[   34.203005][   T27] audit: type=1800 audit(1546921753.863:28): pid=7387 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="ssh" dev="sda1" ino=2417 res=0
[....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c.
[   34.619196][ T7450] sshd (7450) used greatest stack depth: 19480 bytes left
[....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c.
[   34.803998][   T27] audit: type=1800 audit(1546921754.543:29): pid=7387 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0
[   34.824342][   T27] audit: type=1800 audit(1546921754.543:30): pid=7387 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2423 res=0

Debian GNU/Linux 7 syzkaller ttyS0

Warning: Permanently added '10.128.10.2' (ECDSA) to the list of known hosts.
2019/01/08 04:29:25 fuzzer started
2019/01/08 04:29:28 dialing manager at 10.128.0.26:42885
2019/01/08 04:29:33 syscalls: 1
2019/01/08 04:29:33 code coverage: enabled
2019/01/08 04:29:33 comparison tracing: enabled
2019/01/08 04:29:33 setuid sandbox: enabled
2019/01/08 04:29:33 namespace sandbox: enabled
2019/01/08 04:29:33 Android sandbox: /sys/fs/selinux/policy does not exist
2019/01/08 04:29:33 fault injection: enabled
2019/01/08 04:29:33 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled
2019/01/08 04:29:33 net packet injection: enabled
2019/01/08 04:29:33 net device setup: enabled
04:31:12 executing program 0:
setresuid(0xffffffffffffffff, 0xfffe, 0xffffffffffffffff)
setrlimit(0xe, &(0x7f0000000000)={0x4, 0xffffffffffffffff})

syzkaller login: [  152.929107][ T7553] IPVS: ftp: loaded support on port[0] = 21
04:31:12 executing program 1:
r0 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0)
mknod$loop(&(0x7f0000000080)='./file0\x00', 0x7c0, 0xffffffffffffffff)
write$binfmt_script(r0, &(0x7f0000000100)={'#! ', './file0', [{0x20, '#! '}]}, 0xf)
clone(0x8020002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)

[  153.034847][ T7553] chnl_net:caif_netlink_parms(): no params data found
[  153.136887][ T7553] bridge0: port 1(bridge_slave_0) entered blocking state
[  153.144419][ T7553] bridge0: port 1(bridge_slave_0) entered disabled state
[  153.152895][ T7553] device bridge_slave_0 entered promiscuous mode
[  153.161929][ T7553] bridge0: port 2(bridge_slave_1) entered blocking state
[  153.169264][ T7553] bridge0: port 2(bridge_slave_1) entered disabled state
[  153.177256][ T7553] device bridge_slave_1 entered promiscuous mode
[  153.197274][ T7556] IPVS: ftp: loaded support on port[0] = 21
[  153.205582][ T7553] bond0: Enslaving bond_slave_0 as an active interface with an up link
[  153.215923][ T7553] bond0: Enslaving bond_slave_1 as an active interface with an up link
[  153.260104][ T7553] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready
[  153.269628][ T7553] team0: Port device team_slave_0 added
[  153.285439][ T7553] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready
[  153.294709][ T7553] team0: Port device team_slave_1 added
04:31:13 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmmsg(r1, &(0x7f0000003e40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001740)=""/194, 0xc2}}], 0x1, 0x0, 0x0)
setsockopt$sock_int(r1, 0x1, 0x22, &(0x7f00000001c0)=0x1, 0x4)
sendto(r0, 0x0, 0x0, 0x0, 0x0, 0x0)

[  153.310438][ T7553] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready
[  153.368678][ T7553] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready
[  153.460367][ T7553] device hsr_slave_0 entered promiscuous mode
04:31:13 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000001cc0)={&(0x7f0000000000)={0x10, 0x9effffff, 0x8100000000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000380)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0xfffffffffffff000}, [@IFLA_TXQLEN={0x8, 0x14}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0)

[  153.557066][ T7553] device hsr_slave_1 entered promiscuous mode
[  153.596789][ T7553] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready
[  153.617449][ T7553] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready
[  153.625135][ T7556] chnl_net:caif_netlink_parms(): no params data found
[  153.650069][ T7559] IPVS: ftp: loaded support on port[0] = 21
[  153.664519][ T7553] bridge0: port 2(bridge_slave_1) entered blocking state
[  153.671740][ T7553] bridge0: port 2(bridge_slave_1) entered forwarding state
[  153.679416][ T7553] bridge0: port 1(bridge_slave_0) entered blocking state
[  153.686501][ T7553] bridge0: port 1(bridge_slave_0) entered forwarding state
[  153.697986][ T7561] IPVS: ftp: loaded support on port[0] = 21
[  153.796083][ T7556] bridge0: port 1(bridge_slave_0) entered blocking state
[  153.803582][ T7556] bridge0: port 1(bridge_slave_0) entered disabled state
[  153.811982][ T7556] device bridge_slave_0 entered promiscuous mode
04:31:13 executing program 4:
r0 = socket$inet6(0xa, 0x80000000000003, 0x80000000000006)
connect$inet6(r0, &(0x7f0000000300)={0xa, 0x0, 0x0, @loopback}, 0x1c)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f023c123f3188a070")
sendmsg(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000340)="b10b938636ea69df7b5a9984bb1bc72ef58d96e56e11df900a707f4946b1637e2096c584bda1b4e01716b539", 0x2c}], 0x1}, 0x8000)
setsockopt$inet6_int(r0, 0x29, 0x7, &(0x7f0000000100), 0x4)
recvmsg(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0)
sendmsg(r0, &(0x7f0000000a40)={0x0, 0x0, 0x0}, 0x0)
recvmsg(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)

[  153.883109][ T7556] bridge0: port 2(bridge_slave_1) entered blocking state
[  153.894614][ T7556] bridge0: port 2(bridge_slave_1) entered disabled state
[  153.917289][ T7556] device bridge_slave_1 entered promiscuous mode
[  154.031478][ T7553] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready
[  154.038509][ T7553] 8021q: adding VLAN 0 to HW filter on device bond0
[  154.049957][ T7559] chnl_net:caif_netlink_parms(): no params data found
[  154.073428][ T7556] bond0: Enslaving bond_slave_0 as an active interface with an up link
[  154.085619][ T7553] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[  154.089390][ T7567] IPVS: ftp: loaded support on port[0] = 21
[  154.112105][ T2587] bridge0: port 1(bridge_slave_0) entered disabled state
[  154.130510][ T2587] bridge0: port 2(bridge_slave_1) entered disabled state
[  154.139309][ T2587] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
[  154.151063][ T7556] bond0: Enslaving bond_slave_1 as an active interface with an up link
[  154.172778][ T7561] chnl_net:caif_netlink_parms(): no params data found
04:31:13 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600))
r1 = syz_open_pts(r0, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0xfe0a})

[  154.192335][ T7553] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready
[  154.233323][ T3469] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  154.256745][ T3469] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  154.274529][ T7556] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready
[  154.287715][ T7556] team0: Port device team_slave_0 added
[  154.308682][ T7553] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready
[  154.315433][ T7553] 8021q: adding VLAN 0 to HW filter on device team0
[  154.325879][ T7556] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready
[  154.333904][ T7556] team0: Port device team_slave_1 added
[  154.340428][ T7556] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready
[  154.351140][ T7559] bridge0: port 1(bridge_slave_0) entered blocking state
[  154.358534][ T7559] bridge0: port 1(bridge_slave_0) entered disabled state
[  154.366143][ T7559] device bridge_slave_0 entered promiscuous mode
[  154.383975][ T7553] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready
[  154.393502][ T7556] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready
[  154.407592][ T7570] IPVS: ftp: loaded support on port[0] = 21
[  154.423706][ T7559] bridge0: port 2(bridge_slave_1) entered blocking state
[  154.431448][ T7559] bridge0: port 2(bridge_slave_1) entered disabled state
[  154.439431][ T7559] device bridge_slave_1 entered promiscuous mode
[  154.458844][ T7562] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  154.467454][ T7562] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  154.475662][ T7562] bridge0: port 1(bridge_slave_0) entered blocking state
[  154.482718][ T7562] bridge0: port 1(bridge_slave_0) entered forwarding state
[  154.539413][ T7556] device hsr_slave_0 entered promiscuous mode
[  154.606467][ T7556] device hsr_slave_1 entered promiscuous mode
[  154.668627][ T7556] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready
[  154.683495][ T7561] bridge0: port 1(bridge_slave_0) entered blocking state
[  154.690654][ T7561] bridge0: port 1(bridge_slave_0) entered disabled state
[  154.698734][ T7561] device bridge_slave_0 entered promiscuous mode
[  154.707865][ T7561] bridge0: port 2(bridge_slave_1) entered blocking state
[  154.714906][ T7561] bridge0: port 2(bridge_slave_1) entered disabled state
[  154.722538][ T7561] device bridge_slave_1 entered promiscuous mode
[  154.738646][ T7553] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready
[  154.746727][ T7556] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready
[  154.762143][ T7559] bond0: Enslaving bond_slave_0 as an active interface with an up link
[  154.773996][ T7559] bond0: Enslaving bond_slave_1 as an active interface with an up link
[  154.789479][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  154.798583][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  154.807059][   T22] bridge0: port 2(bridge_slave_1) entered blocking state
[  154.814097][   T22] bridge0: port 2(bridge_slave_1) entered forwarding state
[  154.823596][ T7553] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready
[  154.847703][ T7561] bond0: Enslaving bond_slave_0 as an active interface with an up link
[  154.867130][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  154.878946][ T7553] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready
[  154.896668][ T7561] bond0: Enslaving bond_slave_1 as an active interface with an up link
[  154.905218][ T7562] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  154.929853][ T7559] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready
[  154.938988][ T7559] team0: Port device team_slave_0 added
[  154.950791][ T7556] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready
[  154.959176][ T7553] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready
[  154.996006][ T7559] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready
[  155.004276][ T7559] team0: Port device team_slave_1 added
[  155.014254][ T7559] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready
[  155.022443][ T7559] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready
[  155.032361][ T7563] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  155.040914][ T7563] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  155.051059][ T7553] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready
[  155.063826][ T7561] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready
[  155.073257][ T7561] team0: Port device team_slave_0 added
[  155.083628][ T7561] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready
[  155.091563][ T7561] team0: Port device team_slave_1 added
[  155.101128][ T7561] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready
[  155.109840][ T7561] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready
[  155.119181][ T7563] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  155.128467][ T7563] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  155.137239][ T7563] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  155.147823][ T7553] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready
[  155.164709][ T7567] chnl_net:caif_netlink_parms(): no params data found
[  155.184282][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  155.192895][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  155.201969][ T7553] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready
[  155.269237][ T7559] device hsr_slave_0 entered promiscuous mode
[  155.309140][ T7559] device hsr_slave_1 entered promiscuous mode
[  155.374686][ T7559] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready
[  155.383324][ T7559] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready
[  155.407035][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  155.415527][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  155.499353][ T7561] device hsr_slave_0 entered promiscuous mode
[  155.546661][ T7561] device hsr_slave_1 entered promiscuous mode
[  155.586910][ T7561] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready
[  155.594719][ T7561] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready
[  155.606961][ T7553] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready
[  155.613678][ T7553] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  155.631063][ T7570] chnl_net:caif_netlink_parms(): no params data found
[  155.665019][ T7567] bridge0: port 1(bridge_slave_0) entered blocking state
[  155.672348][ T7567] bridge0: port 1(bridge_slave_0) entered disabled state
[  155.680493][ T7567] device bridge_slave_0 entered promiscuous mode
[  155.709319][ T7567] bridge0: port 2(bridge_slave_1) entered blocking state
[  155.717777][ T7567] bridge0: port 2(bridge_slave_1) entered disabled state
[  155.725423][ T7567] device bridge_slave_1 entered promiscuous mode
[  155.746314][ T7567] bond0: Enslaving bond_slave_0 as an active interface with an up link
[  155.755855][ T7567] bond0: Enslaving bond_slave_1 as an active interface with an up link
[  155.773757][ T7561] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready
[  155.785387][ T7553] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready
[  155.800980][ T7570] bridge0: port 1(bridge_slave_0) entered blocking state
[  155.808819][ T7570] bridge0: port 1(bridge_slave_0) entered disabled state
[  155.817281][ T7570] device bridge_slave_0 entered promiscuous mode
[  155.825224][ T7570] bridge0: port 2(bridge_slave_1) entered blocking state
[  155.832769][ T7570] bridge0: port 2(bridge_slave_1) entered disabled state
[  155.840504][ T7570] device bridge_slave_1 entered promiscuous mode
[  155.863191][ T7567] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready
[  155.873211][ T7567] team0: Port device team_slave_0 added
[  155.880172][ T7559] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready
[  155.897595][ T7570] bond0: Enslaving bond_slave_0 as an active interface with an up link
[  155.907419][ T7570] bond0: Enslaving bond_slave_1 as an active interface with an up link
[  155.915977][ T7567] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready
[  155.924085][ T7567] team0: Port device team_slave_1 added
[  155.930654][ T7567] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready
[  155.942616][ T7553] 8021q: adding VLAN 0 to HW filter on device batadv0
[  155.960541][ T7556] 8021q: adding VLAN 0 to HW filter on device bond0
[  155.967770][ T7567] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready
[  156.011590][ T7556] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[  156.025976][ T7556] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready
[  156.033957][ T7570] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready
[  156.042125][ T7570] team0: Port device team_slave_0 added
[  156.054207][ T7570] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready
[  156.062155][ T7570] team0: Port device team_slave_1 added
[  156.073520][ T7570] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready
[  156.095601][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
04:31:15 executing program 0:
setresuid(0xffffffffffffffff, 0xfffe, 0xffffffffffffffff)
setrlimit(0xe, &(0x7f0000000000)={0x4, 0xffffffffffffffff})

