[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 95.157753] audit: type=1800 audit(1547479753.207:25): pid=10551 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 95.176992] audit: type=1800 audit(1547479753.217:26): pid=10551 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 95.196430] audit: type=1800 audit(1547479753.227:27): pid=10551 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.238' (ECDSA) to the list of known hosts. 2019/01/14 15:29:29 fuzzer started 2019/01/14 15:29:34 dialing manager at 10.128.0.26:43953 2019/01/14 15:29:34 syscalls: 1 2019/01/14 15:29:34 code coverage: enabled 2019/01/14 15:29:34 comparison tracing: CONFIG_KCOV_ENABLE_COMPARISONS is not enabled 2019/01/14 15:29:34 setuid sandbox: enabled 2019/01/14 15:29:34 namespace sandbox: enabled 2019/01/14 15:29:34 Android sandbox: /sys/fs/selinux/policy does not exist 2019/01/14 15:29:34 fault injection: enabled 2019/01/14 15:29:34 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/01/14 15:29:34 net packet injection: enabled 2019/01/14 15:29:34 net device setup: enabled 15:33:00 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) syzkaller login: [ 323.112948] IPVS: ftp: loaded support on port[0] = 21 [ 323.279829] chnl_net:caif_netlink_parms(): no params data found [ 323.353998] bridge0: port 1(bridge_slave_0) entered blocking state [ 323.361034] bridge0: port 1(bridge_slave_0) entered disabled state [ 323.369802] device bridge_slave_0 entered promiscuous mode [ 323.379218] bridge0: port 2(bridge_slave_1) entered blocking state [ 323.385832] bridge0: port 2(bridge_slave_1) entered disabled state [ 323.394451] device bridge_slave_1 entered promiscuous mode [ 323.429294] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 323.441329] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 323.473651] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 323.482661] team0: Port device team_slave_0 added [ 323.489427] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 323.498221] team0: Port device team_slave_1 added [ 323.505331] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 323.514004] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 323.696920] device hsr_slave_0 entered promiscuous mode [ 323.862722] device hsr_slave_1 entered promiscuous mode [ 324.033077] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 324.040776] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 324.073343] bridge0: port 2(bridge_slave_1) entered blocking state [ 324.079924] bridge0: port 2(bridge_slave_1) entered forwarding state [ 324.087192] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.093784] bridge0: port 1(bridge_slave_0) entered forwarding state [ 324.194250] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 324.200394] 8021q: adding VLAN 0 to HW filter on device bond0 [ 324.216441] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 324.229522] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 324.242904] bridge0: port 1(bridge_slave_0) entered disabled state [ 324.253082] bridge0: port 2(bridge_slave_1) entered disabled state [ 324.266271] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 324.283768] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 324.289901] 8021q: adding VLAN 0 to HW filter on device team0 [ 324.306294] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 324.314153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 324.324620] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 324.332954] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.339462] bridge0: port 1(bridge_slave_0) entered forwarding state [ 324.357420] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 324.370356] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 324.379057] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 324.388279] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 324.396678] bridge0: port 2(bridge_slave_1) entered blocking state [ 324.403226] bridge0: port 2(bridge_slave_1) entered forwarding state [ 324.411073] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 324.429678] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 324.443557] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 324.457444] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 324.470885] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 324.479602] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 324.489029] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 324.498237] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 324.507829] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 324.517186] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 324.526445] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 324.535204] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 324.546169] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 324.566308] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 324.573371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 324.586721] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 324.606118] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 324.612888] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 324.647479] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 324.668719] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 324.815825] netlink: 4 bytes leftover after parsing attributes in process `syz-executor0'. 15:33:02 executing program 0: fcntl$getown(0xffffffffffffffff, 0x9) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r2 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x131f64) setsockopt$IPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x41, &(0x7f0000000140)={'mangle\x00', 0x2, [{}, {}]}, 0x48) clone(0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) capget(0x0, 0x0) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) 15:33:03 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1b) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x2000000, 0x10, 0xfa, r0}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 15:33:03 executing program 0: open(&(0x7f000000cff8)='./file0\x00', 0x80040, 0x0) r0 = open(&(0x7f000000cff8)='./file0\x00', 0x0, 0x0) fcntl$setlease(r0, 0x400, 0x0) close(r0) [ 325.189648] ptrace attach of "/root/syz-executor0"[10733] was attempted by "/root/syz-executor0"[10734] 15:33:03 executing program 0: clone(0x84007bf7, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() r1 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) r2 = dup(r1) ioctl$TIOCSBRK(r2, 0x40044591) mknod(&(0x7f00000000c0)='./file0\x00', 0x1142, 0x0) execve(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) ptrace(0x10, r0) r3 = creat(&(0x7f0000000200)='./file0\x00', 0x0) ioctl$BLKPG(r3, 0x1269, 0x0) ptrace(0x11, r0) 15:33:03 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x100000000) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000440), 0x0, 0x0) memfd_create(&(0x7f0000000100)='IPVS\x00', 0x2) r0 = socket$inet(0x2, 0x1, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000002c0)="20f9b4bdff4c86328408c63fe19c61bf", 0x10) setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) getxattr(0x0, 0x0, &(0x7f0000000780)=""/145, 0x91) 15:33:04 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ff9000/0x4000)=nil, 0x4000}, 0x1}) r2 = userfaultfd(0x0) close(r1) clone(0x0, 0x0, 0x0, 0x0, 0x0) read(r1, &(0x7f0000000400)=""/100, 0x64) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ff8000/0x3000)=nil, 0x3000}, 0x1}) close(r2) 15:33:04 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) r1 = syz_open_dev$mice(&(0x7f0000000300)='/dev/input/mice\x00', 0x0, 0x80000) getsockopt$netlink(r1, 0x10e, 0x8, &(0x7f0000000000)=""/12, &(0x7f0000000380)=0xc) sendto$inet(r0, &(0x7f0000000000), 0x0, 0xc000, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x3) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000000100), 0x4) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000001c0)=0x0) perf_event_open(&(0x7f0000000140)={0x7, 0x70, 0xfe84, 0x80000001, 0x5, 0x8, 0x0, 0x401, 0x21, 0x1, 0x3, 0x3, 0x7ff, 0x8, 0x82, 0xfffffffffffffffc, 0xb383, 0x9d7, 0x4, 0x5, 0x9, 0x7fff, 0x101, 0x3, 0xd38, 0x51e7, 0x1, 0x4, 0x80, 0x10000, 0x0, 0x9, 0x81, 0x18, 0x1, 0x0, 0x2, 0x6, 0x0, 0x8, 0x1, @perf_config_ext={0xfff, 0x1}, 0x20000, 0x8f87, 0x8, 0xa, 0x8, 0x2, 0x4b16}, r2, 0x6, r1, 0x3) sendmmsg(r0, &(0x7f0000004e00)=[{{0x0, 0x2d1, &(0x7f0000001f80), 0x0, &(0x7f0000000100)}}], 0x4000000000003d4, 0x0) 15:33:04 executing program 0: futex(&(0x7f0000000000), 0x0, 0x400000000000000, &(0x7f0000000040)={0x77359400}, 0x0, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x20) setsockopt$packet_int(r0, 0x107, 0xb, &(0x7f00000000c0), 0x4) 15:33:04 executing program 1: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x100, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0x8021, 0x3}) io_setup(0x200, &(0x7f0000000080)=0x0) io_getevents(r1, 0x8, 0x2, &(0x7f00000000c0)=[{}, {}], 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x113, 0x1000}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000180)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0x2a05b19, @mcast2, 0x80000000}, r2}}, 0x30) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x484) socket$tipc(0x1e, 0x0, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000200)={0x1, 0x10, 0xfa00, {&(0x7f00000001c0), r2}}, 0x18) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/autofs\x00', 0x40, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000280)={0xaa, 0x4}) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vga_arbiter\x00', 0x400, 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r4, 0x80045400, &(0x7f0000000300)) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r4, 0x84, 0x21, &(0x7f0000000340)=0x1, 0x4) ioctl$int_in(r4, 0x0, &(0x7f0000000380)=0x1) ioctl$RTC_WKALM_SET(r3, 0x4028700f, &(0x7f00000003c0)={0x1, 0x0, {0x23, 0x7, 0x11, 0xf, 0xa, 0x2, 0x1, 0x76, 0xffffffffffffffff}}) getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f0000000400), &(0x7f0000000440)=0x8) r5 = add_key$keyring(&(0x7f00000005c0)='keyring\x00', &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffff8) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f00000004c0)={'syz', 0x2}, &(0x7f0000000500)="7db01a13a8522732fa2296944e070e95a62bdf511722bcd3125af47c896d4295d474193c177214d13d33758fdf379bb217685fa2cec1bdb50948c5c495e1671c7c0554352db759b9f110cd5d7c7a7ab9ec468a3e40d3b269273ced019a391e67a4f4029cef00c8e02e4f5665403f703e8f716815be61b120f6493c0f35763c013643d7b9d0a199d863356b8a410eafb73948e3c717191d568f778f7e0992e2ff150bf5cb", 0xa4, r5) openat$cgroup_ro(r4, &(0x7f0000000640)='io.stat\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000680)='/dev/null\x00', 0x400000, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r3, 0x84, 0x6c, &(0x7f00000006c0)={0x0, 0x12, "1c2e7d6f821fd45141c30d515b77dafc1908"}, &(0x7f0000000700)=0x1a) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f0000000740)={r6, 0x3}, &(0x7f0000000780)=0x8) ioctl$KVM_GET_MP_STATE(r3, 0x8004ae98, &(0x7f00000007c0)) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000800)={r6, 0x2}, &(0x7f0000000840)=0x8) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000000880)={r7, 0x0, 0x9, [0x1000, 0x1ff, 0x3, 0x8, 0x39ff1b8c, 0xe98, 0x0, 0x5, 0x0]}, 0x1a) syz_genetlink_get_family_id$tipc2(&(0x7f00000008c0)='TIPCv2\x00') ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r3, 0x40045730, &(0x7f0000000900)=0x5) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000940)=0x1, 0x4) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000980)) [ 326.970993] IPVS: ftp: loaded support on port[0] = 21 [ 327.141689] chnl_net:caif_netlink_parms(): no params data found [ 327.221972] bridge0: port 1(bridge_slave_0) entered blocking state [ 327.228560] bridge0: port 1(bridge_slave_0) entered disabled state [ 327.237101] device bridge_slave_0 entered promiscuous mode [ 327.248059] bridge0: port 2(bridge_slave_1) entered blocking state [ 327.254654] bridge0: port 2(bridge_slave_1) entered disabled state [ 327.263160] device bridge_slave_1 entered promiscuous mode [ 327.301907] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 327.313981] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 327.349322] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 327.358158] team0: Port device team_slave_0 added [ 327.366658] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 327.376661] team0: Port device team_slave_1 added [ 327.385080] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 327.394307] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready 15:33:05 executing program 0: openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) getresgid(&(0x7f0000000040), 0xfffffffffffffffe, 0x0) clock_getres(0x7, &(0x7f0000000080)) [ 327.498106] device hsr_slave_0 entered promiscuous mode 15:33:05 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x38c, 0x4000) write$P9_RRENAMEAT(r1, &(0x7f00000002c0)={0x7, 0x4b, 0x1}, 0x7) ioctl$int_in(r1, 0x5452, &(0x7f00000001c0)=0x185e) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000280)=0x3, 0xfffffffffffffcf6) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = accept(r2, &(0x7f00000000c0)=@hci, &(0x7f0000000180)=0x1f5) getpeername$tipc(r3, &(0x7f0000000300), &(0x7f0000000200)=0x10) write$P9_RLERRORu(r1, &(0x7f0000000000)={0x17, 0x7, 0x2, {{0xa, '/dev/dsp#\x00'}, 0x7}}, 0x17) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r1, 0xc008551b, &(0x7f00000003c0)={0x1ff, 0x8, [0x7, 0x6030]}) sched_yield() mremap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000ffb000/0x4000)=nil) r4 = socket$packet(0x11, 0x6, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'team_slave_0\x00'}) ioctl$VIDIOC_QUERYBUF(r4, 0xc0585609, &(0x7f0000000340)={0x7ff, 0xb, 0x4, 0x100000, {}, {0x7, 0x8, 0x8, 0x8, 0x48000000, 0x2, "39bc6b99"}, 0x1, 0x7, @fd=r1, 0x4}) [ 327.613641] device hsr_slave_1 entered promiscuous mode [ 327.724273] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 327.731971] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 327.771984] bridge0: port 2(bridge_slave_1) entered blocking state [ 327.778504] bridge0: port 2(bridge_slave_1) entered forwarding state [ 327.785690] bridge0: port 1(bridge_slave_0) entered blocking state [ 327.792255] bridge0: port 1(bridge_slave_0) entered forwarding state 15:33:05 executing program 0: r0 = gettid() r1 = syz_open_dev$swradio(&(0x7f0000000140)='/dev/swradio#\x00', 0x0, 0x2) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_GET_INFO(r1, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, r2, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x44}, 