8422e088c183684e66b42c1d4e7f084e2d822ca64a29d98cab350e246dada5dffeee459c2751d6ae64c0ff5eea9942d8bb1be53fcf314692d216d89f2ad9ee6520ad8660ae47e0b66ef43ca3acba6accf867b4b978059c8000711df82f33f4f51f90021a3ee6b2d1184097fd13aaf94c0ef41ca4e7bbae62bdf2aeef3e61f717ac0e194ab718a4ebaa9208f3cb0dab2a69b58f86a9bfab503abb60b23cd9996b2f52c5fac80498c013ee96fbe4fcd16dae282227c7a796fad09d527e6d4080873b3316ddc755019467819d34b6ed7137ad1a4207e9f707e1ab72a789e0261ad24be2ac23a2e9547e393cba701c499a64cee1c97804d8c6fd552fa476632c34e3876dced441816663476da168faacf0a59db783fdd6b0785784fe7c1ea1a06549dc612301364662c6ef962fd53b0b0bf0795829f2a3f2639ba5121cc77eb81318d571ccbedb0beeeb25ee8087c1b4be8f1252672822d000000000000006224422972282d4a1a78e555c2b34cb1ef83a66bc1734ff5e64054fd317fbc1ebfc7817316ae1ae37633c720ec5c17edea3f7e4cfa73588a49b7e9fa9128be18a579186f87048dad32ae0b9138323a9cf5cd12d54472b875fc9127e766dab493f3e2f1c96eab5effbc31881d7440a6398a68e73bc83e6878a174f716e40b3464c8687b43f460f37801025ab52ede5be8dafad14263ad35dcc3129ac7862b4177d3b6ca0bfae95be8bd7455b9d265469e24d53c6fbef0459004000000000000000b582a8f27e2b012a4bb71bff8b3685dbacbce6ef7745572bc9c6e90d048a7376a816895734b060e83c7d5846277d76d2a670f8fe68ec3eee8a2e860dabc0e08ec632dd5852b4507ce1759f34a86fadc6928315acbc2f1d443e61c0aa337fd9d8c2728c6518f9f20e175b958cf9eaec633e6f40bf630a4e036bbeb06213ee9df0d4ddc43051eae980aba21eac8bdc3e93038414064d272af6e62"], 0x0, 0x1271}, 0x20) ioctl$int_out(r4, 0x5462, &(0x7f00000000c0)) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001340)={r5, &(0x7f0000000040)}, 0x10) write$P9_RREADDIR(r0, &(0x7f0000000380)={0x49, 0x29, 0x9, {0x1, [{{0x98, 0x3, 0x1}, 0x0, 0x5, 0x7, './file0'}, {{0x11, 0x2, 0x8}, 0x100000001, 0xff, 0x7, './file0'}]}}, 0x49) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000340)='/proc/self/net/pfkey\x00', 0x40000, 0x0) clone(0x24000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) [ 554.622144][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 554.622274][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 554.627967][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 554.633737][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 554.648831][T22342] bond0: Enslaving bond_slave_1 as an active interface with an up link 09:19:14 executing program 5: mkdir(&(0x7f0000000200)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000180)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000040c0), 0x1000) read$FUSE(r0, &(0x7f0000000340), 0x1000) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000040)={0x30, 0x5, 0x0, {0x0, 0x1}}, 0x30) write$FUSE_INTERRUPT(r0, &(0x7f0000000240)={0x10, 0x0, 0x2}, 0x10) [ 554.862172][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 554.868002][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 554.880754][T22378] bond0: Releasing backup interface bond_slave_1 09:19:14 executing program 1: mkdir(&(0x7f0000000200)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000180)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000040c0), 0x1000) read$FUSE(r0, &(0x7f0000000340), 0x1000) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000040)={0x30, 0x5, 0x0, {0x0, 0x1}}, 0x30) write$FUSE_INTERRUPT(r0, &(0x7f0000000240)={0x10, 0x0, 0x2}, 0x10) 09:19:14 executing program 5: mkdir(&(0x7f0000000200)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000180)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000040c0), 0x1000) read$FUSE(r0, &(0x7f0000000340), 0x1000) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000040)={0x30, 0x5, 0x0, {0x0, 0x1}}, 0x30) write$FUSE_INTERRUPT(r0, &(0x7f0000000240)={0x10, 0x0, 0x2}, 0x10) 09:19:14 executing program 1: mkdir(&(0x7f0000000200)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000180)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000040c0), 0x1000) read$FUSE(r0, &(0x7f0000000340), 0x1000) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000040)={0x30, 0x5, 0x0, {0x0, 0x1}}, 0x30) write$FUSE_INTERRUPT(r0, &(0x7f0000000240)={0x10, 0x0, 0x2}, 0x10) 09:19:14 executing program 5: mkdir(&(0x7f0000000200)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000180)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000040c0), 0x1000) read$FUSE(r0, &(0x7f0000000340), 0x1000) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000040)={0x30, 0x5, 0x0, {0x0, 0x1}}, 0x30) write$FUSE_INTERRUPT(r0, &(0x7f0000000240)={0x10, 0x0, 0x2}, 0x10) 09:19:14 executing program 1: mkdir(&(0x7f0000000200)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000180)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000040c0), 0x1000) read$FUSE(r0, &(0x7f0000000340), 0x1000) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000040)={0x30, 0x5, 0x0, {0x0, 0x1}}, 0x30) write$FUSE_INTERRUPT(r0, &(0x7f0000000240)={0x10, 0x0, 0x2}, 0x10) [ 555.968056][T22387] bond0: Enslaving bond_slave_1 as an active interface with an up link 09:19:15 executing program 3: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_ifreq(r0, 0x8991, &(0x7f00000000c0)={'bond0\x00 @\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00\x00\x00\xff'}) ioctl$sock_ifreq(r0, 0x8990, &(0x7f0000000240)={'bond0\x00\xcf\x00\n\x00!!\x00\x01p\x03', @ifru_names='bond_slave_1\x00\x00\x01\xb1'}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, 0x0) 09:19:15 executing program 5: madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:19:15 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vbi(&(0x7f0000000200)='/dev/vbi#\x00', 0x3, 0x2) r1 = memfd_create(&(0x7f0000000000)='\xac\x00\x00', 0x4) ftruncate(r1, 0x1000000) sendfile(r0, r1, &(0x7f00000000c0)=0xf10001, 0xeefffdef) close(r0) r2 = socket$pptp(0x18, 0x1, 0x2) fgetxattr(r2, &(0x7f0000001300)=@known='system.sockprotoname\x00', 0x0, 0x0) 09:19:15 executing program 4: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0) readv(r0, &(0x7f0000000480)=[{&(0x7f0000000000)=""/43, 0x2b}], 0x1) ioctl$int_in(r0, 0x800000c0045005, &(0x7f0000000040)) 09:19:15 executing program 1: mkdir(&(0x7f0000000200)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000180)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000040c0), 0x1000) read$FUSE(r0, &(0x7f0000000340), 0x1000) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000040)={0x30, 0x5, 0x0, {0x0, 0x1}}, 0x30) write$FUSE_INTERRUPT(r0, &(0x7f0000000240)={0x10, 0x0, 0x2}, 0x10) 09:19:15 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x8000000000000a6, 0x9}, 0x3c) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xd, 0xc, 0x4, 0xfffffffd, 0x0, r0}, 0x3c) 09:19:15 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x8000000000000a6, 0x9}, 0x3c) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xd, 0xc, 0x4, 0xfffffffd, 0x0, r0}, 0x3c) 09:19:15 executing program 5: syz_mount_image$ntfs(&(0x7f0000000080)='ntfs\x00', &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={[{@errors_remount='errors=remount-r\"'}]}) 09:19:15 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x8000000000000a6, 0x9}, 0x3c) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xd, 0xc, 0x4, 0xfffffffd, 0x0, r0}, 0x3c) [ 556.298460][T22442] bond0: Releasing backup interface bond_slave_1 09:19:15 executing program 1: mkdir(&(0x7f0000000200)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000180)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000040c0), 0x1000) read$FUSE(r0, &(0x7f0000000340), 0x1000) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000040)={0x30, 0x5, 0x0, {0x0, 0x1}}, 0x30) write$FUSE_INTERRUPT(r0, &(0x7f0000000240)={0x10, 0x0, 0x2}, 0x10) [ 556.367810][T22451] __ntfs_error: 4 callbacks suppressed [ 556.367821][T22451] ntfs: (device loop5): parse_options(): Invalid errors option argument: remount-r" [ 556.563957][T22451] ntfs: (device loop5): parse_options(): Invalid errors option argument: remount-r" 09:19:15 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x8000000000000a6, 0x9}, 0x3c) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xd, 0xc, 0x4, 0xfffffffd, 0x0, r0}, 0x3c) 09:19:15 executing program 5: syz_mount_image$ntfs(&(0x7f0000000080)='ntfs\x00', &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={[{@errors_remount='errors=remount-r\"'}]}) [ 556.764974][T22468] ntfs: (device loop5): parse_options(): Invalid errors option argument: remount-r" 09:19:16 executing program 3: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_ifreq(r0, 0x8991, &(0x7f00000000c0)={'bond0\x00 @\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00\x00\x00\xff'}) ioctl$sock_ifreq(r0, 0x8990, &(0x7f0000000240)={'bond0\x00\xcf\x00\n\x00!!\x00\x01p\x03', @ifru_names='bond_slave_1\x00\x00\x01\xb1'}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, 0x0) 09:19:16 executing program 0: futex(&(0x7f000000cffc)=0x10000000000004, 0xb, 0x4, 0x0, &(0x7f0000000040), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000000000), 0x0) 09:19:16 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vbi(&(0x7f0000000200)='/dev/vbi#\x00', 0x3, 0x2) r1 = memfd_create(&(0x7f0000000000)='\xac\x00\x00', 0x4) ftruncate(r1, 0x1000000) sendfile(r0, r1, &(0x7f00000000c0)=0xf10001, 0xeefffdef) close(r0) r2 = socket$pptp(0x18, 0x1, 0x2) fgetxattr(r2, &(0x7f0000001300)=@known='system.sockprotoname\x00', 0x0, 0x0) 09:19:16 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f0000000040)={0x0, {{0x2, 0x0, @multicast2}}}, 0x88) 09:19:16 executing program 5: syz_mount_image$ntfs(&(0x7f0000000080)='ntfs\x00', &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={[{@errors_remount='errors=remount-r\"'}]}) 09:19:16 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x201000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x3, &(0x7f0000008000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x20014026}}, &(0x7f0000014ff5)='syzka\x00\x00\x00\x05\x00\xf3', 0x2, 0x1000, &(0x7f0000014000)=""/4096}, 0x48) [ 557.258464][T22450] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 557.354572][T22485] ntfs: (device loop5): parse_options(): Invalid errors option argument: remount-r" 09:19:16 executing program 1: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)={0x405}) [ 557.468250][T22496] bond0: Releasing backup interface bond_slave_1 [ 557.512560][T22501] EXT4-fs warning (device sda1): verify_group_input:104: Cannot add at group 1029 (only 16 groups) 09:19:16 executing program 5: syz_mount_image$ntfs(&(0x7f0000000080)='ntfs\x00', &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={[{@errors_remount='errors=remount-r\"'}]}) 09:19:16 executing program 1: r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) r1 = socket$unix(0x1, 0x2, 0x0) connect(r1, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) fcntl$setstatus(r1, 0x4, 0x42800) sendmmsg(r1, &(0x7f0000000140), 0xc0e8c8e08fca5, 0x0) dup3(r0, r1, 0x0) [ 557.664756][T22508] ntfs: (device loop5): parse_options(): Invalid errors option argument: remount-r" 09:19:17 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_execute_func(&(0x7f0000000000)="994a2ae92c02b64c0f05bff0ffffffc4a37bf0c5e041e2e9c422e9aabb3c0000004a0fc7a4ea70db000000000f383a9e02000000110f4e5bc4a265aa104b26660f38091e2fa2631bc421045f4607c421dd589fc4e10bf8e426f2f045f619640f0f6f43a038fd52262e2e66450f7d64c60865f2ad0383397fd3ff3a0065f20f7cd8efa1a12ad764d38f53efaf6766f2ab440fec3f67ddea660f79cec462b1f72ec3c4899294d800000000000fc4634148f70000c2a0c10b00cca27a0e0fc442cd376d000f9f3c6436b2aa66450fc4650000c4e39978c104d9a1e8719e70ddcdcda2660f38346800c4e3295d4c3dc8a3c4c1045ccc7d75c4426507af0f0000000f5fd25cf3460f2ad0f30f5ea5a9a50000ffff660f79ca553131b83a00a2f1fbfb766208cf") 09:19:17 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuset.effective_mems\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000001240)={0x0, 0xffffffffffffffc1, 0x10}) 09:19:17 executing program 0: futex(&(0x7f000000cffc)=0x10000000000004, 0xb, 0x4, 0x0, &(0x7f0000000040), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000000000), 0x0) [ 558.479140][T22499] bond0: Enslaving bond_slave_1 as an active interface with an up link 09:19:17 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x2) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x41000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 09:19:17 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuset.effective_mems\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000001240)={0x0, 0xffffffffffffffc1, 0x10}) 09:19:17 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000140)={0x0, 0x2710}, 0x10) 09:19:17 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm_base(ctr(aes-aesni),ghash-generic))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) 09:19:18 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x2) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x41000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 09:19:18 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuset.effective_mems\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000001240)={0x0, 0xffffffffffffffc1, 0x10}) 09:19:18 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f319bd070") syz_execute_func(&(0x7f00000003c0)="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") 09:19:18 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/current\x00', 0x2, 0x0) syz_execute_func(&(0x7f0000000180)="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") 09:19:18 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuset.effective_mems\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000001240)={0x0, 0xffffffffffffffc1, 0x10}) 09:19:18 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x2) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x41000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 09:19:18 executing program 5: r0 = socket$inet6(0xa, 0x100800000000002, 0x0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000000), 0x4) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='smaps\x00') sendfile(r0, r1, 0x0, 0x88001) [ 559.022179][ C1] net_ratelimit: 21 callbacks suppressed [ 559.022189][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 559.033769][ C1] protocol 88fb is buggy, dev hsr_slave_1 09:19:18 executing program 0: futex(&(0x7f000000cffc)=0x10000000000004, 0xb, 0x4, 0x0, &(0x7f0000000040), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000000000), 0x0) 09:19:18 executing program 4: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f00000003c0)="fc0000001c00071bab092500090007000aab08001b00000006020093210001c000000000000000200000000000039815fa2c1ec28656aaa79bb94b46fe0081000a00020006046c6cf70700000000000000272fdf0d11512fd233d4c000000000008934d07302ade01720d3f8bbc91a3e2e80c8fc05defd5a32e280fc83ab82f605f70cec18444ef92e475ef8a29d81f3d9a48a170e5bba4a463ae4f5566f91cf190201ded815b2ccd243fa95ed94e0ad9107d1c2758cb11b6121519365d42b9c6abd0734babc7c6d27392ad23f2eeb57d47689cd3dd16b17e583df150c3b880f41b258a17c732229d655870271777a58a80000c88068a130dddef380", 