[  156.112491][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  156.127891][ T7556] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready
[  156.134651][ T7556] 8021q: adding VLAN 0 to HW filter on device team0
04:31:15 executing program 0:
setresuid(0xffffffffffffffff, 0xfffe, 0xffffffffffffffff)
setrlimit(0xe, &(0x7f0000000000)={0x4, 0xffffffffffffffff})

04:31:15 executing program 0:
setresuid(0xffffffffffffffff, 0xfffe, 0xffffffffffffffff)
setrlimit(0xe, &(0x7f0000000000)={0x4, 0xffffffffffffffff})

[  156.179504][ T7567] device hsr_slave_0 entered promiscuous mode
04:31:16 executing program 0:
syz_mount_image$btrfs(&(0x7f0000000080)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000400)=[{&(0x7f00000008c0)="8da4363ac0ed0000000000000000004d01000000000000000000000000000000ecf6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4dd2f873574f257e0a01e2a6a02f5e071383fa5a669a53f2fe9eb4eb7918628af41b035fd98372e7c2a6970f550441f0b263dca46c12ce6aaa994fbb4b3493ca901878bb330d2db8e953fc883f9c754f419e963874199295a945ec867b4f224fde52268a81e1154b80f7076f32b6eb8614e3fde3bfa0e0207e1ca9b4c71d59da30f3d115c9c7c58fb0f2", 0xd1, 0x10000}], 0x0, 0x0)

[  156.236989][ T7567] device hsr_slave_1 entered promiscuous mode
[  156.267332][ T7567] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready
[  156.275066][ T7570] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready
[  156.299991][ T7588] BTRFS: device fsid ecf6f2a2-2997-48ae-b81e-1b00920efd9a devid 17487635432702809553 transid 756082810144684242 /dev/loop0
[  156.322230][ T7588] BTRFS error (device loop0): unsupported checksum algorithm 22813
[  156.331763][ T7588] BTRFS error (device loop0): superblock checksum mismatch
[  156.342291][ T7556] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready
[  156.356991][ T7567] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready
[  156.360495][ T7588] BTRFS error (device loop0): open_ctree failed
[  156.381978][ T7559] 8021q: adding VLAN 0 to HW filter on device bond0
[  156.389196][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  156.398455][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  156.407813][   T22] bridge0: port 1(bridge_slave_0) entered blocking state
[  156.414867][   T22] bridge0: port 1(bridge_slave_0) entered forwarding state
[  156.444483][ T7588] BTRFS error (device loop0): unsupported checksum algorithm 22813
[  156.453306][ T7588] BTRFS error (device loop0): superblock checksum mismatch
[  156.469288][ T7588] BTRFS error (device loop0): open_ctree failed
[  156.480075][ T7570] device hsr_slave_0 entered promiscuous mode
04:31:16 executing program 0:
syz_mount_image$btrfs(&(0x7f0000000080)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000400)=[{&(0x7f00000008c0)="8da4363ac0ed0000000000000000004d01000000000000000000000000000000ecf6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4dd2f873574f257e0a01e2a6a02f5e071383fa5a669a53f2fe9eb4eb7918628af41b035fd98372e7c2a6970f550441f0b263dca46c12ce6aaa994fbb4b3493ca901878bb330d2db8e953fc883f9c754f419e963874199295a945ec867b4f224fde52268a81e1154b80f7076f32b6eb8614e3fde3bfa0e0207e1ca9b4c71d59da30f3d115c9c7c58fb0f2", 0xd1, 0x10000}], 0x0, 0x0)

[  156.527290][ T7570] device hsr_slave_1 entered promiscuous mode
[  156.594617][ T7567] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready
[  156.604539][ T7561] 8021q: adding VLAN 0 to HW filter on device bond0
[  156.612167][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  156.638508][ T7556] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready
[  156.649874][ T7570] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready
[  156.658861][ T7559] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[  156.665906][ T7570] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready
[  156.680020][ T7561] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[  156.689566][ T7563] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  156.705050][ T7563] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  156.715479][ T7563] bridge0: port 2(bridge_slave_1) entered blocking state
[  156.722581][ T7563] bridge0: port 2(bridge_slave_1) entered forwarding state
[  156.738133][ T7559] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready
[  156.754836][ T7597] BTRFS error (device loop0): unsupported checksum algorithm 22813
[  156.763009][ T7597] BTRFS error (device loop0): superblock checksum mismatch
[  156.768019][ T7561] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready
[  156.777224][ T7597] BTRFS error (device loop0): open_ctree failed
[  156.786067][ T7556] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready
[  156.794128][ T7562] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  156.802177][ T7562] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  156.810181][ T7562] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  156.818032][ T7562] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  156.825550][ T7562] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  156.842082][ T7570] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready
[  156.861107][ T7561] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready
[  156.882379][ T7561] 8021q: adding VLAN 0 to HW filter on device team0
04:31:16 executing program 0:
syz_mount_image$btrfs(&(0x7f0000000080)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000400)=[{&(0x7f00000008c0)="8da4363ac0ed0000000000000000004d01000000000000000000000000000000ecf6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4dd2f873574f257e0a01e2a6a02f5e071383fa5a669a53f2fe9eb4eb7918628af41b035fd98372e7c2a6970f550441f0b263dca46c12ce6aaa994fbb4b3493ca901878bb330d2db8e953fc883f9c754f419e963874199295a945ec867b4f224fde52268a81e1154b80f7076f32b6eb8614e3fde3bfa0e0207e1ca9b4c71d59da30f3d115c9c7c58fb0f2", 0xd1, 0x10000}], 0x0, 0x0)

[  156.891761][ T7556] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready
[  156.901075][ T7559] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready
[  156.912534][ T7559] 8021q: adding VLAN 0 to HW filter on device team0
[  156.924142][ T7559] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready
[  156.939983][ T7603] BTRFS error (device loop0): unsupported checksum algorithm 22813
[  156.949804][ T7603] BTRFS error (device loop0): superblock checksum mismatch
[  156.960312][ T7603] BTRFS error (device loop0): open_ctree failed
[  156.972038][ T7567] 8021q: adding VLAN 0 to HW filter on device bond0
04:31:16 executing program 0:
syz_mount_image$btrfs(&(0x7f0000000080)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000400)=[{&(0x7f00000008c0)="8da4363ac0ed0000000000000000004d01000000000000000000000000000000ecf6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4dd2f873574f257e0a01e2a6a02f5e071383fa5a669a53f2fe9eb4eb7918628af41b035fd98372e7c2a6970f550441f0b263dca46c12ce6aaa994fbb4b3493ca901878bb330d2db8e953fc883f9c754f419e963874199295a945ec867b4f224fde52268a81e1154b80f7076f32b6eb8614e3fde3bfa0e0207e1ca9b4c71d59da30f3d115c9c7c58fb0f2", 0xd1, 0x10000}], 0x0, 0x0)

[  156.985412][ T7561] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready
[  156.996564][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  157.005027][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  157.013905][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  157.023703][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  157.030802][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  157.038286][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  157.046971][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  157.055217][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  157.062287][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  157.070225][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  157.078016][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  157.087933][ T7559] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready
[  157.096397][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  157.105581][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  157.123858][   T22] bridge0: port 2(bridge_slave_1) entered blocking state
[  157.130946][   T22] bridge0: port 2(bridge_slave_1) entered forwarding state
[  157.141486][ T7567] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[  157.150866][ T7561] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready
[  157.164469][ T7561] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready
[  157.183511][ T7556] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready
[  157.215784][ T7559] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready
[  157.224720][ T7607] BTRFS error (device loop0): unsupported checksum algorithm 22813
[  157.232926][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  157.237248][ T7607] BTRFS error (device loop0): superblock checksum mismatch
[  157.245503][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  157.256741][ T7607] BTRFS error (device loop0): open_ctree failed
[  157.264947][   T22] bridge0: port 2(bridge_slave_1) entered blocking state
[  157.272044][   T22] bridge0: port 2(bridge_slave_1) entered forwarding state
[  157.280193][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  157.289207][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  157.302591][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  157.312089][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  157.322515][ T7567] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready
[  157.332661][ T7561] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready
[  157.344861][ T7556] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready
[  157.360545][ T3469] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  157.369036][ T3469] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  157.378699][ T3469] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  157.390741][ T3469] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  157.402122][ T3469] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  157.419526][ T3469] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  157.436181][ T7567] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready
[  157.445120][ T7567] 8021q: adding VLAN 0 to HW filter on device team0
[  157.462431][ T7567] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready
[  157.472258][ T7559] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready
[  157.483826][ T7561] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready
[  157.492670][ T2587] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  157.501107][ T2587] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  157.509837][ T2587] bridge0: port 1(bridge_slave_0) entered blocking state
[  157.516913][ T2587] bridge0: port 1(bridge_slave_0) entered forwarding state
[  157.524399][ T2587] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  157.533052][ T2587] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  157.541570][ T2587] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  157.553739][ T7567] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready
[  157.565403][ T7561] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready
[  157.575585][ T7556] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready
[  157.583804][ T2587] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  157.592409][ T2587] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  157.600177][ T2587] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  157.608661][ T2587] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  157.617231][ T2587] bridge0: port 2(bridge_slave_1) entered blocking state
[  157.624249][ T2587] bridge0: port 2(bridge_slave_1) entered forwarding state
[  157.632059][ T2587] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  157.640402][ T2587] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  157.648780][ T2587] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  157.656983][ T2587] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  157.666667][ T7567] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready
[  157.676140][ T7567] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready
[  157.685481][ T7559] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready
[  157.695344][ T7561] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready
[  157.713147][ T7563] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  157.722609][ T7563] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  157.731564][ T7563] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  157.740089][ T7563] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  157.748529][ T7563] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  157.757158][ T7563] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  157.765205][ T7563] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  157.776833][ T7567] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready
[  157.785791][ T7567] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready
[  157.796900][ T7561] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready
[  157.805864][ T7570] 8021q: adding VLAN 0 to HW filter on device bond0
[  157.814057][ T7556] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready
[  157.822297][ T7563] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  157.830863][ T7563] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  157.839164][ T7563] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  157.848092][ T7563] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  157.856417][ T7563] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  157.864548][ T7563] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  157.872711][ T7563] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  157.880817][ T7563] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  157.890272][ T7567] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready
[  157.901188][ T7556] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready
[  157.909230][ T7556] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  157.916995][ T7563] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  157.924623][ T7563] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  157.933172][ T7563] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  157.942929][ T7559] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready
[  157.954165][ T7570] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[  157.962535][ T7567] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready
[  157.980138][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  157.988793][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  157.997569][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  158.005652][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  158.014755][ T7561] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready
[  158.022086][ T7561] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  158.034009][ T7556] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready
[  158.042733][ T7559] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready
[  158.051960][ T7570] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready
[  158.060071][ T7567] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready
[  158.067124][ T7567] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  158.079226][ T7556] 8021q: adding VLAN 0 to HW filter on device batadv0
[  158.088370][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  158.096764][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  158.104763][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  158.112396][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  158.122125][ T7559] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready
04:31:17 executing program 1:
r0 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0)
mknod$loop(&(0x7f0000000080)='./file0\x00', 0x7c0, 0xffffffffffffffff)
write$binfmt_script(r0, &(0x7f0000000100)={'#! ', './file0', [{0x20, '#! '}]}, 0xf)
clone(0x8020002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)

[  158.152926][ T7570] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready
[  158.160846][ T7570] 8021q: adding VLAN 0 to HW filter on device team0
[  158.191347][ T3469] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  158.200512][ T3469] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  158.210217][ T7561] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready
[  158.235527][ T7559] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready
[  158.248724][ T7559] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  158.257842][ T7567] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready
[  158.273884][ T7570] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready
[  158.283476][ T3469] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  158.304970][ T3469] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  158.314652][ T3469] bridge0: port 1(bridge_slave_0) entered blocking state
[  158.321744][ T3469] bridge0: port 1(bridge_slave_0) entered forwarding state
[  158.332297][ T7561] 8021q: adding VLAN 0 to HW filter on device batadv0
[  158.343130][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  158.371238][ T7567] 8021q: adding VLAN 0 to HW filter on device batadv0
[  158.392707][ T7570] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready
[  158.408857][ T7563] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  158.422163][ T7563] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  158.432133][ T7563] bridge0: port 2(bridge_slave_1) entered blocking state
[  158.436596][    C0] hrtimer: interrupt took 26229 ns
[  158.439222][ T7563] bridge0: port 2(bridge_slave_1) entered forwarding state
[  158.458607][ T7570] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready
[  158.468864][ T7559] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready
[  158.476714][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  158.541790][ T7632] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  158.637885][ T7570] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready
[  158.655340][ T7638] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  158.686646][ T2587] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  158.697268][ T7570] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready
[  158.716181][ T7559] 8021q: adding VLAN 0 to HW filter on device batadv0
[  158.740160][ T7570] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready
[  158.753493][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  158.763518][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  158.774454][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  158.783206][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  158.791992][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  158.804635][ T7570] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready
[  158.826267][ T2587] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  158.834486][ T2587] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  158.876977][ T7570] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready
[  158.890524][ T7570] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  158.901493][ T7570] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready
[  158.908811][ T7570] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  158.919607][ T7563] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  158.927776][ T7563] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  158.961810][ T7570] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready
[  158.973543][ T7570] 8021q: adding VLAN 0 to HW filter on device batadv0
04:31:18 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmmsg(r1, &(0x7f0000003e40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001740)=""/194, 0xc2}}], 0x1, 0x0, 0x0)
setsockopt$sock_int(r1, 0x1, 0x22, &(0x7f00000001c0)=0x1, 0x4)
sendto(r0, 0x0, 0x0, 0x0, 0x0, 0x0)