0x800) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/247, 0xffffff50}], 0x1000000000000005, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r1, 0x4008ae48, &(0x7f0000000340)=0x100000) madvise(&(0x7f00001af000/0x3000)=nil, 0x3000, 0x2000000000012) set_tid_address(&(0x7f0000000200)) [ 327.926715] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 327.932939] 8021q: adding VLAN 0 to HW filter on device bond0 [ 327.961648] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 327.982189] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 328.013539] bridge0: port 1(bridge_slave_0) entered disabled state [ 328.030434] bridge0: port 2(bridge_slave_1) entered disabled state [ 328.045828] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 328.065133] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 328.071230] 8021q: adding VLAN 0 to HW filter on device team0 [ 328.106271] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 328.114558] bridge0: port 1(bridge_slave_0) entered blocking state [ 328.121053] bridge0: port 1(bridge_slave_0) entered forwarding state [ 328.135105] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 328.148192] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 328.157720] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 328.166631] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 328.175001] bridge0: port 2(bridge_slave_1) entered blocking state [ 328.181571] bridge0: port 2(bridge_slave_1) entered forwarding state [ 328.190081] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 328.205932] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 328.219368] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 328.233420] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 328.246124] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 328.253668] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 328.263016] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 328.272194] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 328.281076] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 328.290585] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 328.299391] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready 15:33:06 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = syz_open_dev$audion(&(0x7f0000000200)='/dev/audio#\x00', 0x101, 0x20080) connect$rds(r1, &(0x7f0000000240)={0x2, 0x4e20, @local}, 0x10) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f00000000c0), &(0x7f0000000100)=0x4) ioctl$sock_bt_bnep_BNEPCONNDEL(r1, 0x400442c9, &(0x7f00000002c0)={0x8000, @remote}) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000180)={0x0, 0x200}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r1, 0x84, 0x23, &(0x7f0000000140)={r2}, 0x8) [ 328.307912] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 328.318252] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 328.330468] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 328.342119] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 328.350432] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 328.377227] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 328.383467] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 328.433675] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 328.460271] 8021q: adding VLAN 0 to HW filter on device batadv0 15:33:06 executing program 0: syz_emit_ethernet(0x36, &(0x7f0000000080)={@broadcast, @dev, [], {@arp={0x806, @generic={0x6, 0x0, 0x6, 0x4, 0x0, @random="aadb1fdd7d57", "baa3971b", @local, "5c5109ed264c2cbb64537f8bc8aaeb75"}}}}, &(0x7f00000000c0)) r0 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x8, 0x8c000) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f0000000100)={0x8, 0x9, {0x54, 0x8, 0xffffffff00000001, {0x8, 0xffffffff}, {0x7fffffff, 0x7fffffff}, @ramp={0xffff, 0x5, {0x2, 0x4, 0x5, 0x5}}}, {0x53, 0xffff, 0x53a7, {0x100000001, 0x7a9e}, {0x0, 0x10000}, @ramp={0xfff, 0x9e2, {0x1, 0x91b, 0x401, 0x2}}}}) 15:33:06 executing program 0: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000002000c1fa00000000000700000a0000000000000000000000040000001400180069705f76746930000000000000000000"], 0x2e0}}, 0x0) 15:33:06 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/autofs\x00', 0x800, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f0000000700)=0x9, 0x8) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r1, 0x0, 0xc8, &(0x7f0000000040), 0x4) setsockopt$inet_int(r1, 0x0, 0x40000000000cc, &(0x7f0000000080), 0x4) 15:33:06 executing program 1: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = socket$inet(0x2, 0x2, 0x0) getsockopt$inet_int(r1, 0x88, 0xb, &(0x7f00006ed000), &(0x7f0000f24000)=0x3) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000500)='/proc/self/net/pfkey\x00', 0x101000, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r3, 0xc0086420, &(0x7f0000000600)={0x0}) ioctl$DRM_IOCTL_LOCK(r3, 0x4008642a, &(0x7f0000000580)={r4, 0x20}) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400200}, 0xc, &(0x7f0000000480)={&(0x7f0000000640)=ANY=[@ANYBLOB="f804433900daa86fb561e4c78130e669c530674fbbe7ec9c7e978ee4416e2d5e94c8a59694f455b7992af1168e4a0cfea91ddb9664edea52729fa1dd07fc0ba2214af94383d5cacb9a2c52d8d1de9ad49fa5a4e5523df7bba302bcb2f6d2b15b1bd70b185bdc64237552a445f4", @ANYRES16=r2, @ANYBLOB="000528bd7000fedbdf2503000000240007000c000300ffffff7f0000000008000200000000000c000400a300000000000000280002000400040008000100a00000000400040008000200090000000400040008000200800000006c00040014000700080002000900000008000300030000003c000700080004000600000008000400ec0800000800010007000000080001001c0000000800020000100000080001000300000008000200040000000c00010073797a31000000000c00010073797a310000000048000700080002000400000008000100090000000c0003000900000000000000080001000008000008000200090000000c00030001000000010000000c000400ff7f000000000000"], 0x114}, 0x1, 0x0, 0x0, 0x41}, 0x4000040) r5 = dup(r0) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') write$UHID_INPUT2(r5, &(0x7f0000000080)={0xc, 0x63, "3c7ccde725ba21aa395618fe052c2e839d6a1adf39f8d47a6f638ff123a722407a0d6a9ba45885d63232aee8d1e0d87a4dd2a04f74f5e7a1cf0efbe22924e013d27c30fc96e7825e8e48b2118b2873dc8a2f2234852a8aa67d2a10247241a326adaf10"}, 0x3b) sendmsg$TIPC_NL_LINK_GET(r5, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="c176b6a58ff4ca39d76276b759ffe56ee643e2440d7ff376bcc37ec122b0769217ea0acc521109a5fb0c9ebb9622fa09a31e84ff85674640481094569e4192bf70068af09fa292e6d78084218ae08b59abb17e0b2818506f693f001c8b282572227388fd83f248a19412b1fc5245d27234581828", @ANYRES16=r6, @ANYBLOB="000025bd7000ffdbdf25080000000c0009000800020000000000500002000800020002000000080002007a789d5a080001000600000008000200000000000800020009000000080002002603000004000400080002000300000008000200ffffff7f08000200d4000000"], 0x70}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) 15:33:07 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = dup(r0) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000002c0)={&(0x7f0000000140)=[0x800], 0x1, 0x2, 0x0, 0xfffffffffffffffd, 0x4, 0x1000, {0x9, 0xfffffffffffffffa, 0x200, 0x2, 0x100000001, 0x0, 0x4, 0x7, 0x101, 0xffffffffffffffe1, 0xe7, 0xffff, 0xe988, 0x3, "98c186c1a16e3e3b7cbf2c5c36a6ad7403319accc0447a4a39b57507ba2a6a49"}}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xfff, 0x2200) ioctl$VIDIOC_QUERYBUF(r3, 0xc0585609, &(0x7f00000000c0)={0x4c1b4370, 0x4, 0x4, 0x40000000, {}, {0x0, 0x8, 0x9, 0x4, 0x2, 0x2, "2715bf09"}, 0x5, 0x4, @planes=&(0x7f0000000080)={0x4, 0x80, @mem_offset=0x8, 0x26d}, 0x4}) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f00000001c0)={0x2, 0x0, @ioapic={0x0, 0x0, 0x0, 0xfd, 0x0, [{}, {}, {}, {}, {}, {}, {0x0, 0x219f}]}}) 15:33:07 executing program 1: r0 = socket(0x8000000011, 0x6, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000000000)={'raw\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) bind$packet(r0, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) openat$mixer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/mixer\x00', 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x400000, 0x0) fchmodat(r1, &(0x7f00000000c0)='./file0\x00', 0x4) fcntl$setstatus(r0, 0x4, 0x2800) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x80, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff08004500001c0000000000ffff78ac1414bbac14aa00009078e0000001"], 0x0) [ 329.115513] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/l1tf.html for details. 15:33:07 executing program 0: r0 = socket(0x10, 0x803, 0x0) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000000), 0x4) sendmsg$nl_route(r0, &(0x7f00000016c0)={&(0x7f0000000040), 0xc, &(0x7f0000001680)={&(0x7f00000015c0)=@ipv6_deladdr={0x34, 0x15, 0xc01, 0x0, 0x0, {}, [@IFA_FLAGS={0x8}, @IFA_LOCAL={0x14, 0x2, @remote}]}, 0x34}}, 0x0) 15:33:07 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$sock_inet_SIOCGIFBRDADDR(r1, 0x8919, &(0x7f0000000200)={'syz_tun\x00', {0x2, 0x0, @local}}) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000000), 0x4) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x2a00, 0x0) 15:33:07 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x80200000006, 0x0) r1 = syz_open_dev$video4linux(0x0, 0x0, 0x0) syz_emit_ethernet(0x2e, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)={0x1, 0x3, [0x964, 0x2eb, 0x1a5, 0xb7c]}) dup2(r1, r0) 15:33:07 executing program 0: setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000002c0)="0b8493da69d419d3e5a313affec5c48780fa42c0606761a2404a9a6c5a567525af09b4ae9ae6a36177018ff55a012c3fa3d9a196466f930c37b676633bbcdd54ad15d1d19aa5b95e6b797acddbacf7ed0796c0f196dfbb8bbe0d57cab508ca10839a", 0x62) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000004c0)='TIPC\x00') ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000005c0)={"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"}) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000280)) r3 = syz_open_dev$sndpcmc(&(0x7f0000000100)='/dev/snd/pcmC#D#c\x00', 0x3, 0x400) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000200)=0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000340)=0xc) r6 = getgid() r7 = getpid() getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000380)={{{@in6=@local, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6}}, &(0x7f0000000480)=0xe8) r9 = getgid() r10 = syz_open_dev$vivid(&(0x7f0000000500)='/dev/video#\x00', 0x0, 0x2) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000031c0)=0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000003200)={{{@in=@local, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@remote}}, &(0x7f0000003300)=0xe8) stat(&(0x7f0000003340)='./file0\x00', &(0x7f0000003380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000003440)={0xffffffffffffffff, 0xffffffffffffff9c, 0x0, 0x7, &(0x7f0000003400)='cpuset\x00'}, 0x30) stat(&(0x7f0000003480)='./file0\x00', &(0x7f00000034c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r16 = getgid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000003580)={0xffffffffffffffff, 0xffffffffffffff9c, 0x0, 0x5, &(0x7f0000003540)='TIPC\x00'}, 0x30) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f00000035c0)={{{@in=@dev, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@initdev}}, &(0x7f00000036c0)=0xe8) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000003700)={0x0, 0x0, 0x0}, &(0x7f0000003740)=0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000003c00)={0x0, 0xffffffffffffffff, 0x0, 0x10, &(0x7f0000003bc0)='vboxnet0[proc,*\x00'}, 0x30) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000003c40)={{{@in6=@ipv4={[], [], @loopback}, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@empty}}, &(0x7f0000003d40)=0xe8) r22 = getegid() ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000003d80)=0x0) getresuid(&(0x7f0000003dc0), &(0x7f0000003e00)=0x0, &(0x7f0000003e40)) stat(&(0x7f0000003e80)='./file0\x00', &(0x7f0000003ec0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r26 = getpid() r27 = getuid() lstat(&(0x7f0000003f40)='./file0\x00', &(0x7f0000003f80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000004000)=0x0) lstat(&(0x7f0000004040)='./file0\x00', &(0x7f0000004080)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f0000004100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fcntl$getownex(r1, 0x10, &(0x7f0000004180)={0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000041c0)={0x0, 0x0}, &(0x7f0000004200)=0xc) getgroups(0x4, &(0x7f0000004240)=[0xee00, 0xee00, 0xee01, 0xee00]) r35 = fcntl$getown(r2, 0x9) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000006980)={{{@in=@dev, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @multicast2}}, 0x0, @in=@multicast1}}, &(0x7f0000006a80)=0xe8) r37 = getegid() ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000006ac0)=0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000006b00)={{{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@local}}, &(0x7f0000006c00)=0xe8) stat(&(0x7f0000006c40)='./file0\x00', &(0x7f0000006c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000006d40)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x5, &(0x7f0000006d00)='TIPC\x00'}, 0x30) getresuid(&(0x7f0000006d80), &(0x7f0000006dc0), &(0x7f0000006e00)=0x0) getresgid(&(0x7f0000006e40), &(0x7f0000006e80), &(0x7f0000006ec0)=0x0) sendmmsg$unix(r3, &(0x7f0000006fc0)=[{&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f00000001c0), 0x0, &(0x7f00000009c0)=[@cred={0x20, 0x1, 0x2, r4, r5, r6}, @cred={0x20, 0x1, 0x2, r7, r8, r9}, @rights={0x20, 0x1, 0x1, [r0, r1, r1]}, @rights={0x18, 0x1, 0x1, [r1]}, @rights={0x20, 0x1, 0x1, [r10, r2, r2]}], 0x98, 0x4004000}, {&(0x7f0000000540)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000001c00)=[{&(0x7f0000000a80)="d01828074bcc3718e9a655da3a16b7a3b6f383390d6cd163d326542f3e877f55d6b5f85e6ab68ea96deebf9bed307ec40d29407a6a3173f70bf91045e83612ff561e305f1c6e796cbbd5bf66c28413f166ce4591746022acc98e9d29a52459b3ef2b6260cceaff5536cb6d4608d83cdee86f21ce6d350a06def020a4979cb187719e8e1f2dc1536a94ba0ca71b6324d668008c0c5ff2ee0984d95b28f0615e22e4", 0xa1}, {&(0x7f0000000b40)="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", 0x1000}, {&(0x7f0000001b40)="1b1c94a18f8d26baa7cb3fd3041296bb8ed4b9e05d24603fa24ac732b4f9dd52a65fdd096b4b94860b0561db196fa691602699f1ed72d5b8564cbffa21c19677f6bc4db9c72fd1af94dee18f06ed9bb526436f5176695a954a77af076d559061ddcc8ebc51e7b9d731b0281fdc64b3654805a3b88dd7ea0025bc652b7fd816db2d0a5cf8f6809d7969b35eee7618015475438e906899448f2e58d73e6cd1600196b05b1326973c80c0064f58fe1d139fad5693340602f707acfd4725a70055", 0xbf}], 0x3, 0x0, 