0xfc) 09:19:18 executing program 5: r0 = socket$inet6(0xa, 0x100800000000002, 0x0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000000), 0x4) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='smaps\x00') sendfile(r0, r1, 0x0, 0x88001) 09:19:18 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x2) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x41000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 09:19:18 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000180)='/dev/video#\x00', 0x9, 0x0) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000040)={0x9, @raw_data="bf620910220800df77bd80e8c53426bb77822d661df3c18c20e7f6bc9919cdf7e8f7934beb47ee2f8447110c92927e0cfdd2d7b086d03031adc30e7a933a93b3af1de16fa061cd429525521b55c5f2270602e0cd806feec60746128106e25c5ea2ea3f5f922e4f038256c558dabbc015693fbb3f3537cdc9d2fe734d4f43cc236dbc5c7b126363adf6db7d166f2dda6c14caa8ad7213a5e7983155fd5f1de7b4badc90e72ccf0d56d73697c2a5aae02f5832d4263e868a8cc0ee668be27d1f648c4071188044dc1a"}) [ 559.396749][T22586] netlink: 176 bytes leftover after parsing attributes in process `syz-executor.4'. [ 559.422192][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 559.428005][ C0] protocol 88fb is buggy, dev hsr_slave_1 09:19:18 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000000c0)=ANY=[@ANYBLOB="6e61853167377400000100000000004300000000e4dbb7e400000000000000004080f8ffffffffff1a2300000503000018030000cc000000ac010000000000001004d1f990e1fe916dd282e0f34f8dfac0dc1695c4d7000010440000030400543351c2f2d3c00f3f72e211777024c9819561a6006fe6ebafa6766eb036d660aaba52155175c52ad2e287bde89009575469e4364422b866cd445d5d0f4d6715ba085900323e00000000000071cfe0a037f22b1f887a527a0a"], 0x1) ptrace$setopts(0x4206, r2, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) tkill(r2, 0x3c) 09:19:18 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1f, 0x0, &(0x7f0000000140)) 09:19:19 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f319bd070") syz_execute_func(&(0x7f00000003c0)="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") 09:19:19 executing program 5: r0 = socket$inet6(0xa, 0x100800000000002, 0x0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000000), 0x4) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='smaps\x00') sendfile(r0, r1, 0x0, 0x88001) 09:19:19 executing program 4: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f00000003c0)="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", 0xfc) 09:19:19 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x300, r0, &(0x7f0000001400)={0x10000001}) 09:19:19 executing program 2: r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000000)={'TPROXY\x00'}, &(0x7f0000000040)=0x1e) [ 559.896422][T22619] netlink: 176 bytes leftover after parsing attributes in process `syz-executor.4'. 09:19:19 executing program 5: r0 = socket$inet6(0xa, 0x100800000000002, 0x0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000000), 0x4) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='smaps\x00') sendfile(r0, r1, 0x0, 0x88001) 09:19:19 executing program 4: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f00000003c0)="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", 0xfc) 09:19:19 executing program 0: futex(&(0x7f000000cffc)=0x10000000000004, 0xb, 0x4, 0x0, &(0x7f0000000040), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000000000), 0x0) 09:19:19 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) flistxattr(r0, &(0x7f0000000000)=""/20, 0x14) [ 560.142193][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 560.148012][ C0] protocol 88fb is buggy, dev hsr_slave_1 09:19:19 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4068aea3, &(0x7f0000000140)={0x94, 0x0, [0x80ffff]}) 09:19:19 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000000c0)=ANY=[@ANYBLOB="6e61853167377400000100000000004300000000e4dbb7e400000000000000004080f8ffffffffff1a2300000503000018030000cc000000ac010000000000001004d1f990e1fe916dd282e0f34f8dfac0dc1695c4d7000010440000030400543351c2f2d3c00f3f72e211777024c9819561a6006fe6ebafa6766eb036d660aaba52155175c52ad2e287bde89009575469e4364422b866cd445d5d0f4d6715ba085900323e00000000000071cfe0a037f22b1f887a527a0a"], 0x1) ptrace$setopts(0x4206, r2, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) tkill(r2, 0x3c) [ 560.300519][T22639] netlink: 176 bytes leftover after parsing attributes in process `syz-executor.4'. 09:19:19 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000880)='sysfs\x00*\x86OK\xc0\v\xce\x1b\xdb cr\x13\xb1\xe8\x94\xd1 q_\x9d\xc1\x12[\x04,r&\xeb\x016\xd9bN\xa1\xd23t\xa6`\xfeZ\xc1sr/\xd3g\xad\"\xe8U0%\xa2\xe8\xbe\v\xc5QCy\xafr\x13\xd3+\x8d]\x06\xdc\x8f\xbf,\x84\x9e\xd9\xcd\xef\xc7K\x03\xdf\xa9\xcbZ\x90\xb2\x8bK$\xd7\x86,=f\xfc\xa51g\xd5BB5CZ=\xbbv\xbc}\xa1\x9c\x86x\xc1\x0f\x00'/63, 0x6) fallocate(r0, 0x0, 0x2000424, 0x3) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) close(r0) 09:21:01 executing program 2: r0 = syz_open_dev$usbmon(0x0, 0x6, 0x100) recvfrom$inet(r0, 0x0, 0x202, 0x0, 0x0, 0x10000007c) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000900), &(0x7f0000000700)=0x4) shmget(0xffffffffffffffff, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000200)='./file0\x00', &(0x7f00000004c0)) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000cc0)={{{@in6=@remote, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000100)=0xfe8b) lstat(&(0x7f0000000380)='./file0\x00', &(0x7f0000000840)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) fcntl$getown(r1, 0x9) r2 = getpid() fcntl$getown(r1, 0x9) r3 = getpgid(r2) connect$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x1, {0xccca, 0x107, 0x4, 0x8, 0x7, 0x5}, 0x2, 0x9}, 0xe) r4 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x3, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x9e04) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000080)={[], 0x8000, 0x400, 0x2, 0x10000, 0x26, r3}) perf_event_open(&(0x7f0000000080)={0x3, 0x70, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x8, 0x2003, 0xe, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x8001, 0x4, 0x9e6f, 0x73d9, 0x5c97, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x6, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x6, @perf_bp={0x0, 0x8}, 0x100, 0x0, 0x5, 0x6, 0x0, 0x8880, 0xc1f}, 0x0, 0x0, r1, 0x0) r5 = add_key$keyring(&(0x7f0000000780)='keyring\x00', &(0x7f0000000800)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) r6 = request_key(&(0x7f00000005c0)='cifs.idmap\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f00000002c0)='/dev/loop#\x00', r5) r7 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000740)={'syz'}, 0x0, 0x0, r5) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000440)=[{0x0}], 0x10000000000000dd, r6) io_setup(0x400000000004, 0x0) memfd_create(&(0x7f0000000640)='\x00\x05\xdb\x1f]\x0f\xbe\x04\xdb\xbf\x02\x04\x80\xff\xc5\xaf\xe4*\xa6\n\xc1\x05\xdc\x87\x1ct\xea\b\xa1!3\\\"\xed\x96F\xec\xdcd\xcan6\x15\xb3|\xbd\xe2\xc6\xf3\t\xf7\x89K\xc5AG\xf2\xc2]{\xd8\x02iD\xb0\xefXv\x92\xc1\xceg\a\"\x0f\xe0\"w`6\x89\xbd\x9cv', 0xffffffffffffffff) setsockopt$inet_int(r0, 0x0, 0xc, &(0x7f00000008c0)=0x100, 0x3) r8 = socket$inet(0x2, 0x1, 0x0) lstat(&(0x7f0000000180)='./file0\x00', &(0x7f00000003c0)) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r8, 0x6, 0x21, &(0x7f0000000240)="0801f4f6ffffff0000000000000400", 0x10) request_key(&(0x7f0000000000)='Rxrpc\x00', &(0x7f0000000480)={'syz', 0x0}, &(0x7f0000000300)='-\x00', r7) 09:21:01 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000140)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000005c0)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, 0x1, 0x1, [{{0xa, 0x0, 0x0, @initdev}}]}, 0x110) 09:21:01 executing program 3: r0 = syz_open_dev$usbmon(0x0, 0x6, 0x100) recvfrom$inet(r0, 0x0, 0x202, 0x0, 0x0, 0x10000007c) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000900), &(0x7f0000000700)=0x4) shmget(0xffffffffffffffff, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000200)='./file0\x00', &(0x7f00000004c0)) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000cc0)={{{@in6=@remote, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000100)=0xfe8b) lstat(&(0x7f0000000380)='./file0\x00', &(0x7f0000000840)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) fcntl$getown(r1, 0x9) r2 = getpid() fcntl$getown(r1, 0x9) r3 = getpgid(r2) connect$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x1, {0xccca, 0x107, 0x4, 0x8, 0x7, 0x5}, 0x2, 0x9}, 0xe) r4 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x3, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x9e04) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000080)={[], 0x8000, 0x400, 0x2, 0x10000, 0x26, r3}) perf_event_open(&(0x7f0000000080)={0x3, 0x70, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x8, 0x2003, 0xe, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x8001, 0x4, 0x9e6f, 0x73d9, 0x5c97, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x6, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x6, @perf_bp={0x0, 0x8}, 0x100, 0x0, 0x5, 0x6, 0x0, 0x8880, 0xc1f}, 0x0, 0x0, r1, 0x0) r5 = add_key$keyring(&(0x7f0000000780)='keyring\x00', &(0x7f0000000800)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) r6 = request_key(&(0x7f00000005c0)='cifs.idmap\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f00000002c0)='/dev/loop#\x00', r5) r7 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000740)={'syz'}, 0x0, 0x0, r5) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000440)=[{0x0}], 0x10000000000000dd, r6) io_setup(0x400000000004, 0x0) memfd_create(&(0x7f0000000640)='\x00\x05\xdb\x1f]\x0f\xbe\x04\xdb\xbf\x02\x04\x80\xff\xc5\xaf\xe4*\xa6\n\xc1\x05\xdc\x87\x1ct\xea\b\xa1!3\\\"\xed\x96F\xec\xdcd\xcan6\x15\xb3|\xbd\xe2\xc6\xf3\t\xf7\x89K\xc5AG\xf2\xc2]{\xd8\x02iD\xb0\xefXv\x92\xc1\xceg\a\"\x0f\xe0\"w`6\x89\xbd\x9cv', 0xffffffffffffffff) setsockopt$inet_int(r0, 0x0, 0xc, &(0x7f00000008c0)=0x100, 0x3) r8 = socket$inet(0x2, 0x1, 0x0) lstat(&(0x7f0000000180)='./file0\x00', &(0x7f00000003c0)) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r8, 0x6, 0x21, &(0x7f0000000240)="0801f4f6ffffff0000000000000400", 0x10) request_key(&(0x7f0000000000)='Rxrpc\x00', &(0x7f0000000480)={'syz', 0x0}, &(0x7f0000000300)='-\x00', r7) 09:21:02 executing program 3: r0 = syz_open_dev$usbmon(0x0, 0x6, 0x100) recvfrom$inet(r0, 0x0, 0x202, 0x0, 0x0, 0x10000007c) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000900), &(0x7f0000000700)=0x4) shmget(0xffffffffffffffff, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000200)='./file0\x00', &(0x7f00000004c0)) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000cc0)={{{@in6=@remote, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000100)=0xfe8b) lstat(&(0x7f0000000380)='./file0\x00', &(0x7f0000000840)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) fcntl$getown(r1, 0x9) r2 = getpid() fcntl$getown(r1, 0x9) r3 = getpgid(r2) connect$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x1, {0xccca, 0x107, 0x4, 0x8, 0x7, 0x5}, 0x2, 0x9}, 0xe) r4 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x3, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x9e04) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000080)={[], 0x8000, 0x400, 0x2, 0x10000, 0x26, r3}) perf_event_open(&(0x7f0000000080)={0x3, 0x70, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x8, 0x2003, 0xe, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x8001, 0x4, 0x9e6f, 0x73d9, 0x5c97, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x6, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x6, @perf_bp={0x0, 0x8}, 0x100, 0x0, 0x5, 0x6, 0x0, 0x8880, 0xc1f}, 0x0, 0x0, r1, 0x0) r5 = add_key$keyring(&(0x7f0000000780)='keyring\x00', &(0x7f0000000800)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) r6 = request_key(&(0x7f00000005c0)='cifs.idmap\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f00000002c0)='/dev/loop#\x00', r5) r7 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000740)={'syz'}, 0x0, 0x0, r5) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000440)=[{0x0}], 0x10000000000000dd, r6) io_setup(0x400000000004, 0x0) memfd_create(&(0x7f0000000640)='\x00\x05\xdb\x1f]\x0f\xbe\x04\xdb\xbf\x02\x04\x80\xff\xc5\xaf\xe4*\xa6\n\xc1\x05\xdc\x87\x1ct\xea\b\xa1!3\\\"\xed\x96F\xec\xdcd\xcan6\x15\xb3|\xbd\xe2\xc6\xf3\t\xf7\x89K\xc5AG\xf2\xc2]{\xd8\x02iD\xb0\xefXv\x92\xc1\xceg\a\"\x0f\xe0\"w`6\x89\xbd\x9cv', 0xffffffffffffffff) setsockopt$inet_int(r0, 0x0, 0xc, &(0x7f00000008c0)=0x100, 0x3) r8 = socket$inet(0x2, 0x1, 0x0) lstat(&(0x7f0000000180)='./file0\x00', &(0x7f00000003c0)) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r8, 0x6, 0x21, &(0x7f0000000240)="0801f4f6ffffff0000000000000400", 0x10) request_key(&(0x7f0000000000)='Rxrpc\x00', &(0x7f0000000480)={'syz', 0x0}, &(0x7f0000000300)='-\x00', r7) 09:21:02 executing program 0: preadv(0xffffffffffffffff, &(0x7f0000000780)=[{&(0x7f0000000380)=""/167, 0xa7}], 0x1, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') preadv(r0, &(0x7f0000000700), 0x31f, 0x10400003) unlink(0x0) bind$nfc_llcp(0xffffffffffffffff, &(0x7f0000000000)={0x27, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, "6cb782e4ad88b89d1fd309169f44a72107130ee55d660510420aaa96759ecbc36eb9bb12b6124793608dd0e7316d1d4f4dbac39877e4ac714b7ecefa8a934a"}, 0x60) 09:21:02 executing program 2: r0 = syz_open_dev$usbmon(0x0, 0x6, 0x100) recvfrom$inet(r0, 0x0, 0x202, 0x0, 0x0, 0x10000007c) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000900), &(0x7f0000000700)=0x4) shmget(0xffffffffffffffff, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000200)='./file0\x00', &(0x7f00000004c0)) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000cc0)={{{@in6=@remote, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000100)=0xfe8b) lstat(&(0x7f0000000380)='./file0\x00', &(0x7f0000000840)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) fcntl$getown(r1, 0x9) r2 = getpid() fcntl$getown(r1, 0x9) r3 = getpgid(r2) connect$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x1, {0xccca, 0x107, 0x4, 0x8, 0x7, 0x5}, 0x2, 0x9}, 0xe) r4 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x3, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x9e04) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000080)={[], 0x8000, 0x400, 0x2, 0x10000, 0x26, r3}) perf_event_open(&(0x7f0000000080)={0x3, 0x70, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x8, 0x2003, 0xe, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x8001, 0x4, 0x9e6f, 0x73d9, 0x5c97, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x6, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x6, @perf_bp={0x0, 0x8}, 0x100, 0x0, 0x5, 0x6, 0x0, 0x8880, 0xc1f}, 0x0, 0x0, r1, 0x0) r5 = add_key$keyring(&(0x7f0000000780)='keyring\x00', &(0x7f0000000800)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) r6 = request_key(&(0x7f00000005c0)='cifs.idmap\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f00000002c0)='/dev/loop#\x00', r5) r7 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000740)={'syz'}, 0x0, 0x0, r5) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000440)=[{0x0}], 0x10000000000000dd, r6) io_setup(0x400000000004, 0x0) memfd_create(&(0x7f0000000640)='\x00\x05\xdb\x1f]\x0f\xbe\x04\xdb\xbf\x02\x04\x80\xff\xc5\xaf\xe4*\xa6\n\xc1\x05\xdc\x87\x1ct\xea\b\xa1!3\\\"\xed\x96F\xec\xdcd\xcan6\x15\xb3|\xbd\xe2\xc6\xf3\t\xf7\x89K\xc5AG\xf2\xc2]{\xd8\x02iD\xb0\xefXv\x92\xc1\xceg\a\"\x0f\xe0\"w`6\x89\xbd\x9cv', 0xffffffffffffffff) setsockopt$inet_int(r0, 0x0, 0xc, &(0x7f00000008c0)=0x100, 0x3) r8 = socket$inet(0x2, 0x1, 0x0) lstat(&(0x7f0000000180)='./file0\x00', &(0x7f00000003c0)) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r8, 0x6, 0x21, &(0x7f0000000240)="0801f4f6ffffff0000000000000400", 0x10) request_key(&(0x7f0000000000)='Rxrpc\x00', &(0x7f0000000480)={'syz', 0x0}, &(0x7f0000000300)='-\x00', r7) 09:21:02 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x7, &(0x7f0000013e95), 0x4) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB='%\x00']}) close(r2) close(r1) 09:21:02 executing program 3: r0 = syz_open_dev$cec(&(0x7f0000000340)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x805c6103, &(0x7f0000000300)) 09:21:02 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x0) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040)=0x1, 0x4) openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x0, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)) write$vnet(0xffffffffffffffff, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x0, 0x0) close(r0) socket$packet(0x11, 0x3, 0x300) syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x0, 0x20800) [ 663.422266][ C0] net_ratelimit: 23 callbacks suppressed [ 663.422276][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 663.432135][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 663.433857][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 663.439574][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 663.451147][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 663.456992][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 664.142140][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 664.147983][ C0] protocol 88fb is buggy, dev hsr_slave_1 09:21:03 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x0) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040)=0x1, 0x4) openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x0, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)) write$vnet(0xffffffffffffffff, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x0, 0x0) close(r0) socket$packet(0x11, 0x3, 0x300) syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x0, 0x20800) 09:21:03 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x0) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040)=0x1, 0x4) openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x0, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)) write$vnet(0xffffffffffffffff, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x0, 0x0) close(r0) socket$packet(0x11, 0x3, 0x300) syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x0, 0x20800) 09:21:03 executing program 3: r0 = syz_open_dev$cec(&(0x7f0000000340)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x805c6103, &(0x7f0000000300)) 09:21:03 executing program 0: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x802, 0x0) write$UHID_CREATE(r0, &(0x7f00000003c0)={0x0, 'syz0\x00', 'syz0\x00', 'syz0\x00', 0x0}, 0x120) 09:21:03 executing program 1: syz_emit_ethernet(0x4a, &(0x7f0000000040)={@link_local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2f, 0x0, @local, @local, {[], @tcp={{0x0, 0x4305, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 09:21:03 executing program 4: r0 = memfd_create(&(0x7f0000000080)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\b\xedcJ\x8e\x84\xd4N\x12\x9b\x1f\t\xbd\x11+\x86T\x16\xa3\xb3\xae0\x9f9?\xefo\xa4k\x012>\xa1\x9c\x86x\xc1\x0f\x00'/63, 0x6) fallocate(r0, 0x0, 0x2000424, 0x3) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) close(r0) 09:21:04 executing program 0: r0 = memfd_create(&(0x7f0000000080)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\b\xedcJ\x8e\x84\xd4N\x12\x9b\x1f\t\xbd\x11+\x86T\x16\xa3\xb3\xae0\x9f9?\xefo\xa4k\x012>\xa1\x9c\x86x\xc1\x0f\x00'/63, 0x6) fallocate(r0, 0x0, 0x2000424, 0x3) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) close(r0) 09:21:04 executing program 3: r0 = syz_open_dev$cec(&(0x7f0000000340)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x805c6103, &(0x7f0000000300)) 09:21:04 executing program 1: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000030607031dfffd946fa2830020200a0009000100061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) [ 664.702576][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 664.709069][ C0] protocol 88fb is buggy, dev hsr_slave_1 09:21:04 executing program 0: r0 = memfd_create(&(0x7f0000000080)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\b\xedcJ\x8e\x84\xd4N\x12\x9b\x1f\t\xbd\x11+\x86T\x16\xa3\xb3\xae0\x9f9?\xefo\xa4k\x012>\xa1\x9c\x86x\xc1\x0f\x00'/63, 0x6) fallocate(r0, 0x0, 0x2000424, 0x3) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) close(r0) 09:21:04 executing program 3: r0 = syz_open_dev$cec(&(0x7f0000000340)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x805c6103, &(0x7f0000000300)) 09:21:04 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x0) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040)=0x1, 0x4) openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x0, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)) write$vnet(0xffffffffffffffff, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x0, 0x0) close(r0) socket$packet(0x11, 0x3, 0x300) syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x0, 0x20800) [ 664.880151][T25890] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 09:21:04 executing program 4: r0 = memfd_create(&(0x7f0000000080)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\b\xedcJ\x8e\x84\xd4N\x12\x9b\x1f\t\xbd\x11+\x86T\x16\xa3\xb3\xae0\x9f9?\xefo\xa4k\x012>\xa1\x9c\x86x\xc1\x0f\x00'/63, 0x6) fallocate(r0, 0x0, 0x2000424, 0x3) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) close(r0) 09:21:04 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x0) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040)=0x1, 0x4) openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x0, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)) write$vnet(0xffffffffffffffff, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x0, 0x0) close(r0) socket$packet(0x11, 0x3, 0x300) syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x0, 0x20800) 09:21:04 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = io_uring_setup(0x3c8, &(0x7f0000000040)) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f00000000c0)=[r0], 0x1) 09:21:04 executing program 0: r0 = memfd_create(&(0x7f0000000080)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\b\xedcJ\x8e\x84\xd4N\x12\x9b\x1f\t\xbd\x11+\x86T\x16\xa3\xb3\xae0\x9f9?\xefo\xa4k\x012>\xa1\x9c\x86x\xc1\x0f\x00'/63, 0x6) fallocate(r0, 0x0, 0x2000424, 0x3) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) close(r0) 09:21:04 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x0) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040)=0x1, 0x4) openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x0, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)) write$vnet(0xffffffffffffffff, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x0, 0x0) close(r0) socket$packet(0x11, 0x3, 0x300) syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x0, 0x20800) 09:21:04 executing program 3: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) getsockopt$ax25_int(r0, 0x101, 0x6, &(0x7f0000000000), &(0x7f0000000040)=0x4) 09:21:04 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x0) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040)=0x1, 0x4) openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x0, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)) write$vnet(0xffffffffffffffff, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x0, 0x0) close(r0) socket$packet(0x11, 0x3, 0x300) syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x0, 0x20800) 09:21:04 executing program 0: r0 = syz_open_dev$sndpcmc(&(0x7f0000000140)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/nullb0\x00', 0x4004000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000b, 0x13, r1, 0x0) ioctl(r0, 0x40044103, &(0x7f0000000000)) 09:21:04 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x304c, &(0x7f0000000140), &(0x7f00000001c0)=[0x0]}}], 0x0, 0x0, &(0x7f0000000300)}) 09:21:04 executing program 4: r0 = memfd_create(&(0x7f0000000080)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\b\xedcJ\x8e\x84\xd4N\x12\x9b\x1f\t\xbd\x11+\x86T\x16\xa3\xb3\xae0\x9f9?\xefo\xa4k\x012>\xa1\x9c\x86x\xc1\x0f\x00'/63, 0x6) fallocate(r0, 0x0, 0x2000424, 0x3) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) close(r0) 09:21:04 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = io_uring_setup(0x3c8, &(0x7f0000000040)) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f00000000c0)=[r0], 0x1) 09:21:04 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000640)=""/246) ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) [ 665.441204][T25929] binder: 25924:25929 got transaction with invalid offsets size, 12364 [ 665.473921][T25929] binder: 25924:25929 transaction failed 29201/-22, size 0-12364 line 3202 09:21:04 executing program 0: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x2) write$vhci(r0, &(0x7f00000000c0)=@HCI_VENDOR_PKT, 0x2) write$vhci(r0, &(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, "c8"}, 0x2) [ 665.545257][ T2995] binder: undelivered TRANSACTION_ERROR: 29201 [ 665.555781][T25938] binder: 25924:25938 got transaction with invalid offsets size, 12364 [ 665.587970][T25938] binder: 25924:25938 transaction failed 29201/-22, size 0-12364 line 3202 09:21:04 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="0adc1f123c123f319bd070") r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000280)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd000000100001000b081000414900000004fcff", 0x58}], 0x1) 09:21:04 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = io_uring_setup(0x3c8, &(0x7f0000000040)) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f00000000c0)=[r0], 0x1) [ 665.629234][ T2995] binder: undelivered TRANSACTION_ERROR: 29201 09:21:05 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x304c, &(0x7f0000000140), &(0x7f00000001c0)=[0x0]}}], 0x0, 0x0, &(0x7f0000000300)}) 09:21:05 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000080)={0x0, 0x0, 0xffffffa5}) 09:21:05 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = io_uring_setup(0x3c8, &(0x7f0000000040)) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f00000000c0)=[r0], 0x1) 09:21:05 executing program 4: add_key(&(0x7f00000004c0)='big_key\x00', &(0x7f0000000500)={'syz'}, 0x0, 0x0, 0xfffffffffffffffd) 09:21:05 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000640)=""/246) ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) [ 665.911094][T25958] binder: 25956:25958 got transaction with invalid offsets size, 12364 [ 665.957427][T25958] binder: 25956:25958 transaction failed 29201/-22, size 0-12364 line 3202 09:21:05 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000015c0)='vxcan1\x00', 0x10) r2 = dup2(r1, r1) sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB], 0x1}}, 0x0) sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000000)=0xfffffffffffffff9, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000000), 0xfffffdef, 0xc0, 0x0, 0xf7) 09:21:05 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) dup2(r0, r1) [ 666.023409][ T5] binder: undelivered TRANSACTION_ERROR: 29201 09:21:05 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x304c, &(0x7f0000000140), &(0x7f00000001c0)=[0x0]}}], 0x0, 0x0, &(0x7f0000000300)}) 09:21:05 executing program 1: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f00000000c0)={0xa}) [ 666.248396][T25982] binder: 25978:25982 got transaction with invalid offsets size, 12364 [ 666.270138][T25982] binder: 25978:25982 transaction failed 29201/-22, size 0-12364 line 3202 [ 666.283754][ T7820] binder: undelivered TRANSACTION_ERROR: 29201 [ 668.862229][ C0] net_ratelimit: 21 callbacks suppressed [ 668.862239][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 668.873787][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 669.022140][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 669.027948][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 669.662136][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 669.662177][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 669.667951][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 669.673768][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 669.685261][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 670.382165][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 674.542141][ C0] net_ratelimit: 19 callbacks suppressed [ 674.542151][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 674.562773][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 675.102143][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 675.107952][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 675.262136][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 675.267945][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 675.902143][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 675.902175][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 675.907953][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 675.913778][ C1] protocol 88fb is buggy, dev hsr_slave_0 09:21:15 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000040)={'bridge0\x00?