04:31:18 executing program 0:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x20}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x802})
pipe(&(0x7f0000000000)={<r1=>0xffffffffffffffff})
getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000240)={0x0, 0xd, 0xa8, 0x2218e76, 0x10001, 0x0, 0x0, 0x3, {<r2=>0x0, @in={{0x2, 0x4e20, @loopback}}, 0x8, 0x8, 0x0, 0x14, 0x4}}, 0x0)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000003c0)={r2, @in={{0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1f}}}, 0xffffffff80000001, 0x2}, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0)
r3 = socket$kcm(0xa, 0x2, 0x11)
setsockopt$sock_attach_bpf(r3, 0x29, 0x1b, &(0x7f0000000040)=r3, 0x52d)
close(r3)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$kcm(0x2b, 0x1, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000003840)={&(0x7f0000000040)=@un=@abs, 0x80, &(0x7f00000000c0)}, 0x0)

04:31:18 executing program 1:
r0 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0)
mknod$loop(&(0x7f0000000080)='./file0\x00', 0x7c0, 0xffffffffffffffff)
write$binfmt_script(r0, &(0x7f0000000100)={'#! ', './file0', [{0x20, '#! '}]}, 0xf)
clone(0x8020002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)

04:31:18 executing program 5:
r0 = socket$inet6(0xa, 0x80000000000003, 0x80000000000006)
connect$inet6(r0, &(0x7f0000000300)={0xa, 0x0, 0x0, @loopback}, 0x1c)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f023c123f3188a070")
sendmsg(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000340)="b10b938636ea69df7b5a9984bb1bc72ef58d96e56e11df900a707f4946b1637e2096c584bda1b4e01716b539", 0x2c}], 0x1}, 0x8000)
setsockopt$inet6_int(r0, 0x29, 0x7, &(0x7f0000000100), 0x4)
recvmsg(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0)
sendmsg(r0, &(0x7f0000000a40)={0x0, 0x0, 0x0}, 0x0)
recvmsg(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)

04:31:18 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000001cc0)={&(0x7f0000000000)={0x10, 0x9effffff, 0x8100000000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000380)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0xfffffffffffff000}, [@IFLA_TXQLEN={0x8, 0x14}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0)

04:31:18 executing program 4:
r0 = socket$inet6(0xa, 0x80000000000003, 0x80000000000006)
connect$inet6(r0, &(0x7f0000000300)={0xa, 0x0, 0x0, @loopback}, 0x1c)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f023c123f3188a070")
sendmsg(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000340)="b10b938636ea69df7b5a9984bb1bc72ef58d96e56e11df900a707f4946b1637e2096c584bda1b4e01716b539", 0x2c}], 0x1}, 0x8000)
setsockopt$inet6_int(r0, 0x29, 0x7, &(0x7f0000000100), 0x4)
recvmsg(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0)
sendmsg(r0, &(0x7f0000000a40)={0x0, 0x0, 0x0}, 0x0)
recvmsg(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)

04:31:18 executing program 1:
r0 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0)
mknod$loop(&(0x7f0000000080)='./file0\x00', 0x7c0, 0xffffffffffffffff)
write$binfmt_script(r0, &(0x7f0000000100)={'#! ', './file0', [{0x20, '#! '}]}, 0xf)
clone(0x8020002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)

04:31:18 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmmsg(r1, &(0x7f0000003e40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001740)=""/194, 0xc2}}], 0x1, 0x0, 0x0)
setsockopt$sock_int(r1, 0x1, 0x22, &(0x7f00000001c0)=0x1, 0x4)
sendto(r0, 0x0, 0x0, 0x0, 0x0, 0x0)

[  159.300467][ T7664] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
04:31:19 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmmsg(r1, &(0x7f0000003e40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001740)=""/194, 0xc2}}], 0x1, 0x0, 0x0)
setsockopt$sock_int(r1, 0x1, 0x22, &(0x7f00000001c0)=0x1, 0x4)
sendto(r0, 0x0, 0x0, 0x0, 0x0, 0x0)

04:31:19 executing program 4:
r0 = socket$inet6(0xa, 0x80000000000003, 0x80000000000006)
connect$inet6(r0, &(0x7f0000000300)={0xa, 0x0, 0x0, @loopback}, 0x1c)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f023c123f3188a070")
sendmsg(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000340)="b10b938636ea69df7b5a9984bb1bc72ef58d96e56e11df900a707f4946b1637e2096c584bda1b4e01716b539", 0x2c}], 0x1}, 0x8000)
setsockopt$inet6_int(r0, 0x29, 0x7, &(0x7f0000000100), 0x4)
recvmsg(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0)
sendmsg(r0, &(0x7f0000000a40)={0x0, 0x0, 0x0}, 0x0)
recvmsg(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)

04:31:19 executing program 2:
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, 0x0)
poll(0x0, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0})
close(r0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000300)=[@release], 0x0, 0x0, 0x0})

04:31:19 executing program 1:
r0 = socket(0x40000000015, 0x5, 0x0)
bind$inet(r0, &(0x7f0000fc4000)={0x2, 0x0, @loopback}, 0x10)
sendmmsg(r0, &(0x7f0000573000)=[{{&(0x7f0000db5ff0)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x80, &(0x7f0000542000), 0x0, &(0x7f0000a50000)=[{0x48, 0x114, 0xffffffff00000001, "73b5e69c3fcdfed242c850e672ce2de00000100000000000a6025cdbfcca6ce2124f0780842427552c961bcf5a513e4ca1"}], 0x48}}], 0x1, 0x0)

04:31:19 executing program 5:
r0 = socket$inet6(0xa, 0x80000000000003, 0x80000000000006)
connect$inet6(r0, &(0x7f0000000300)={0xa, 0x0, 0x0, @loopback}, 0x1c)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f023c123f3188a070")
sendmsg(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000340)="b10b938636ea69df7b5a9984bb1bc72ef58d96e56e11df900a707f4946b1637e2096c584bda1b4e01716b539", 0x2c}], 0x1}, 0x8000)
setsockopt$inet6_int(r0, 0x29, 0x7, &(0x7f0000000100), 0x4)
recvmsg(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0)
sendmsg(r0, &(0x7f0000000a40)={0x0, 0x0, 0x0}, 0x0)
recvmsg(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)

04:31:19 executing program 0:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x20}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x802})
pipe(&(0x7f0000000000)={<r1=>0xffffffffffffffff})
getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000240)={0x0, 0xd, 0xa8, 0x2218e76, 0x10001, 0x0, 0x0, 0x3, {<r2=>0x0, @in={{0x2, 0x4e20, @loopback}}, 0x8, 0x8, 0x0, 0x14, 0x4}}, 0x0)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000003c0)={r2, @in={{0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1f}}}, 0xffffffff80000001, 0x2}, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0)
r3 = socket$kcm(0xa, 0x2, 0x11)
setsockopt$sock_attach_bpf(r3, 0x29, 0x1b, &(0x7f0000000040)=r3, 0x52d)
close(r3)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$kcm(0x2b, 0x1, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000003840)={&(0x7f0000000040)=@un=@abs, 0x80, &(0x7f00000000c0)}, 0x0)

04:31:19 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000001cc0)={&(0x7f0000000000)={0x10, 0x9effffff, 0x8100000000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000380)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0xfffffffffffff000}, [@IFLA_TXQLEN={0x8, 0x14}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0)

04:31:19 executing program 2:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x20}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x802})
pipe(&(0x7f0000000000)={<r1=>0xffffffffffffffff})
getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000240)={0x0, 0xd, 0xa8, 0x2218e76, 0x10001, 0x0, 0x0, 0x3, {<r2=>0x0, @in={{0x2, 0x4e20, @loopback}}, 0x8, 0x8, 0x0, 0x14, 0x4}}, 0x0)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000003c0)={r2, @in={{0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1f}}}, 0xffffffff80000001, 0x2}, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0)
r3 = socket$kcm(0xa, 0x2, 0x11)
setsockopt$sock_attach_bpf(r3, 0x29, 0x1b, &(0x7f0000000040)=r3, 0x52d)
close(r3)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$kcm(0x2b, 0x1, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000003840)={&(0x7f0000000040)=@un=@abs, 0x80, &(0x7f00000000c0)}, 0x0)

04:31:19 executing program 4:
r0 = socket$inet6(0xa, 0x80000000000003, 0x80000000000006)
connect$inet6(r0, &(0x7f0000000300)={0xa, 0x0, 0x0, @loopback}, 0x1c)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f023c123f3188a070")
sendmsg(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000340)="b10b938636ea69df7b5a9984bb1bc72ef58d96e56e11df900a707f4946b1637e2096c584bda1b4e01716b539", 0x2c}], 0x1}, 0x8000)
setsockopt$inet6_int(r0, 0x29, 0x7, &(0x7f0000000100), 0x4)
recvmsg(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0)
sendmsg(r0, &(0x7f0000000a40)={0x0, 0x0, 0x0}, 0x0)
recvmsg(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)

04:31:19 executing program 1:
r0 = socket(0x40000000015, 0x5, 0x0)
bind$inet(r0, &(0x7f0000fc4000)={0x2, 0x0, @loopback}, 0x10)
sendmmsg(r0, &(0x7f0000573000)=[{{&(0x7f0000db5ff0)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x80, &(0x7f0000542000), 0x0, &(0x7f0000a50000)=[{0x48, 0x114, 0xffffffff00000001, "73b5e69c3fcdfed242c850e672ce2de00000100000000000a6025cdbfcca6ce2124f0780842427552c961bcf5a513e4ca1"}], 0x48}}], 0x1, 0x0)

04:31:19 executing program 5:
r0 = socket$inet6(0xa, 0x80000000000003, 0x80000000000006)
connect$inet6(r0, &(0x7f0000000300)={0xa, 0x0, 0x0, @loopback}, 0x1c)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f023c123f3188a070")
sendmsg(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000340)="b10b938636ea69df7b5a9984bb1bc72ef58d96e56e11df900a707f4946b1637e2096c584bda1b4e01716b539", 0x2c}], 0x1}, 0x8000)
setsockopt$inet6_int(r0, 0x29, 0x7, &(0x7f0000000100), 0x4)
recvmsg(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0)
sendmsg(r0, &(0x7f0000000a40)={0x0, 0x0, 0x0}, 0x0)
recvmsg(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)

04:31:19 executing program 1:
r0 = socket(0x40000000015, 0x5, 0x0)
bind$inet(r0, &(0x7f0000fc4000)={0x2, 0x0, @loopback}, 0x10)
sendmmsg(r0, &(0x7f0000573000)=[{{&(0x7f0000db5ff0)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x80, &(0x7f0000542000), 0x0, &(0x7f0000a50000)=[{0x48, 0x114, 0xffffffff00000001, "73b5e69c3fcdfed242c850e672ce2de00000100000000000a6025cdbfcca6ce2124f0780842427552c961bcf5a513e4ca1"}], 0x48}}], 0x1, 0x0)

[  159.965267][ T7721] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
04:31:19 executing program 1:
r0 = socket(0x40000000015, 0x5, 0x0)
bind$inet(r0, &(0x7f0000fc4000)={0x2, 0x0, @loopback}, 0x10)
sendmmsg(r0, &(0x7f0000573000)=[{{&(0x7f0000db5ff0)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x80, &(0x7f0000542000), 0x0, &(0x7f0000a50000)=[{0x48, 0x114, 0xffffffff00000001, "73b5e69c3fcdfed242c850e672ce2de00000100000000000a6025cdbfcca6ce2124f0780842427552c961bcf5a513e4ca1"}], 0x48}}], 0x1, 0x0)

04:31:19 executing program 1:
r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/dlm-control\x00', 0x3e, 0x0)
write$nbd(r0, &(0x7f0000000080)={0x6000000, 0x0, 0x0, 0x0, 0x5, "a3ef41749fa527ab78fc57f180bd82099cbab35a2fdbede5fbb11bedfb1f8cd557b0bdfcd7f42f63af872a0a11e32f7a0eb6bb02f6b78b1ea580f6ba185947306a84c6c5e7be78ab9406a3ea21ad8514d024cacb80e3ba56"}, 0x68)

04:31:20 executing program 4:
r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0)
getsockopt$ax25_int(r0, 0x101, 0x0, 0x0, 0x0)