0x0, 0x20000040}, {&(0x7f0000001c40)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000001e80)=[{&(0x7f0000001cc0)="699fbaf0c87f5c0165a67802781fed418f4ff6a410a8b0f7f95633e462230a93daf9228d2fa82eff9c38a00d41ce020b236cf2ac9d890cce8ecf9c369c336277bc7866e3bcf9e9d132896e7fad9f2a0f5427046abc72f97c19161fd668ccad6eaf880e258f3c2f2e596f96d0d6294525e3bf1d42e7922c278832d804fbf1d31ee14fc6760acaa6772461e4de163a124d", 0x90}, {&(0x7f0000001d80)="10ece706741a048f6fb9f7b6227c80e0146be95c1274cc3681c7bd50b0386ee8bb90a3a4b4e07e71fe54235a161ea68d305cd3766cdebb6d58a3539ec5459e4376c62de52cb4d3d1f40eac21a109adc9fbdee772a43891d952b29baf8d542cb0a67af11aa9b439cdd184c23e61cc7e36ac703f2adf5c42103ba3ea71ec9f2eb3be7204219212d4e292dbf8dcd7fc8157d24e9131318d7c0d9988ff974ec164139f17d00b7228b86731e3cabb2c717d032a5e2d209f3070e695e23aea13599d485c6e88b148eae8ac09deb48859345aefb551d20a34e0764d0f02a7874ca84656fe8ee372fe", 0xe5}], 0x2}, {&(0x7f0000001ec0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000003180)=[{&(0x7f0000001f40)="43a5c67a9388178dc6ac8f9a7a1c606106f81bc43c3b9b51eff19418c5e6c4581b7ae199db058b3c2d82e2bb2ddb8fed739a66286e3a930906842ee3dd523a1caa9dcc2ac683f409abfd881c36496f2b93222bbece0dad340fbd4e4ae31bbd460981618d46f566f8d2bad5e9d8439bd7ec3e3591e08a86afb31092db265208f5d7be96c6c7055fb8ca7fdc252388417e54a0d1a0a43c2f011bf705f22b44642228c230f5b873345c9803d1b0d16ca4d0dfe310419f8af69ffabeab394618258fff9d92a79f938d41933f1d6aafcd5425d0fbeb5085bdca54b2138d11dcca8916ee62ea2428ccf618a82afe005e01c9048a145baf330c3b6246cbd486a6bce20e376d28b825c06e5dfddc8907cc7d1fabbbdfdb63adf600d4052d8f4b9363ee93ea7578c963664aef79f35b518bbf62de6f3b50496688733bc53ca772f75c0ae85d0a6a3c52b45f76c924c716750979c24e83a1c71c99a2d559727392e6ddc1938d770041f8e05a5401f5ce3a31e990d84b99f01b84fc18e379b2ce41d2355510a422c0fc4f313abe1e9bcc237fca06e87349bdebe9211c7e5e57b038f99af4203ac1f874f3430174a05e6dcc1f107019f6fab73ea2d9143e0a62ffb0974410dd61b836c2dd4e184accaa65252a61c2dac9cd6e1769def45abfcaeb8daad9acb168e0378e3bf7aa6a8266d2ff15fd5d9bebd1f5c61c04a3f39afffd4d918f32578097aee3afcb5afcc65a6aeb56b12e0bc79e9e0c83e0ecdfdb0007e834ed1c4f1ba275bd9d98095a714e8afdd344acd87b967e567eecbf7f4969a9ad2495f34355bc4b52f1edd41b811b3a3555695bd703d560299e8b4549533267386792f5bc6815fe355034266882e80ceeaf473ec78ba93c3c7c93324a45950e9321f642ac522d33cb20103845655b6dfb1c6222c9ab0a4b2e36e23b40434c7fa975bae7b1854073836ede2bc77be674e78268c688426580c781a0771132eea850e8dc577a9a5787fe3408d2e7f8e04bd7f4331bfc1c9649164d63fecb5b5e868b78325699986093361cc996bfd99cef0e16eb5801513980dbca6af9c5618858fd447920855e1bc6ad3951613cf66cafcfb9365f113b91d94d6ea66a55bb7193b1037b412ea85a453d9f1121801ef86ab6b68813ec4b06f2fb7b68edbc6dff5f66c85d5b9b3b66bba623740468aa486907aeee997d57b06c7e5f2c4f1be755a1e1f2387892452b8e85ea0de94226dd3934b5863eb09b4378ac2b51092c9611349f529edb283c04729fa3c783ab3da1e7995283d4b1e8a2779954934bfd820dce6558264a80d316469de3965904640a63f5b3ef7d35352707901c10b48539ef795bc443fb53ff43a679a7dcf578070029da3a79b4a3148b730cfa4cec4c99c6211e0d4943c01fdc93984887211d67288105567f1bcae2554b7d583947f51789d5e9a90b0b93c34aae731eccdf9a24cf55770eb4931680165a68874e8f6b9ef51d4713c913c1c97154b79c86f136ff2096be13c5550bfc1771af1c946be14b0a86149063397ccc82952ef225d2702240ff746425f9466c312dd8abc7679f67a895fb96e0451a1506941c4aba2815755141f79321433f31e3371265d6edc4422dc56e21d1d65a531101164534ab7b7b200f07e4fe7757bfba5af18c6247cd15e74e0b2f46c7296e33f5688629afcd19bc4223cfb3fd4e55333fe52928e0ad37cc43ca88a8ace54a335c58c54379366e46dd29a2020b87fd3b80230dd9263a0e16944ad07c2606d04757931d339251a807c23d803012efcb6b0bc97b83c76569e6d2f7bf3d30a10a56d9ba5b8400c2db8b7058516f934ef843112f1495de1188cd203e54662f2e6e08148f715a35874ce9cd117b2fc630581388a11a9a524d9585ac0ff1695eee6c8f4e8e78b253447e3a199d00e8648bb54d5d5f98eceb34f97b3d43ee85ab586232df67290d035e0b17774e31f6f281abef5303c2b40fe48609034473d550ec9a7721d62387570cbdade47cf735be2161450c7d7f32f0197ada87d7653f99b2bd7b617e6691cbf1157eeefcf9c9c41fdadbb25595d6449623ba9e355b47464279e4b829f3126b068a7000f850c6594829c3e087a9ce6f0f47a2e62fc77e2b488b70db23ea918563dcf5afe7cea52d0ea948e1ab276931145e766c1a63cbb0e5051208ef60d5882c6fcddb85e63c7366c812e6f5cb0f0a3ab155e6349c4cc393929fbdb80b090ee512b2a85ab7090944b9e1150edc5ea7cf4d6d07da5abeefe60cebacd1283cb7b975178b038e0c334144b80da7c7bfa76ace5424c2a80c7b27d563c17b2c778610044ef34bf8829c2b6ebc9b66b5b879a153285f8a1845b8bbf3ffa6f08ab4eb0f051dc71609c8e14c040b263d6b8e68a21643c274df31b18aa3f674fea352a313597a4fecfc5e8606e4ea530d45ce303299aa7a85dd3fe3da256ff7fc0fbeebb9e864b231579f877726b0f61e00e0d6ae3450df21ca2721ac592ada25bc5549eb3057aaca2e3ed5ea03e6616886315e9a4b2b01df2d96cf9b429eb168d4d7374ad1a1993cce6119061945f732184082bff8b397642d9222be9a246aac38454578808f7e8936a7d4c0ce12c3ca9231441cfba6fc79d6de0fda8c117532426faf4fd60fab880a6daeba5118b52755f0a1219f470e4b41bfad3e971d73682bc88283f53eac75313c5b746be693d5110a890edd248c47b128b00b33834c0dc1eb3fc58a2139dabadf7510cf7ba0c18adc018095b12cb88068b64ddc539a9ff0bed3e7dd30e1c25d43bc66d701560cea8e879c8e97bd3e71a7b6e839c3517d1a482c3c4a11f9ab7ccfc08fc97972bab11fa272c2eca92506a78c21ee488719a558ec935c19ccd657884983f265a75a58ad6ec4c5b72e100ac8f192666564c7f9512374193a28fba8f1b5a976f4f4463e196d5a056fd7f58314a492ead26eeb4483460d30f9abe82b86da4b817aac137aa8548d1b67bf450761f06030aa36ae5b17952112ab8dcb1e04edb9226dbd9c9c73830ec5432a0f53bb53b3cc5a0715fcdd1c11ee7bcdf488b42576507e123e78360234d8dc7348c2f5cfed14299f9edf1fef9bc0867f4450bb6c6aec4892286b68ba8d3392fb9499aac682fb7b4dc9fd4295769721b5bbc5b4a9fb06e9fa615e9829a13b01f289cfd86b92ca987d8284719f8beb81e3b6c00dd325a5d42a073593e98065a99b12f1348bb38e7069fc6e9d2fa88f8a03b3ede8f3902d1586f2a80efa03d71e8dac070812ec7966634aacfbc0c83e15a42a6e90ced57db972a9962a84bd1e93c0053a8bcbda196ef1040529d256bfb7a12e950b8ccb43e0f06fcb1b327b5e0f1b750f4c3333755c9f6968c49385e4c632ee83dc4cf3479212bde0bab2e04c138abb61eea02f58d3d59174d3bd55b05f7ff8716cc16cf8c48c1f557f9d15c486dffb87aa72bf9bbb2a4b83beae83c35765aaf096b59e00d7f331d0243beb42bdff55236095f87b627bd4971bb7909dde1a06024764189ab1a2a2b99f6435bea66cf67a72f2411879522629e11b1fe0e77624c52a4dd7785e6e8e8c0d7f7db078c995de701806a8f1e2ebf2755973a19f8356f166445a2f2f31f4d96f1dc459bc43831ca435cfe3c7b476b17bf5d733b8e1ebefc36feaeecf724ed933984f5ffc5315d225790898cf368cf1c266cfce183f3cd5fb1a95548b28a223a89c954268dca7d6212c7a13cbfa96c7b8ae8e952be672fd58cf25981db6f816d788593d12d63cb6756fb258ab5a0c0f032ecb1b740e32ad179817244c1a13aae12ec2c58855030c15ffab3f67b0d1a39c8cce0e6f6e0a8162f6f43947cea5f4d84bcaea839c6d0ce0f7e64836854f4965454e96cf891e59101ab86538ff17471b2a7dd4c7ed6dc156fa3172a2c69f80d6b053b08b9bf5aa9fe943bf2bb8ca5c2c15f4fb533038199517610018fc4ead7ca940032fbd1a504adb054f3a1a4d54ac028c069c331c00b8e940d67cf92f376ee6b5e50f770838c69f3cb9de29130eda1c30d92642b0c35b5539836b52f7c078bf83d142b21423a54a1edcc2d66c20da42cb786a2a307061afa905bd88964053502c20461cca8fc9b159909abea2a4c2bc86ac22d7ed7a1045498bfc6863f3d69fc76fe13d44cd854aec6ccb55f03694c04d5edb7a49be78f2b18515501f3d7d38ee7966b6ea0e98e1438c2fd77cecd518ebde29e57e57b4956b51d9b13769885d30901c71204a58d43e795bf4650afb469161208aeb0cfa40728c3bca73eb0571dadd53bf5eda82c3f2f6ffc21c1e1dec74da9086229f1d5f84feea763c890bb0d84b61fd20cfcf331739f449cd72e967ebfe0284e07ae6435668ca0eb2690b3da06a20a2366365d084f1781fb2ce9ba4a45c5205f27b2a07b8b60b0453f42af9fd18504a08da1132ce97f2f9de053ff66ffb9ad791853cacf310bfaec8e2794ee36afcc01c97b5bcded937b162065d18aae963c9386fc599952145106f1d999aef3f8d0dc7b0e9fa3419fd4b41968c26ffc3c2f6106a468de3bba35747b39d638f659d175045d90e463dadb874c8da137b56560e8c0b3a13f50e86c59e349b64ad16c49be2d726da2e8907d2c70ff2e29b4366592895b90b2cead367036938c6610670533702a41164bfa64f755519c736633257cc74da2e025aa7d065b9abebfbe4489b0884951199cccd906b14d4d69a5ce8ce0901c6b67c4ebe449333b737fdbb8821def0949ea98e67e256ce93891167588e648c5e974326b8189f897eef5430f747b091646ec7e36ed5617f0a1ef5504888649df27333e69440a75aae80f99eb8b428dc6042fb2d2a0d0274e50554809e18c0d580f6925bd266e8d0ec13feb9606c01fe0e0253734a581f4a3ac97315823ed12206237e9f6bf50bba560ff74276d71ab6b4656aa5920f7822f569dcf990ce88b1f4831403c644f8c7180633c173209e56bd94a38fcc286961f02210d0edb116f21d70652bf16ac59eafb9517c81ab27aee0a677f73fc49d972a85253d80ba11b0f555967a0fc68df28d07419c191c6565551dba313123bd3bd196c924c9c7f2bd1a0162737d05f9f3720566b7cd091862d5052fd742244e8f7948991e46742dd831072ae458dbcd5b3f6e666527b668e64f518d42e8d537bc75f3c9e5b719e7cdf0e96db259aa5e6c2fe36a564d695834d10aac283061b290c29a7ffc23992f0e1fb6aac63bdd760eb185707523d57c25a505e80b7b85348474906f50be53e72c05c6b85e779e4d494437e2c3608a18e355d5bb70994afa4bb1c50b9119085c5662a7762a545af2f170d9d4d8b9ad653e6ed35c4bb5284b56e0c2ef978bab8f64f052b6e89f3c4603fbe0619edeb462ffed51896377330152c4ae7d147391156e3cc3621b4f86773bfbb9ebc354d1ffebbf3b934433848e6706085e97aaa628a0794a2b41f7d057589f7fad8dc0ac9f1997498b6a454415ebd60e48cd11f59fd26d02ef033f468d8655db4f0a727e77d1e995c6d134ce30e62275d199bcf32b421551ab35134e8ee3a870d81280bf9e7ddf89b53b42c5bf3342ca3f5325576a1fea4d586b6cc39469c8bf55081e028ac4acc84512a892ab0a98c3ecc8038761dabce82ba0241a0eb373c9c167986fe44c9bcda92734d91d576839882a4cc5280b5689bb4fb040a5a9ccab64c44641e4bd985ed5a03756cfd7f7c55973f17a82e634002f2fb19ef8376ade7b50038da99e6643c50141bf8681cc6ff6e3dcb0d769226cf1f55883ed5761bbf0f3eb8d47cad3a669f42bc7a86ca4d7b27c91dd83f36ed33f", 0x1000}, {&(0x7f0000002f40)="4ca76e39cad1b849fde5351cd9f86a6131487ab04f9a3fd69fbd89fc757cd50be2c4a5278aca7838a37f78e5", 0x2c}, {&(0x7f0000002f80)="dddeb80c7b18d0c5842f6c278010d698c1c0beee6312ebb62159805fcf83dc58d08a607a7295a2da727db97f42fc33413bb93239a9820c5c3db940241a249b90ba520eb261de9c7c4bdabbcbd7ad9eed76edea78fe28137f6c6eb12b4a2b14765bd783a63daf78817f3cd536097f03d193464d3ad390d694a5f9f91503b1ecb163d167434ca7875d755003734325117eae65815c683a7c486e9f28eb1c0caab4e6236dc8da2e3aa3ebb9af651ea13d9f8f09cbb9ae33576ef5932d3edddc8a3f52cf9e1d6d4d0a", 0xc7}, {&(0x7f0000003080)="aa7249d1bd4f1db9194678b06c2af71bf1c7cb1ef581d3832c695dd0557c47aded37eb057935b0642d29dc4e2e4fa1d68d0e135fedb0d75da772223bfd5b8ea7df42db0149b53f18da71f73e6da1c46feea8bac4435a2629c6c74cfbbd91dec2d2cb8b117aadb02929df2700564e798c15030aad427856278f4082769402fb0f2742131d64e21d41a8ea016c501af31dc45091a8e26c1e5d0f604998e407aaae8303d77f3f63043f80f37e4f2f3720fd1c5fec44c1c991c788187926b52dffc4e4466e6e1db046cd99269954c589e739fcccb956cea329b8fd4449303d03aa485c1117bd", 0xe4}], 0x4, &(0x7f0000003780)=[@cred={0x20, 0x1, 0x2, r11, r12, r13}, @rights={0x28, 0x1, 0x1, [r2, r0, r2, r2, r1, r0]}, @cred={0x20, 0x1, 0x2, r14, r15, r16}, @cred={0x20, 0x1, 0x2, r17, r18, r19}], 0x88, 0x24000804}, {&(0x7f0000003840)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000003b80)=[{&(0x7f00000038c0)="e73fe9fe6b0afed802557ffb0535d11164a205d47a574344901430fc6c5cb0a9725c74a73d2c338c9c4640d4e601c346e65d6e5efb1217695c0a224594186e25168f16ed67e6dff09b4b3ee8f1098f099ce379c12e5968b67aa0511a191c330f86d5ca6cfea0b0b7b6e7d3c8392051bf9cd54b32d33a8cd64187ecdfcf762e21725448d6d68a470a3f3c4c2cb06d126f704ecbc557691f49cb78f23561909ec866157faae0dc9421f3d338f5d1e79bfbb37cfbe2f41db92c3f0b2280285d12e1037c46297266375aaa028deff2c8a77d7486bd630e86f723599b4745627073f5443808ff08a5c267cdf4a5986f30c62dc832", 0xf2}, {&(0x7f00000039c0)="016188391745e0f3df70a32ecadd870c9e97dc24110482a82f887e020f82fc1bcfec1c1aab3f81675650c52e28f3977c5dc462a1a0747a9451645a58f55f4c277c8f38cb1d3abf231639e34403bd5aa2bcdca930e5239b6c49466de9fbd6855c859626bd", 0x64}, {&(0x7f0000003a40)="3db792774399b03217fcfc926e77e49a4b5620de58e3e6e22a2f6573504d1f5c0a00cadaf7f1515a78a95149bdb38b2eb94f93c4225c0a420463542c05db86ce5e44b9f274ee5713af607e3e3e7d57912003774ba7b70775a5b1700e2ce1dd1ea3a5c9c1e1c7adf8cf3c56765e70a84240543c39ecfc7546312ad6d5896965f00619544bd6ef0c68333a9856cf164c6bba33bb97ae22faef135515693565f437b7223755f0bf219a1edfdd3f81ddf174a3330c5eda44dc560f8febf2f6f2c8cfce97fc2ff98b1cbf3e0010adf268cf4253982a9a25736c54", 0xd8}, {&(0x7f0000003b40)="f1", 0x1}], 0x4, &(0x7f0000004280)=[@cred={0x20, 0x1, 0x2, r20, r21, r22}, @cred={0x20, 0x1, 0x2, r23, r24, r25}, @rights={0x20, 0x1, 0x1, [r2, r0, r1, r2]}, @cred={0x20, 0x1, 0x2, r26, r27, r28}, @cred={0x20, 0x1, 0x2, r29, r30, r31}, @cred={0x20, 0x1, 0x2, r32, r33, r34}], 0xc0, 0x4000004}, {&(0x7f0000004340)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000068c0)=[{&(0x7f00000043c0)="f1e8b999496eb81004df7071b2c0edab6d3f3c30cf16117b777844bbbf98ce5ed3f71f0ddfea884ebde22d1b1908a35b5658879919b29f9e96871ff550461c97b08bb4f5bff20a49394294767b656a8c", 0x50}, {&(0x7f0000004440)="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", 0x1000}, {&(0x7f0000005440)="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", 0x1000}, {&(0x7f0000006440)="60ba644000095f20a5ff28f84924b9908748a75be9086c7378dc1abf8004784e12fb43ca09ebe48cf5065397f9cc8df6943981c854a4435df5d0a8f17501af41ca610008eabab34b5a180d9cc51ff5f6187e0d41a0a97530dab50dd0b9914323a4f644eb761d81644abaf0f8aa90bc27f8854a3464e75ba13adc6556412d6d10c0a517cf8b43f3f20c6183fd6f34e6ad4b9d28", 0x93}, {&(0x7f0000006500)="d3e0803b36399d2a0a44fc262e970b336f4b3b2554b24af0e329dfb913ac4bde3670ca417643fcbe4f97dab8360936745b23cc77a99720b75259561e06397b2ddf5814ad82deef93ffbcd1d84e57a148fdec4c4ab058de6922cb53cc43a7f2e853e4edf90d4ae189f25d0e0dd01068b29860e93bcc472b6b67efe8", 0x7b}, {&(0x7f0000006580)="4860782d7490d3879b9637139f4708f22e1c64f583fb5ef7d8cb71259182dcd65460337375f76c3fcab52f99e36cd4e77c3d3eec8b71b9d69f86f4e149d98e47ae23fee82baee7727b469c0ef74ca6cfb6dd39e11e5d3455806f039b512611", 0x5f}, {&(0x7f0000006600)="f9eb792d7861d586d212955da023727d1e988f3ccd6f", 0x16}, {&(0x7f0000006640)="c5ec9f5aab726f0302dd4d234297dc10902378b6e0afaa45dbbcd4d50bc976f8d5eba6cffde4c6c13b7b1741f101d2fd50f5ade4aa049448832f3ac1a0d6582ff861dc595d6317707af3ac77fdf1e77430071c0f3a76da07c796bd42cc74f74675b12e77b1b6696093539739fbb6f5447e82abec76613cb1125458036635c3961cda2ec7d5bc3ea71d88d6c9477a9f52386d5e3e1c0309e2c161077c18f6006ddd72fc25507c94ed65563fb7bf7509caf5b9e12b01b7c0803e7e6ae21a58bd94860055ba84d653ae1145984468eb6119559bae1a8e510d44a3e754a6309634d624569fa790d72251b2be381cb4", 0xed}, {&(0x7f0000006740)="159795f11aa00aa3eef1cdc4712d627d664b1626f4c8b6db1469382e42718a77b726eda8446525bb5d1aebe9e8628dd2290f31ba578925db1f90c9a58e9d0d9a9ccc2f91461b652a0cf66c10ec81bef9f6d640e149926036825f949103cd4469ef9d79ace4a0570a7ddb76aae732d895c0ce30420fb54abb8803ccf6e0f67e3c429cdfc582e426b59bb9a74983eb991e23379657375598ac7b54ca9c0025855b71d41037fd4a18627395326eeaffcdf8a9567498ba4ae261f66fe4e66b", 0xbd}, {&(0x7f0000006800)="3eb6c054c79879803ab00797952898d51dc2fc891dea0aa46e378cb4c3a34b1aa293d16622376eb4974c11e06fd352500263400e63efc93bb834bbdb42c7ce47766b5f91d5ac3c17d4ad1d30f580cb1d4f98736b457ad37d19e55e0c8e275dfc60d320fea23206a36785230ecdc9666bc191b5345668630de60b025d642fff9cca75b6017034c307fa7cc41f25fda1a9ecc2dde4b75d1451a4396ecde57253d08f53766354c7b0f8c5bf2c046c38ba09568ef8241e54a359e8cbfeb942", 