\x00', &(0x7f0000000000)=@ethtool_ringparam={0xd, 0x0, 0x70c000, 0x0, 0x2}}) 09:21:15 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000640)=""/246) ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) 09:21:15 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000400)={0x1, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @remote}}}, 0x64b3cb7426d54726) r1 = syz_open_procfs(0x0, &(0x7f000012bff2)='net/mcfilter6\x00') readv(r1, &(0x7f0000000380)=[{&(0x7f0000000000)=""/87, 0x57}, {&(0x7f0000000080)=""/50, 0x32}], 0x2) 09:21:15 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x304c, &(0x7f0000000140), &(0x7f00000001c0)=[0x0]}}], 0x0, 0x0, &(0x7f0000000300)}) 09:21:15 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000015c0)='vxcan1\x00', 0x10) r2 = dup2(r1, r1) sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB], 0x1}}, 0x0) sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000000)=0xfffffffffffffff9, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000000), 0xfffffdef, 0xc0, 0x0, 0xf7) 09:21:15 executing program 1: syz_emit_ethernet(0x140, &(0x7f0000000140)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x4, 0x4, 0x0, 0x0, 0x0, 0x6, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4029, 0x0, @local, @dev, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 09:21:15 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xc, 0x3, &(0x7f00000000c0)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x11, 0x6c}}, &(0x7f0000000000)='syzkaller\x00', 0x1, 0xcf, &(0x7f0000000480)=""/207}, 0x48) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0xffffffffa0008000, 0xe, 0x0, &(0x7f0000000200)="fbbe22cf104c948f665e6007769d", 0x0}, 0x28) 09:21:15 executing program 5: r0 = socket$inet6(0xa, 0x4000000000000002, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0xd}, 0x1c) sendmmsg(r0, &(0x7f00000089c0)=[{{&(0x7f0000000440)=@in={0x2, 0x4, @multicast2=0xe00002ff}, 0x80, 0x0}}], 0x300, 0x0) [ 676.444580][T25995] binder: 25991:25995 got transaction with invalid offsets size, 12364 [ 676.469171][T25995] binder: 25991:25995 transaction failed 29201/-22, size 0-12364 line 3202 [ 676.506665][ T7794] binder: undelivered TRANSACTION_ERROR: 29201 09:21:15 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x5ec, 0x80802) ioctl$KVM_CREATE_VCPU(r0, 0x8004550f, 0x0) 09:21:15 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000640)=""/246) ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) 09:21:15 executing program 2: r0 = socket$caif_stream(0x25, 0x1, 0x0) recvmmsg(r0, &(0x7f0000000640)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40, 0x0) 09:21:15 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xc, 0x3, &(0x7f00000000c0)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x11, 0x6c}}, &(0x7f0000000000)='syzkaller\x00', 0x1, 0xcf, &(0x7f0000000480)=""/207}, 0x48) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0xffffffffa0008000, 0xe, 0x0, &(0x7f0000000200)="fbbe22cf104c948f665e6007769d", 0x0}, 0x28) 09:21:16 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x5ec, 0x80802) ioctl$KVM_CREATE_VCPU(r0, 0x8004550f, 0x0) 09:21:16 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xc, 0x3, &(0x7f00000000c0)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x11, 0x6c}}, &(0x7f0000000000)='syzkaller\x00', 0x1, 0xcf, &(0x7f0000000480)=""/207}, 0x48) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0xffffffffa0008000, 0xe, 0x0, &(0x7f0000000200)="fbbe22cf104c948f665e6007769d", 0x0}, 0x28) 09:21:16 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x31, 0xffffffffffffffff, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x2201, &(0x7f0000000100)) 09:21:16 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x5ec, 0x80802) ioctl$KVM_CREATE_VCPU(r0, 0x8004550f, 0x0) 09:21:16 executing program 2: r0 = socket$caif_stream(0x25, 0x1, 0x0) recvmmsg(r0, &(0x7f0000000640)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40, 0x0) 09:21:16 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000015c0)='vxcan1\x00', 0x10) r2 = dup2(r1, r1) sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB], 0x1}}, 0x0) sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000000)=0xfffffffffffffff9, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000000), 0xfffffdef, 0xc0, 0x0, 0xf7) 09:21:16 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xc, 0x3, &(0x7f00000000c0)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x11, 0x6c}}, &(0x7f0000000000)='syzkaller\x00', 0x1, 0xcf, &(0x7f0000000480)=""/207}, 0x48) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0xffffffffa0008000, 0xe, 0x0, &(0x7f0000000200)="fbbe22cf104c948f665e6007769d", 0x0}, 0x28) 09:21:16 executing program 3: setitimer(0x0, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_execute_func(&(0x7f00000000c0)="b11b91cd801b69696c69dc00d9d9d0c44139fd5bf9c7c7e4c653fb0fc4014c58c4a1e96be7c44149f2168f4808eebce00000802000c421fc51c1ea01efc48192558dc3c36645c4c1e173fb65f1400fae28787c3e460f569f000000003ef0954200fcc401fe5ff6c4a27d33e4646736676666430fefb3000000000804f4c4837d1118fbc40213f5930a0000000013a4001369879f000000fe") 09:21:16 executing program 2: r0 = socket$caif_stream(0x25, 0x1, 0x0) recvmmsg(r0, &(0x7f0000000640)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40, 0x0) 09:21:16 executing program 5: r0 = socket$inet6(0xa, 0x4000000000000002, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0xd}, 0x1c) sendmmsg(r0, &(0x7f00000089c0)=[{{&(0x7f0000000440)=@in={0x2, 0x4, @multicast2=0xe00002ff}, 0x80, 0x0}}], 0x300, 0x0) 09:21:16 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x5ec, 0x80802) ioctl$KVM_CREATE_VCPU(r0, 0x8004550f, 0x0) 09:21:16 executing program 1: r0 = socket$kcm(0x10, 0x200000000002, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001600)="2e000000130081c5e4050cecdb4cb9040a485e4325000000000000000000f9000600b0ebb06ac40006001400f9ff", 0x2e}], 0x1}, 0x0) 09:21:16 executing program 3: clone(0x1000000000011, &(0x7f0000001700), 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0xc, 0x0) 09:21:16 executing program 1: r0 = socket$kcm(0x10, 0x200000000002, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001600)="2e000000130081c5e4050cecdb4cb9040a485e4325000000000000000000f9000600b0ebb06ac40006001400f9ff", 0x2e}], 0x1}, 0x0) 09:21:16 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-512-generic\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000003e80)=[{0x0, 0x0, &(0x7f0000002a80), 0x167, &(0x7f0000000100)=[@op={0x18, 0x117, 0x4}], 0x18}], 0xfffffffffffffd61, 0x0) 09:21:16 executing program 2: r0 = socket$caif_stream(0x25, 0x1, 0x0) recvmmsg(r0, &(0x7f0000000640)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40, 0x0) 09:21:17 executing program 1: r0 = socket$kcm(0x10, 0x200000000002, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001600)="2e000000130081c5e4050cecdb4cb9040a485e4325000000000000000000f9000600b0ebb06ac40006001400f9ff", 0x2e}], 0x1}, 0x0) 09:21:17 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000015c0)='vxcan1\x00', 0x10) r2 = dup2(r1, r1) sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB], 0x1}}, 0x0) sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000000)=0xfffffffffffffff9, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000000), 0xfffffdef, 0xc0, 0x0, 0xf7) 09:21:17 executing program 5: r0 = socket$inet6(0xa, 0x4000000000000002, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0xd}, 0x1c) sendmmsg(r0, &(0x7f00000089c0)=[{{&(0x7f0000000440)=@in={0x2, 0x4, @multicast2=0xe00002ff}, 0x80, 0x0}}], 0x300, 0x0) 09:21:17 executing program 3: syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x8) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) openat$md(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/md0\x00', 0x0, 0x0) r2 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(0xffffffffffffffff, 0xc0a85352, &(0x7f0000000040)={{}, 'port0\x00', 0x4, 0x800, 0x4, 0x1, 0x5, 0x3, 0x0, 0x0, 0x4, 0x39a}) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r1, 0x84, 0x16, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000940)=[{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000680)="6a687dc640752b286ca9c27f85ea72a9644045b6b58e70383ebf34c164222f5e8221cd7ac8c4f744879ff7c40f7c236da7837c1a15cc1185c000021213092f53a60483ea6974af5f887e1e865fb71b503b900cd88f3976205b946571b6e6422b2321fc31722600c26af3cda82a00898d3d22d279316ddd6c623ec0feb8ac2a1506ca936b5d9c7d4116a9ec86a9d0a7e83a480571b5c897fc14afdd20a75022ac4620644c3613057f35b691a8ba731cea2bbbc8773f7eadf59f0b0220396e2b444b8ae5dd35764cd5dd5874", 0xcb}], 0x1, 0x0, 0x0, 0x8041}], 0x1, 0x800) 09:21:17 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000200)=0x19) ioctl$TIOCVHANGUP(r0, 0x540b, 0x0) 09:21:17 executing program 1: r0 = socket$kcm(0x10, 0x200000000002, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001600)="2e000000130081c5e4050cecdb4cb9040a485e4325000000000000000000f9000600b0ebb06ac40006001400f9ff", 0x2e}], 0x1}, 0x0) 09:21:17 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-512-generic\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000003e80)=[{0x0, 0x0, &(0x7f0000002a80), 0x167, &(0x7f0000000100)=[@op={0x18, 0x117, 0x4}], 0x18}], 0xfffffffffffffd61, 0x0) 09:21:17 executing program 1: bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = syz_open_dev$sndseq(0x0, 0x0, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000400)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) pipe2(&(0x7f0000000440), 0x0) syz_open_dev$dspn(0x0, 0x0, 0x1) ioctl$KVM_GET_CLOCK(0xffffffffffffffff, 0x8030ae7c, &(0x7f0000000500)) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0xa000000000000005) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = getpgrp(0xffffffffffffffff) setpriority(0x0, r3, 0x10000) r4 = open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1) lgetxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) ioctl$ASHMEM_GET_PIN_STATUS(r4, 0x7709, 0x0) ioctl$BLKPBSZGET(r0, 0x127b, &(0x7f0000000280)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000300)='./file0\x00', 0x0, &(0x7f0000000ac0)) perf_event_open(&(0x7f00000001c0)={0x5, 0x70, 0x0, 0x0, 0x101, 0xb7e, 0x0, 0x5, 0x10b, 0x4, 0x7, 0x0, 0x1, 0x1, 0x0, 0x8, 0x0, 0x0, 0x81, 0x3, 0x2, 0xda4, 0x5, 0x4, 0x0, 0x40, 0x0, 0x8, 0x280000000000000, 0x5, 0x80000000, 0xa34, 0x7f, 0x0, 0x7, 0x0, 0x1ff, 0x0, 0x0, 0x3f, 0x4, @perf_bp={0x0, 0x8}, 0x20821, 0x0, 0x4, 0xf, 0x2, 0x2, 0x9}, 0xffffffffffffffff, 0x0, r2, 0x1) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000680)=ANY=[@ANYBLOB="501f002930f6146d87137acbfe6a67e96227732686d27999f1a19b716c42539f201196248745e1c81ea571a14ab6c78fee5628c3dc4ffc9ca251bbeaa571399161558701b1113330e670f39289820cdfd065fb0aac0dc1b9a30f5e7d664797440952", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000240)={0x0, 0x80000001}, 0x8) 09:21:17 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000200)=0x19) ioctl$TIOCVHANGUP(r0, 0x540b, 0x0) 09:21:18 executing program 3: syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x8) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) openat$md(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/md0\x00', 0x0, 0x0) r2 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(0xffffffffffffffff, 0xc0a85352, &(0x7f0000000040)={{}, 'port0\x00', 0x4, 0x800, 0x4, 0x1, 0x5, 0x3, 0x0, 0x0, 0x4, 0x39a}) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r1, 0x84, 0x16, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000940)=[{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000680)="6a687dc640752b286ca9c27f85ea72a9644045b6b58e70383ebf34c164222f5e8221cd7ac8c4f744879ff7c40f7c236da7837c1a15cc1185c000021213092f53a60483ea6974af5f887e1e865fb71b503b900cd88f3976205b946571b6e6422b2321fc31722600c26af3cda82a00898d3d22d279316ddd6c623ec0feb8ac2a1506ca936b5d9c7d4116a9ec86a9d0a7e83a480571b5c897fc14afdd20a75022ac4620644c3613057f35b691a8ba731cea2bbbc8773f7eadf59f0b0220396e2b444b8ae5dd35764cd5dd5874", 0xcb}], 0x1, 0x0, 0x0, 0x8041}], 0x1, 0x800) 09:21:18 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000200)=0x19) ioctl$TIOCVHANGUP(r0, 0x540b, 0x0) 09:21:18 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-512-generic\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000003e80)=[{0x0, 0x0, &(0x7f0000002a80), 0x167, &(0x7f0000000100)=[@op={0x18, 0x117, 0x4}], 0x18}], 0xfffffffffffffd61, 0x0) 09:21:18 executing program 1: bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = syz_open_dev$sndseq(0x0, 0x0, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000400)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) pipe2(&(0x7f0000000440), 0x0) syz_open_dev$dspn(0x0, 0x0, 0x1) ioctl$KVM_GET_CLOCK(0xffffffffffffffff, 0x8030ae7c, &(0x7f0000000500)) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0xa000000000000005) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = getpgrp(0xffffffffffffffff) setpriority(0x0, r3, 0x10000) r4 = open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1) lgetxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) ioctl$ASHMEM_GET_PIN_STATUS(r4, 0x7709, 0x0) ioctl$BLKPBSZGET(r0, 0x127b, &(0x7f0000000280)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000300)='./file0\x00', 0x0, &(0x7f0000000ac0)) perf_event_open(&(0x7f00000001c0)={0x5, 0x70, 0x0, 0x0, 0x101, 0xb7e, 0x0, 0x5, 0x10b, 0x4, 0x7, 0x0, 0x1, 0x1, 0x0, 0x8, 0x0, 0x0, 0x81, 0x3, 0x2, 0xda4, 0x5, 0x4, 0x0, 0x40, 0x0, 0x8, 0x280000000000000, 0x5, 0x80000000, 0xa34, 0x7f, 0x0, 0x7, 0x0, 0x1ff, 0x0, 0x0, 0x3f, 0x4, @perf_bp={0x0, 0x8}, 0x20821, 0x0, 0x4, 0xf, 0x2, 0x2, 0x9}, 0xffffffffffffffff, 0x0, r2, 0x1) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000680)=ANY=[@ANYBLOB="501f002930f6146d87137acbfe6a67e96227732686d27999f1a19b716c42539f201196248745e1c81ea571a14ab6c78fee5628c3dc4ffc9ca251bbeaa571399161558701b1113330e670f39289820cdfd065fb0aac0dc1b9a30f5e7d664797440952", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000240)={0x0, 0x80000001}, 0x8) 09:21:18 executing program 5: r0 = socket$inet6(0xa, 0x4000000000000002, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0xd}, 0x1c) sendmmsg(r0, &(0x7f00000089c0)=[{{&(0x7f0000000440)=@in={0x2, 0x4, @multicast2=0xe00002ff}, 0x80, 0x0}}], 0x300, 0x0) 09:21:18 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000200)=0x19) ioctl$TIOCVHANGUP(r0, 0x540b, 0x0) 09:21:18 executing program 3: syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x8) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) openat$md(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/md0\x00', 0x0, 0x0) r2 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(0xffffffffffffffff, 0xc0a85352, &(0x7f0000000040)={{}, 'port0\x00', 0x4, 0x800, 0x4, 0x1, 0x5, 0x3, 0x0, 0x0, 0x4, 0x39a}) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r1, 0x84, 0x16, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000940)=[{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000680)="6a687dc640752b286ca9c27f85ea72a9644045b6b58e70383ebf34c164222f5e8221cd7ac8c4f744879ff7c40f7c236da7837c1a15cc1185c000021213092f53a60483ea6974af5f887e1e865fb71b503b900cd88f3976205b946571b6e6422b2321fc31722600c26af3cda82a00898d3d22d279316ddd6c623ec0feb8ac2a1506ca936b5d9c7d4116a9ec86a9d0a7e83a480571b5c897fc14afdd20a75022ac4620644c3613057f35b691a8ba731cea2bbbc8773f7eadf59f0b0220396e2b444b8ae5dd35764cd5dd5874", 0xcb}], 0x1, 0x0, 0x0, 0x8041}], 0x1, 0x800) 09:21:18 executing program 4: bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = syz_open_dev$sndseq(0x0, 