04:31:20 executing program 5:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
clock_gettime(0x0, &(0x7f00000005c0)={<r2=>0x0, <r3=>0x0})
ioctl$VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000600)={0x7, 0xb, 0x4, 0x2040000, {r2, r3/1000+30000}, {0x0, 0x8, 0x1f, 0x5, 0x4, 0x3308, "abba0073"}, 0x0, 0x5, @userptr=0x4963, 0x4})
r4 = socket$alg(0x26, 0x5, 0x0)
recvmmsg(r4, &(0x7f0000001d80)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000180)=""/118, 0x76}, {&(0x7f0000000300)=""/214, 0xd6}, {&(0x7f0000000200)=""/7, 0x7}, {&(0x7f0000000240)=""/56, 0x38}, {&(0x7f0000000400)=""/88, 0x58}], 0x5}}, {{&(0x7f0000000500)=@pptp={0x18, 0x2, {0x0, @multicast2}}, 0x80, &(0x7f0000000900)=[{&(0x7f0000000280)=""/32, 0x20}, {&(0x7f0000000680)=""/231, 0xe7}, {&(0x7f0000000780)=""/111, 0x6f}, {0x0}], 0x4}, 0x8}, {{&(0x7f0000000b40)=@pptp={0x18, 0x2, {0x0, @broadcast}}, 0x80, &(0x7f0000000980), 0x0, &(0x7f0000000c80)=""/45, 0x2d}, 0x6b1b0c6e}, {{&(0x7f0000000cc0)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000000d40), 0x0, &(0x7f0000000d80)=""/162, 0xa2}, 0x10001}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001680)=""/117, 0x75}}, {{&(0x7f0000001700)=@alg, 0x80, &(0x7f0000001980)=[{&(0x7f0000001780)=""/22, 0x16}, {&(0x7f00000018c0)=""/36, 0x24}, {&(0x7f0000001900)=""/112, 0x70}], 0x3, &(0x7f00000019c0)=""/154, 0x9a}, 0x8}, {{0x0, 0x0, &(0x7f0000001c80)=[{&(0x7f0000001a80)=""/152, 0x98}, {0x0}, {&(0x7f0000001c00)=""/51, 0x33}, {&(0x7f0000001c40)=""/58, 0x3a}], 0x4, &(0x7f0000001cc0)=""/183, 0xb7}, 0x7}], 0x7, 0x40, 0x0)
ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f00000000c0))
bind$alg(r4, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha512\x00'}, 0x58)
r5 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x1)
mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x1000, &(0x7f00000009c0)=ANY=[@ANYBLOB=',smacknse(/input/mice\x00,don\x00\x00\x00\x00\x00\x00\x00\x00bj_role=/dev/input/mice\x00,ap'])
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000ff8000), 0x0)
socket$alg(0x26, 0x5, 0x0)
r6 = accept$alg(r4, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r5, 0xc0045516, &(0x7f00000002c0)=0x6)
recvmmsg(r6, &(0x7f0000001280)=[{{&(0x7f0000000ec0)=@nl=@proc, 0x34e, &(0x7f0000001180)=[{&(0x7f0000001080)=""/251, 0xfb}], 0x11, &(0x7f00000011c0)=""/157, 0x9d}}], 0x1500, 0x0, &(0x7f0000001380)={0x77359400})

04:31:20 executing program 1:
r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/dlm-control\x00', 0x3e, 0x0)
write$nbd(r0, &(0x7f0000000080)={0x6000000, 0x0, 0x0, 0x0, 0x5, "a3ef41749fa527ab78fc57f180bd82099cbab35a2fdbede5fbb11bedfb1f8cd557b0bdfcd7f42f63af872a0a11e32f7a0eb6bb02f6b78b1ea580f6ba185947306a84c6c5e7be78ab9406a3ea21ad8514d024cacb80e3ba56"}, 0x68)

04:31:20 executing program 0:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x20}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x802})
pipe(&(0x7f0000000000)={<r1=>0xffffffffffffffff})
getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000240)={0x0, 0xd, 0xa8, 0x2218e76, 0x10001, 0x0, 0x0, 0x3, {<r2=>0x0, @in={{0x2, 0x4e20, @loopback}}, 0x8, 0x8, 0x0, 0x14, 0x4}}, 0x0)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000003c0)={r2, @in={{0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1f}}}, 0xffffffff80000001, 0x2}, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0)
r3 = socket$kcm(0xa, 0x2, 0x11)
setsockopt$sock_attach_bpf(r3, 0x29, 0x1b, &(0x7f0000000040)=r3, 0x52d)
close(r3)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$kcm(0x2b, 0x1, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000003840)={&(0x7f0000000040)=@un=@abs, 0x80, &(0x7f00000000c0)}, 0x0)

04:31:20 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000001cc0)={&(0x7f0000000000)={0x10, 0x9effffff, 0x8100000000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000380)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0xfffffffffffff000}, [@IFLA_TXQLEN={0x8, 0x14}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0)

04:31:20 executing program 2:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x20}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x802})
pipe(&(0x7f0000000000)={<r1=>0xffffffffffffffff})
getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000240)={0x0, 0xd, 0xa8, 0x2218e76, 0x10001, 0x0, 0x0, 0x3, {<r2=>0x0, @in={{0x2, 0x4e20, @loopback}}, 0x8, 0x8, 0x0, 0x14, 0x4}}, 0x0)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000003c0)={r2, @in={{0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1f}}}, 0xffffffff80000001, 0x2}, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0)
r3 = socket$kcm(0xa, 0x2, 0x11)
setsockopt$sock_attach_bpf(r3, 0x29, 0x1b, &(0x7f0000000040)=r3, 0x52d)
close(r3)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$kcm(0x2b, 0x1, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000003840)={&(0x7f0000000040)=@un=@abs, 0x80, &(0x7f00000000c0)}, 0x0)

04:31:20 executing program 1:
r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/dlm-control\x00', 0x3e, 0x0)
write$nbd(r0, &(0x7f0000000080)={0x6000000, 0x0, 0x0, 0x0, 0x5, "a3ef41749fa527ab78fc57f180bd82099cbab35a2fdbede5fbb11bedfb1f8cd557b0bdfcd7f42f63af872a0a11e32f7a0eb6bb02f6b78b1ea580f6ba185947306a84c6c5e7be78ab9406a3ea21ad8514d024cacb80e3ba56"}, 0x68)

04:31:20 executing program 4:
r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0)
getsockopt$ax25_int(r0, 0x101, 0x0, 0x0, 0x0)

04:31:20 executing program 1:
r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/dlm-control\x00', 0x3e, 0x0)
write$nbd(r0, &(0x7f0000000080)={0x6000000, 0x0, 0x0, 0x0, 0x5, "a3ef41749fa527ab78fc57f180bd82099cbab35a2fdbede5fbb11bedfb1f8cd557b0bdfcd7f42f63af872a0a11e32f7a0eb6bb02f6b78b1ea580f6ba185947306a84c6c5e7be78ab9406a3ea21ad8514d024cacb80e3ba56"}, 0x68)

04:31:20 executing program 4:
r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0)
getsockopt$ax25_int(r0, 0x101, 0x0, 0x0, 0x0)

[  160.643835][ T7770] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
04:31:20 executing program 1:
socket$inet6_dccp(0xa, 0x6, 0x0)
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x0, 0x20000)
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='smaps_rollup\x00')
mlockall(0x1)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xffffffffffffffff, 0x32, 0xffffffffffffffff, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
readv(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/76, 0x4c}], 0x28f)

04:31:20 executing program 4:
r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0)
getsockopt$ax25_int(r0, 0x101, 0x0, 0x0, 0x0)

04:31:20 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
faccessat(0xffffffffffffffff, 0x0, 0x2, 0x0)
dup(0xffffffffffffffff)
add_key(&(0x7f0000000080)='trusted\x00', &(0x7f00000000c0)={'syz'}, 0x0, 0x0, 0x0)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0)
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/snapshot\x00', 0x80001, 0x0)
timerfd_gettime(r0, &(0x7f0000000140))
quotactl(0x9, 0x0, 0x0, &(0x7f0000000680)="4700009c7f75068b89b083eb0cdc5c445bd84c497e0bdfc5ab801ac98a179517dd5b120c1b94962bb66a7b7e10179261de1d38599dd4579c5c19136642af97cd7d2fb3d2029d0124c54fd88b1415f4ffff0000b298fa04b026d14c6eb1b64712b38e96c53d56e4345c166c226a6776e5d9081521074860b07ebdcb2e656c95a411b68aa8fca8956a7960060a")

04:31:20 executing program 5:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
clock_gettime(0x0, &(0x7f00000005c0)={<r2=>0x0, <r3=>0x0})
ioctl$VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000600)={0x7, 0xb, 0x4, 0x2040000, {r2, r3/1000+30000}, {0x0, 0x8, 0x1f, 0x5, 0x4, 0x3308, "abba0073"}, 0x0, 0x5, @userptr=0x4963, 0x4})
r4 = socket$alg(0x26, 0x5, 0x0)
recvmmsg(r4, &(0x7f0000001d80)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000180)=""/118, 0x76}, {&(0x7f0000000300)=""/214, 0xd6}, {&(0x7f0000000200)=""/7, 0x7}, {&(0x7f0000000240)=""/56, 0x38}, {&(0x7f0000000400)=""/88, 0x58}], 0x5}}, {{&(0x7f0000000500)=@pptp={0x18, 0x2, {0x0, @multicast2}}, 0x80, &(0x7f0000000900)=[{&(0x7f0000000280)=""/32, 0x20}, {&(0x7f0000000680)=""/231, 0xe7}, {&(0x7f0000000780)=""/111, 0x6f}, {0x0}], 0x4}, 0x8}, {{&(0x7f0000000b40)=@pptp={0x18, 0x2, {0x0, @broadcast}}, 0x80, &(0x7f0000000980), 0x0, &(0x7f0000000c80)=""/45, 0x2d}, 0x6b1b0c6e}, {{&(0x7f0000000cc0)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000000d40), 0x0, &(0x7f0000000d80)=""/162, 0xa2}, 0x10001}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001680)=""/117, 0x75}}, {{&(0x7f0000001700)=@alg, 0x80, &(0x7f0000001980)=[{&(0x7f0000001780)=""/22, 0x16}, {&(0x7f00000018c0)=""/36, 0x24}, {&(0x7f0000001900)=""/112, 0x70}], 0x3, &(0x7f00000019c0)=""/154, 0x9a}, 0x8}, {{0x0, 0x0, &(0x7f0000001c80)=[{&(0x7f0000001a80)=""/152, 0x98}, {0x0}, {&(0x7f0000001c00)=""/51, 0x33}, {&(0x7f0000001c40)=""/58, 0x3a}], 0x4, &(0x7f0000001cc0)=""/183, 0xb7}, 0x7}], 0x7, 0x40, 0x0)
ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f00000000c0))
bind$alg(r4, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha512\x00'}, 0x58)
r5 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x1)
mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x1000, &(0x7f00000009c0)=ANY=[@ANYBLOB=',smacknse(/input/mice\x00,don\x00\x00\x00\x00\x00\x00\x00\x00bj_role=/dev/input/mice\x00,ap'])
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000ff8000), 0x0)
socket$alg(0x26, 0x5, 0x0)
r6 = accept$alg(r4, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r5, 0xc0045516, &(0x7f00000002c0)=0x6)
recvmmsg(r6, &(0x7f0000001280)=[{{&(0x7f0000000ec0)=@nl=@proc, 0x34e, &(0x7f0000001180)=[{&(0x7f0000001080)=""/251, 0xfb}], 0x11, &(0x7f00000011c0)=""/157, 0x9d}}], 0x1500, 0x0, &(0x7f0000001380)={0x77359400})

04:31:20 executing program 2:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x20}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x802})
pipe(&(0x7f0000000000)={<r1=>0xffffffffffffffff})
getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000240)={0x0, 0xd, 0xa8, 0x2218e76, 0x10001, 0x0, 0x0, 0x3, {<r2=>0x0, @in={{0x2, 0x4e20, @loopback}}, 0x8, 0x8, 0x0, 0x14, 0x4}}, 0x0)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000003c0)={r2, @in={{0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1f}}}, 0xffffffff80000001, 0x2}, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0)
r3 = socket$kcm(0xa, 0x2, 0x11)
setsockopt$sock_attach_bpf(r3, 0x29, 0x1b, &(0x7f0000000040)=r3, 0x52d)
close(r3)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$kcm(0x2b, 0x1, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000003840)={&(0x7f0000000040)=@un=@abs, 0x80, &(0x7f00000000c0)}, 0x0)

04:31:21 executing program 0:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x20}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x802})
pipe(&(0x7f0000000000)={<r1=>0xffffffffffffffff})
getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000240)={0x0, 0xd, 0xa8, 0x2218e76, 0x10001, 0x0, 0x0, 0x3, {<r2=>0x0, @in={{0x2, 0x4e20, @loopback}}, 0x8, 0x8, 0x0, 0x14, 0x4}}, 0x0)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000003c0)={r2, @in={{0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1f}}}, 0xffffffff80000001, 0x2}, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0)
r3 = socket$kcm(0xa, 0x2, 0x11)
setsockopt$sock_attach_bpf(r3, 0x29, 0x1b, &(0x7f0000000040)=r3, 0x52d)
close(r3)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$kcm(0x2b, 0x1, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000003840)={&(0x7f0000000040)=@un=@abs, 0x80, &(0x7f00000000c0)}, 0x0)