0xbd}], 0xa, &(0x7f0000006f00)=[@cred={0x20, 0x1, 0x2, r35, r36, r37}, @cred={0x20, 0x1, 0x2, r38, r39, r40}, @rights={0x18, 0x1, 0x1, [r0]}, @cred={0x20, 0x1, 0x2, r41, r42, r43}, @rights={0x18, 0x1, 0x1, [r1]}], 0x90, 0x8041}], 0x6, 0x40000) 15:33:07 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f00000002c0)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000006440)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000006000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffff0000000000000000000000000000000042d000000000000000000000"], 0xb8}}, 0x0) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x2d, 0x0, 0x0) 15:33:07 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x20000, 0x0) ioctl$sock_inet_sctp_SIOCINQ(r1, 0x541b, &(0x7f0000000100)) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000240)={0x18, 0x1d, 0xfffffffffffffffd, 0x0, 0x0, {0x7592da32}, [@generic="d0"]}, 0x18}}, 0x0) 15:33:07 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f0000000240)=0x10000000, 0x4) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000040)={'ah\x00'}, &(0x7f0000000080)=0x1e) r1 = syz_open_dev$cec(&(0x7f0000000100)='/dev/cec#\x00', 0x1, 0x2) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000440)={0x94, r2, 0x0, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x44, 0x2, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x431e}, @IPVS_DEST_ATTR_WEIGHT={0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x80}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x5}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x9}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x11, 0x2}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@dev={0xfe, 0x80, [], 0x1d}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x48800}, 0x20000000) r3 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x2) ioctl$EXT4_IOC_SWAP_BOOT(r3, 0x6611) ioctl$RTC_AIE_OFF(r0, 0x7002) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000000500)={'rose0\x00', {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x2a}}}) r4 = syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x8, 0x10000) ioctl$KVM_SET_FPU(r4, 0x41a0ae8d, &(0x7f0000000280)={[], 0x10000, 0x101, 0x8, 0x0, 0x4000000000000000, 0x1000, 0x4000, [], 0x8001}) [ 329.840884] netlink: 4 bytes leftover after parsing attributes in process `syz-executor1'. [ 329.896781] netlink: 4 bytes leftover after parsing attributes in process `syz-executor1'. 15:33:08 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x10401, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'eql\x00', 0x803}) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TUNSETLINK(r1, 0x400454cd, 0x301) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x101000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040), 0x111, 0x1009}}, 0x20) ioctl$sock_ifreq(r0, 0x8914, &(0x7f00000000c0)={'eql\x00\x00\x00\xa9[\x00', @ifru_mtu=0x1}) ioctl$VIDIOC_ENUMAUDIO(r3, 0xc0345641, &(0x7f0000000180)={0x6, "f8187c4430056597e52c431f132503557efcfb14f2adf592037d867aad4ca2df", 0x3, 0x1}) [ 329.996368] binder: 10841:10842 ioctl 6611 0 returned -22 [ 330.021313] binder: 10841:10842 ioctl 6611 0 returned -22 15:33:08 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000240)='/dev/video#\x00', 0x8447, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000380)={0x3, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x1}}) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)) 15:33:08 executing program 0: r0 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x7, 0x80000) openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x100, 0x0) ioctl$SG_GET_TIMEOUT(r0, 0x2202, 0x0) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r1, 0x4020565b, &(0x7f0000000040)) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'erspan0\x00', 0x1100}) 15:33:08 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x6, 0x800) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x9, 0x1, 0x3f, 0x4, 0x8}, &(0x7f0000000240)=0x98) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000280)={r2, @in6={{0xa, 0x4e23, 0x4, @mcast2, 0x56}}, 0x7, 0x8}, &(0x7f0000000340)=0x90) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) ioctl$PERF_EVENT_IOC_QUERY_BPF(r4, 0xc008240a, &(0x7f0000000080)={0x6, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) sendmsg$nl_route(r0, &(0x7f0000000580)={&(0x7f0000000000), 0xffffff2f, &(0x7f0000000540)={&(0x7f0000000700)=@newlink={0x38, 0x10, 0x327, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @ip6erspan={{0x10, 0x1, 'ip6erspan\x00'}, {0x4}}}]}, 0x411}}, 0x20000000) setxattr$security_smack_transmute(&(0x7f0000000440)='./file0\x00', &(0x7f00000003c0)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000400)='TRUE', 0x4, 0x3) poll(&(0x7f00000000c0)=[{r4}, {r3, 0x8}, {r0, 0x20}, {r3, 0x4084}, {r4, 0x400}, {r0, 0x8044}, {r0}, {r0, 0x40}, {r4, 0x186}, {r0, 0x200}], 0xa, 0x6) 15:33:08 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000180)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x0, 0x0, {0x9}}) getsockopt$inet_dccp_int(r0, 0x21, 0x1f, &(0x7f0000000000), &(0x7f0000000040)=0x4) syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x8, 0x0) 15:33:08 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a5c1f023c126285719070") r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) socket$inet6(0xa, 0x7, 0x3) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1b) 15:33:08 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r0, r1, 0x0) syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2) sendmmsg$unix(r1, &(0x7f0000001700)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="17000000000000000100000001000000", @ANYRES64=r0], 0x18}], 0x1, 0x0) 15:33:08 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='pids.current\x00', 0x0, 0x0) ioctl$BLKTRACESTART(r0, 0x1274, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfffffffffffffd5b, 0x0, 0x0, 0x31a) 15:33:08 executing program 1: r0 = socket$inet6(0xa, 0x1000000000005, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0x45a2c0, 0x0) fsetxattr$trusted_overlay_redirect(r1, &(0x7f0000000240)='trusted.overlay.redirect\x00', &(0x7f0000000180)='./file0\x00', 0x8, 0x1) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r2) getsockopt$inet_buf(r0, 0x84, 0x0, &(0x7f0000dcffe8)=""/24, &(0x7f00000000c0)=0x18) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000080)=0x0) write$FUSE_LK(r2, &(0x7f0000000100)={0x28, 0x0, 0x1, {{0x8, 0x1a29, 0x2, r3}}}, 0x28) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, &(0x7f00000001c0)=""/44, &(0x7f0000000200)=0x2c) 15:33:09 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000040)={0x7a, 0x0, [0x4b564d01, 0x35fd]}) 15:33:09 executing program 0: r0 = socket$inet6(0xa, 0x100000000000005, 0xb9a) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x4d) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) getsockopt$inet_int(r1, 0x10d, 0xed, &(0x7f0000000080), &(0x7f0000000100)=0x4) 15:33:09 executing program 0: mkdir(&(0x7f0000000580)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x9, 0x40000) ioctl$VIDIOC_G_FREQUENCY(r0, 0xc02c5638, &(0x7f0000000040)={0xffffffff80000000, 0x5, 0x4}) r1 = open(&(0x7f00000003c0)='.\x00', 0x0, 0x0) renameat2(r1, &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f0000000280)='./file0\x00', 0x2) socket$inet_udplite(0x2, 0x2, 0x88) 15:33:09 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000002c0)={0xffffffffffffffff}, 0x0, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f00000004c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x400, @ipv4={[], [], @local}, 0xfffffffffffffffe}, {0xa, 0x4e20, 0x4, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x16}}, 0x5434}, r3}}, 0x48) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000cc0)='TIPC\x00') ioctl$VIDIOC_S_OUTPUT(r1, 0xc004562f, &(0x7f0000000240)) sendmsg$TIPC_CMD_SET_LINK_TOL(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f0000000800)=ANY=[@ANYBLOB="78269dd5e70270230b176ca890e41bf199ef72e44268000000", @ANYRES16=r4, @ANYBLOB="02042dbdc34691f6eace135800000000000007410000004c00180000000775647000000000000000000000000021000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001841681ae6df132de1bb4031a9f0f812f8a692d80bdf70b50528c968ee9e54c81a54c99914bf5757fe3ebe8e532ce767ff952d4b6155"], 0x68}, 0x1, 0x0, 0x0, 0x8800}, 0x10) ioctl$int_out(r0, 0x90004522, &(0x7f00000001c0)) openat$smack_task_current(0xffffffffffffff9c, &(0x7f00000007c0)='/proc/self/attr/current\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000580)={0x0, 0x3, 0x7, [0x7ff, 0x401, 0xfffffffffffff6da, 0xb083, 0x0, 0x0, 0x860d]}, &(0x7f00000005c0)=0x16) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000680)={r5, 0x1, 0x800}, 0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000600)={r5}, 0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0xffffffffffff7ffc}, &(0x7f0000000100)=0x8) prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='/dev/input/event#\x00') setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000300)={r6, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x2, 0x9}, 0x90) r7 = semget(0x0, 0x4, 0x40) semctl$IPC_RMID(r7, 0x0, 0x0) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000440)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000c80)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000c40)={&(0x7f00000008c0)={0x344, r8, 0x0, 0x70bd26, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0xc4, 0x4, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2e37}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x172}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe8f5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x401}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x30, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfffffffffffffff8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8000}]}, @TIPC_NLA_LINK={0x64, 0x4, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x21}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x455e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}]}]}, @TIPC_NLA_MEDIA={0x40, 0x5, [@TIPC_NLA_MEDIA_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffffffffeff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}]}, @TIPC_NLA_LINK={0x1c, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}]}, @TIPC_NLA_LINK={0x7c, 0x4, [@TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}]}, @TIPC_NLA_MON={0x34, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x20}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10bb}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6f8}]}, @TIPC_NLA_MEDIA={0x58, 0x5, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8a6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_NODE={0x18, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xffff}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_BEARER={0x5c, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'team0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0xfff, @loopback, 0x8000}}, {0x14, 0x2, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'syz_tun\x00'}}]}]}, 0x344}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) openat$sequencer(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/sequencer\x00', 0x10000, 0x0) sendmsg$IPVS_CMD_FLUSH(r2, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x1c, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) ioctl$PPPIOCSMRU(r2, 0x40047452, &(0x7f0000000540)=0x2000000000000) write$RDMA_USER_CM_CMD_DISCONNECT(r1, &(0x7f0000000780)={0xa, 0x4, 0xfa00, {r3}}, 0xc) 15:33:09 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) r2 = socket(0xa, 0x1, 0x0) getsockopt$sock_buf(r0, 0x1, 0x37, &(0x7f0000000180)=""/154, &(0x7f0000000100)=0x9a) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f0000000140)={@loopback, @empty}, 0xc) 15:33:09 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = socket$inet(0x2, 0x80001, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r1, 0x894b, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$KVM_GET_FPU(r1, 0x81a0ae8c, &(0x7f0000000180)) getsockopt$XDP_STATISTICS(r2, 0x11b, 0x7, &(0x7f0000000000), &(0x7f0000000040)=0x18) 15:33:09 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x800, 0x0) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000040)) socket(0x2000000000000021, 0x0, 0x2) 15:33:09 executing program 1: unshare(0x400) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000004000)={&(0x7f0000001fdc), 0x0, 0x0, 0x0}) r0 = socket$packet(0x11, 0x3, 0x300) openat$urandom(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x80001, 0x0) getsockopt$packet_int(r0, 0x107, 0xb, &(0x7f0000004000), &(0x7f0000001ffc)=0xfffffffffffffcb1) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x8000, 0x0) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000100)=0x3, 0x2b2) 15:33:09 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = epoll_create1(0x0) r3 = epoll_create1(0x0) r4 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f00000000c0)={0x20000001}) shutdown(r0, 0x0) timerfd_settime(r4, 0x0, &(0x7f0000005000)={{}, {0x0, 0x989680}}, 0x0) epoll_pwait(r3, &(0x7f00008c9fc4)=[{}], 0x1, 0xfffffffffffffff7, 0x0, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f00000001c0)="cc16eaaa0264f05c0951e55c77b4c2dab853a2dc4d131a0b5e2dd912c678340a39ec1438da214d1d982323eb6cafebb50da82d6e14b6911315d20138b385195313a0658d56b109d7f27e83978de63be63d2203773afff4369ebe456242d24c8b273ed9da1ea637bb134142036fd65b39c1aa65e12f03a51a51160f284312bc6695c09393f5025562372a687ad50bf058c47cab645055b970401d4b8448ced6bdcb0703ae36a4d015b6784b904762098d1a81c54860ac88e6f5f3893da8d8b3c3d63b35943e", 0xc5}, {&(0x7f0000000080)="24ccbcbcbdf6b090eb4e6f536900b5b25ebd", 0x12}, {&(0x7f00000002c0)="b630f847b2a6e69398ceb2c4f268daa0f0f6c826bcec1f812a1d6b4cfb69183229f8440676adbf379bb7322ac83f17c1da939cd3874fc60d7368d6d496f6d2ae6ec1390bd269bd48aef649f7c13d3631560eae6b61512bafb86f4b59ca32314c849cb120b6029b48f3e9c7cb1dff85ec7a64c1c8c6f2584d6f841d330be636e495eaa76c49d9aa195b6c457698eea4e1", 0x90}], 0x3) r5 = dup3(r4, r3, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000000)) write$input_event(r5, &(0x7f0000000040)={{0x0, 0x7530}, 0x17, 0x4, 0x6}, 0x18) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000021ff4)={0x2001}) 15:33:10 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x8800, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@multicast2}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in6=@ipv4, {}, {}, {}, 