0x0, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000400)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) pipe2(&(0x7f0000000440), 0x0) syz_open_dev$dspn(0x0, 0x0, 0x1) ioctl$KVM_GET_CLOCK(0xffffffffffffffff, 0x8030ae7c, &(0x7f0000000500)) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0xa000000000000005) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = getpgrp(0xffffffffffffffff) setpriority(0x0, r3, 0x10000) r4 = open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1) lgetxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) ioctl$ASHMEM_GET_PIN_STATUS(r4, 0x7709, 0x0) ioctl$BLKPBSZGET(r0, 0x127b, &(0x7f0000000280)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000300)='./file0\x00', 0x0, &(0x7f0000000ac0)) perf_event_open(&(0x7f00000001c0)={0x5, 0x70, 0x0, 0x0, 0x101, 0xb7e, 0x0, 0x5, 0x10b, 0x4, 0x7, 0x0, 0x1, 0x1, 0x0, 0x8, 0x0, 0x0, 0x81, 0x3, 0x2, 0xda4, 0x5, 0x4, 0x0, 0x40, 0x0, 0x8, 0x280000000000000, 0x5, 0x80000000, 0xa34, 0x7f, 0x0, 0x7, 0x0, 0x1ff, 0x0, 0x0, 0x3f, 0x4, @perf_bp={0x0, 0x8}, 0x20821, 0x0, 0x4, 0xf, 0x2, 0x2, 0x9}, 0xffffffffffffffff, 0x0, r2, 0x1) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000680)=ANY=[@ANYBLOB="501f002930f6146d87137acbfe6a67e96227732686d27999f1a19b716c42539f201196248745e1c81ea571a14ab6c78fee5628c3dc4ffc9ca251bbeaa571399161558701b1113330e670f39289820cdfd065fb0aac0dc1b9a30f5e7d664797440952", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000240)={0x0, 0x80000001}, 0x8) 09:21:18 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-512-generic\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000003e80)=[{0x0, 0x0, &(0x7f0000002a80), 0x167, &(0x7f0000000100)=[@op={0x18, 0x117, 0x4}], 0x18}], 0xfffffffffffffd61, 0x0) 09:21:18 executing program 2: bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = syz_open_dev$sndseq(0x0, 0x0, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000400)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) pipe2(&(0x7f0000000440), 0x0) syz_open_dev$dspn(0x0, 0x0, 0x1) ioctl$KVM_GET_CLOCK(0xffffffffffffffff, 0x8030ae7c, &(0x7f0000000500)) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0xa000000000000005) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = getpgrp(0xffffffffffffffff) setpriority(0x0, r3, 0x10000) r4 = open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1) lgetxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) ioctl$ASHMEM_GET_PIN_STATUS(r4, 0x7709, 0x0) ioctl$BLKPBSZGET(r0, 0x127b, &(0x7f0000000280)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000300)='./file0\x00', 0x0, &(0x7f0000000ac0)) perf_event_open(&(0x7f00000001c0)={0x5, 0x70, 0x0, 0x0, 0x101, 0xb7e, 0x0, 0x5, 0x10b, 0x4, 0x7, 0x0, 0x1, 0x1, 0x0, 0x8, 0x0, 0x0, 0x81, 0x3, 0x2, 0xda4, 0x5, 0x4, 0x0, 0x40, 0x0, 0x8, 0x280000000000000, 0x5, 0x80000000, 0xa34, 0x7f, 0x0, 0x7, 0x0, 0x1ff, 0x0, 0x0, 0x3f, 0x4, @perf_bp={0x0, 0x8}, 0x20821, 0x0, 0x4, 0xf, 0x2, 0x2, 0x9}, 0xffffffffffffffff, 0x0, r2, 0x1) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000680)=ANY=[@ANYBLOB="501f002930f6146d87137acbfe6a67e96227732686d27999f1a19b716c42539f201196248745e1c81ea571a14ab6c78fee5628c3dc4ffc9ca251bbeaa571399161558701b1113330e670f39289820cdfd065fb0aac0dc1b9a30f5e7d664797440952", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000240)={0x0, 0x80000001}, 0x8) 09:21:18 executing program 3: syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x8) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) openat$md(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/md0\x00', 0x0, 0x0) r2 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(0xffffffffffffffff, 0xc0a85352, &(0x7f0000000040)={{}, 'port0\x00', 0x4, 0x800, 0x4, 0x1, 0x5, 0x3, 0x0, 0x0, 0x4, 0x39a}) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r1, 0x84, 0x16, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000940)=[{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000680)="6a687dc640752b286ca9c27f85ea72a9644045b6b58e70383ebf34c164222f5e8221cd7ac8c4f744879ff7c40f7c236da7837c1a15cc1185c000021213092f53a60483ea6974af5f887e1e865fb71b503b900cd88f3976205b946571b6e6422b2321fc31722600c26af3cda82a00898d3d22d279316ddd6c623ec0feb8ac2a1506ca936b5d9c7d4116a9ec86a9d0a7e83a480571b5c897fc14afdd20a75022ac4620644c3613057f35b691a8ba731cea2bbbc8773f7eadf59f0b0220396e2b444b8ae5dd35764cd5dd5874", 0xcb}], 0x1, 0x0, 0x0, 0x8041}], 0x1, 0x800) [ 680.062141][ C0] net_ratelimit: 19 callbacks suppressed [ 680.062149][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 680.062200][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 680.067908][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 680.073728][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 680.090878][ C1] protocol 88fb is buggy, dev hsr_slave_1 09:21:19 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='sessionid\x00') read$FUSE(r0, 0x0, 0x0) 09:21:19 executing program 2: bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = syz_open_dev$sndseq(0x0, 0x0, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000400)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) pipe2(&(0x7f0000000440), 0x0) syz_open_dev$dspn(0x0, 0x0, 0x1) ioctl$KVM_GET_CLOCK(0xffffffffffffffff, 0x8030ae7c, &(0x7f0000000500)) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0xa000000000000005) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = getpgrp(0xffffffffffffffff) setpriority(0x0, r3, 0x10000) r4 = open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1) lgetxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) ioctl$ASHMEM_GET_PIN_STATUS(r4, 0x7709, 0x0) ioctl$BLKPBSZGET(r0, 0x127b, &(0x7f0000000280)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000300)='./file0\x00', 0x0, &(0x7f0000000ac0)) perf_event_open(&(0x7f00000001c0)={0x5, 0x70, 0x0, 0x0, 0x101, 0xb7e, 0x0, 0x5, 0x10b, 0x4, 0x7, 0x0, 0x1, 0x1, 0x0, 0x8, 0x0, 0x0, 0x81, 0x3, 0x2, 0xda4, 0x5, 0x4, 0x0, 0x40, 0x0, 0x8, 0x280000000000000, 0x5, 0x80000000, 0xa34, 0x7f, 0x0, 0x7, 0x0, 0x1ff, 0x0, 0x0, 0x3f, 0x4, @perf_bp={0x0, 0x8}, 0x20821, 0x0, 0x4, 0xf, 0x2, 0x2, 0x9}, 0xffffffffffffffff, 0x0, r2, 0x1) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000680)=ANY=[@ANYBLOB="501f002930f6146d87137acbfe6a67e96227732686d27999f1a19b716c42539f201196248745e1c81ea571a14ab6c78fee5628c3dc4ffc9ca251bbeaa571399161558701b1113330e670f39289820cdfd065fb0aac0dc1b9a30f5e7d664797440952", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000240)={0x0, 0x80000001}, 0x8) 09:21:19 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') sendfile(r0, r1, 0x0, 0x1) 09:21:19 executing program 1: bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = syz_open_dev$sndseq(0x0, 0x0, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000400)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) pipe2(&(0x7f0000000440), 0x0) syz_open_dev$dspn(0x0, 0x0, 0x1) ioctl$KVM_GET_CLOCK(0xffffffffffffffff, 0x8030ae7c, &(0x7f0000000500)) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0xa000000000000005) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = getpgrp(0xffffffffffffffff) setpriority(0x0, r3, 0x10000) r4 = open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1) lgetxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) ioctl$ASHMEM_GET_PIN_STATUS(r4, 0x7709, 0x0) ioctl$BLKPBSZGET(r0, 0x127b, &(0x7f0000000280)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000300)='./file0\x00', 0x0, &(0x7f0000000ac0)) perf_event_open(&(0x7f00000001c0)={0x5, 0x70, 0x0, 0x0, 0x101, 0xb7e, 0x0, 0x5, 0x10b, 0x4, 0x7, 0x0, 0x1, 0x1, 0x0, 0x8, 0x0, 0x0, 0x81, 0x3, 0x2, 0xda4, 0x5, 0x4, 0x0, 0x40, 0x0, 0x8, 0x280000000000000, 0x5, 0x80000000, 0xa34, 0x7f, 0x0, 0x7, 0x0, 0x1ff, 0x0, 0x0, 0x3f, 0x4, @perf_bp={0x0, 0x8}, 0x20821, 0x0, 0x4, 0xf, 0x2, 0x2, 0x9}, 0xffffffffffffffff, 0x0, r2, 0x1) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000680)=ANY=[@ANYBLOB="501f002930f6146d87137acbfe6a67e96227732686d27999f1a19b716c42539f201196248745e1c81ea571a14ab6c78fee5628c3dc4ffc9ca251bbeaa571399161558701b1113330e670f39289820cdfd065fb0aac0dc1b9a30f5e7d664797440952", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000240)={0x0, 0x80000001}, 0x8) 09:21:19 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='sessionid\x00') read$FUSE(r0, 0x0, 0x0) 09:21:19 executing program 3: openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_execute_func(&(0x7f00000006c0)="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") 09:21:19 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') sendfile(r0, r1, 0x0, 0x1) 09:21:19 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='sessionid\x00') read$FUSE(r0, 0x0, 0x0) 09:21:19 executing program 4: bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = syz_open_dev$sndseq(0x0, 0x0, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000400)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) pipe2(&(0x7f0000000440), 0x0) syz_open_dev$dspn(0x0, 0x0, 0x1) ioctl$KVM_GET_CLOCK(0xffffffffffffffff, 0x8030ae7c, &(0x7f0000000500)) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0xa000000000000005) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = getpgrp(0xffffffffffffffff) setpriority(0x0, r3, 0x10000) r4 = open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1) lgetxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) ioctl$ASHMEM_GET_PIN_STATUS(r4, 0x7709, 0x0) ioctl$BLKPBSZGET(r0, 0x127b, &(0x7f0000000280)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000300)='./file0\x00', 0x0, &(0x7f0000000ac0)) perf_event_open(&(0x7f00000001c0)={0x5, 0x70, 0x0, 0x0, 0x101, 0xb7e, 0x0, 0x5, 0x10b, 0x4, 0x7, 0x0, 0x1, 0x1, 0x0, 0x8, 0x0, 0x0, 0x81, 0x3, 0x2, 0xda4, 0x5, 0x4, 0x0, 0x40, 0x0, 0x8, 0x280000000000000, 0x5, 0x80000000, 0xa34, 0x7f, 0x0, 0x7, 0x0, 0x1ff, 0x0, 0x0, 0x3f, 0x4, @perf_bp={0x0, 0x8}, 0x20821, 0x0, 0x4, 0xf, 0x2, 0x2, 0x9}, 0xffffffffffffffff, 0x0, r2, 0x1) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000680)=ANY=[@ANYBLOB="501f002930f6146d87137acbfe6a67e96227732686d27999f1a19b716c42539f201196248745e1c81ea571a14ab6c78fee5628c3dc4ffc9ca251bbeaa571399161558701b1113330e670f39289820cdfd065fb0aac0dc1b9a30f5e7d664797440952", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000240)={0x0, 0x80000001}, 0x8) 09:21:19 executing program 2: bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = syz_open_dev$sndseq(0x0, 0x0, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000400)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) pipe2(&(0x7f0000000440), 0x0) syz_open_dev$dspn(0x0, 0x0, 0x1) ioctl$KVM_GET_CLOCK(0xffffffffffffffff, 0x8030ae7c, &(0x7f0000000500)) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0xa000000000000005) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = getpgrp(0xffffffffffffffff) setpriority(0x0, r3, 0x10000) r4 = open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1) lgetxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) ioctl$ASHMEM_GET_PIN_STATUS(r4, 0x7709, 0x0) ioctl$BLKPBSZGET(r0, 0x127b, &(0x7f0000000280)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000300)='./file0\x00', 0x0, &(0x7f0000000ac0)) perf_event_open(&(0x7f00000001c0)={0x5, 0x70, 0x0, 0x0, 0x101, 0xb7e, 0x0, 0x5, 0x10b, 0x4, 0x7, 0x0, 0x1, 0x1, 0x0, 0x8, 0x0, 0x0, 0x81, 0x3, 0x2, 0xda4, 0x5, 0x4, 0x0, 0x40, 0x0, 0x8, 0x280000000000000, 0x5, 0x80000000, 0xa34, 0x7f, 0x0, 0x7, 0x0, 0x1ff, 0x0, 0x0, 0x3f, 0x4, @perf_bp={0x0, 0x8}, 0x20821, 0x0, 0x4, 0xf, 0x2, 0x2, 0x9}, 0xffffffffffffffff, 0x0, r2, 0x1) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000680)=ANY=[@ANYBLOB="501f002930f6146d87137acbfe6a67e96227732686d27999f1a19b716c42539f201196248745e1c81ea571a14ab6c78fee5628c3dc4ffc9ca251bbeaa571399161558701b1113330e670f39289820cdfd065fb0aac0dc1b9a30f5e7d664797440952", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000240)={0x0, 0x80000001}, 0x8) 09:21:19 executing program 1: bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = syz_open_dev$sndseq(0x0, 0x0, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000400)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) pipe2(&(0x7f0000000440), 0x0) syz_open_dev$dspn(0x0, 0x0, 0x1) ioctl$KVM_GET_CLOCK(0xffffffffffffffff, 0x8030ae7c, &(0x7f0000000500)) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0xa000000000000005) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = getpgrp(0xffffffffffffffff) setpriority(0x0, r3, 0x10000) r4 = open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1) lgetxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) ioctl$ASHMEM_GET_PIN_STATUS(r4, 0x7709, 0x0) ioctl$BLKPBSZGET(r0, 0x127b, &(0x7f0000000280)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000300)='./file0\x00', 0x0, &(0x7f0000000ac0)) perf_event_open(&(0x7f00000001c0)={0x5, 0x70, 0x0, 0x0, 0x101, 0xb7e, 0x0, 0x5, 0x10b, 0x4, 0x7, 0x0, 0x1, 0x1, 0x0, 0x8, 0x0, 0x0, 0x81, 0x3, 0x2, 0xda4, 0x5, 0x4, 0x0, 0x40, 0x0, 0x8, 0x280000000000000, 0x5, 0x80000000, 0xa34, 0x7f, 0x0, 0x7, 0x0, 0x1ff, 0x0, 0x0, 0x3f, 0x4, @perf_bp={0x0, 0x8}, 0x20821, 0x0, 0x4, 0xf, 0x2, 0x2, 0x9}, 0xffffffffffffffff, 0x0, r2, 0x1) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000680)=ANY=[@ANYBLOB="501f002930f6146d87137acbfe6a67e96227732686d27999f1a19b716c42539f201196248745e1c81ea571a14ab6c78fee5628c3dc4ffc9ca251bbeaa571399161558701b1113330e670f39289820cdfd065fb0aac0dc1b9a30f5e7d664797440952", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000240)={0x0, 0x80000001}, 0x8) 09:21:20 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') sendfile(r0, r1, 0x0, 0x1) 09:21:20 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='sessionid\x00') read$FUSE(r0, 0x0, 0x0) [ 680.782142][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 680.788000][ C0] protocol 88fb is buggy, dev hsr_slave_1 09:21:20 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xfffffffffffffcf1, &(0x7f00000000c0)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0xf0}}, 0x0) 09:21:20 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') sendfile(r0, r1, 0x0, 0x1) 09:21:20 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="230000001a000700e4050c00e69be20180a0d6f5c00fea0c73dd4af276161bf53e8047", 0x23}], 0x1}, 0x0) [ 680.947335][T26223] netlink: 'syz-executor.1': attribute type 15 has an invalid length. 