04:31:21 executing program 3:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
clock_gettime(0x0, &(0x7f00000005c0)={<r2=>0x0, <r3=>0x0})
ioctl$VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000600)={0x7, 0xb, 0x4, 0x2040000, {r2, r3/1000+30000}, {0x0, 0x8, 0x1f, 0x5, 0x4, 0x3308, "abba0073"}, 0x0, 0x5, @userptr=0x4963, 0x4})
r4 = socket$alg(0x26, 0x5, 0x0)
recvmmsg(r4, &(0x7f0000001d80)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000180)=""/118, 0x76}, {&(0x7f0000000300)=""/214, 0xd6}, {&(0x7f0000000200)=""/7, 0x7}, {&(0x7f0000000240)=""/56, 0x38}, {&(0x7f0000000400)=""/88, 0x58}], 0x5}}, {{&(0x7f0000000500)=@pptp={0x18, 0x2, {0x0, @multicast2}}, 0x80, &(0x7f0000000900)=[{&(0x7f0000000280)=""/32, 0x20}, {&(0x7f0000000680)=""/231, 0xe7}, {&(0x7f0000000780)=""/111, 0x6f}, {0x0}], 0x4}, 0x8}, {{&(0x7f0000000b40)=@pptp={0x18, 0x2, {0x0, @broadcast}}, 0x80, &(0x7f0000000980), 0x0, &(0x7f0000000c80)=""/45, 0x2d}, 0x6b1b0c6e}, {{&(0x7f0000000cc0)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000000d40), 0x0, &(0x7f0000000d80)=""/162, 0xa2}, 0x10001}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001680)=""/117, 0x75}}, {{&(0x7f0000001700)=@alg, 0x80, &(0x7f0000001980)=[{&(0x7f0000001780)=""/22, 0x16}, {&(0x7f00000018c0)=""/36, 0x24}, {&(0x7f0000001900)=""/112, 0x70}], 0x3, &(0x7f00000019c0)=""/154, 0x9a}, 0x8}, {{0x0, 0x0, &(0x7f0000001c80)=[{&(0x7f0000001a80)=""/152, 0x98}, {0x0}, {&(0x7f0000001c00)=""/51, 0x33}, {&(0x7f0000001c40)=""/58, 0x3a}], 0x4, &(0x7f0000001cc0)=""/183, 0xb7}, 0x7}], 0x7, 0x40, 0x0)
ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f00000000c0))
bind$alg(r4, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha512\x00'}, 0x58)
r5 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x1)
mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x1000, &(0x7f00000009c0)=ANY=[@ANYBLOB=',smacknse(/input/mice\x00,don\x00\x00\x00\x00\x00\x00\x00\x00bj_role=/dev/input/mice\x00,ap'])
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000ff8000), 0x0)
socket$alg(0x26, 0x5, 0x0)
r6 = accept$alg(r4, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r5, 0xc0045516, &(0x7f00000002c0)=0x6)
recvmmsg(r6, &(0x7f0000001280)=[{{&(0x7f0000000ec0)=@nl=@proc, 0x34e, &(0x7f0000001180)=[{&(0x7f0000001080)=""/251, 0xfb}], 0x11, &(0x7f00000011c0)=""/157, 0x9d}}], 0x1500, 0x0, &(0x7f0000001380)={0x77359400})

04:31:21 executing program 5:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
clock_gettime(0x0, &(0x7f00000005c0)={<r2=>0x0, <r3=>0x0})
ioctl$VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000600)={0x7, 0xb, 0x4, 0x2040000, {r2, r3/1000+30000}, {0x0, 0x8, 0x1f, 0x5, 0x4, 0x3308, "abba0073"}, 0x0, 0x5, @userptr=0x4963, 0x4})
r4 = socket$alg(0x26, 0x5, 0x0)
recvmmsg(r4, &(0x7f0000001d80)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000180)=""/118, 0x76}, {&(0x7f0000000300)=""/214, 0xd6}, {&(0x7f0000000200)=""/7, 0x7}, {&(0x7f0000000240)=""/56, 0x38}, {&(0x7f0000000400)=""/88, 0x58}], 0x5}}, {{&(0x7f0000000500)=@pptp={0x18, 0x2, {0x0, @multicast2}}, 0x80, &(0x7f0000000900)=[{&(0x7f0000000280)=""/32, 0x20}, {&(0x7f0000000680)=""/231, 0xe7}, {&(0x7f0000000780)=""/111, 0x6f}, {0x0}], 0x4}, 0x8}, {{&(0x7f0000000b40)=@pptp={0x18, 0x2, {0x0, @broadcast}}, 0x80, &(0x7f0000000980), 0x0, &(0x7f0000000c80)=""/45, 0x2d}, 0x6b1b0c6e}, {{&(0x7f0000000cc0)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000000d40), 0x0, &(0x7f0000000d80)=""/162, 0xa2}, 0x10001}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001680)=""/117, 0x75}}, {{&(0x7f0000001700)=@alg, 0x80, &(0x7f0000001980)=[{&(0x7f0000001780)=""/22, 0x16}, {&(0x7f00000018c0)=""/36, 0x24}, {&(0x7f0000001900)=""/112, 0x70}], 0x3, &(0x7f00000019c0)=""/154, 0x9a}, 0x8}, {{0x0, 0x0, &(0x7f0000001c80)=[{&(0x7f0000001a80)=""/152, 0x98}, {0x0}, {&(0x7f0000001c00)=""/51, 0x33}, {&(0x7f0000001c40)=""/58, 0x3a}], 0x4, &(0x7f0000001cc0)=""/183, 0xb7}, 0x7}], 0x7, 0x40, 0x0)
ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f00000000c0))
bind$alg(r4, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha512\x00'}, 0x58)
r5 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x1)
mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x1000, &(0x7f00000009c0)=ANY=[@ANYBLOB=',smacknse(/input/mice\x00,don\x00\x00\x00\x00\x00\x00\x00\x00bj_role=/dev/input/mice\x00,ap'])
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000ff8000), 0x0)
socket$alg(0x26, 0x5, 0x0)
r6 = accept$alg(r4, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r5, 0xc0045516, &(0x7f00000002c0)=0x6)
recvmmsg(r6, &(0x7f0000001280)=[{{&(0x7f0000000ec0)=@nl=@proc, 0x34e, &(0x7f0000001180)=[{&(0x7f0000001080)=""/251, 0xfb}], 0x11, &(0x7f00000011c0)=""/157, 0x9d}}], 0x1500, 0x0, &(0x7f0000001380)={0x77359400})

04:31:21 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f121e0d3f3188a070")
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000200)='/dev/capi20\x00', 0x0, 0x0)
ioctl$CAPI_MANUFACTURER_CMD(r1, 0xc0104320, &(0x7f0000000080)={0xb})

04:31:21 executing program 5:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
clock_gettime(0x0, &(0x7f00000005c0)={<r2=>0x0, <r3=>0x0})
ioctl$VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000600)={0x7, 0xb, 0x4, 0x2040000, {r2, r3/1000+30000}, {0x0, 0x8, 0x1f, 0x5, 0x4, 0x3308, "abba0073"}, 0x0, 0x5, @userptr=0x4963, 0x4})
r4 = socket$alg(0x26, 0x5, 0x0)
recvmmsg(r4, &(0x7f0000001d80)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000180)=""/118, 0x76}, {&(0x7f0000000300)=""/214, 0xd6}, {&(0x7f0000000200)=""/7, 0x7}, {&(0x7f0000000240)=""/56, 0x38}, {&(0x7f0000000400)=""/88, 0x58}], 0x5}}, {{&(0x7f0000000500)=@pptp={0x18, 0x2, {0x0, @multicast2}}, 0x80, &(0x7f0000000900)=[{&(0x7f0000000280)=""/32, 0x20}, {&(0x7f0000000680)=""/231, 0xe7}, {&(0x7f0000000780)=""/111, 0x6f}, {0x0}], 0x4}, 0x8}, {{&(0x7f0000000b40)=@pptp={0x18, 0x2, {0x0, @broadcast}}, 0x80, &(0x7f0000000980), 0x0, &(0x7f0000000c80)=""/45, 0x2d}, 0x6b1b0c6e}, {{&(0x7f0000000cc0)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000000d40), 0x0, &(0x7f0000000d80)=""/162, 0xa2}, 0x10001}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001680)=""/117, 0x75}}, {{&(0x7f0000001700)=@alg, 0x80, &(0x7f0000001980)=[{&(0x7f0000001780)=""/22, 0x16}, {&(0x7f00000018c0)=""/36, 0x24}, {&(0x7f0000001900)=""/112, 0x70}], 0x3, &(0x7f00000019c0)=""/154, 0x9a}, 0x8}, {{0x0, 0x0, &(0x7f0000001c80)=[{&(0x7f0000001a80)=""/152, 0x98}, {0x0}, {&(0x7f0000001c00)=""/51, 0x33}, {&(0x7f0000001c40)=""/58, 0x3a}], 0x4, &(0x7f0000001cc0)=""/183, 0xb7}, 0x7}], 0x7, 0x40, 0x0)
ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f00000000c0))
bind$alg(r4, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha512\x00'}, 0x58)
r5 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x1)
mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x1000, &(0x7f00000009c0)=ANY=[@ANYBLOB=',smacknse(/input/mice\x00,don\x00\x00\x00\x00\x00\x00\x00\x00bj_role=/dev/input/mice\x00,ap'])
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000ff8000), 0x0)
socket$alg(0x26, 0x5, 0x0)
r6 = accept$alg(r4, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r5, 0xc0045516, &(0x7f00000002c0)=0x6)
recvmmsg(r6, &(0x7f0000001280)=[{{&(0x7f0000000ec0)=@nl=@proc, 0x34e, &(0x7f0000001180)=[{&(0x7f0000001080)=""/251, 0xfb}], 0x11, &(0x7f00000011c0)=""/157, 0x9d}}], 0x1500, 0x0, &(0x7f0000001380)={0x77359400})

04:31:21 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
faccessat(0xffffffffffffffff, 0x0, 0x2, 0x0)
dup(0xffffffffffffffff)
add_key(&(0x7f0000000080)='trusted\x00', &(0x7f00000000c0)={'syz'}, 0x0, 0x0, 0x0)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0)
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/snapshot\x00', 0x80001, 0x0)
timerfd_gettime(r0, &(0x7f0000000140))
quotactl(0x9, 0x0, 0x0, &(0x7f0000000680)="4700009c7f75068b89b083eb0cdc5c445bd84c497e0bdfc5ab801ac98a179517dd5b120c1b94962bb66a7b7e10179261de1d38599dd4579c5c19136642af97cd7d2fb3d2029d0124c54fd88b1415f4ffff0000b298fa04b026d14c6eb1b64712b38e96c53d56e4345c166c226a6776e5d9081521074860b07ebdcb2e656c95a411b68aa8fca8956a7960060a")

[  161.993756][ T7818] kcapi: driver "" not loaded.
04:31:21 executing program 2:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="2e0000001d008107e00f80ecdb4cb9d96b63190400000000000000fb120001000e00da1b40d819a9060015000000", 0x2e}], 0x1}, 0x0)

[  162.124456][ T7827] netlink: 26 bytes leftover after parsing attributes in process `syz-executor2'.
04:31:22 executing program 1:
socket$inet6_dccp(0xa, 0x6, 0x0)
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x0, 0x20000)
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='smaps_rollup\x00')
mlockall(0x1)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xffffffffffffffff, 0x32, 0xffffffffffffffff, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
readv(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/76, 0x4c}], 0x28f)

04:31:22 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f121e0d3f3188a070")
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000200)='/dev/capi20\x00', 0x0, 0x0)
ioctl$CAPI_MANUFACTURER_CMD(r1, 0xc0104320, &(0x7f0000000080)={0xb})

04:31:22 executing program 3:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
clock_gettime(0x0, &(0x7f00000005c0)={<r2=>0x0, <r3=>0x0})
ioctl$VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000600)={0x7, 0xb, 0x4, 0x2040000, {r2, r3/1000+30000}, {0x0, 0x8, 0x1f, 0x5, 0x4, 0x3308, "abba0073"}, 0x0, 0x5, @userptr=0x4963, 0x4})
r4 = socket$alg(0x26, 0x5, 0x0)
recvmmsg(r4, &(0x7f0000001d80)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000180)=""/118, 0x76}, {&(0x7f0000000300)=""/214, 0xd6}, {&(0x7f0000000200)=""/7, 0x7}, {&(0x7f0000000240)=""/56, 0x38}, {&(0x7f0000000400)=""/88, 0x58}], 0x5}}, {{&(0x7f0000000500)=@pptp={0x18, 0x2, {0x0, @multicast2}}, 0x80, &(0x7f0000000900)=[{&(0x7f0000000280)=""/32, 0x20}, {&(0x7f0000000680)=""/231, 0xe7}, {&(0x7f0000000780)=""/111, 0x6f}, {0x0}], 0x4}, 0x8}, {{&(0x7f0000000b40)=@pptp={0x18, 0x2, {0x0, @broadcast}}, 0x80, &(0x7f0000000980), 0x0, &(0x7f0000000c80)=""/45, 0x2d}, 0x6b1b0c6e}, {{&(0x7f0000000cc0)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000000d40), 0x0, &(0x7f0000000d80)=""/162, 0xa2}, 0x10001}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001680)=""/117, 0x75}}, {{&(0x7f0000001700)=@alg, 0x80, &(0x7f0000001980)=[{&(0x7f0000001780)=""/22, 0x16}, {&(0x7f00000018c0)=""/36, 0x24}, {&(0x7f0000001900)=""/112, 0x70}], 0x3, &(0x7f00000019c0)=""/154, 0x9a}, 0x8}, {{0x0, 0x0, &(0x7f0000001c80)=[{&(0x7f0000001a80)=""/152, 0x98}, {0x0}, {&(0x7f0000001c00)=""/51, 0x33}, {&(0x7f0000001c40)=""/58, 0x3a}], 0x4, &(0x7f0000001cc0)=""/183, 0xb7}, 0x7}], 0x7, 0x40, 0x0)
ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f00000000c0))
bind$alg(r4, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha512\x00'}, 0x58)
r5 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x1)
mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x1000, &(0x7f00000009c0)=ANY=[@ANYBLOB=',smacknse(/input/mice\x00,don\x00\x00\x00\x00\x00\x00\x00\x00bj_role=/dev/input/mice\x00,ap'])
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000ff8000), 0x0)
socket$alg(0x26, 0x5, 0x0)
r6 = accept$alg(r4, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r5, 0xc0045516, &(0x7f00000002c0)=0x6)
recvmmsg(r6, &(0x7f0000001280)=[{{&(0x7f0000000ec0)=@nl=@proc, 0x34e, &(0x7f0000001180)=[{&(0x7f0000001080)=""/251, 0xfb}], 0x11, &(0x7f00000011c0)=""/157, 0x9d}}], 0x1500, 0x0, &(0x7f0000001380)={0x77359400})