0x0, 0x0, 0xa, 0x4}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}}, 0x0) 15:33:10 executing program 0: setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000002c0)="0b8493da69d419d3e5a313affec5c48780fa42c0606761a2404a9a6c5a567525af09b4ae9ae6a36177018ff55a012c3fa3d9a196466f930c37b676633bbcdd54ad", 0x41) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) add_key(0x0, 0x0, &(0x7f0000000480)="9605550835d6548b5ad5805000b57a8ecc", 0x11, 0xfffffffffffffff8) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fde000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000580)=0x2fff) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000280)) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(&(0x7f00000001c0)=ANY=[], &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r3 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000100), 0x12) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RREADLINK(r5, &(0x7f0000001400)=ANY=[@ANYBLOB="10"], 0x1) fcntl$setpipe(r5, 0x407, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:33:10 executing program 1: r0 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0x3, 0x2) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000180), &(0x7f00000001c0)=0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000000)={'team0\x00', 0x2}) close(r1) syz_open_procfs(0x0, &(0x7f0000001700)='fd/3\x00') 15:33:10 executing program 1: r0 = syz_open_dev$radio(&(0x7f0000000200)='/dev/radio#\x00', 0x3, 0x2) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000600), 0x4) r1 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x20, 0x8382) r2 = openat(r1, &(0x7f0000000140)='./file1\x00', 0x2000, 0x80) mkdir(&(0x7f00000002c0)='./file1\x00', 0x4002000000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x80000007, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f0000000080)={0x200, 0x0, 0x0, @stepwise={0x80000001, 0xfffffffffffffe00, 0x3ff, 0xffffffffffffff00, 0x8, 0x1}}) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000480)={0x7, 0x0, [{0xa4, 0x3, 0x0, 0x0, @adapter={0x5, 0x53, 0x10000, 0x3add, 0x80000000}}, {0xffff, 0x7, 0x0, 0x0, @sint={0xf2, 0x9}}, {0xa2ea, 0x7, 0x0, 0x0, @adapter={0x4, 0x98bd, 0x6, 0x8a9, 0x78dd}}, {0x1, 0x1, 0x0, 0x0, @msi={0x7, 0x5, 0x9}}, {0x8, 0x0, 0x0, 0x0, @irqchip={0x4, 0x3}}, {0x9, 0x2, 0x0, 0x0, @msi={0xfffffffffffffffd, 0x9, 0x1}}, {0x7fff, 0x4, 0x0, 0x0, @sint={0x3}}]}) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000100)='nbd\x00') socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x202}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="f8000000", @ANYRES16=r6, @ANYBLOB="000028bd7000fcdbdf250300000008000100000000004400070008000100", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r4, @ANYBLOB="5400070008000100", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r2, @ANYBLOB="1400070008000100", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r2, @ANYBLOB="24000700080001008f65499a3532faf7d4d9dc81f591e76a7c532743a3a1cd3183a04b73c062d204f5c282d424ea3118a98a3b9accdf43ef810e8eb2736d77b5215ac110bfe1984624a0869460940e8ae6a730609a9fe5c828aede885d18ad6f22031951a5a600000000000000000000", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r2, @ANYBLOB="0c0003000900000000000000"], 0xf8}, 0x1, 0x0, 0x0, 0x4000000}, 0x5) getsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000180)={@local}, &(0x7f00000001c0)=0x14) 15:33:10 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_script(r0, &(0x7f0000000640)={'#! ', './file0', [], 0xa, "d1266d12e95afed85a1bf38aaf1b4ba88686b1d7eefe93e87be1cded9d0d73f957a0dc"}, 0x2e) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_script(r0, &(0x7f0000000440)={'#! ', './file0', [], 0xa, "96de86d81aacdb3ba584580de2bfff37e108271616dfd5e3fb5cabab678bd9cf0b8b1c"}, 0x2e) write$P9_RREAD(r0, &(0x7f0000000180)={0x2e, 0x75, 0x0, {0x23, "3035949eec64fef5cbb1d182820bc8bced96d6919b684878bef38a5998c79a92fc2af5"}}, 0x2e) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[@ANYRESOCT=r0], 0x17) write$binfmt_script(r0, &(0x7f0000000540)={'#! ', './file0', [], 0xa, "b8d958259b7169b2d643c65434fc53e2538fbfd5866cd9cf2f180b8b4d8ded"}, 0x2a) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, 'eth0'}, {0x20, '#! '}, {0x20, '${'}, {0x20, '/dev/sg#\x00'}, {0x20, '#! '}], 0xa, "00fbdd695d"}, 0x2a) write$binfmt_script(r0, &(0x7f0000000080)={'#! ', './file0', [{0x20, '/dev/sg#\x00'}, {0x20, '/dev/sg#\x00'}], 0xa, "7370e8c9eb584ee345b2d52bd5ac60"}, 0x2e) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 15:33:10 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_script(r0, &(0x7f0000000640)={'#! ', './file0', [], 0xa, "d1266d12e95afed85a1bf38aaf1b4ba88686b1d7eefe93e87be1cded9d0d73f957a0dc"}, 0x2e) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_script(r0, &(0x7f0000000440)={'#! ', './file0', [], 0xa, "96de86d81aacdb3ba584580de2bfff37e108271616dfd5e3fb5cabab678bd9cf0b8b1c"}, 0x2e) write$P9_RREAD(r0, &(0x7f0000000180)={0x2e, 0x75, 0x0, {0x23, "3035949eec64fef5cbb1d182820bc8bced96d6919b684878bef38a5998c79a92fc2af5"}}, 0x2e) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[@ANYRESOCT=r0], 0x17) write$binfmt_script(r0, &(0x7f0000000540)={'#! ', './file0', [], 0xa, "b8d958259b7169b2d643c65434fc53e2538fbfd5866cd9cf2f180b8b4d8ded"}, 0x2a) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, 'eth0'}, {0x20, '#! '}, {0x20, '${'}, {0x20, '/dev/sg#\x00'}, {0x20, '#! '}], 0xa, "00fbdd695d"}, 0x2a) write$binfmt_script(r0, &(0x7f0000000080)={'#! ', './file0', [{0x20, '/dev/sg#\x00'}, {0x20, '/dev/sg#\x00'}], 0xa, "7370e8c9eb584ee345b2d52bd5ac60"}, 0x2e) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 15:33:10 executing program 1: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x4000006) r1 = accept4(r0, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 15:33:10 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_script(r0, &(0x7f0000000640)={'#! ', './file0', [], 0xa, "d1266d12e95afed85a1bf38aaf1b4ba88686b1d7eefe93e87be1cded9d0d73f957a0dc"}, 0x2e) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_script(r0, &(0x7f0000000440)={'#! ', './file0', [], 0xa, "96de86d81aacdb3ba584580de2bfff37e108271616dfd5e3fb5cabab678bd9cf0b8b1c"}, 0x2e) write$P9_RREAD(r0, &(0x7f0000000180)={0x2e, 0x75, 0x0, {0x23, "3035949eec64fef5cbb1d182820bc8bced96d6919b684878bef38a5998c79a92fc2af5"}}, 0x2e) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[@ANYRESOCT=r0], 0x17) write$binfmt_script(r0, &(0x7f0000000540)={'#! ', './file0', [], 0xa, "b8d958259b7169b2d643c65434fc53e2538fbfd5866cd9cf2f180b8b4d8ded"}, 0x2a) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, 'eth0'}, {0x20, '#! '}, {0x20, '${'}, {0x20, '/dev/sg#\x00'}, {0x20, '#! '}], 0xa, "00fbdd695d"}, 0x2a) write$binfmt_script(r0, &(0x7f0000000080)={'#! ', './file0', [{0x20, '/dev/sg#\x00'}, {0x20, '/dev/sg#\x00'}], 0xa, "7370e8c9eb584ee345b2d52bd5ac60"}, 0x2e) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 15:33:11 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_script(r0, &(0x7f0000000640)={'#! ', './file0', [], 0xa, "d1266d12e95afed85a1bf38aaf1b4ba88686b1d7eefe93e87be1cded9d0d73f957a0dc"}, 0x2e) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_script(r0, &(0x7f0000000440)={'#! ', './file0', [], 0xa, "96de86d81aacdb3ba584580de2bfff37e108271616dfd5e3fb5cabab678bd9cf0b8b1c"}, 0x2e) write$P9_RREAD(r0, &(0x7f0000000180)={0x2e, 0x75, 0x0, {0x23, "3035949eec64fef5cbb1d182820bc8bced96d6919b684878bef38a5998c79a92fc2af5"}}, 0x2e) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[@ANYRESOCT=r0], 0x17) write$binfmt_script(r0, &(0x7f0000000540)={'#! ', './file0', [], 0xa, "b8d958259b7169b2d643c65434fc53e2538fbfd5866cd9cf2f180b8b4d8ded"}, 0x2a) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, 'eth0'}, {0x20, '#! '}, {0x20, '${'}, {0x20, '/dev/sg#\x00'}, {0x20, '#! '}], 0xa, "00fbdd695d"}, 0x2a) write$binfmt_script(r0, &(0x7f0000000080)={'#! ', './file0', [{0x20, '/dev/sg#\x00'}, {0x20, '/dev/sg#\x00'}], 0xa, "7370e8c9eb584ee345b2d52bd5ac60"}, 0x2e) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) [ 332.958389] sctp: [Deprecated]: syz-executor1 (pid 10958) Use of struct sctp_assoc_value in delayed_ack socket option. [ 332.958389] Use struct sctp_sack_info instead 15:33:11 executing program 1: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = perf_event_open(&(0x7f00000001c0)={0x7, 0x70, 0xfff, 0x8001, 0x5, 0x101, 0x0, 0x8, 0x20, 0x2, 0x7ff, 0x80000000000, 0x2, 0xffffffffffffff46, 0x3, 0x80000001, 0x6, 0xb96e, 0x9d, 0xeecd, 0x0, 0x6, 0x7, 0x100, 0xfffffffffffffffd, 0xec2, 0x7ff, 0x1, 0x93, 0x3ff, 0x0, 0xe0, 0x7fff, 0x9, 0x2, 0x9, 0x4f2, 0x3, 0x0, 0x81, 0x4, @perf_bp={&(0x7f0000000180), 0x8}, 0x88, 0x8, 0x7, 0xf, 0xd3, 0x4, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000240)='./file0\x00', 0x81) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@remote}}, &(0x7f00000003c0)=0xe8) setuid(r1) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x2) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000400)='/dev/audio#\x00', 0x0, 0x800) ioctl$KVM_GET_MP_STATE(r2, 0x8004ae98, &(0x7f0000000440)) lsetxattr$security_capability(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='security.capability\x00', &(0x7f0000000000)=@v2, 0x14, 0x0) getxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000540)=@known='security.capability\x00\xc9\xbd0\x12\x98>\x02\x15Y`\x19j*\x84X_\x19\xc1\xc8&\x17)\x82\xa8\xde\x1c\xccL\xdci\x87\xff\xc9q\\\xef\"\xce\xe4\xc6s\xd48\x8d^V\x04\xa0\xb88\xaf\xb3[\xd3R\xe4\xc9\xeed\x9aw\x12\b0\x9c\xa46\xbf\x91\x9f\xd9ck\xfa%_\xf4\xb3\x1f@\xf8\x8e\xcc\x9c-\x81!q\xc4\x12bO\f\x14/\xc5Oe\xf4\x929\xf2v\x86\xc1}H\x9e\x92]\xa1\x9b\xf3\x1e0\xecu\xcd\x92#yWf\x1c\xe8\xa1V\x84\x18\xe6\xd3\xd4(\x17O\x89\xa1\x1c\xc8!\xfb\xf6A\"\xa3okA\x1c', 0x0, 0x0) 15:33:11 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_script(r0, &(0x7f0000000640)={'#! ', './file0', [], 0xa, "d1266d12e95afed85a1bf38aaf1b4ba88686b1d7eefe93e87be1cded9d0d73f957a0dc"}, 0x2e) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_script(r0, &(0x7f0000000440)={'#! ', './file0', [], 0xa, "96de86d81aacdb3ba584580de2bfff37e108271616dfd5e3fb5cabab678bd9cf0b8b1c"}, 0x2e) write$P9_RREAD(r0, &(0x7f0000000180)={0x2e, 0x75, 0x0, {0x23, "3035949eec64fef5cbb1d182820bc8bced96d6919b684878bef38a5998c79a92fc2af5"}}, 0x2e) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[@ANYRESOCT=r0], 0x17) write$binfmt_script(r0, &(0x7f0000000540)={'#! ', './file0', [], 0xa, "b8d958259b7169b2d643c65434fc53e2538fbfd5866cd9cf2f180b8b4d8ded"}, 0x2a) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, 'eth0'}, {0x20, '#! '}, {0x20, '${'}, {0x20, '/dev/sg#\x00'}, {0x20, '#! '}], 0xa, "00fbdd695d"}, 0x2a) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 15:33:11 executing program 1: r0 = socket$inet(0x2, 0xa, 0x8) syz_emit_ethernet(0xfed1, &(0x7f000000a000)=ANY=[@ANYBLOB="ffe0ffffffffffffffffffff08004500001c0000000000009078ac14ffbbe000000a0000000000089078"], 0x0) r1 = dup2(r0, r0) ioctl$TIOCGWINSZ(r1, 0x5413, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x0, 0x2) write$P9_RSTATFS(r2, &(0x7f0000000080)={0x43, 0x9, 0x1, {0xfff, 0x2, 0x9, 0x4, 0xfcbd, 0x5, 0x2, 0x2, 0x5}}, 0x43) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x4c, 0x4) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r2, 0x80845663, &(0x7f0000000140)={0x0, @reserved}) recvmmsg(r0, &(0x7f0000001780)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) setsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f0000000200), 0x2) 15:33:11 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_script(r0, &(0x7f0000000640)={'#! ', './file0', [], 0xa, "d1266d12e95afed85a1bf38aaf1b4ba88686b1d7eefe93e87be1cded9d0d73f957a0dc"}, 0x2e) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_script(r0, &(0x7f0000000440)={'#! ', './file0', [], 0xa, "96de86d81aacdb3ba584580de2bfff37e108271616dfd5e3fb5cabab678bd9cf0b8b1c"}, 0x2e) write$P9_RREAD(r0, &(0x7f0000000180)={0x2e, 0x75, 0x0, {0x23, "3035949eec64fef5cbb1d182820bc8bced96d6919b684878bef38a5998c79a92fc2af5"}}, 0x2e) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[@ANYRESOCT=r0], 0x17) write$binfmt_script(r0, &(0x7f0000000540)={'#! ', './file0', [], 0xa, "b8d958259b7169b2d643c65434fc53e2538fbfd5866cd9cf2f180b8b4d8ded"}, 0x2a) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, 'eth0'}, {0x20, '#! '}, {0x20, '${'}, {0x20, '/dev/sg#\x00'}, {0x20, '#! '}], 0xa, "00fbdd695d"}, 0x2a) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) [ 333.379213] syz-executor1 uses obsolete (PF_INET,SOCK_PACKET) 15:33:11 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_script(r0, &(0x7f0000000640)={'#! ', './file0', [], 0xa, "d1266d12e95afed85a1bf38aaf1b4ba88686b1d7eefe93e87be1cded9d0d73f957a0dc"}, 0x2e) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_script(r0, &(0x7f0000000440)={'#! ', './file0', [], 0xa, "96de86d81aacdb3ba584580de2bfff37e108271616dfd5e3fb5cabab678bd9cf0b8b1c"}, 0x2e) write$P9_RREAD(r0, &(0x7f0000000180)={0x2e, 0x75, 0x0, {0x23, "3035949eec64fef5cbb1d182820bc8bced96d6919b684878bef38a5998c79a92fc2af5"}}, 0x2e) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[@ANYRESOCT=r0], 0x17) write$binfmt_script(r0, &(0x7f0000000540)={'#! ', './file0', [], 0xa, "b8d958259b7169b2d643c65434fc53e2538fbfd5866cd9cf2f180b8b4d8ded"}, 0x2a) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, 'eth0'}, {0x20, '#! '}, {0x20, '${'}, {0x20, '/dev/sg#\x00'}, {0x20, '#! '}], 0xa, "00fbdd695d"}, 0x2a) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 15:33:11 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000300)={0x53, 0xffff7ffbbfffffff, 0x6, 0x2, @buffer={0x0, 0xe9, &(0x7f0000000080)=""/233}, &(0x7f0000000040)="9b247f9c1793", &(0x7f0000000240)=""/126, 0x0, 0x0, 0x0, &(0x7f0000000480)}) write$binfmt_elf64(r0, &(0x7f0000000300)=ANY=[], 0xffffffffffffff17) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c832, 0xffffffffffffffff, 0x0) read(r0, &(0x7f0000000380)=""/42, 0xf0) 15:33:11 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_script(r0, &(0x7f0000000640)={'#! ', './file0', [], 0xa, "d1266d12e95afed85a1bf38aaf1b4ba88686b1d7eefe93e87be1cded9d0d73f957a0dc"}, 0x2e) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_script(r0, &(0x7f0000000440)={'#! ', './file0', [], 0xa, "96de86d81aacdb3ba584580de2bfff37e108271616dfd5e3fb5cabab678bd9cf0b8b1c"}, 0x2e) write$P9_RREAD(r0, &(0x7f0000000180)={0x2e, 0x75, 0x0, {0x23, "3035949eec64fef5cbb1d182820bc8bced96d6919b684878bef38a5998c79a92fc2af5"}}, 0x2e) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[@ANYRESOCT=r0], 0x17) write$binfmt_script(r0, &(0x7f0000000540)={'#! ', './file0', [], 