09:21:20 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xfffffffffffffcf1, &(0x7f00000000c0)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0xf0}}, 0x0) [ 681.060196][T26232] netlink: 7 bytes leftover after parsing attributes in process `syz-executor.0'. [ 681.217484][T26240] netlink: 'syz-executor.1': attribute type 15 has an invalid length. [ 681.342186][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 681.348095][ C0] protocol 88fb is buggy, dev hsr_slave_1 09:21:20 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_CTRL(r0, 0xc0205647, &(0x7f0000000440)={0x98f90a}) 09:21:20 executing program 5: r0 = shmget(0x2, 0x4000, 0x200, &(0x7f0000ffc000/0x4000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x200004000) r1 = shmget(0x2, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) shmctl$IPC_RMID(r1, 0x0) 09:21:20 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="230000001a000700e4050c00e69be20180a0d6f5c00fea0c73dd4af276161bf53e8047", 0x23}], 0x1}, 0x0) [ 681.451233][T26252] netlink: 7 bytes leftover after parsing attributes in process `syz-executor.0'. [ 681.502164][ C0] protocol 88fb is buggy, dev hsr_slave_0 09:21:20 executing program 4: bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = syz_open_dev$sndseq(0x0, 0x0, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000400)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) pipe2(&(0x7f0000000440), 0x0) syz_open_dev$dspn(0x0, 0x0, 0x1) ioctl$KVM_GET_CLOCK(0xffffffffffffffff, 0x8030ae7c, &(0x7f0000000500)) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0xa000000000000005) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = getpgrp(0xffffffffffffffff) setpriority(0x0, r3, 0x10000) r4 = open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1) lgetxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) ioctl$ASHMEM_GET_PIN_STATUS(r4, 0x7709, 0x0) ioctl$BLKPBSZGET(r0, 0x127b, &(0x7f0000000280)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000300)='./file0\x00', 0x0, &(0x7f0000000ac0)) perf_event_open(&(0x7f00000001c0)={0x5, 0x70, 0x0, 0x0, 0x101, 0xb7e, 0x0, 0x5, 0x10b, 0x4, 0x7, 0x0, 0x1, 0x1, 0x0, 0x8, 0x0, 0x0, 0x81, 0x3, 0x2, 0xda4, 0x5, 0x4, 0x0, 0x40, 0x0, 0x8, 0x280000000000000, 0x5, 0x80000000, 0xa34, 0x7f, 0x0, 0x7, 0x0, 0x1ff, 0x0, 0x0, 0x3f, 0x4, @perf_bp={0x0, 0x8}, 0x20821, 0x0, 0x4, 0xf, 0x2, 0x2, 0x9}, 0xffffffffffffffff, 0x0, r2, 0x1) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000680)=ANY=[@ANYBLOB="501f002930f6146d87137acbfe6a67e96227732686d27999f1a19b716c42539f201196248745e1c81ea571a14ab6c78fee5628c3dc4ffc9ca251bbeaa571399161558701b1113330e670f39289820cdfd065fb0aac0dc1b9a30f5e7d664797440952", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000240)={0x0, 0x80000001}, 0x8) 09:21:20 executing program 2: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_G_FMT(r0, 0x40085618, &(0x7f00000001c0)={0x0, 0xe7}) 09:21:20 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xfffffffffffffcf1, &(0x7f00000000c0)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0xf0}}, 0x0) 09:21:20 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000690000)={0x1c, 0x0, 0x207, 0xffffff21, 0x0, 0x0, {}, [@nested={0x8, 0x1, [@generic="06"]}]}, 0x1c}, 0x1, 0xf0}, 0x0) 09:21:20 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="230000001a000700e4050c00e69be20180a0d6f5c00fea0c73dd4af276161bf53e8047", 0x23}], 0x1}, 0x0) 09:21:20 executing program 5: r0 = shmget(0x2, 0x4000, 0x200, &(0x7f0000ffc000/0x4000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x200004000) r1 = shmget(0x2, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) shmctl$IPC_RMID(r1, 0x0) [ 681.618487][T26270] netlink: 7 bytes leftover after parsing attributes in process `syz-executor.0'. 09:21:21 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000690000)={0x1c, 0x0, 0x207, 0xffffff21, 0x0, 0x0, {}, [@nested={0x8, 0x1, [@generic="06"]}]}, 0x1c}, 0x1, 0xf0}, 0x0) [ 681.673264][T26266] netlink: 'syz-executor.1': attribute type 15 has an invalid length. 09:21:21 executing program 2: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_G_FMT(r0, 0x40085618, &(0x7f00000001c0)={0x0, 0xe7}) 09:21:21 executing program 5: r0 = shmget(0x2, 0x4000, 0x200, &(0x7f0000ffc000/0x4000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x200004000) r1 = shmget(0x2, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) shmctl$IPC_RMID(r1, 0x0) 09:21:21 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="230000001a000700e4050c00e69be20180a0d6f5c00fea0c73dd4af276161bf53e8047", 0x23}], 0x1}, 0x0) 09:21:21 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xfffffffffffffcf1, &(0x7f00000000c0)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0xf, 0x2}]]}}}]}, 0xf0}}, 0x0) 09:21:21 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000690000)={0x1c, 0x0, 0x207, 0xffffff21, 0x0, 0x0, {}, [@nested={0x8, 0x1, [@generic="06"]}]}, 0x1c}, 0x1, 0xf0}, 0x0) [ 681.893546][T26287] netlink: 7 bytes leftover after parsing attributes in process `syz-executor.0'. [ 681.955719][T26293] netlink: 'syz-executor.1': attribute type 15 has an invalid length. 09:21:21 executing program 5: r0 = shmget(0x2, 0x4000, 0x200, &(0x7f0000ffc000/0x4000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x200004000) r1 = shmget(0x2, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) shmctl$IPC_RMID(r1, 0x0) 09:21:21 executing program 2: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_G_FMT(r0, 0x40085618, &(0x7f00000001c0)={0x0, 0xe7}) 09:21:21 executing program 0: r0 = shmget(0x2, 0x4000, 0x200, &(0x7f0000ffc000/0x4000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x200004000) r1 = shmget(0x2, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) shmctl$IPC_RMID(r1, 0x0) 09:21:21 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000690000)={0x1c, 0x0, 0x207, 0xffffff21, 0x0, 0x0, {}, [@nested={0x8, 0x1, [@generic="06"]}]}, 0x1c}, 0x1, 0xf0}, 0x0) 09:21:21 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/kcm\x00\b\x00') r1 = socket$kcm(0x29, 0x2, 0x0) socket$kcm(0x29, 0x2, 0x0) sendfile(r1, r0, 0x0, 0xfffd) 09:21:21 executing program 0: r0 = shmget(0x2, 0x4000, 0x200, &(0x7f0000ffc000/0x4000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x200004000) r1 = shmget(0x2, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) shmctl$IPC_RMID(r1, 0x0) 09:21:21 executing program 5: r0 = socket(0xa, 0x802, 0x88) r1 = dup(r0) write$FUSE_INTERRUPT(r1, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, &(0x7f0000fb1000)=[{&(0x7f0000000180)="480000001400197f09004b0101048c590a88ffffff0100010000000f0028213ee20600d4ff5bffff00c7e5ed5e00000000000000000000eaf60d18125d4b18857a9eace3dbe8b12c", 0x48}], 0x1) 09:21:21 executing program 4: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = dup2(r0, r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") getsockopt$inet6_udp_int(r1, 0x11, 0x0, 0x0, 0x0) 09:21:21 executing program 2: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_G_FMT(r0, 0x40085618, &(0x7f00000001c0)={0x0, 0xe7}) 09:21:21 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000280)={0x7b, 0x0, [0x40000107], [0xc1]}) 09:21:21 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x2c, 0x35, 0x835, 0x0, 0x0, {0x3, 0x1000000}, [@nested={0x18, 0x0, [@typed={0x14, 0x1, @ipv6=@loopback={0xffff000000000000}}]}]}, 0x2c}}, 0x0) 09:21:21 executing program 0: r0 = shmget(0x2, 0x4000, 0x200, &(0x7f0000ffc000/0x4000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x200004000) r1 = shmget(0x2, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) shmctl$IPC_RMID(r1, 0x0) 09:21:21 executing program 5: r0 = socket(0xa, 0x802, 0x88) r1 = dup(r0) write$FUSE_INTERRUPT(r1, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, &(0x7f0000fb1000)=[{&(0x7f0000000180)="480000001400197f09004b0101048c590a88ffffff0100010000000f0028213ee20600d4ff5bffff00c7e5ed5e00000000000000000000eaf60d18125d4b18857a9eace3dbe8b12c", 0x48}], 0x1) 09:21:21 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x2c, 0x35, 0x835, 0x0, 0x0, {0x3, 0x1000000}, [@nested={0x18, 0x0, [@typed={0x14, 0x1, @ipv6=@loopback={0xffff000000000000}}]}]}, 0x2c}}, 0x0) 09:21:21 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) sendfile(r1, r1, &(0x7f0000000080)=0x7, 0x100000010a000201) 09:21:22 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000180)={0x100000001, 0x5, 0x7f}) 09:21:22 executing program 0: socketpair$tipc(0x1e, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x8982, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_sys\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cgroup.stat\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x7eac8638, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xc5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x4030582a, &(0x7f0000000040)) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x9, 0xffffffffffffff9c, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f00000003c0)='threaded\x00', 0x9) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='/gro<#\xfbW\xe6\xc6\x0f\x1fKE\xb7M\x99\x9a\x9a\x8c,\xe1[&\xe5\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ}\xb7\xf3\xfe\xf6\xe0.+\xe3\x89\xde\x139E\xa3\x85\xbd\x81\xe9\xbd\xee\xee\x03\x00\x00\x00\x00\x00\x00\x00[T\aE\xdfK\x1d\xeeH;\x15v$\xc5\xbcq\x9a\t\x9ej5\t\x00\x00\x009\x8c4', 0x2761, 0x0) write$cgroup_pid(r0, &(0x7f0000000100), 0xda4fff08) socket$kcm(0x29, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={r0, 0x3, 0x1, 0x4, &(0x7f00000000c0)=[0x0], 0x1}, 0x20) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 09:21:22 executing program 4: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = dup2(r0, r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") getsockopt$inet6_udp_int(r1, 0x11, 0x0, 0x0, 0x0) 09:21:22 executing program 2: mkdir(&(0x7f000000dff6)='./control\x00', 0x0) r0 = open(&(0x7f0000039000)='./control\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000000)='./file0\x00', 0x0) name_to_handle_at(r0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], 0xffffffffffffffff, 0x0) 09:21:22 executing program 5: r0 = socket(0xa, 0x802, 0x88) r1 = dup(r0) write$FUSE_INTERRUPT(r1, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, &(0x7f0000fb1000)=[{&(0x7f0000000180)="480000001400197f09004b0101048c590a88ffffff0100010000000f0028213ee20600d4ff5bffff00c7e5ed5e00000000000000000000eaf60d18125d4b18857a9eace3dbe8b12c", 0x48}], 0x1) 09:21:22 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000180)={0x100000001, 0x5, 0x7f}) 09:21:22 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x2c, 0x35, 0x835, 0x0, 0x0, {0x3, 0x1000000}, [@nested={0x18, 0x0, [@typed={0x14, 0x1, @ipv6=@loopback={0xffff000000000000}}]}]}, 0x2c}}, 0x0) 09:21:22 executing program 5: r0 = socket(0xa, 0x802, 0x88) r1 = dup(r0) write$FUSE_INTERRUPT(r1, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, &(0x7f0000fb1000)=[{&(0x7f0000000180)="480000001400197f09004b0101048c590a88ffffff0100010000000f0028213ee20600d4ff5bffff00c7e5ed5e00000000000000000000eaf60d18125d4b18857a9eace3dbe8b12c", 0x48}], 0x1) 09:21:22 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x18f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000003c0)='ip6_vti0\x00', 0x10) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) connect$l2tp(r1, &(0x7f0000000240)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0) 09:21:22 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x2c, 0x35, 0x835, 0x0, 0x0, {0x3, 0x1000000}, [@nested={0x18, 0x0, [@typed={0x14, 0x1, @ipv6=@loopback={0xffff000000000000}}]}]}, 0x2c}}, 0x0) 09:21:22 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000180)={0x100000001, 0x5, 0x7f}) 09:21:22 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_execute_func(&(0x7f0000001200)="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") open(&(0x7f0000000280)='./bus\x00', 0x141042, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x4002011, r0, 0x0) 09:21:22 executing program 1: r0 = socket$kcm(0x29, 0x2, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x300, &(0x7f0000000080), 0x4) 09:21:23 executing program 0: r0 = socket(0x10, 0x80002, 0x0) write(r0, &(0x7f0000000200)="220000001400090500e800007a4c0380020003030100000008000200c760d5695f99", 0x22) 09:21:23 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000180)={0x100000001, 0x5, 0x7f}) 09:21:23 executing program 4: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = dup2(r0, r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") getsockopt$inet6_udp_int(r1, 0x11, 0x0, 0x0, 0x0) 09:21:23 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") unshare(0x8000400) r1 = mq_open(&(0x7f0000000000)='-$\x00', 0x6e93ebbbcc0884f7, 0x0, 0x0) mq_notify(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}) 09:21:23 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self\x00', 0x0, 0x0) fchdir(r1) syz_execute_func(&(0x7f0000000200)="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") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 09:21:23 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x18f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000003c0)='ip6_vti0\x00', 0x10) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) connect$l2tp(r1, &(0x7f0000000240)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0) [ 683.980504][T26513] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.0'. 