04:31:22 executing program 2:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="2e0000001d008107e00f80ecdb4cb9d96b63190400000000000000fb120001000e00da1b40d819a9060015000000", 0x2e}], 0x1}, 0x0)

04:31:22 executing program 5:
r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x4, 0x0)
ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000000)={0x98f900, 0x78, 0x0, [], &(0x7f0000000040)={0x98f90a, 0x0, [], @ptr}})

04:31:22 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
faccessat(0xffffffffffffffff, 0x0, 0x2, 0x0)
dup(0xffffffffffffffff)
add_key(&(0x7f0000000080)='trusted\x00', &(0x7f00000000c0)={'syz'}, 0x0, 0x0, 0x0)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0)
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/snapshot\x00', 0x80001, 0x0)
timerfd_gettime(r0, &(0x7f0000000140))
quotactl(0x9, 0x0, 0x0, &(0x7f0000000680)="4700009c7f75068b89b083eb0cdc5c445bd84c497e0bdfc5ab801ac98a179517dd5b120c1b94962bb66a7b7e10179261de1d38599dd4579c5c19136642af97cd7d2fb3d2029d0124c54fd88b1415f4ffff0000b298fa04b026d14c6eb1b64712b38e96c53d56e4345c166c226a6776e5d9081521074860b07ebdcb2e656c95a411b68aa8fca8956a7960060a")

[  162.778729][ T7838] netlink: 26 bytes leftover after parsing attributes in process `syz-executor2'.
[  162.839121][ T7845] kcapi: driver "" not loaded.
04:31:22 executing program 5:
r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x4, 0x0)
ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000000)={0x98f900, 0x78, 0x0, [], &(0x7f0000000040)={0x98f90a, 0x0, [], @ptr}})

04:31:22 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f121e0d3f3188a070")
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000200)='/dev/capi20\x00', 0x0, 0x0)
ioctl$CAPI_MANUFACTURER_CMD(r1, 0xc0104320, &(0x7f0000000080)={0xb})

04:31:22 executing program 2:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="2e0000001d008107e00f80ecdb4cb9d96b63190400000000000000fb120001000e00da1b40d819a9060015000000", 0x2e}], 0x1}, 0x0)

[  162.955566][ T7854] kcapi: driver "" not loaded.
04:31:22 executing program 5:
r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x4, 0x0)
ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000000)={0x98f900, 0x78, 0x0, [], &(0x7f0000000040)={0x98f90a, 0x0, [], @ptr}})

[  163.037153][ T7857] netlink: 26 bytes leftover after parsing attributes in process `syz-executor2'.
04:31:22 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f121e0d3f3188a070")
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000200)='/dev/capi20\x00', 0x0, 0x0)
ioctl$CAPI_MANUFACTURER_CMD(r1, 0xc0104320, &(0x7f0000000080)={0xb})

04:31:22 executing program 3:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
clock_gettime(0x0, &(0x7f00000005c0)={<r2=>0x0, <r3=>0x0})
ioctl$VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000600)={0x7, 0xb, 0x4, 0x2040000, {r2, r3/1000+30000}, {0x0, 0x8, 0x1f, 0x5, 0x4, 0x3308, "abba0073"}, 0x0, 0x5, @userptr=0x4963, 0x4})
r4 = socket$alg(0x26, 0x5, 0x0)
recvmmsg(r4, &(0x7f0000001d80)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000180)=""/118, 0x76}, {&(0x7f0000000300)=""/214, 0xd6}, {&(0x7f0000000200)=""/7, 0x7}, {&(0x7f0000000240)=""/56, 0x38}, {&(0x7f0000000400)=""/88, 0x58}], 0x5}}, {{&(0x7f0000000500)=@pptp={0x18, 0x2, {0x0, @multicast2}}, 0x80, &(0x7f0000000900)=[{&(0x7f0000000280)=""/32, 0x20}, {&(0x7f0000000680)=""/231, 0xe7}, {&(0x7f0000000780)=""/111, 0x6f}, {0x0}], 0x4}, 0x8}, {{&(0x7f0000000b40)=@pptp={0x18, 0x2, {0x0, @broadcast}}, 0x80, &(0x7f0000000980), 0x0, &(0x7f0000000c80)=""/45, 0x2d}, 0x6b1b0c6e}, {{&(0x7f0000000cc0)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000000d40), 0x0, &(0x7f0000000d80)=""/162, 0xa2}, 0x10001}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001680)=""/117, 0x75}}, {{&(0x7f0000001700)=@alg, 0x80, &(0x7f0000001980)=[{&(0x7f0000001780)=""/22, 0x16}, {&(0x7f00000018c0)=""/36, 0x24}, {&(0x7f0000001900)=""/112, 0x70}], 0x3, &(0x7f00000019c0)=""/154, 0x9a}, 0x8}, {{0x0, 0x0, &(0x7f0000001c80)=[{&(0x7f0000001a80)=""/152, 0x98}, {0x0}, {&(0x7f0000001c00)=""/51, 0x33}, {&(0x7f0000001c40)=""/58, 0x3a}], 0x4, &(0x7f0000001cc0)=""/183, 0xb7}, 0x7}], 0x7, 0x40, 0x0)
ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f00000000c0))
bind$alg(r4, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha512\x00'}, 0x58)
r5 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x1)
mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x1000, &(0x7f00000009c0)=ANY=[@ANYBLOB=',smacknse(/input/mice\x00,don\x00\x00\x00\x00\x00\x00\x00\x00bj_role=/dev/input/mice\x00,ap'])
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000ff8000), 0x0)
socket$alg(0x26, 0x5, 0x0)
r6 = accept$alg(r4, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r5, 0xc0045516, &(0x7f00000002c0)=0x6)
recvmmsg(r6, &(0x7f0000001280)=[{{&(0x7f0000000ec0)=@nl=@proc, 0x34e, &(0x7f0000001180)=[{&(0x7f0000001080)=""/251, 0xfb}], 0x11, &(0x7f00000011c0)=""/157, 0x9d}}], 0x1500, 0x0, &(0x7f0000001380)={0x77359400})

[  163.218298][ T7866] kcapi: driver "" not loaded.
04:31:23 executing program 1:
socket$inet6_dccp(0xa, 0x6, 0x0)
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x0, 0x20000)
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='smaps_rollup\x00')
mlockall(0x1)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xffffffffffffffff, 0x32, 0xffffffffffffffff, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
readv(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/76, 0x4c}], 0x28f)

04:31:23 executing program 2:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="2e0000001d008107e00f80ecdb4cb9d96b63190400000000000000fb120001000e00da1b40d819a9060015000000", 0x2e}], 0x1}, 0x0)

04:31:23 executing program 5:
r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x4, 0x0)
ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000000)={0x98f900, 0x78, 0x0, [], &(0x7f0000000040)={0x98f90a, 0x0, [], @ptr}})

04:31:23 executing program 0:
socket$inet6_dccp(0xa, 0x6, 0x0)
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x0, 0x20000)
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='smaps_rollup\x00')
mlockall(0x1)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xffffffffffffffff, 0x32, 0xffffffffffffffff, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
readv(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/76, 0x4c}], 0x28f)

04:31:23 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
faccessat(0xffffffffffffffff, 0x0, 0x2, 0x0)
dup(0xffffffffffffffff)
add_key(&(0x7f0000000080)='trusted\x00', &(0x7f00000000c0)={'syz'}, 0x0, 0x0, 0x0)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0)
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/snapshot\x00', 0x80001, 0x0)
timerfd_gettime(r0, &(0x7f0000000140))
quotactl(0x9, 0x0, 0x0, &(0x7f0000000680)="4700009c7f75068b89b083eb0cdc5c445bd84c497e0bdfc5ab801ac98a179517dd5b120c1b94962bb66a7b7e10179261de1d38599dd4579c5c19136642af97cd7d2fb3d2029d0124c54fd88b1415f4ffff0000b298fa04b026d14c6eb1b64712b38e96c53d56e4345c166c226a6776e5d9081521074860b07ebdcb2e656c95a411b68aa8fca8956a7960060a")

04:31:23 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f000000bff6)='/dev/dsp#\x00', 0x1, 0x2)
ioctl$int_in(r1, 0x800000c0045006, &(0x7f0000595ff8))
close(r1)

[  163.653978][ T7875] netlink: 26 bytes leftover after parsing attributes in process `syz-executor2'.
04:31:23 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f000000bff6)='/dev/dsp#\x00', 0x1, 0x2)
ioctl$int_in(r1, 0x800000c0045006, &(0x7f0000595ff8))
close(r1)

04:31:23 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f000000bff6)='/dev/dsp#\x00', 0x1, 0x2)
ioctl$int_in(r1, 0x800000c0045006, &(0x7f0000595ff8))
close(r1)

04:31:24 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f000000bff6)='/dev/dsp#\x00', 0x1, 0x2)
ioctl$int_in(r1, 0x800000c0045006, &(0x7f0000595ff8))
close(r1)

04:31:24 executing program 0:
socket$inet6_dccp(0xa, 0x6, 0x0)
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x0, 0x20000)
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='smaps_rollup\x00')
mlockall(0x1)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xffffffffffffffff, 0x32, 0xffffffffffffffff, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
readv(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/76, 0x4c}], 0x28f)

04:31:24 executing program 1:
socket$inet6_dccp(0xa, 0x6, 0x0)
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x0, 0x20000)
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='smaps_rollup\x00')
mlockall(0x1)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xffffffffffffffff, 0x32, 0xffffffffffffffff, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
readv(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/76, 0x4c}], 0x28f)

04:31:24 executing program 0:
socket$inet6_dccp(0xa, 0x6, 0x0)
syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x0, 0x20000)
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='smaps_rollup\x00')
mlockall(0x1)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xffffffffffffffff, 0x32, 0xffffffffffffffff, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
readv(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/76, 0x4c}], 0x28f)

04:31:28 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f000000bff6)='/dev/dsp#\x00', 0x1, 0x2)
ioctl$int_in(r1, 0x800000c0045006, &(0x7f0000595ff8))
close(r1)

04:31:28 executing program 4:
mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0)
clone(0x0, &(0x7f00000004c0), 0x0, 0x0, 0x0)
waitid(0x0, 0x0, &(0x7f0000002ff9), 0xc1000006, 0x0)

04:31:28 executing program 2:
r0 = syz_open_dev$midi(&(0x7f0000000700)='/dev/midi#\x00', 0x9, 0x141002)
getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0)
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, 0x0)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000780)='/dev/vhost-vsock\x00', 0x2, 0x0)
clone(0x100002102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000740)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCDELDLCI(0xffffffffffffffff, 0x8981, 0x0)
dup2(r3, r1)
write$binfmt_misc(r2, &(0x7f00000000c0)=ANY=[], 0x7fffffff)
setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, 0x0, 0x0)
ioctl$VIDIOC_SUBDEV_G_FMT(0xffffffffffffffff, 0xc0585604, &(0x7f00000007c0)={0x0, 0x0, {0x6974, 0x80000000, 0x201a, 0x8, 0x0, 0x8, 0x0, 0x5}})
recvfrom(r2, 0x0, 0x0, 0x0, 0x0, 0x0)
recvfrom(r3, &(0x7f0000000180)=""/184, 0xfffffffffffffd84, 0x10100, 0x0, 0xfffffffffffffd51)

04:31:28 executing program 3:
r0 = socket$inet6(0xa, 0x803, 0x3)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070")
r1 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r1, &(0x7f00000000c0)={0x18, 0x0, {0x1, @random="a14ab814f78a", 'ip6_vti0\x00'}}, 0x1e)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xffffffffffffffff, 0x32, 0xffffffffffffffff, 0x0)
ioctl$PPPIOCGMRU(r1, 0x80047453, &(0x7f0000000100))

04:31:28 executing program 1:
r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000100))

04:31:28 executing program 0:
r0 = open(&(0x7f000000fffa)='./bus\x00', 0x141044, 0x0)
open_by_handle_at(r0, &(0x7f0000000080)={0x9, 0x2, '\b'}, 0x0)

04:31:28 executing program 3:
r0 = socket$inet6(0xa, 0x803, 0x3)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070")
r1 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r1, &(0x7f00000000c0)={0x18, 0x0, {0x1, @random="a14ab814f78a", 'ip6_vti0\x00'}}, 0x1e)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xffffffffffffffff, 0x32, 0xffffffffffffffff, 0x0)
ioctl$PPPIOCGMRU(r1, 0x80047453, &(0x7f0000000100))

04:31:28 executing program 0:
r0 = open(&(0x7f000000fffa)='./bus\x00', 0x141044, 0x0)
open_by_handle_at(r0, &(0x7f0000000080)={0x9, 0x2, '\b'}, 0x0)

04:31:28 executing program 1:
r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000100))

04:31:29 executing program 3:
r0 = socket$inet6(0xa, 0x803, 0x3)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070")
r1 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r1, &(0x7f00000000c0)={0x18, 0x0, {0x1, @random="a14ab814f78a", 'ip6_vti0\x00'}}, 0x1e)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xffffffffffffffff, 0x32, 0xffffffffffffffff, 0x0)
ioctl$PPPIOCGMRU(r1, 0x80047453, &(0x7f0000000100))