0xa, "b8d958259b7169b2d643c65434fc53e2538fbfd5866cd9cf2f180b8b4d8ded"}, 0x2a) write$binfmt_script(r0, &(0x7f0000000080)={'#! ', './file0', [{0x20, '/dev/sg#\x00'}, {0x20, '/dev/sg#\x00'}], 0xa, "7370e8c9eb584ee345b2d52bd5ac60"}, 0x2e) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 15:33:11 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_script(r0, &(0x7f0000000640)={'#! ', './file0', [], 0xa, "d1266d12e95afed85a1bf38aaf1b4ba88686b1d7eefe93e87be1cded9d0d73f957a0dc"}, 0x2e) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_script(r0, &(0x7f0000000440)={'#! ', './file0', [], 0xa, "96de86d81aacdb3ba584580de2bfff37e108271616dfd5e3fb5cabab678bd9cf0b8b1c"}, 0x2e) write$P9_RREAD(r0, &(0x7f0000000180)={0x2e, 0x75, 0x0, {0x23, "3035949eec64fef5cbb1d182820bc8bced96d6919b684878bef38a5998c79a92fc2af5"}}, 0x2e) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[@ANYRESOCT=r0], 0x17) write$binfmt_script(r0, &(0x7f0000000540)={'#! ', './file0', [], 0xa, "b8d958259b7169b2d643c65434fc53e2538fbfd5866cd9cf2f180b8b4d8ded"}, 0x2a) write$binfmt_script(r0, &(0x7f0000000080)={'#! ', './file0', [{0x20, '/dev/sg#\x00'}, {0x20, '/dev/sg#\x00'}], 0xa, "7370e8c9eb584ee345b2d52bd5ac60"}, 0x2e) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 15:33:11 executing program 2: r0 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0xffffffffffffffff, 0x80) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000040)) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_PORTS(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1080000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x100, 0x70bd25, 0x25dfdbfc, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000000}, 0x800) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f00000001c0)=""/164, &(0x7f0000000280)=0xa4) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r3 = open(&(0x7f0000000300)='./file0\x00', 0xc4000, 0x41) lsetxattr$trusted_overlay_upper(&(0x7f0000000340)='./file1\x00', &(0x7f0000000380)='trusted.overlay.upper\x00', &(0x7f00000003c0)={0x0, 0xfb, 0x8a, 0x2, 0x1, "ae3153fe31eafee9c086a747980a61a4", "51241e86e4090e623ad0b06a5987d6605440f3619c2eb3b90df7c488a656a665be1cf7c7ef6a32de297913edb179e34d7ba9d03784c4780a3aa96d4b7c5b7de0540b0eb1891fac30cf2d756116c7383f907e9632df70420ca545bb5074cadb6073e81acd00bee4cca3cd65980fc04ab4b7909d9beb"}, 0x8a, 0x2) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x24, r1, 0x400, 0x70bd2a, 0x25dfdbfd, {{}, 0x0, 0x800b, 0x0, {0x8, 0x2, 0x1}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$inet6(r5, &(0x7f00000005c0), &(0x7f0000000600)=0x1c) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000000, 0x4013, r4, 0x0) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) sendmsg$TIPC_CMD_SHOW_PORTS(r3, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x4337018db165837a}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r1, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x4004) getsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000740), &(0x7f0000000780)=0x8) sysfs$2(0x2, 0x10000, &(0x7f00000007c0)=""/228) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f00000008c0)={0x0}) ioctl$DRM_IOCTL_RM_CTX(r0, 0xc0086421, &(0x7f0000000900)={r6, 0x2}) ioctl$EVIOCGMTSLOTS(r5, 0x8040450a, &(0x7f0000000940)=""/141) write$9p(r4, &(0x7f0000000a00)="302254e5fa2064b5f99a", 0xa) ioctl$PPPIOCGCHAN(r5, 0x80047437, &(0x7f0000000a40)) ioctl$DRM_IOCTL_MARK_BUFS(r4, 0x40206417, &(0x7f0000000a80)={0x0, 0x706ed8bb, 0x5, 0x101, 0x10, 0x12}) setsockopt$inet_MCAST_LEAVE_GROUP(r4, 0x0, 0x2d, &(0x7f0000000ac0)={0x4, {{0x2, 0x4e22, @remote}}}, 0x88) ioctl$DRM_IOCTL_INFO_BUFS(r5, 0xc0106418, &(0x7f0000000b80)={0x1, 0x3, 0x8, 0x69d, 0x8, 0x6}) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000bc0)={'tunl0\x00', {0x2, 0x4e22, @local}}) fremovexattr(r4, &(0x7f0000000c00)=@random={'os2.', '/dev/input/mouse#\x00'}) ioctl$CAPI_REGISTER(r5, 0x400c4301, &(0x7f0000000c40)={0x9, 0x6000000000000000, 0x80000001}) sendmsg$TIPC_CMD_GET_NETID(r3, &(0x7f0000000d40)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x10000002}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x1c, r1, 0x1, 0x70bd2d, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x40) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000dc0)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_SET(r4, &(0x7f0000001080)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x40480}, 0xc, &(0x7f0000001040)={&(0x7f0000000e00)={0x208, r7, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x30, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb06c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}]}]}, @TIPC_NLA_SOCK={0x14, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x187}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}]}, @TIPC_NLA_LINK={0x120, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x578}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xed}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffffffffff8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x33}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffffffffffff}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xcc12}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}]}, @TIPC_NLA_BEARER={0x14, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'gre0\x00'}}]}, @TIPC_NLA_MEDIA={0x7c, 0x5, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffffffffffa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6150}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20751aa5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20}]}]}]}, 0x208}, 0x1, 0x0, 0x0, 0x40}, 0x240408c4) 15:33:11 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_script(r0, &(0x7f0000000640)={'#! ', './file0', [], 0xa, "d1266d12e95afed85a1bf38aaf1b4ba88686b1d7eefe93e87be1cded9d0d73f957a0dc"}, 0x2e) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_script(r0, &(0x7f0000000440)={'#! ', './file0', [], 0xa, "96de86d81aacdb3ba584580de2bfff37e108271616dfd5e3fb5cabab678bd9cf0b8b1c"}, 0x2e) write$P9_RREAD(r0, &(0x7f0000000180)={0x2e, 0x75, 0x0, {0x23, "3035949eec64fef5cbb1d182820bc8bced96d6919b684878bef38a5998c79a92fc2af5"}}, 0x2e) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[@ANYRESOCT=r0], 0x17) write$binfmt_script(r0, &(0x7f0000000540)={'#! ', './file0', [], 0xa, "b8d958259b7169b2d643c65434fc53e2538fbfd5866cd9cf2f180b8b4d8ded"}, 0x2a) write$binfmt_script(r0, &(0x7f0000000080)={'#! ', './file0', [{0x20, '/dev/sg#\x00'}, {0x20, '/dev/sg#\x00'}], 0xa, "7370e8c9eb584ee345b2d52bd5ac60"}, 0x2e) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 15:33:12 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_script(r0, &(0x7f0000000640)={'#! ', './file0', [], 0xa, "d1266d12e95afed85a1bf38aaf1b4ba88686b1d7eefe93e87be1cded9d0d73f957a0dc"}, 0x2e) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_script(r0, &(0x7f0000000440)={'#! ', './file0', [], 0xa, "96de86d81aacdb3ba584580de2bfff37e108271616dfd5e3fb5cabab678bd9cf0b8b1c"}, 0x2e) write$P9_RREAD(r0, &(0x7f0000000180)={0x2e, 0x75, 0x0, {0x23, "3035949eec64fef5cbb1d182820bc8bced96d6919b684878bef38a5998c79a92fc2af5"}}, 0x2e) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[@ANYRESOCT=r0], 0x17) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, 'eth0'}, {0x20, '#! '}, {0x20, '${'}, {0x20, '/dev/sg#\x00'}, {0x20, '#! '}], 0xa, "00fbdd695d"}, 0x2a) write$binfmt_script(r0, &(0x7f0000000080)={'#! ', './file0', [{0x20, '/dev/sg#\x00'}, {0x20, '/dev/sg#\x00'}], 0xa, "7370e8c9eb584ee345b2d52bd5ac60"}, 0x2e) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 15:33:12 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_script(r0, &(0x7f0000000640)={'#! ', './file0', [], 0xa, "d1266d12e95afed85a1bf38aaf1b4ba88686b1d7eefe93e87be1cded9d0d73f957a0dc"}, 0x2e) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_script(r0, &(0x7f0000000440)={'#! ', './file0', [], 0xa, "96de86d81aacdb3ba584580de2bfff37e108271616dfd5e3fb5cabab678bd9cf0b8b1c"}, 0x2e) write$P9_RREAD(r0, &(0x7f0000000180)={0x2e, 0x75, 0x0, {0x23, "3035949eec64fef5cbb1d182820bc8bced96d6919b684878bef38a5998c79a92fc2af5"}}, 0x2e) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[@ANYRESOCT=r0], 0x17) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, 'eth0'}, {0x20, '#! '}, {0x20, '${'}, {0x20, '/dev/sg#\x00'}, {0x20, '#! '}], 0xa, "00fbdd695d"}, 0x2a) write$binfmt_script(r0, &(0x7f0000000080)={'#! ', './file0', [{0x20, '/dev/sg#\x00'}, {0x20, '/dev/sg#\x00'}], 0xa, "7370e8c9eb584ee345b2d52bd5ac60"}, 0x2e) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 15:33:12 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_script(r0, &(0x7f0000000640)={'#! ', './file0', [], 0xa, "d1266d12e95afed85a1bf38aaf1b4ba88686b1d7eefe93e87be1cded9d0d73f957a0dc"}, 0x2e) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_script(r0, &(0x7f0000000440)={'#! ', './file0', [], 0xa, "96de86d81aacdb3ba584580de2bfff37e108271616dfd5e3fb5cabab678bd9cf0b8b1c"}, 0x2e) write$P9_RREAD(r0, &(0x7f0000000180)={0x2e, 0x75, 0x0, {0x23, "3035949eec64fef5cbb1d182820bc8bced96d6919b684878bef38a5998c79a92fc2af5"}}, 0x2e) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[@ANYRESOCT=r0], 0x17) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, 'eth0'}, {0x20, '#! '}, {0x20, '${'}, {0x20, '/dev/sg#\x00'}, {0x20, '#! '}], 0xa, "00fbdd695d"}, 0x2a) write$binfmt_script(r0, &(0x7f0000000080)={'#! ', './file0', [{0x20, '/dev/sg#\x00'}, {0x20, '/dev/sg#\x00'}], 0xa, "7370e8c9eb584ee345b2d52bd5ac60"}, 0x2e) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) [ 334.547056] IPVS: ftp: loaded support on port[0] = 21 15:33:12 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/btrfs-control\x00', 0x80, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(r2, 0x4040ae75, &(0x7f0000000600)={0x81, 0x1, 0x71c, 0x204}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0) ioctl$KVM_GET_XSAVE(r0, 0x9000aea4, &(0x7f0000000200)) r3 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x1, 0x10000) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffff9c, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x3ff}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f00000000c0)={r4, 0x1}, &(0x7f0000000140)=0x8) 15:33:12 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_script(r0, &(0x7f0000000640)={'#! ', './file0', [], 0xa, "d1266d12e95afed85a1bf38aaf1b4ba88686b1d7eefe93e87be1cded9d0d73f957a0dc"}, 0x2e) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_script(r0, &(0x7f0000000440)={'#! ', './file0', [], 0xa, "96de86d81aacdb3ba584580de2bfff37e108271616dfd5e3fb5cabab678bd9cf0b8b1c"}, 0x2e) write$P9_RREAD(r0, &(0x7f0000000180)={0x2e, 0x75, 0x0, {0x23, "3035949eec64fef5cbb1d182820bc8bced96d6919b684878bef38a5998c79a92fc2af5"}}, 0x2e) write$binfmt_script(r0, &(0x7f0000000540)={'#! ', './file0', [], 0xa, "b8d958259b7169b2d643c65434fc53e2538fbfd5866cd9cf2f180b8b4d8ded"}, 0x2a) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, 'eth0'}, {0x20, '#! '}, {0x20, '${'}, {0x20, '/dev/sg#\x00'}, {0x20, '#! '}], 0xa, "00fbdd695d"}, 0x2a) write$binfmt_script(r0, &(0x7f0000000080)={'#! ', './file0', [{0x20, '/dev/sg#\x00'}, {0x20, '/dev/sg#\x00'}], 0xa, "7370e8c9eb584ee345b2d52bd5ac60"}, 0x2e) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 15:33:12 executing program 1: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f00000000c0)={0xe, 0x54485746}) r1 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) ioctl$KVM_GET_API_VERSION(r1, 0xae00, 0x0) ioctl$VIDIOC_ENUM_DV_TIMINGS(r1, 0xc0945662, &(0x7f0000000100)={0xfff, 0x0, [], {0x0, @reserved}}) ioctl$KDDISABIO(r1, 0x4b37) ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000040)=0xcd) 15:33:12 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_script(r0, &(0x7f0000000640)={'#! ', './file0', [], 0xa, "d1266d12e95afed85a1bf38aaf1b4ba88686b1d7eefe93e87be1cded9d0d73f957a0dc"}, 0x2e) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_script(r0, &(0x7f0000000440)={'#! ', './file0', [], 0xa, "96de86d81aacdb3ba584580de2bfff37e108271616dfd5e3fb5cabab678bd9cf0b8b1c"}, 0x2e) write$binfmt_script(r0, &(0x7f0000000540)={'#! ', './file0', [], 0xa, "b8d958259b7169b2d643c65434fc53e2538fbfd5866cd9cf2f180b8b4d8ded"}, 0x2a) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, 'eth0'}, {0x20, '#! '}, {0x20, '${'}, {0x20, '/dev/sg#\x00'}, {0x20, '#! '}], 0xa, "00fbdd695d"}, 0x2a) write$binfmt_script(r0, &(0x7f0000000080)={'#! ', './file0', [{0x20, '/dev/sg#\x00'}, {0x20, '/dev/sg#\x00'}], 0xa, "7370e8c9eb584ee345b2d52bd5ac60"}, 0x2e) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) [ 334.988316] chnl_net:caif_netlink_parms(): no params data found 15:33:13 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_script(r0, &(0x7f0000000640)={'#! ', './file0', [], 0xa, "d1266d12e95afed85a1bf38aaf1b4ba88686b1d7eefe93e87be1cded9d0d73f957a0dc"}, 0x2e) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_script(r0, &(0x7f0000000440)={'#! ', './file0', [], 0xa, "96de86d81aacdb3ba584580de2bfff37e108271616dfd5e3fb5cabab678bd9cf0b8b1c"}, 0x2e) write$binfmt_script(r0, &(0x7f0000000540)={'#! ', './file0', [], 0xa, "b8d958259b7169b2d643c65434fc53e2538fbfd5866cd9cf2f180b8b4d8ded"}, 0x2a) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, 'eth0'}, {0x20, '#! '}, {0x20, '${'}, {0x20, '/dev/sg#\x00'}, {0x20, '#! '}], 0xa, "00fbdd695d"}, 0x2a) write$binfmt_script(r0, &(0x7f0000000080)={'#! ', './file0', [{0x20, '/dev/sg#\x00'}, {0x20, '/dev/sg#\x00'}], 0xa, "7370e8c9eb584ee345b2d52bd5ac60"}, 0x2e) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) [ 335.068146] bridge0: port 1(bridge_slave_0) entered blocking state [ 335.074767] bridge0: port 1(bridge_slave_0) entered disabled state [ 335.083274] device bridge_slave_0 entered promiscuous mode [ 335.094888] bridge0: port 2(bridge_slave_1) entered blocking state [ 335.101404] bridge0: port 2(bridge_slave_1) entered disabled state [ 335.110026] device bridge_slave_1 entered promiscuous mode 15:33:13 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_dev$adsp(&(0x7f0000000100)='/dev/adsp#\x00', 0x8, 0x400) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000140)={'rose0\x00', @random="86341ccb9f76"}) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x2, 0x0, "8b63e98a6e9a990ceacccaa0722f7b17adbfb251c09e5993d319d88199f6923e646c1d3eaad49bc3c0a86bd1683c51ec36b5d2dab5a220e04e0b20637e2b5a8dd3403bbe1ccf681d083e2307d3f5597b"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x0, 0x0, "521353f37dcd64c12799efb9dbad200b6cf433289feda8725ba79dbc26d16f9663b3df59d7b9d07abd8ae0918551393a71edeeba68925770399de3c38f23825d021cc14f2ea21c5dd607e8a85d8c9cfd"}, 0xd8) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) [ 