09:21:23 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/166, 0xa6}], 0x1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000002c0)) ioctl$UI_DEV_DESTROY(r0, 0x5502) r1 = gettid() timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x15) 09:21:23 executing program 3: timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r0 = gettid() mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) tkill(r0, 0x13) open(&(0x7f0000000000)='./file0\x00', 0x1, 0x0) 09:21:23 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self\x00', 0x0, 0x0) fchdir(r1) syz_execute_func(&(0x7f0000000200)="4a2ae92cc0b64c0f05befeffffffc4a37bf0c50341e2e9c422e9aabb3c0000004a0fc7a4ea70db000000000f383a9e02000000110f4e5bc4a265aa104b26660f38091e2fdee51bc421045fe70702c421dd589fc4e10bf8c426f2f045f6196462bfffffffff0252262e2e66450f7d64dc08c4a3bd4877f88a0383397fd3ff3a0065f20f7cd8efa1a12ad764d3cf53af440fec3f67ddea660f79cec462b1f72ec3c4899294d800000000000f2d8f0b000000c2414e53d2c40f0f9f8a6465b2aa66450fc4650000c4e39978c104c441c05983f9070bb3ddcdcda2660f38346800c4a2559d6587c4c1045ccc7d7526802d08000000fa0f5fd25c450f91f3f30f5ea5a9a50000ffffbedc4e61c9553131b83a00a2f1fbfb3b62") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 09:21:23 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") unshare(0x8000400) r1 = mq_open(&(0x7f0000000000)='-$\x00', 0x6e93ebbbcc0884f7, 0x0, 0x0) mq_notify(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}) 09:21:23 executing program 4: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = dup2(r0, r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") getsockopt$inet6_udp_int(r1, 0x11, 0x0, 0x0, 0x0) [ 684.180557][T26621] input: syz1 as /devices/virtual/input/input26 09:21:23 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") unshare(0x8000400) r1 = mq_open(&(0x7f0000000000)='-$\x00', 0x6e93ebbbcc0884f7, 0x0, 0x0) mq_notify(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}) 09:21:23 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/166, 0xa6}], 0x1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000002c0)) ioctl$UI_DEV_DESTROY(r0, 0x5502) r1 = gettid() timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x15) 09:21:23 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/166, 0xa6}], 0x1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000002c0)) ioctl$UI_DEV_DESTROY(r0, 0x5502) r1 = gettid() timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x15) 09:21:23 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self\x00', 0x0, 0x0) fchdir(r1) syz_execute_func(&(0x7f0000000200)="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") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) [ 684.600005][T26645] input: syz1 as /devices/virtual/input/input28 09:21:23 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$SIOCAX25OPTRT(r0, 0x89ea, &(0x7f0000000000)={@default, @null}) 09:21:23 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") unshare(0x8000400) r1 = mq_open(&(0x7f0000000000)='-$\x00', 0x6e93ebbbcc0884f7, 0x0, 0x0) mq_notify(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}) [ 684.712345][T26650] input: syz1 as /devices/virtual/input/input29 09:21:24 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x18f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000003c0)='ip6_vti0\x00', 0x10) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) connect$l2tp(r1, &(0x7f0000000240)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0) 09:21:24 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/166, 0xa6}], 0x1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000002c0)) ioctl$UI_DEV_DESTROY(r0, 0x5502) r1 = gettid() timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x15) 09:21:24 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/166, 0xa6}], 0x1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000002c0)) ioctl$UI_DEV_DESTROY(r0, 0x5502) r1 = gettid() timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x15) 09:21:24 executing program 1: syz_execute_func(&(0x7f0000000200)="b16c91cd808e6b006969ef69dc00d98a20d0d0c402793382040000001cc1c7c7e4c653fb0fc4014c5868f4a95ff965be3c3bc4e17950ea01efc48192558dc3c366450f186746d1d97c7c730f571b400fd70d18c4de306f5f660fc226f77146d9ff0a8ab1b1820142d86f04f404f4bd110f00204ffe4ffefe") 09:21:24 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070") r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self\x00', 0x0, 0x0) fchdir(r1) syz_execute_func(&(0x7f0000000200)="4a2ae92cc0b64c0f05befeffffffc4a37bf0c50341e2e9c422e9aabb3c0000004a0fc7a4ea70db000000000f383a9e02000000110f4e5bc4a265aa104b26660f38091e2fdee51bc421045fe70702c421dd589fc4e10bf8c426f2f045f6196462bfffffffff0252262e2e66450f7d64dc08c4a3bd4877f88a0383397fd3ff3a0065f20f7cd8efa1a12ad764d3cf53af440fec3f67ddea660f79cec462b1f72ec3c4899294d800000000000f2d8f0b000000c2414e53d2c40f0f9f8a6465b2aa66450fc4650000c4e39978c104c441c05983f9070bb3ddcdcda2660f38346800c4a2559d6587c4c1045ccc7d7526802d08000000fa0f5fd25c450f91f3f30f5ea5a9a50000ffffbedc4e61c9553131b83a00a2f1fbfb3b62") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) [ 684.981471][T26672] input: syz1 as /devices/virtual/input/input30 [ 685.012326][T26674] input: syz1 as /devices/virtual/input/input31 09:21:24 executing program 1: seccomp(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x34}]}) 09:21:24 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$SIOCAX25OPTRT(r0, 0x89ea, &(0x7f0000000000)={@default, @null}) 09:21:24 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/166, 0xa6}], 0x1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000002c0)) ioctl$UI_DEV_DESTROY(r0, 0x5502) r1 = gettid() timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x15) 09:21:24 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/166, 0xa6}], 0x1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000002c0)) ioctl$UI_DEV_DESTROY(r0, 0x5502) r1 = gettid() timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x15) 09:21:24 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1081}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x1) write$9p(r0, &(0x7f0000000080)="86", 0x1) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x32, 0xffffffffffffffff, 0x0) [ 685.502177][ C0] net_ratelimit: 25 callbacks suppressed [ 685.502185][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 685.513707][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 685.557782][T26699] input: syz1 as /devices/virtual/input/input33 [ 685.571820][T26695] input: syz1 as /devices/virtual/input/input32 09:21:24 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0x40485404, &(0x7f0000000000)) 09:21:25 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$SIOCAX25OPTRT(r0, 0x89ea, &(0x7f0000000000)={@default, @null}) [ 685.662134][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 685.667951][ C0] protocol 88fb is buggy, dev hsr_slave_1 09:21:25 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x18f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000003c0)='ip6_vti0\x00', 0x10) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) connect$l2tp(r1, &(0x7f0000000240)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0) 09:21:25 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0x40485404, &(0x7f0000000000)) 09:21:25 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f000001d000)={0x0, 0x0, &(0x7f0000024000)=[{&(0x7f0000000100)="24000000100007031dff22946fa2830020200a0009000300001d85687f0000000400ff7e28000000160a43ba5d806055b6fdd80b40000000140001000929ec2400020cd37e99d69cda45a95e", 0x4c}], 0x1}, 0x0) 09:21:25 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") getrandom(&(0x7f0000000040)=""/44, 0x52a1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x7a, &(0x7f0000000000)={&(0x7f00000004c0)=@newlink={0x38, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_ENCAP_FLAGS={0x8, 0x3}]]}}}]}, 0x38}}, 0x0) 09:21:25 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0x40485404, &(0x7f0000000000)) 09:21:25 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0x40485404, &(0x7f0000000000)) 09:21:25 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1081}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x1) write$9p(r0, &(0x7f0000000080)="86", 0x1) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 09:21:25 executing program 0: inotify_init1(0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket(0x100000000a, 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$nl_route(0x10, 0x3, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x0, 0x0) syz_execute_func(&(0x7f0000000000)="c462653dce0fbdc52ecd8080020cc4e1ed64338a20d0d0f0408392300000002a6626f243e0ffc44209a7b700000000c653fb0f450fbd27a95f5744be3c3b6446ddcb8f48508e307b8f69289bd19d670f381d6a2f67450f483bd1d97c7c63460f096161787896c401fe5ff666410fd7cae1b1c402010804f466400f38f556f6892a009f") 09:21:25 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e0000001800810fe00f80ecdb4cc104014865160b0006000300000000000000ec86249af8b723e48c36a6003100", 0x2e}], 0x1}, 0x0) 09:21:25 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket(0xa, 0x802, 0x0) setsockopt$inet_int(r1, 0x0, 0x13, &(0x7f0000000280)=0x4, 0x4) sendmsg(r1, &(0x7f0000eeefc8)={&(0x7f0000fef000)=@in6={0xa, 0x4e20, 0x0, @loopback}, 0x80, 0x0, 0x0, &(0x7f000056cda0)=[{0x28, 0x29, 0x2, "1d1a2d4ba2f2fffffffffffffffd060000"}], 0x28}, 0x0) [ 686.250932][T26741] netlink: 'syz-executor.3': attribute type 6 has an invalid length. 09:21:25 executing program 5: bpf$MAP_CREATE(0x15, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffff9c}, 0x3c) [ 686.302173][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 686.308004][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 686.312152][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 686.319546][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 686.325453][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 686.331240][ C1] protocol 88fb is buggy, dev hsr_slave_1 09:21:25 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$SIOCAX25OPTRT(r0, 0x89ea, &(0x7f0000000000)={@default, @null}) 09:21:25 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000080)=[{&(0x7f00000000c0)="580000001400192340834b80040d8c560a067f0200ff810040010000000058000b4824ca945f64009400050028845a01000000000000008000f0fffeffe809000000fff5dd00000010000100070c10000000000400400000", 0x58}], 0x1) 09:21:25 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e0000001800810fe00f80ecdb4cc104014865160b0006000300000000000000ec86249af8b723e48c36a6003100", 0x2e}], 0x1}, 0x0) 09:21:25 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000080)={'veth1_to_team\x00', 0x40d}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000140)={0x1ef, &(0x7f0000000340)=[{}]}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) 09:21:25 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1081}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x1) write$9p(r0, &(0x7f0000000080)="86", 0x1) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 09:21:25 executing program 2: write(0xffffffffffffffff, &(0x7f0000000000)="fc0000001c00071bab0925001100070007ab08000c00000000003e93210001c0000000000000000000000081000398", 0x2f) syz_emit_ethernet(0xffffffffffffffea, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x8}}}}}, &(0x7f0000000040)={0x0, 0x3, [0x2, 0x2d9, 0x3]}) [ 686.548866][T26765] netlink: 'syz-executor.3': attribute type 6 has an invalid length. 09:21:25 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x5, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="10630840c8"], 0x0, 0xfffffdfd, 0x0}) 09:21:26 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e0000001800810fe00f80ecdb4cc104014865160b0006000300000000000000ec86249af8b723e48c36a6003100", 0x2e}], 0x1}, 0x0) 09:21:26 executing program 2: write(0xffffffffffffffff, &(0x7f0000000000)="fc0000001c00071bab0925001100070007ab08000c00000000003e93210001c0000000000000000000000081000398", 0x2f) syz_emit_ethernet(0xffffffffffffffea, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x8}}}}}, &(0x7f0000000040)={0x0, 0x3, [0x2, 0x2d9, 0x3]}) 09:21:26 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0x8000000004007fc, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb7fc86d4f66732ee6617400040441ec1000077009f80000d8c32d7b233ce96428c1fe1a000014bf2fd65301b181b6c9", 0x30}], 0x0, 0x0) [ 686.755218][T26779] binder: 26776:26779 BC_DEAD_BINDER_DONE 00000000000000c8 not found [ 686.770548][T26778] netlink: 'syz-executor.3': attribute type 6 has an invalid length. 09:21:26 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x5, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="10630840c8"], 0x0, 0xfffffdfd, 0x0}) 09:21:26 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e0000001800810fe00f80ecdb4cc104014865160b0006000300000000000000ec86249af8b723e48c36a6003100", 0x2e}], 0x1}, 0x0) 09:21:26 executing program 2: write(0xffffffffffffffff, &(0x7f0000000000)="fc0000001c00071bab0925001100070007ab08000c00000000003e93210001c0000000000000000000000081000398", 0x2f) syz_emit_ethernet(0xffffffffffffffea, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x8}}}}}, &(0x7f0000000040)={0x0, 0x3, [0x2, 0x2d9, 0x3]}) 09:21:26 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x5, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="10630840c8"], 0x0, 0xfffffdfd, 0x0}) [ 686.955639][T26786] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 686.975461][T26794] binder: 26790:26794 BC_DEAD_BINDER_DONE 00000000000000c8 not found [ 686.995475][T26786] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 1, start c9b681b1) [ 687.038072][T26786] FAT-fs (loop4): Filesystem has been set read-only [ 687.054719][T26795] netlink: 'syz-executor.3': attribute type 6 has an invalid length. 09:21:26 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1081}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x1) write$9p(r0, &(0x7f0000000080)="86", 0x1) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 09:21:26 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000080)={'veth1_to_team\x00', 0x40d}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000140)={0x1ef, &(0x7f0000000340)=[{}]}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) [ 687.115514][T26801] binder: 26798:26801 BC_DEAD_BINDER_DONE 00000000000000c8 not found 09:21:26 executing program 2: write(0xffffffffffffffff, &(0x7f0000000000)="fc0000001c00071bab0925001100070007ab08000c00000000003e93210001c0000000000000000000000081000398", 0x2f) syz_emit_ethernet(0xffffffffffffffea, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x8}}}}}, &(0x7f0000000040)={0x0, 0x3, [0x2, 0x2d9, 0x3]}) 09:21:26 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10) setsockopt$inet_int(r0, 0x0, 0x8, &(0x7f0000000280)=0x7, 0x4) syz_emit_ethernet(0xff4e, &(0x7f0000000240)={@local, @link_local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x35f, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000359fd5)={@link_local={0x1, 0x80, 0xc2, 0x400000000000000, 0x43050000}, @empty=[0x1c008848, 0x0, 0x14, 0x0, 0x0, 0x8847000000000000], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 09:21:26 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x5, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="10630840c8"], 0x0, 0xfffffdfd, 0x0}) [ 687.278162][T26809] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 687.346784][T26809] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 1, start c9b681b1) 09:21:26 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10) setsockopt$inet_int(r0, 0x0, 0x8, &(0x7f0000000280)=0x7, 0x4) syz_emit_ethernet(0xff4e, &(0x7f0000000240)={@local, @link_local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x35f, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000359fd5)={@link_local={0x1, 0x80, 0xc2, 0x400000000000000, 0x43050000}, @empty=[0x1c008848, 0x0, 0x14, 0x0, 0x0, 0x8847000000000000], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) [ 687.418102][T26822] binder: 26820:26822 BC_DEAD_BINDER_DONE 00000000000000c8 not found [ 687.451056][T26809] FAT-fs (loop4): Filesystem has been set read-only 09:21:26 executing program 1: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) connect$nfc_llcp(r0, &(0x7f0000000100)={0x27, 0x3ffffd, 0x0, 0x0, 0x0, 0x0, "9c1028796d4aacd1f7ae87569cf690e57f2e4b0e3b077bc5559d5462a5f20c938e1a9498097a697cc97bf203459cae5b6e5a3c3eca191cb189cd0f20964e20", 0x41}, 0x60) 09:21:26 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x74, 0x4) bind$inet(r0, &(0x7f0000000740)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000000800)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='vegas\x00', 0x6) write$binfmt_script(r0, &(0x7f00000001c0)={'#! ', './file0'}, 0xb) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) 