04:31:29 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f000000bff6)='/dev/dsp#\x00', 0x1, 0x2)
ioctl$int_in(r1, 0x800000c0045006, &(0x7f0000595ff8))
close(r1)

04:31:29 executing program 0:
r0 = open(&(0x7f000000fffa)='./bus\x00', 0x141044, 0x0)
open_by_handle_at(r0, &(0x7f0000000080)={0x9, 0x2, '\b'}, 0x0)

04:31:29 executing program 1:
r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000100))

04:31:29 executing program 4:
mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0)
clone(0x0, &(0x7f00000004c0), 0x0, 0x0, 0x0)
waitid(0x0, 0x0, &(0x7f0000002ff9), 0xc1000006, 0x0)

04:31:29 executing program 2:
r0 = syz_open_dev$midi(&(0x7f0000000700)='/dev/midi#\x00', 0x9, 0x141002)
getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0)
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, 0x0)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000780)='/dev/vhost-vsock\x00', 0x2, 0x0)
clone(0x100002102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000740)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCDELDLCI(0xffffffffffffffff, 0x8981, 0x0)
dup2(r3, r1)
write$binfmt_misc(r2, &(0x7f00000000c0)=ANY=[], 0x7fffffff)
setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, 0x0, 0x0)
ioctl$VIDIOC_SUBDEV_G_FMT(0xffffffffffffffff, 0xc0585604, &(0x7f00000007c0)={0x0, 0x0, {0x6974, 0x80000000, 0x201a, 0x8, 0x0, 0x8, 0x0, 0x5}})
recvfrom(r2, 0x0, 0x0, 0x0, 0x0, 0x0)
recvfrom(r3, &(0x7f0000000180)=""/184, 0xfffffffffffffd84, 0x10100, 0x0, 0xfffffffffffffd51)

04:31:29 executing program 0:
r0 = open(&(0x7f000000fffa)='./bus\x00', 0x141044, 0x0)
open_by_handle_at(r0, &(0x7f0000000080)={0x9, 0x2, '\b'}, 0x0)

04:31:29 executing program 1:
r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000100))

04:31:29 executing program 3:
r0 = socket$inet6(0xa, 0x803, 0x3)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070")
r1 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r1, &(0x7f00000000c0)={0x18, 0x0, {0x1, @random="a14ab814f78a", 'ip6_vti0\x00'}}, 0x1e)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xffffffffffffffff, 0x32, 0xffffffffffffffff, 0x0)
ioctl$PPPIOCGMRU(r1, 0x80047453, &(0x7f0000000100))

04:31:29 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f023c123f3188a070")
r1 = syz_open_dev$dspn(&(0x7f000000bff6)='/dev/dsp#\x00', 0x1, 0x2)
ioctl$int_in(r1, 0x800000c0045006, &(0x7f0000595ff8))
close(r1)

04:31:29 executing program 4:
mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0)
clone(0x0, &(0x7f00000004c0), 0x0, 0x0, 0x0)
waitid(0x0, 0x0, &(0x7f0000002ff9), 0xc1000006, 0x0)

04:31:29 executing program 1:
r0 = syz_open_dev$midi(&(0x7f0000000700)='/dev/midi#\x00', 0x9, 0x141002)
getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0)
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, 0x0)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000780)='/dev/vhost-vsock\x00', 0x2, 0x0)
clone(0x100002102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000740)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCDELDLCI(0xffffffffffffffff, 0x8981, 0x0)
dup2(r3, r1)
write$binfmt_misc(r2, &(0x7f00000000c0)=ANY=[], 0x7fffffff)
setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, 0x0, 0x0)
ioctl$VIDIOC_SUBDEV_G_FMT(0xffffffffffffffff, 0xc0585604, &(0x7f00000007c0)={0x0, 0x0, {0x6974, 0x80000000, 0x201a, 0x8, 0x0, 0x8, 0x0, 0x5}})
recvfrom(r2, 0x0, 0x0, 0x0, 0x0, 0x0)
recvfrom(r3, &(0x7f0000000180)=""/184, 0xfffffffffffffd84, 0x10100, 0x0, 0xfffffffffffffd51)

04:31:29 executing program 3:
r0 = syz_open_dev$midi(&(0x7f0000000700)='/dev/midi#\x00', 0x9, 0x141002)
getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0)
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, 0x0)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000780)='/dev/vhost-vsock\x00', 0x2, 0x0)
clone(0x100002102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000740)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCDELDLCI(0xffffffffffffffff, 0x8981, 0x0)
dup2(r3, r1)
write$binfmt_misc(r2, &(0x7f00000000c0)=ANY=[], 0x7fffffff)
setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, 0x0, 0x0)
ioctl$VIDIOC_SUBDEV_G_FMT(0xffffffffffffffff, 0xc0585604, &(0x7f00000007c0)={0x0, 0x0, {0x6974, 0x80000000, 0x201a, 0x8, 0x0, 0x8, 0x0, 0x5}})
recvfrom(r2, 0x0, 0x0, 0x0, 0x0, 0x0)
recvfrom(r3, &(0x7f0000000180)=""/184, 0xfffffffffffffd84, 0x10100, 0x0, 0xfffffffffffffd51)

04:31:29 executing program 0:
r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
clone(0x7ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
fstat(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0})
setresgid(0x0, 0x0, r1)
r2 = getpid()
exit_group(0x0)
prlimit64(r2, 0x0, 0x0, 0x0)

04:31:29 executing program 4:
mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0)
clone(0x0, &(0x7f00000004c0), 0x0, 0x0, 0x0)
waitid(0x0, 0x0, &(0x7f0000002ff9), 0xc1000006, 0x0)

04:31:29 executing program 5:
ioctl$sock_x25_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000680)={@remote, 0x0, 'syz_tun\x00'})
shmget(0x1, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x180000, 0x0, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
r0 = openat$autofs(0xffffffffffffff9c, 0x0, 0x101000, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
r2 = socket$packet(0x11, 0x80003, 0x300)
setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000080)=0x1b4, 0x4)
recvmmsg(r2, &(0x7f0000000040), 0x191, 0x12000, 0x0)
r3 = epoll_create1(0x0)
getpeername(r0, &(0x7f0000000380)=@ipx, &(0x7f0000000080)=0x80)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000180))
umount2(&(0x7f0000000040)='./file0\x00', 0x0)
syz_genetlink_get_family_id$fou(0x0)
sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4400288}, 0xc, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="000329bd7000fcdbdf250200000004000500"], 0x1}, 0x1, 0x0, 0x0, 0x48804}, 0x0)

04:31:30 executing program 0:
r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
clone(0x7ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
fstat(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0})
setresgid(0x0, 0x0, r1)
r2 = getpid()
exit_group(0x0)
prlimit64(r2, 0x0, 0x0, 0x0)

[  170.646477][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  170.652449][    C1] protocol 88fb is buggy, dev hsr_slave_1
[  170.807260][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  170.813076][    C1] protocol 88fb is buggy, dev hsr_slave_1
[  170.886297][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  170.892111][    C1] protocol 88fb is buggy, dev hsr_slave_1
04:31:30 executing program 2:
r0 = syz_open_dev$midi(&(0x7f0000000700)='/dev/midi#\x00', 0x9, 0x141002)
getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0)
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, 0x0)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000780)='/dev/vhost-vsock\x00', 0x2, 0x0)
clone(0x100002102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000740)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCDELDLCI(0xffffffffffffffff, 0x8981, 0x0)
dup2(r3, r1)
write$binfmt_misc(r2, &(0x7f00000000c0)=ANY=[], 0x7fffffff)
setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, 0x0, 0x0)
ioctl$VIDIOC_SUBDEV_G_FMT(0xffffffffffffffff, 0xc0585604, &(0x7f00000007c0)={0x0, 0x0, {0x6974, 0x80000000, 0x201a, 0x8, 0x0, 0x8, 0x0, 0x5}})
recvfrom(r2, 0x0, 0x0, 0x0, 0x0, 0x0)
recvfrom(r3, &(0x7f0000000180)=""/184, 0xfffffffffffffd84, 0x10100, 0x0, 0xfffffffffffffd51)

04:31:30 executing program 0:
r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
clone(0x7ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
fstat(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0})
setresgid(0x0, 0x0, r1)
r2 = getpid()
exit_group(0x0)
prlimit64(r2, 0x0, 0x0, 0x0)

04:31:30 executing program 4:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[]}}, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open$cgroup(&(0x7f0000000400)={0x7, 0x70, 0x0, 0x0, 0x800, 0x0, 0x0, 0x101, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0xdf, 0x80, 0x1ce70000000, 0x75ea, 0x0, 0xa6, 0x0, 0x0, 0x9, 0xa2, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x4, 0x0, 0x0, 0x8, 0x1000, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000000000000000000105000600200000000a00000000000000000500e50000070000001f000000000000030000000000000200010000000000000000020000000005000500000000000a00000000000000ff1700000000000000000000000000170000000000000000"], 0x80}}, 0x0)
sendmmsg(r0, &(0x7f0000000180), 0x400000000000117, 0x0)

04:31:30 executing program 5:
ioctl$sock_x25_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000680)={@remote, 0x0, 'syz_tun\x00'})
shmget(0x1, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x180000, 0x0, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
r0 = openat$autofs(0xffffffffffffff9c, 0x0, 0x101000, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
r2 = socket$packet(0x11, 0x80003, 0x300)
setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000080)=0x1b4, 0x4)
recvmmsg(r2, &(0x7f0000000040), 0x191, 0x12000, 0x0)
r3 = epoll_create1(0x0)
getpeername(r0, &(0x7f0000000380)=@ipx, &(0x7f0000000080)=0x80)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000180))
umount2(&(0x7f0000000040)='./file0\x00', 0x0)
syz_genetlink_get_family_id$fou(0x0)
sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4400288}, 0xc, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="000329bd7000fcdbdf250200000004000500"], 0x1}, 0x1, 0x0, 0x0, 0x48804}, 0x0)

04:31:30 executing program 1:
r0 = syz_open_dev$midi(&(0x7f0000000700)='/dev/midi#\x00', 0x9, 0x141002)
getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0)
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, 0x0)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000780)='/dev/vhost-vsock\x00', 0x2, 0x0)
clone(0x100002102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000740)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCDELDLCI(0xffffffffffffffff, 0x8981, 0x0)
dup2(r3, r1)
write$binfmt_misc(r2, &(0x7f00000000c0)=ANY=[], 0x7fffffff)
setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, 0x0, 0x0)
ioctl$VIDIOC_SUBDEV_G_FMT(0xffffffffffffffff, 0xc0585604, &(0x7f00000007c0)={0x0, 0x0, {0x6974, 0x80000000, 0x201a, 0x8, 0x0, 0x8, 0x0, 0x5}})
recvfrom(r2, 0x0, 0x0, 0x0, 0x0, 0x0)
recvfrom(r3, &(0x7f0000000180)=""/184, 0xfffffffffffffd84, 0x10100, 0x0, 0xfffffffffffffd51)

04:31:30 executing program 3:
r0 = syz_open_dev$midi(&(0x7f0000000700)='/dev/midi#\x00', 0x9, 0x141002)
getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0)
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, 0x0)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000780)='/dev/vhost-vsock\x00', 0x2, 0x0)
clone(0x100002102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000740)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCDELDLCI(0xffffffffffffffff, 0x8981, 0x0)
dup2(r3, r1)
write$binfmt_misc(r2, &(0x7f00000000c0)=ANY=[], 0x7fffffff)
setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, 0x0, 0x0)
ioctl$VIDIOC_SUBDEV_G_FMT(0xffffffffffffffff, 0xc0585604, &(0x7f00000007c0)={0x0, 0x0, {0x6974, 0x80000000, 0x201a, 0x8, 0x0, 0x8, 0x0, 0x5}})
recvfrom(r2, 0x0, 0x0, 0x0, 0x0, 0x0)
recvfrom(r3, &(0x7f0000000180)=""/184, 0xfffffffffffffd84, 0x10100, 0x0, 0xfffffffffffffd51)

04:31:30 executing program 0:
r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
clone(0x7ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
fstat(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0})
setresgid(0x0, 0x0, r1)
r2 = getpid()
exit_group(0x0)
prlimit64(r2, 0x0, 0x0, 0x0)

04:31:31 executing program 4:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[]}}, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open$cgroup(&(0x7f0000000400)={0x7, 0x70, 0x0, 0x0, 0x800, 0x0, 0x0, 0x101, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0xdf, 0x80, 0x1ce70000000, 0x75ea, 0x0, 0xa6, 0x0, 0x0, 0x9, 0xa2, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x4, 0x0, 0x0, 0x8, 0x1000, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000000000000000000105000600200000000a00000000000000000500e50000070000001f000000000000030000000000000200010000000000000000020000000005000500000000000a00000000000000ff1700000000000000000000000000170000000000000000"], 0x80}}, 0x0)
sendmmsg(r0, &(0x7f0000000180), 0x400000000000117, 0x0)

04:31:31 executing program 0:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[]}}, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open$cgroup(&(0x7f0000000400)={0x7, 0x70, 0x0, 0x0, 0x800, 0x0, 0x0, 0x101, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0xdf, 0x80, 0x1ce70000000, 0x75ea, 0x0, 0xa6, 0x0, 0x0, 0x9, 0xa2, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x4, 0x0, 0x0, 0x8, 0x1000, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000000000000000000105000600200000000a00000000000000000500e50000070000001f000000000000030000000000000200010000000000000000020000000005000500000000000a00000000000000ff1700000000000000000000000000170000000000000000"], 0x80}}, 0x0)
sendmmsg(r0, &(0x7f0000000180), 0x400000000000117, 0x0)