335.173094] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 335.195700] bond0: Enslaving bond_slave_1 as an active interface with an up link 15:33:13 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_script(r0, &(0x7f0000000640)={'#! ', './file0', [], 0xa, "d1266d12e95afed85a1bf38aaf1b4ba88686b1d7eefe93e87be1cded9d0d73f957a0dc"}, 0x2e) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_script(r0, &(0x7f0000000440)={'#! ', './file0', [], 0xa, "96de86d81aacdb3ba584580de2bfff37e108271616dfd5e3fb5cabab678bd9cf0b8b1c"}, 0x2e) write$binfmt_script(r0, &(0x7f0000000540)={'#! ', './file0', [], 0xa, "b8d958259b7169b2d643c65434fc53e2538fbfd5866cd9cf2f180b8b4d8ded"}, 0x2a) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, 'eth0'}, {0x20, '#! '}, {0x20, '${'}, {0x20, '/dev/sg#\x00'}, {0x20, '#! '}], 0xa, "00fbdd695d"}, 0x2a) write$binfmt_script(r0, &(0x7f0000000080)={'#! ', './file0', [{0x20, '/dev/sg#\x00'}, {0x20, '/dev/sg#\x00'}], 0xa, "7370e8c9eb584ee345b2d52bd5ac60"}, 0x2e) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) [ 335.264815] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 335.273591] team0: Port device team_slave_0 added [ 335.280230] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 335.289179] team0: Port device team_slave_1 added [ 335.298339] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 335.308082] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 335.376627] device hsr_slave_0 entered promiscuous mode [ 335.412290] device hsr_slave_1 entered promiscuous mode [ 335.453739] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 335.462562] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 335.518685] bridge0: port 2(bridge_slave_1) entered blocking state [ 335.525275] bridge0: port 2(bridge_slave_1) entered forwarding state [ 335.532520] bridge0: port 1(bridge_slave_0) entered blocking state [ 335.539059] bridge0: port 1(bridge_slave_0) entered forwarding state [ 335.641069] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 335.647397] 8021q: adding VLAN 0 to HW filter on device bond0 [ 335.661321] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 335.675458] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 335.686067] bridge0: port 1(bridge_slave_0) entered disabled state [ 335.695069] bridge0: port 2(bridge_slave_1) entered disabled state [ 335.706190] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 335.726482] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 335.732641] 8021q: adding VLAN 0 to HW filter on device team0 [ 335.749195] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 335.757605] bridge0: port 1(bridge_slave_0) entered blocking state [ 335.764197] bridge0: port 1(bridge_slave_0) entered forwarding state [ 335.806171] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 335.814686] bridge0: port 2(bridge_slave_1) entered blocking state [ 335.821168] bridge0: port 2(bridge_slave_1) entered forwarding state [ 335.831118] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 335.843566] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 335.859460] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 335.873889] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 335.888717] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 335.895936] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 335.904661] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 335.913464] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 335.922089] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 335.937278] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 335.943500] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 335.970749] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 335.989981] 8021q: adding VLAN 0 to HW filter on device batadv0 15:33:14 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_script(r0, &(0x7f0000000640)={'#! ', './file0', [], 0xa, "d1266d12e95afed85a1bf38aaf1b4ba88686b1d7eefe93e87be1cded9d0d73f957a0dc"}, 0x2e) ioctl$SG_IO(r0, 0x2285, 0x0) write$P9_RREAD(r0, &(0x7f0000000180)={0x2e, 0x75, 0x0, {0x23, "3035949eec64fef5cbb1d182820bc8bced96d6919b684878bef38a5998c79a92fc2af5"}}, 0x2e) write$binfmt_script(r0, &(0x7f0000000540)={'#! ', './file0', [], 0xa, "b8d958259b7169b2d643c65434fc53e2538fbfd5866cd9cf2f180b8b4d8ded"}, 0x2a) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, 'eth0'}, {0x20, '#! '}, {0x20, '${'}, {0x20, '/dev/sg#\x00'}, {0x20, '#! '}], 0xa, "00fbdd695d"}, 0x2a) write$binfmt_script(r0, &(0x7f0000000080)={'#! ', './file0', [{0x20, '/dev/sg#\x00'}, {0x20, '/dev/sg#\x00'}], 0xa, "7370e8c9eb584ee345b2d52bd5ac60"}, 0x2e) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 15:33:14 executing program 2: socket$inet6(0xa, 0x40000080806, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) pipe(&(0x7f0000000180)) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pselect6(0x40, &(0x7f00000000c0)={0x8}, 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) timer_create(0x6, &(0x7f0000000000)={0x0, 0x22, 0x3, @thr={&(0x7f00000001c0)="3fe8ee072458cc26ae2c43a99a97600beb75af9d65a71773ec3a82ada8021b0571f18db7ea0b135ccbfabd703e1e95dbaa0ec4e9fe5dcb9242f38bd56d39f31d0c4cc13ceef2ea6c6475b1e36bab7bb7a62d7d3b98dc000858331965dc14ebff36e4e049a9715e3a930d13fddede21da323cfc91f64a83a9873847f03e649bcfff68c5cb7e2ee95738cd1ee53a3f6f7ba2a0596d4906ae8578210ef8df24cc1f2ee2829157241917ddc0d43b32716ef38dfc7714e5b154769746ec2282794d883ae7d6fb040fcaa56f797aba703bf274cbdac875fe85c032cc5768d956b80075b7e0d3", &(0x7f00000002c0)="af0452b34232513b5f77b2ec256f05a8a315e61bc2d4b9cb39c8d185ecbabd8df01edea97dfdc0f88864b232f8a920d2941ca0b59447dc8678b9185abe6b8ccf303c43a45cf94bb3bf955e363517139d244b151e87e4803d312702525ee4288c84c223d70a29b88dc075be453e3b377aedb9ba8dad889799f7d620b63f63657ca196ab99afcf499465debfe1909dffad5db4ebc14cdde55f83ade474bdf2b0adaff135167172f5eefb2563111798282086bc059a84375a49909db4c1fa6294228ebf138a3bd688fda06e738a237ef30068cf6476964f591f5dfd31e8e84bb61b122eeb28ba92619eb1a7b1dfe94474903f7be421ab"}}, &(0x7f0000000040)) 15:33:14 executing program 1: r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000200)='syz+R\xa7\x8aK\xbe\x97u\xbf\x0e\xd5&\xc1[0\x12\x87\xcdR\xc2\xe96\x905AT\n;\xd5ek\xcf\xef\xb7\xdc\xecC\xec*/\x14\x98\x88\xfaA6\xb2\xc4\xc2\x11\x93\v\xd9\xbb\xde\x86\x84M\rG\x90J\xb0\xfa}\xa1\x82=\xaa\xb9te\xf5{\x03\xd3+\xe8vD\x84d+3\x02\x01\xf1\xa2Lz@\x8e0\xe5\xc2\xb1w\x9cS\nO+\xdd\x85\xdf\xdfo\v\x9d\x13\xb0\x1bb\xe75\x18\x15j\n\xbc%+\xc6\rQ\xc8\xf5\xbbz\xea\x92E\x8f.%\x10P\xc7\xf7UL\xfa\x0f3\\\x84\x87\ns*^}+\xc0\xccR|o\xae\x8b\xee{E05N\xda\x04\x87\x13\xee\x90\xdb\x0e\x9d\xe9\xedF\x15\xdfyfof\x7fd<\xe7\xa37\x17n(\xb2\xef\xb6\xc8a\x99\xdb\x04T\x06\x83^\xa4\xa5\x80j\x1c\x8a\xbcm2\x10\\Y\xf9\x0f\xc2z*\x97\x8b\xe1J\xf1\xfe\xd4\xd7s\xdf|\x812Qjz\xd6\xca\r') r1 = dup(r0) ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000080)={0xffffffffffff4903}) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rfkill\x00', 0x1, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000040)={0x0, 0x8}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000300)={r3, @in6={{0xa, 0x4e24, 0xfff, @empty, 0x52b}}}, 0x84) 15:33:14 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_script(r0, &(0x7f0000000640)={'#! ', './file0', [], 0xa, "d1266d12e95afed85a1bf38aaf1b4ba88686b1d7eefe93e87be1cded9d0d73f957a0dc"}, 0x2e) ioctl$SG_IO(r0, 0x2285, 0x0) write$P9_RREAD(r0, &(0x7f0000000180)={0x2e, 0x75, 0x0, {0x23, "3035949eec64fef5cbb1d182820bc8bced96d6919b684878bef38a5998c79a92fc2af5"}}, 0x2e) write$binfmt_script(r0, &(0x7f0000000540)={'#! ', './file0', [], 0xa, "b8d958259b7169b2d643c65434fc53e2538fbfd5866cd9cf2f180b8b4d8ded"}, 0x2a) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, 'eth0'}, {0x20, '#! '}, {0x20, '${'}, {0x20, '/dev/sg#\x00'}, {0x20, '#! '}], 0xa, "00fbdd695d"}, 0x2a) write$binfmt_script(r0, &(0x7f0000000080)={'#! ', './file0', [{0x20, '/dev/sg#\x00'}, {0x20, '/dev/sg#\x00'}], 0xa, "7370e8c9eb584ee345b2d52bd5ac60"}, 0x2e) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 15:33:14 executing program 2: getpeername$packet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000440)='lp\x00', 0x3) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x200000000004e23}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000140)='lp\x00'}, 0x30) ptrace$peek(0x2, r1, &(0x7f0000000280)) r2 = openat$zero(0xffffffffffffff9c, 0x0, 0x220200, 0x0) getsockopt$inet_udp_int(r2, 0x11, 0x0, 0x0, &(0x7f00000002c0)=0xffffffffffffffc5) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_udp_int(r2, 0x11, 0x67, 0x0, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000000000), 0xc) ioctl$sock_bt_cmtp_CMTPCONNADD(r2, 0x400443c8, &(0x7f0000000340)={r0, 0x8}) socket$inet6(0xa, 0x3, 0x7) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) connect$inet(r2, &(0x7f0000000300)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100)=0x3e0, 0x4) fstatfs(r0, &(0x7f0000000600)=""/88) prctl$PR_CAPBSET_DROP(0x18, 0x21) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000000c0)=@proc={0x10, 0x0, 0x25dfdbfe, 0x200}, 0xc, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x0) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 15:33:14 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_script(r0, &(0x7f0000000640)={'#! ', './file0', [], 0xa, "d1266d12e95afed85a1bf38aaf1b4ba88686b1d7eefe93e87be1cded9d0d73f957a0dc"}, 0x2e) ioctl$SG_IO(r0, 0x2285, 0x0) write$P9_RREAD(r0, &(0x7f0000000180)={0x2e, 0x75, 0x0, {0x23, "3035949eec64fef5cbb1d182820bc8bced96d6919b684878bef38a5998c79a92fc2af5"}}, 0x2e) write$binfmt_script(r0, &(0x7f0000000540)={'#! ', './file0', [], 0xa, "b8d958259b7169b2d643c65434fc53e2538fbfd5866cd9cf2f180b8b4d8ded"}, 0x2a) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, 'eth0'}, {0x20, '#! '}, {0x20, '${'}, {0x20, '/dev/sg#\x00'}, {0x20, '#! '}], 0xa, "00fbdd695d"}, 0x2a) write$binfmt_script(r0, &(0x7f0000000080)={'#! ', './file0', [{0x20, '/dev/sg#\x00'}, {0x20, '/dev/sg#\x00'}], 0xa, "7370e8c9eb584ee345b2d52bd5ac60"}, 0x2e) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 15:33:14 executing program 1: r0 = socket$inet6(0xa, 0x8000000000000802, 0x0) sendmsg$inet_sctp(r0, &(0x7f0000000080)={&(0x7f0000000100)=@in6={0xa, 0x4e20, 0x0, @mcast2, 0x9}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000d40)="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", 0x57d}], 0x1}, 0x8000) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x202000, 0x0) openat$cgroup_int(r1, &(0x7f0000000280)='cgroup.clone_children\x00', 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x406, r0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000040)={0x0, 0x9}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f00000002c0)=ANY=[@ANYRES32=r3, @ANYBLOB="a50000002594385563f53df4540e705c5e52807cd5fd4fe41a384abebf889a87280b725283a3661f1c76f1ccd8a46232982913807c6009220845da483708ec867e6555abaa1061f1d36671808477986e2bb76e85b862c3b9d70cc119f65115a3450ecd5683a80dfe1b6ec538b552fe5a537526f75e626aa970ade94b0000000000001000c70cbeb40eb0cc7a1e4694f5031dd72597e21799d442273a5846dd855c2630bc2ca247a9cfa8d9e2a585d776066b39ea38b9b9e2"], &(0x7f0000000240)=0xad) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f00009f0ffc), 0x4) [ 336.559234] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 15:33:14 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_script(r0, &(0x7f0000000640)={'#! ', './file0', [], 0xa, "d1266d12e95afed85a1bf38aaf1b4ba88686b1d7eefe93e87be1cded9d0d73f957a0dc"}, 0x2e) write$binfmt_script(r0, &(0x7f0000000440)={'#! ', './file0', [], 0xa, "96de86d81aacdb3ba584580de2bfff37e108271616dfd5e3fb5cabab678bd9cf0b8b1c"}, 0x2e) write$P9_RREAD(r0, &(0x7f0000000180)={0x2e, 0x75, 0x0, {0x23, "3035949eec64fef5cbb1d182820bc8bced96d6919b684878bef38a5998c79a92fc2af5"}}, 0x2e) write$binfmt_script(r0, &(0x7f0000000540)={'#! ', './file0', [], 0xa, "b8d958259b7169b2d643c65434fc53e2538fbfd5866cd9cf2f180b8b4d8ded"}, 0x2a) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, 'eth0'}, {0x20, '#! '}, {0x20, '${'}, {0x20, '/dev/sg#\x00'}, {0x20, '#! '}], 0xa, "00fbdd695d"}, 0x2a) write$binfmt_script(r0, &(0x7f0000000080)={'#! ', './file0', [{0x20, '/dev/sg#\x00'}, {0x20, '/dev/sg#\x00'}], 0xa, "7370e8c9eb584ee345b2d52bd5ac60"}, 0x2e) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 15:33:14 executing program 1: r0 = socket$inet6(0xa, 0x8000000000000802, 0x0) sendmsg$inet_sctp(r0, &(0x7f0000000080)={&(0x7f0000000100)=@in6={0xa, 0x4e20, 0x0, @mcast2, 0x9}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000d40)="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", 0x57d}], 0x1}, 0x8000) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x202000, 0x0) openat$cgroup_int(r1, &(0x7f0000000280)='cgroup.clone_children\x00', 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x406, r0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000040)={0x0, 0x9}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f00000002c0)=ANY=[@ANYRES32=r3, @ANYBLOB="a50000002594385563f53df4540e705c5e52807cd5fd4fe41a384abebf889a87280b725283a3661f1c76f1ccd8a46232982913807c6009220845da483708ec867e6555abaa1061f1d36671808477986e2bb76e85b862c3b9d70cc119f65115a3450ecd5683a80dfe1b6ec538b552fe5a537526f75e626aa970ade94b0000000000001000c70cbeb40eb0cc7a1e4694f5031dd72597e21799d442273a5846dd855c2630bc2ca247a9cfa8d9e2a585d776066b39ea38b9b9e2"], &(0x7f0000000240)=0xad) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f00009f0ffc), 0x4) 15:33:14 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_script(r0, &(0x7f0000000640)={'#! ', './file0', [], 0xa, "d1266d12e95afed85a1bf38aaf1b4ba88686b1d7eefe93e87be1cded9d0d73f957a0dc"}, 0x2e) write$binfmt_script(r0, &(0x7f0000000440)={'#! ', './file0', [], 0xa, "96de86d81aacdb3ba584580de2bfff37e108271616dfd5e3fb5cabab678bd9cf0b8b1c"}, 0x2e) write$P9_RREAD(r0, &(0x7f0000000180)={0x2e, 0x75, 0x0, {0x23, "3035949eec64fef5cbb1d182820bc8bced96d6919b684878bef38a5998c79a92fc2af5"}}, 0x2e) write$binfmt_script(r0, &(0x7f0000000540)={'#! ', './file0', [], 0xa, "b8d958259b7169b2d643c65434fc53e2538fbfd5866cd9cf2f180b8b4d8ded"}, 0x2a) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, 'eth0'}, {0x20, '#! '}, {0x20, '${'}, {0x20, '/dev/sg#\x00'}, {0x20, '#! '}], 0xa, "00fbdd695d"}, 0x2a) write$binfmt_script(r0, &(0x7f0000000080)={'#! ', './file0', [{0x20, '/dev/sg#\x00'}, {0x20, '/dev/sg#\x00'}], 0xa, "7370e8c9eb584ee345b2d52bd5ac60"}, 0x2e) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 15:33:14 executing program 1: r0 = add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f0000000280)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$join(0x1, 