09:21:26 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000080)={'veth1_to_team\x00', 0x40d}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000140)={0x1ef, &(0x7f0000000340)=[{}]}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) 09:21:26 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 09:21:26 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f00000002c0)=0x581, 0x4) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000080)=@dstopts, 0x8) setsockopt$inet6_int(r1, 0x29, 0x100000031, &(0x7f0000000140)=0x8, 0x4) recvmsg(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/36, 0x24}, 0x2002) sendmmsg(r0, &(0x7f00000000c0), 0x182, 0x0) 09:21:26 executing program 1: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) connect$nfc_llcp(r0, &(0x7f0000000100)={0x27, 0x3ffffd, 0x0, 0x0, 0x0, 0x0, "9c1028796d4aacd1f7ae87569cf690e57f2e4b0e3b077bc5559d5462a5f20c938e1a9498097a697cc97bf203459cae5b6e5a3c3eca191cb189cd0f20964e20", 0x41}, 0x60) 09:21:27 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10) setsockopt$inet_int(r0, 0x0, 0x8, &(0x7f0000000280)=0x7, 0x4) syz_emit_ethernet(0xff4e, &(0x7f0000000240)={@local, @link_local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x35f, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000359fd5)={@link_local={0x1, 0x80, 0xc2, 0x400000000000000, 0x43050000}, @empty=[0x1c008848, 0x0, 0x14, 0x0, 0x0, 0x8847000000000000], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) [ 687.727109][T26833] EXT4-fs (loop5): VFS: Can't find ext4 filesystem 09:21:27 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f00000002c0)=0x581, 0x4) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000080)=@dstopts, 0x8) setsockopt$inet6_int(r1, 0x29, 0x100000031, &(0x7f0000000140)=0x8, 0x4) recvmsg(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/36, 0x24}, 0x2002) sendmmsg(r0, &(0x7f00000000c0), 0x182, 0x0) 09:21:27 executing program 1: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) connect$nfc_llcp(r0, &(0x7f0000000100)={0x27, 0x3ffffd, 0x0, 0x0, 0x0, 0x0, "9c1028796d4aacd1f7ae87569cf690e57f2e4b0e3b077bc5559d5462a5f20c938e1a9498097a697cc97bf203459cae5b6e5a3c3eca191cb189cd0f20964e20", 0x41}, 0x60) 09:21:27 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 09:21:27 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10) setsockopt$inet_int(r0, 0x0, 0x8, &(0x7f0000000280)=0x7, 0x4) syz_emit_ethernet(0xff4e, &(0x7f0000000240)={@local, @link_local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x35f, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000359fd5)={@link_local={0x1, 0x80, 0xc2, 0x400000000000000, 0x43050000}, @empty=[0x1c008848, 0x0, 0x14, 0x0, 0x0, 0x8847000000000000], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 09:21:27 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000080)={'veth1_to_team\x00', 0x40d}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000140)={0x1ef, &(0x7f0000000340)=[{}]}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) 09:21:27 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f00000002c0)=0x581, 0x4) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000080)=@dstopts, 0x8) setsockopt$inet6_int(r1, 0x29, 0x100000031, &(0x7f0000000140)=0x8, 0x4) recvmsg(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/36, 0x24}, 0x2002) sendmmsg(r0, &(0x7f00000000c0), 0x182, 0x0) [ 688.062409][T26861] EXT4-fs (loop5): VFS: Can't find ext4 filesystem 09:21:28 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_trie\x00') sendfile(r1, r2, 0x0, 0x8000) 09:21:28 executing program 1: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) connect$nfc_llcp(r0, &(0x7f0000000100)={0x27, 0x3ffffd, 0x0, 0x0, 0x0, 0x0, "9c1028796d4aacd1f7ae87569cf690e57f2e4b0e3b077bc5559d5462a5f20c938e1a9498097a697cc97bf203459cae5b6e5a3c3eca191cb189cd0f20964e20", 0x41}, 0x60) 09:21:28 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f00000002c0)=0x581, 0x4) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000080)=@dstopts, 0x8) setsockopt$inet6_int(r1, 0x29, 0x100000031, &(0x7f0000000140)=0x8, 0x4) recvmsg(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/36, 0x24}, 0x2002) sendmmsg(r0, &(0x7f00000000c0), 0x182, 0x0) 09:21:28 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 09:21:28 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x74, 0x4) bind$inet(r0, &(0x7f0000000740)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000000800)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='vegas\x00', 0x6) write$binfmt_script(r0, &(0x7f00000001c0)={'#! ', './file0'}, 0xb) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) 09:21:28 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setitimer(0x1, 0x0, 0x0) [ 688.902098][T26888] EXT4-fs (loop5): VFS: Can't find ext4 filesystem 09:21:28 executing program 3: socket$inet_sctp(0x2, 0x5, 0x84) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000a000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb], 0x1f000}) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000100)={0x3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:21:28 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000280)={0x1000000077, 0x0, [0x140, 0x0, 0x11e]}) 09:21:28 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 09:21:28 executing program 2: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0x0, 0x0) close(r0) 09:21:28 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") unshare(0x20020000) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) mount$bpf(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000080)='bpf\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc(0x0) rename(&(0x7f0000000300)='./file1\x00', &(0x7f0000000040)='./file0\x00') [ 689.116639][T26906] kvm [26901]: vcpu0, guest rIP: 0xfff0 ignored wrmsr: 0x11e data 0x0 [ 689.177753][T26908] EXT4-fs (loop5): VFS: Can't find ext4 filesystem 09:21:28 executing program 2: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0x0, 0x0) close(r0) 09:21:28 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="2adc1f123c123f319bd070") r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x8001, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[], 0xffdc) setsockopt$inet6_int(r1, 0x29, 0x4d, &(0x7f00000000c0)=0x200006d26, 0x4) read(r1, &(0x7f0000000140)=""/165, 0x1000000eb) 09:21:28 executing program 3: socket$inet_sctp(0x2, 0x5, 0x84) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000a000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb], 0x1f000}) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000100)={0x3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:21:28 executing program 2: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0x0, 0x0) close(r0) 09:21:28 executing program 5: syz_emit_ethernet(0x38a, &(0x7f0000000000)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2ce, 0x0, 0x0, 0x0, 0x29, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x8}}}}}, &(0x7f0000000040)={0x0, 0x3, [0x0, 0x2d9, 0x200002dc]}) 09:21:29 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x74, 0x4) bind$inet(r0, &(0x7f0000000740)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000000800)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='vegas\x00', 0x6) write$binfmt_script(r0, &(0x7f00000001c0)={'#! ', './file0'}, 0xb) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) 09:21:29 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") unshare(0x20020000) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) mount$bpf(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000080)='bpf\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc(0x0) rename(&(0x7f0000000300)='./file1\x00', &(0x7f0000000040)='./file0\x00') 09:21:29 executing program 5: syz_emit_ethernet(0x38a, &(0x7f0000000000)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2ce, 0x0, 0x0, 0x0, 0x29, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x8}}}}}, &(0x7f0000000040)={0x0, 0x3, [0x0, 0x2d9, 0x200002dc]}) 09:21:29 executing program 2: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0x0, 0x0) close(r0) 09:21:29 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="2adc1f123c123f319bd070") r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x8001, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[], 0xffdc) setsockopt$inet6_int(r1, 0x29, 0x4d, &(0x7f00000000c0)=0x200006d26, 0x4) read(r1, &(0x7f0000000140)=""/165, 0x1000000eb) 09:21:29 executing program 3: socket$inet_sctp(0x2, 0x5, 0x84) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000a000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb], 0x1f000}) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000100)={0x3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:21:29 executing program 5: syz_emit_ethernet(0x38a, &(0x7f0000000000)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2ce, 0x0, 0x0, 0x0, 0x29, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x8}}}}}, &(0x7f0000000040)={0x0, 0x3, [0x0, 0x2d9, 0x200002dc]}) 09:21:29 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="2adc1f123c123f319bd070") r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x8001, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[], 0xffdc) setsockopt$inet6_int(r1, 0x29, 0x4d, &(0x7f00000000c0)=0x200006d26, 0x4) read(r1, &(0x7f0000000140)=""/165, 0x1000000eb) 09:21:29 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x71, &(0x7f0000000080)={0x3}, 0x8) 09:21:29 executing program 5: syz_emit_ethernet(0x38a, &(0x7f0000000000)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2ce, 0x0, 0x0, 0x0, 0x29, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x8}}}}}, &(0x7f0000000040)={0x0, 0x3, [0x0, 0x2d9, 0x200002dc]}) 09:21:29 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") unshare(0x20020000) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) mount$bpf(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000080)='bpf\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc(0x0) rename(&(0x7f0000000300)='./file1\x00', &(0x7f0000000040)='./file0\x00') 09:21:29 executing program 3: socket$inet_sctp(0x2, 0x5, 0x84) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000a000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb], 0x1f000}) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000100)={0x3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 990.309025][ C0] rcu: INFO: rcu_preempt self-detected stall on CPU [ 990.312270][ C1] net_ratelimit: 18 callbacks suppressed [ 990.312279][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 990.316032][ C0] rcu: 0-...!: (1 GPs behind) idle=cfe/1/0x4000000000000002 softirq=53884/53885 fqs=0 [ 990.321512][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 990.321695][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 990.321736][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 990.354932][ C0] rcu: (t=29988 jiffies g=72133 q=198) [ 990.360592][ C0] NMI backtrace for cpu 0 [ 990.364957][ C0] CPU: 0 PID: 12976 Comm: syz-executor.4 Not tainted 5.1.0-rc7+ #98 [ 990.373043][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 990.383145][ C0] Call Trace: [ 990.386441][ C0] [ 990.389349][ C0] dump_stack+0x172/0x1f0 [ 990.393977][ C0] nmi_cpu_backtrace.cold+0x63/0xa4 [ 990.399300][ C0] ? lapic_can_unplug_cpu.cold+0x38/0x38 [ 990.404961][ C0] nmi_trigger_cpumask_backtrace+0x1be/0x236 [ 990.410966][ C0] arch_trigger_cpumask_backtrace+0x14/0x20 [ 990.416996][ C0] rcu_dump_cpu_stacks+0x183/0x1cf [ 990.422203][ C0] ? find_next_bit+0x107/0x130 [ 990.427008][ C0] rcu_sched_clock_irq.cold+0x500/0xa4a [ 990.432604][ C0] ? raise_softirq+0x11f/0x310 [ 990.437471][ C0] update_process_times+0x32/0x80 [ 990.442558][ C0] tick_sched_handle+0xa2/0x190 [ 990.447434][ C0] tick_sched_timer+0x47/0x130 [ 990.452217][ C0] __hrtimer_run_queues+0x33e/0xde0 [ 990.457442][ C0] ? tick_sched_do_timer+0x1b0/0x1b0 [ 990.462758][ C0] ? hrtimer_start_range_ns+0xc80/0xc80 [ 990.468316][ C0] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 990.474079][ C0] ? ktime_get_update_offsets_now+0x2d9/0x440 [ 990.480169][ C0] hrtimer_interrupt+0x314/0x770 [ 990.485144][ C0] smp_apic_timer_interrupt+0x120/0x570 [ 990.490723][ C0] apic_timer_interrupt+0xf/0x20 [ 990.495671][ C0] [ 990.498637][ C0] RIP: 0010:check_memory_region+0x0/0x190 [ 990.504381][ C0] Code: 66 2e 0f 1f 84 00 00 00 00 00 55 48 89 f2 be f8 00 00 00 48 89 e5 e8 af 2c 66 05 5d c3 0f 1f 00 66 2e 0f 1f 84 00 00 00 00 00 <48> 85 f6 0f 84 21 01 00 00 48 b8 ff ff ff ff ff 7f ff ff 55 0f b6 [ 990.524014][ C0] RSP: 0018:ffff8880587c7e38 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13 [ 990.532468][ C0] RAX: 0000000000000000 RBX: ffff8880ae82dd80 RCX: ffffffff815ecff4 [ 990.540474][ C0] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffff8880ae82de38 [ 990.548464][ C0] RBP: ffff8880587c7e40 R08: ffff8880522be040 R09: ffffffff895e69d4 [ 990.556455][ C0] R10: ffff8880522be8c0 R11: ffff8880522be040 R12: ffff8880ae82de38 [ 990.564448][ C0] R13: 0000000000000000 R14: 0000000000004000 R15: 0000000000000000 [ 990.572477][ C0] ? rcu_dynticks_curr_cpu_in_eqs+0x54/0xb0 [ 990.578407][ C0] ? kasan_check_read+0x11/0x20 [ 990.583281][ C0] rcu_dynticks_curr_cpu_in_eqs+0x54/0xb0 [ 990.590664][ C0] rcu_is_watching+0x10/0x30 [ 990.595296][ C0] rcu_read_lock+0x43/0x70 [ 990.599733][ C0] get_mem_cgroup_from_mm+0x1e/0x2b0 [ 990.605108][ C0] do_inotify_init+0x279/0x640 [ 990.609905][ C0] ? trace_hardirqs_on+0x67/0x230 [ 990.614971][ C0] __ia32_sys_inotify_init+0x10/0x20 [ 990.620303][ C0] do_syscall_64+0x103/0x610 [ 990.624927][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 990.630829][ C0] RIP: 0033:0x20000108 [ 990.634925][ C0] Code: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 98 46 0f 72 d4 00 0f 05 42 fd 31 d3 c4 a3 7b f0 c5 3e 14 d5 41 e2 e9 9f c4 c1 c1 62 c1 [ 990.654645][ C0] RSP: 002b:00007f1cb99e4bd8 EFLAGS: 00000282 ORIG_RAX: 00000000000000fd [ 990.663106][ C0] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 0000000020000108 [ 990.671221][ C0] RDX: 2be1ef2a11dbdbda RSI: 0000000000000000 RDI: 00007f1cb99e5608 [ 990.679217][ C0] RBP: 000000000000000a R08: 0000000000000005 R09: 0000000000000006 [ 990.687214][ C0] R10: 0000000000000007 R11: 0000000000000282 R12: 000000000000000b [ 990.696716][ C0] R13: 000000000000000c R14: 000000000000000d R15: 00000000ffffffff [ 990.705415][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 990.711227][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 990.717746][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 990.723622][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 990.730045][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 990.735906][ C0] protocol 88fb is buggy, dev hsr_slave_1 2019/05/03 09:26:30 Manager.Poll call failed: connection is shut down