04:31:31 executing program 4:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[]}}, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open$cgroup(&(0x7f0000000400)={0x7, 0x70, 0x0, 0x0, 0x800, 0x0, 0x0, 0x101, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0xdf, 0x80, 0x1ce70000000, 0x75ea, 0x0, 0xa6, 0x0, 0x0, 0x9, 0xa2, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x4, 0x0, 0x0, 0x8, 0x1000, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000000000000000000105000600200000000a00000000000000000500e50000070000001f000000000000030000000000000200010000000000000000020000000005000500000000000a00000000000000ff1700000000000000000000000000170000000000000000"], 0x80}}, 0x0)
sendmmsg(r0, &(0x7f0000000180), 0x400000000000117, 0x0)

04:31:31 executing program 0:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[]}}, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open$cgroup(&(0x7f0000000400)={0x7, 0x70, 0x0, 0x0, 0x800, 0x0, 0x0, 0x101, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0xdf, 0x80, 0x1ce70000000, 0x75ea, 0x0, 0xa6, 0x0, 0x0, 0x9, 0xa2, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x4, 0x0, 0x0, 0x8, 0x1000, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000000000000000000105000600200000000a00000000000000000500e50000070000001f000000000000030000000000000200010000000000000000020000000005000500000000000a00000000000000ff1700000000000000000000000000170000000000000000"], 0x80}}, 0x0)
sendmmsg(r0, &(0x7f0000000180), 0x400000000000117, 0x0)

[  171.581051][ T8048] ------------[ cut here ]------------
[  171.587669][ T8048] IRQs not disabled as expected
[  171.592826][ T8048] WARNING: CPU: 1 PID: 8048 at fs/eventpoll.c:1224 ep_poll_callback+0x77e/0x1450
[  171.601947][ T8048] Kernel panic - not syncing: panic_on_warn set ...
[  171.608566][ T8048] CPU: 1 PID: 8048 Comm: syz-executor5 Not tainted 5.0.0-rc1-next-20190108 #7
[  171.617412][ T8048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  171.627483][ T8048] Call Trace:
04:31:31 executing program 4:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[]}}, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open$cgroup(&(0x7f0000000400)={0x7, 0x70, 0x0, 0x0, 0x800, 0x0, 0x0, 0x101, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0xdf, 0x80, 0x1ce70000000, 0x75ea, 0x0, 0xa6, 0x0, 0x0, 0x9, 0xa2, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x4, 0x0, 0x0, 0x8, 0x1000, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000000000000000000105000600200000000a00000000000000000500e50000070000001f000000000000030000000000000200010000000000000000020000000005000500000000000a00000000000000ff1700000000000000000000000000170000000000000000"], 0x80}}, 0x0)
sendmmsg(r0, &(0x7f0000000180), 0x400000000000117, 0x0)

[  171.630788][ T8048]  dump_stack+0x1db/0x2d0
[  171.635132][ T8048]  ? dump_stack_print_info.cold+0x20/0x20
[  171.640883][ T8048]  ? ep_poll_callback+0x6f0/0x1450
[  171.646003][ T8048]  panic+0x2cb/0x65c
[  171.649934][ T8048]  ? add_taint.cold+0x16/0x16
[  171.654634][ T8048]  ? ep_poll_callback+0x77e/0x1450
[  171.656011][ T3865] kobject: 'loop4' (000000002219b615): kobject_uevent_env
[  171.659755][ T8048]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  171.659773][ T8048]  ? __probe_kernel_read+0x1f4/0x250
[  171.659791][ T8048]  ? __warn.cold+0x5/0x48
[  171.659806][ T8048]  ? ep_poll_callback+0x77e/0x1450
[  171.659819][ T8048]  __warn.cold+0x20/0x48
[  171.659830][ T8048]  ? ep_poll_callback+0x77e/0x1450
[  171.659842][ T8048]  report_bug+0x263/0x2b0
[  171.659858][ T8048]  do_error_trap+0x11b/0x200
[  171.659875][ T8048]  do_invalid_op+0x37/0x50
[  171.674839][ T3865] kobject: 'loop4' (000000002219b615): fill_kobj_path: path = '/devices/virtual/block/loop4'
[  171.678535][ T8048]  ? ep_poll_callback+0x77e/0x1450
[  171.678554][ T8048]  invalid_op+0x14/0x20
[  171.678568][ T8048] RIP: 0010:ep_poll_callback+0x77e/0x1450
[  171.678583][ T8048] Code: ff 44 89 ee e8 63 84 98 ff 45 84 ed 0f 85 4a fa ff ff e8 15 83 98 ff 48 c7 c7 00 69 56 88 c6 05 a1 b2 6e 08 01 e8 52 c8 61 ff <0f> 0b e9 2b fa ff ff e8 f6 82 98 ff 48 8d 7b 30 48 b8 00 00 00 00
[  171.678591][ T8048] RSP: 0018:ffff8880584ef6a0 EFLAGS: 00010282
[  171.678604][ T8048] RAX: 0000000000000000 RBX: ffff88809ad9aa80 RCX: ffffc9000fe47000
[  171.678613][ T8048] RDX: 000000000000d706 RSI: ffffffff816869f6 RDI: 0000000000000005
[  171.678623][ T8048] RBP: ffff8880584ef880 R08: ffff888058606440 R09: ffff888058606d30
[  171.678632][ T8048] R10: ffff888058606440 R11: 0000000000000000 R12: ffff8880584ef858
[  171.678640][ T8048] R13: 0000000000000000 R14: ffff88809ad9aad0 R15: 0000000000000000
[  171.678665][ T8048]  ? vprintk_func+0x86/0x189
[  171.678684][ T8048]  ? lockdep_hardirqs_on+0x415/0x5d0
[  171.811558][ T8048]  ? ep_send_events_proc+0xfa0/0xfa0
[  171.816829][ T8048]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[  171.822400][ T8048]  ? __bpf_trace_preemptirq_template+0x30/0x30
[  171.828644][ T8048]  ? add_lock_to_list.isra.0+0x450/0x450
[  171.834281][ T8048]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[  171.839757][ T8048]  ? __lock_is_held+0xb6/0x140
[  171.844530][ T8048]  __wake_up_common+0x1d3/0x7d0
[  171.849466][ T8048]  ? do_wait_intr+0x3c0/0x3c0
[  171.854140][ T8048]  ? rwlock_bug.part.0+0x90/0x90
[  171.859110][ T8048]  __wake_up_locked+0x11/0x20
[  171.863805][ T8048]  fuse_abort_conn+0xd01/0x1200
[  171.868663][ T8048]  ? mark_held_locks+0xb1/0x100
[  171.873526][ T8048]  ? lockdep_hardirqs_on+0x415/0x5d0
[  171.879100][ T8048]  ? end_requests+0x420/0x420
[  171.883911][ T8048]  ? __bpf_trace_preemptirq_template+0x30/0x30
[  171.890066][ T8048]  ? retint_kernel+0x2d/0x2d
[  171.894666][ T8048]  ? unregister_shrinker+0x26e/0x460
[  171.898166][ T3865] kobject: 'loop1' (00000000f91507d5): kobject_uevent_env
[  171.899969][ T8048]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[  171.899994][ T8048]  ? retint_kernel+0x2d/0x2d
[  171.900020][ T8048]  fuse_sb_destroy+0xd3/0x1d0
[  171.900038][ T8048]  fuse_kill_sb_anon+0x16/0x30
04:31:31 executing program 2:
r0 = syz_open_dev$midi(&(0x7f0000000700)='/dev/midi#\x00', 0x9, 0x141002)
getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0)
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, 0x0)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000780)='/dev/vhost-vsock\x00', 0x2, 0x0)
clone(0x100002102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000740)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCDELDLCI(0xffffffffffffffff, 0x8981, 0x0)
dup2(r3, r1)
write$binfmt_misc(r2, &(0x7f00000000c0)=ANY=[], 0x7fffffff)
setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, 0x0, 0x0)
ioctl$VIDIOC_SUBDEV_G_FMT(0xffffffffffffffff, 0xc0585604, &(0x7f00000007c0)={0x0, 0x0, {0x6974, 0x80000000, 0x201a, 0x8, 0x0, 0x8, 0x0, 0x5}})
recvfrom(r2, 0x0, 0x0, 0x0, 0x0, 0x0)
recvfrom(r3, &(0x7f0000000180)=""/184, 0xfffffffffffffd84, 0x10100, 0x0, 0xfffffffffffffd51)

04:31:31 executing program 1:
r0 = syz_open_dev$midi(&(0x7f0000000700)='/dev/midi#\x00', 0x9, 0x141002)
getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0)
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, 0x0)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000780)='/dev/vhost-vsock\x00', 0x2, 0x0)
clone(0x100002102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000740)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCDELDLCI(0xffffffffffffffff, 0x8981, 0x0)
dup2(r3, r1)
write$binfmt_misc(r2, &(0x7f00000000c0)=ANY=[], 0x7fffffff)
setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, 0x0, 0x0)
ioctl$VIDIOC_SUBDEV_G_FMT(0xffffffffffffffff, 0xc0585604, &(0x7f00000007c0)={0x0, 0x0, {0x6974, 0x80000000, 0x201a, 0x8, 0x0, 0x8, 0x0, 0x5}})
recvfrom(r2, 0x0, 0x0, 0x0, 0x0, 0x0)
recvfrom(r3, &(0x7f0000000180)=""/184, 0xfffffffffffffd84, 0x10100, 0x0, 0xfffffffffffffd51)

04:31:31 executing program 3:
r0 = syz_open_dev$midi(&(0x7f0000000700)='/dev/midi#\x00', 0x9, 0x141002)
getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0)
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, 0x0)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000780)='/dev/vhost-vsock\x00', 0x2, 0x0)
clone(0x100002102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000740)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCDELDLCI(0xffffffffffffffff, 0x8981, 0x0)
dup2(r3, r1)
write$binfmt_misc(r2, &(0x7f00000000c0)=ANY=[], 0x7fffffff)
setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, 0x0, 0x0)
ioctl$VIDIOC_SUBDEV_G_FMT(0xffffffffffffffff, 0xc0585604, &(0x7f00000007c0)={0x0, 0x0, {0x6974, 0x80000000, 0x201a, 0x8, 0x0, 0x8, 0x0, 0x5}})
recvfrom(r2, 0x0, 0x0, 0x0, 0x0, 0x0)
recvfrom(r3, &(0x7f0000000180)=""/184, 0xfffffffffffffd84, 0x10100, 0x0, 0xfffffffffffffd51)

[  171.918416][ T3865] kobject: 'loop1' (00000000f91507d5): fill_kobj_path: path = '/devices/virtual/block/loop1'
[  171.921849][ T8048]  deactivate_locked_super+0x9a/0x100
[  171.921867][ T8048]  deactivate_super+0x2ab/0x320
[  171.921884][ T8048]  ? mount_ns+0x1d0/0x1d0
[  171.921904][ T8048]  ? cpumask_next+0x41/0x50
[  171.935962][ T3865] kobject: 'loop3' (000000008cf8e25e): kobject_uevent_env
[  171.936798][ T8048]  ? __sanitizer_cov_trace_cmp4+0x16/0x20
[  171.936816][ T8048]  ? mnt_get_writers.isra.0+0xf9/0x150
[  171.936839][ T8048]  cleanup_mnt+0xbf/0x160
[  171.936856][ T8048]  __cleanup_mnt+0x16/0x20
[  171.936871][ T8048]  task_work_run+0x1f4/0x2b0
[  171.936887][ T8048]  ? task_work_cancel+0x2c0/0x2c0
[  171.936906][ T8048]  ? nsecs_to_jiffies+0x30/0x30
[  171.944915][ T3865] kobject: 'loop3' (000000008cf8e25e): fill_kobj_path: path = '/devices/virtual/block/loop3'
[  171.947102][ T8048]  ? do_syscall_64+0x8c/0x800
[  171.947142][ T8048]  exit_to_usermode_loop+0x32a/0x3b0
[  171.947162][ T8048]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  171.947179][ T8048]  ? syscall_trace_enter+0x12a0/0x12a0
[  171.947195][ T8048]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[  171.947225][ T8048]  do_syscall_64+0x696/0x800
[  171.989202][ T3865] kobject: 'loop2' (00000000b0fca6cd): kobject_uevent_env
[  171.992592][ T8048]  ? syscall_return_slowpath+0x5f0/0x5f0
[  171.992611][ T8048]  ? prepare_exit_to_usermode+0x232/0x3b0
[  171.992632][ T8048]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  171.992655][ T8048]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  172.004515][ T3865] kobject: 'loop2' (00000000b0fca6cd): fill_kobj_path: path = '/devices/virtual/block/loop2'
[  172.007613][ T8048] RIP: 0033:0x457ec9
[  172.007630][ T8048] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  172.007638][ T8048] RSP: 002b:00007fa97b41ac78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  172.007653][ T8048] RAX: 0000000000000000 RBX: 0000000000000002 RCX: 0000000000457ec9
[  172.007662][ T8048] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000040
[  172.007672][ T8048] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000
[  172.007681][ T8048] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fa97b41b6d4
[  172.007699][ T8048] R13: 00000000004c6ab2 R14: 00000000004dbdb8 R15: 00000000ffffffff
[  172.013466][ T8048] Kernel Offset: disabled
[  172.155970][ T8048] Rebooting in 86400 seconds..