0x0) r1 = accept(0xffffffffffffff9c, &(0x7f00000002c0)=@x25, &(0x7f0000000200)=0x80) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000340)=[@in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e22, @remote}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e20, 0xffff, @rand_addr="04b9513b2151a5d61216c2b3c3ffe959", 0x7}, @in6={0xa, 0x4e21, 0x0, @rand_addr="17498473732d29ae6c9d27bb5d995726", 0x2}], 0x68) keyctl$set_timeout(0xf, r0, 0x0) r2 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x5, 0x80000) write$P9_RREAD(r2, &(0x7f0000000080)={0x83, 0x75, 0x2, {0x78, "6a53ff0336e3b0577fd7644ebc739d3df2b5c9b983cc6ccf2277cb3c613eb8f5f04ed842619b9c5f6793811d46a6f97406bd0a9f34180efa426517307fdf0f615a647ed4fe072387c1b0e2469546c190587cc34629006603ae1c30c11026276f94bb44b3836461b31942638f020fbdf4c891c9984a238364"}}, 0x83) ioctl$CAPI_GET_ERRCODE(r2, 0x80024321, &(0x7f0000000040)) 15:33:15 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_script(r0, &(0x7f0000000640)={'#! ', './file0', [], 0xa, "d1266d12e95afed85a1bf38aaf1b4ba88686b1d7eefe93e87be1cded9d0d73f957a0dc"}, 0x2e) write$binfmt_script(r0, &(0x7f0000000440)={'#! ', './file0', [], 0xa, "96de86d81aacdb3ba584580de2bfff37e108271616dfd5e3fb5cabab678bd9cf0b8b1c"}, 0x2e) write$P9_RREAD(r0, &(0x7f0000000180)={0x2e, 0x75, 0x0, {0x23, "3035949eec64fef5cbb1d182820bc8bced96d6919b684878bef38a5998c79a92fc2af5"}}, 0x2e) write$binfmt_script(r0, &(0x7f0000000540)={'#! ', './file0', [], 0xa, "b8d958259b7169b2d643c65434fc53e2538fbfd5866cd9cf2f180b8b4d8ded"}, 0x2a) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, 'eth0'}, {0x20, '#! '}, {0x20, '${'}, {0x20, '/dev/sg#\x00'}, {0x20, '#! '}], 0xa, "00fbdd695d"}, 0x2a) write$binfmt_script(r0, &(0x7f0000000080)={'#! ', './file0', [{0x20, '/dev/sg#\x00'}, {0x20, '/dev/sg#\x00'}], 0xa, "7370e8c9eb584ee345b2d52bd5ac60"}, 0x2e) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 15:33:15 executing program 1: pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x84000) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffff9c, 0x84, 0x7c, &(0x7f0000000040)={0x0, 0x4, 0x1}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000140)={r1, 0x200}, &(0x7f0000000180)=0x8) r2 = socket$alg(0x26, 0x5, 0x0) bind(r2, &(0x7f00000000c0)=@ax25={{}, [@default, @remote, @null, @netrom, @netrom, @default, @default, @rose]}, 0x80) 15:33:15 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_script(r0, &(0x7f0000000440)={'#! ', './file0', [], 0xa, "96de86d81aacdb3ba584580de2bfff37e108271616dfd5e3fb5cabab678bd9cf0b8b1c"}, 0x2e) write$P9_RREAD(r0, &(0x7f0000000180)={0x2e, 0x75, 0x0, {0x23, "3035949eec64fef5cbb1d182820bc8bced96d6919b684878bef38a5998c79a92fc2af5"}}, 0x2e) write$binfmt_script(r0, &(0x7f0000000540)={'#! ', './file0', [], 0xa, "b8d958259b7169b2d643c65434fc53e2538fbfd5866cd9cf2f180b8b4d8ded"}, 0x2a) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, 'eth0'}, {0x20, '#! '}, {0x20, '${'}, {0x20, '/dev/sg#\x00'}, {0x20, '#! '}], 0xa, "00fbdd695d"}, 0x2a) write$binfmt_script(r0, &(0x7f0000000080)={'#! ', './file0', [{0x20, '/dev/sg#\x00'}, {0x20, '/dev/sg#\x00'}], 0xa, "7370e8c9eb584ee345b2d52bd5ac60"}, 0x2e) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 15:33:15 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) inotify_init1(0x800) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000180)=@ipv6_newrule={0x20, 0x20, 0x80d}, 0x20}}, 0x0) 15:33:15 executing program 2: pipe(0x0) write(0xffffffffffffffff, 0x0, 0x0) clone(0x3102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0xfffffffffffffffc, 0xffffffff7ffffffa) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x200000010, 0x0, 0x0) write$binfmt_elf32(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="9f"], 0x1) recvmmsg(r3, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000002b00), 0x185, &(0x7f0000002b80)=""/62, 0xa4}}], 0x5e2, 0x0, 0x0) getpeername$unix(r3, &(0x7f0000000180), 0x0) socketpair$unix(0x1, 0x2000003, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000031c0), 0x1, 0x0, 0x0) setgid(0x0) r4 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x100, 0x0) ioctl$KVM_INTERRUPT(r4, 0x4004ae86, &(0x7f0000000040)=0x3f) capset(&(0x7f0000000240)={0x20071026}, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x2007ff) 15:33:15 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_script(r0, &(0x7f0000000440)={'#! ', './file0', [], 0xa, "96de86d81aacdb3ba584580de2bfff37e108271616dfd5e3fb5cabab678bd9cf0b8b1c"}, 0x2e) write$P9_RREAD(r0, &(0x7f0000000180)={0x2e, 0x75, 0x0, {0x23, "3035949eec64fef5cbb1d182820bc8bced96d6919b684878bef38a5998c79a92fc2af5"}}, 0x2e) write$binfmt_script(r0, &(0x7f0000000540)={'#! ', './file0', [], 0xa, "b8d958259b7169b2d643c65434fc53e2538fbfd5866cd9cf2f180b8b4d8ded"}, 0x2a) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, 'eth0'}, {0x20, '#! '}, {0x20, '${'}, {0x20, '/dev/sg#\x00'}, {0x20, '#! '}], 0xa, "00fbdd695d"}, 0x2a) write$binfmt_script(r0, &(0x7f0000000080)={'#! ', './file0', [{0x20, '/dev/sg#\x00'}, {0x20, '/dev/sg#\x00'}], 0xa, "7370e8c9eb584ee345b2d52bd5ac60"}, 0x2e) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) [ 337.517677] netlink: 4 bytes leftover after parsing attributes in process `syz-executor1'. [ 337.566641] netlink: 4 bytes leftover after parsing attributes in process `syz-executor1'. [ 337.681152] capability: warning: `syz-executor2' uses deprecated v2 capabilities in a way that may be insecure 15:33:15 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_script(r0, &(0x7f0000000440)={'#! ', './file0', [], 0xa, "96de86d81aacdb3ba584580de2bfff37e108271616dfd5e3fb5cabab678bd9cf0b8b1c"}, 0x2e) write$P9_RREAD(r0, &(0x7f0000000180)={0x2e, 0x75, 0x0, {0x23, "3035949eec64fef5cbb1d182820bc8bced96d6919b684878bef38a5998c79a92fc2af5"}}, 0x2e) write$binfmt_script(r0, &(0x7f0000000540)={'#! ', './file0', [], 0xa, "b8d958259b7169b2d643c65434fc53e2538fbfd5866cd9cf2f180b8b4d8ded"}, 0x2a) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, 'eth0'}, {0x20, '#! '}, {0x20, '${'}, {0x20, '/dev/sg#\x00'}, {0x20, '#! '}], 0xa, "00fbdd695d"}, 0x2a) write$binfmt_script(r0, &(0x7f0000000080)={'#! ', './file0', [{0x20, '/dev/sg#\x00'}, {0x20, '/dev/sg#\x00'}], 0xa, "7370e8c9eb584ee345b2d52bd5ac60"}, 0x2e) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 15:33:15 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) inotify_init1(0x800) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000180)=@ipv6_newrule={0x20, 0x20, 0x80d}, 0x20}}, 0x0) 15:33:15 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000240)=0x667, 0x2) r2 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x10000, 0x0) ioctl$VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000140)={0x9, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000000)='trusted.overlay.upper\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="edfa6c05ff364820f8a5e34bd053a40a7df08ed02ed20100000001000000120a28afa8318afc7a3a2dbca95ebc507c3ff2e5c1ecdeabe80befe2d60037ca32fd923e952ae6f22cef17ea74fdd65254d3cdf0523bfcdc7773742e7bfa8f3a2d3900000000000000000000000086c5dbe484e840e8acfda398568fa10bce15786a45205d9cba7c40a60c9fcf58927cc978ac72e77910d05e01a60e1dfa7db4fa88179c07ee96244b02a00379d7a6ffa6486204233256556d34282040517b4613ce98b2bd3e0a3bdf743bb933332d"], 0x6c, 0xfffffffffffffffd) ioctl$VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000480)={0x7, @win={{0x100000000, 0x9, 0x0, 0x1ff}, 0x4, 0x39d, &(0x7f00000000c0)={{0x2, 0x3f, 0x400, 0x7ff}}, 0x3394, &(0x7f0000000280)="d3b128df04f720298b452bfab1d8a50ee8f322d1c1260fd388f91aec11cd39612f7181c3cd457c2c59324abd89b289c2b1fcabd43ca37c1087e4d4501d91ff927b070977e0a89da1d3f1fc4f774cf471e1544ac6e96a0778", 0x8}}) [ 337.907201] netlink: 4 bytes leftover after parsing attributes in process `syz-executor1'. 15:33:16 executing program 0: write$binfmt_script(0xffffffffffffffff, &(0x7f0000000640)={'#! ', './file0', [], 0xa, "d1266d12e95afed85a1bf38aaf1b4ba88686b1d7eefe93e87be1cded9d0d73f957a0dc"}, 0x2e) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000440)={'#! ', './file0', [], 0xa, "96de86d81aacdb3ba584580de2bfff37e108271616dfd5e3fb5cabab678bd9cf0b8b1c"}, 0x2e) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000180)={0x2e, 0x75, 0x0, {0x23, "3035949eec64fef5cbb1d182820bc8bced96d6919b684878bef38a5998c79a92fc2af5"}}, 0x2e) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000540)={'#! ', './file0', [], 0xa, "b8d958259b7169b2d643c65434fc53e2538fbfd5866cd9cf2f180b8b4d8ded"}, 0x2a) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)={'#! ', './file0', [{0x20, 'eth0'}, {0x20, '#! '}, {0x20, '${'}, {0x20, '/dev/sg#\x00'}, {0x20, '#! '}], 0xa, "00fbdd695d"}, 0x2a) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)={'#! ', './file0', [{0x20, '/dev/sg#\x00'}, {0x20, '/dev/sg#\x00'}], 0xa, "7370e8c9eb584ee345b2d52bd5ac60"}, 0x2e) write$binfmt_elf32(0xffffffffffffffff, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 15:33:16 executing program 1: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x141000, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000340)={0x53, 0xffffffffffffffff, 0x6e, 0x0, @buffer={0x0, 0xeb, &(0x7f00000000c0)=""/235}, &(0x7f00000001c0)="ed0ea06400915b39124e0fe292ae1ba64b36b3e5536e9704f4991e1186ecfe6dd23e6702aa0bbab750e71ad2ca8410ed84ffb82081a0ef73828f3d4138b7bd376292a3981cc94ff8315b8a260d709423111218afe8da573dff09801e4ed509d441356080560df332828c8577afce", &(0x7f0000000240)=""/135, 0x6, 0x10001, 0x2, &(0x7f0000000300)}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000004fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r2, 0x29, 0x1000000004b, &(0x7f0000000040), &(0x7f0000013000)=0x4) mmap(&(0x7f0000000000/0xfe3000)=nil, 0xfe3000, 0x3, 0x32, 0xffffffffffffffff, 0x0) close(r0) 15:33:16 executing program 2: sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0)=[{{&(0x7f0000000080)=@l2, 0x80, &(0x7f0000000f00), 0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="18deffffe6ffffffff3d545112ac17c207ec"], 0x12}}], 0x1, 0x0) sigaltstack(&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000140)) sigaltstack(&(0x7f0000001000/0x4000)=nil, 0x0) 15:33:16 executing program 0: write$binfmt_script(0xffffffffffffffff, &(0x7f0000000640)={'#! ', './file0', [], 0xa, "d1266d12e95afed85a1bf38aaf1b4ba88686b1d7eefe93e87be1cded9d0d73f957a0dc"}, 0x2e) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000440)={'#! ', './file0', [], 0xa, "96de86d81aacdb3ba584580de2bfff37e108271616dfd5e3fb5cabab678bd9cf0b8b1c"}, 0x2e) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000180)={0x2e, 0x75, 0x0, {0x23, "3035949eec64fef5cbb1d182820bc8bced96d6919b684878bef38a5998c79a92fc2af5"}}, 0x2e) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000540)={'#! ', './file0', [], 0xa, "b8d958259b7169b2d643c65434fc53e2538fbfd5866cd9cf2f180b8b4d8ded"}, 0x2a) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)={'#! ', './file0', [{0x20, 'eth0'}, {0x20, '#! '}, {0x20, '${'}, {0x20, '/dev/sg#\x00'}, {0x20, '#! '}], 0xa, "00fbdd695d"}, 0x2a) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)={'#! ', './file0', [{0x20, '/dev/sg#\x00'}, {0x20, '/dev/sg#\x00'}], 0xa, "7370e8c9eb584ee345b2d52bd5ac60"}, 0x2e) write$binfmt_elf32(0xffffffffffffffff, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 15:33:16 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_MSCBIT(r0, 0x40045568, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_vs_stats\x00') ioctl$UI_SET_MSCBIT(r0, 0x40045568, 0x0) 15:33:16 executing program 0: write$binfmt_script(0xffffffffffffffff, &(0x7f0000000640)={'#! ', './file0', [], 0xa, "d1266d12e95afed85a1bf38aaf1b4ba88686b1d7eefe93e87be1cded9d0d73f957a0dc"}, 0x2e) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000440)={'#! ', './file0', [], 0xa, "96de86d81aacdb3ba584580de2bfff37e108271616dfd5e3fb5cabab678bd9cf0b8b1c"}, 0x2e) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000180)={0x2e, 0x75, 0x0, {0x23, "3035949eec64fef5cbb1d182820bc8bced96d6919b684878bef38a5998c79a92fc2af5"}}, 0x2e) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000540)={'#! ', './file0', [], 0xa, "b8d958259b7169b2d643c65434fc53e2538fbfd5866cd9cf2f180b8b4d8ded"}, 0x2a) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)={'#! ', './file0', [{0x20, 'eth0'}, {0x20, '#! '}, {0x20, '${'}, {0x20, '/dev/sg#\x00'}, {0x20, '#! '}], 0xa, "00fbdd695d"}, 0x2a) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)={'#! ', './file0', [{0x20, '/dev/sg#\x00'}, {0x20, '/dev/sg#\x00'}], 0xa, "7370e8c9eb584ee345b2d52bd5ac60"}, 0x2e) write$binfmt_elf32(0xffffffffffffffff, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 15:33:16 executing program 1: r0 = epoll_create1(0x80003) epoll_create1(0x80000) r1 = epoll_create1(0x0) close(r0) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rfkill\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000040)={0x1}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000000)) ioctl$CAPI_GET_PROFILE(r2, 0xc0404309, &(0x7f0000000080)) epoll_pwait(r1, &(0x7f0000000140)=[{}], 0x1, 0x0, &(0x7f00000001c0), 0x8) mount(&(0x7f00000000c0)=@nullb='/dev/nullb0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='rpc_pipefs\x00', 0x10, &(0x7f0000000240)='/dev/rfkill\x00') 15:33:16 executing program 0: r0 = syz_open_dev$sg(0x0, 0x0, 0x2) write$binfmt_script(r0, &(0x7f0000000640)={'#! ', './file0', [], 0xa, "d1266d12e95afed85a1bf38aaf1b4ba88686b1d7eefe93e87be1cded9d0d73f957a0dc"}, 0x2e) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_script(r0, &(0x7f0000000440)={'#! ', './file0', [], 0xa, "96de86d81aacdb3ba584580de2bfff37e108271616dfd5e3fb5cabab678bd9cf0b8b1c"}, 0x2e) write$P9_RREAD(r0, &(0x7f0000000180)={0x2e, 0x75, 0x0, {0x23, "3035949eec64fef5cbb1d182820bc8bced96d6919b684878bef38a5998c79a92fc2af5"}}, 0x2e) write$binfmt_script(r0, &(0x7f0000000540)={'#! ', './file0', [], 0xa, "b8d958259b7169b2d643c65434fc53e2538fbfd5866cd9cf2f180b8b4d8ded"}, 0x2a) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, 'eth0'}, {0x20, '#! '}, {0x20, '${'}, {0x20, '/dev/sg#\x00'}, {0x20, '#! '}], 0xa, "00fbdd695d"}, 0x2a) write$binfmt_script(r0, &(0x7f0000000080)={'#! ', './file0', [{0x20, '/dev/sg#\x00'}, {0x20, '/dev/sg#\x00'}], 0xa, "7370e8c9eb584ee345b2d52bd5ac60"}, 0x2e) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 15:33:16 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0x0, 0x0}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='fd\x00') fchdir(r1) exit(0x0) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) write$P9_RREADDIR(r1, &(0x7f0000000180)={0x10f, 0x29, 0x2, {0x0, [{{0x14, 0x4, 0x5}, 0x40, 0xfffffffffffffffd, 0x7, './file0'}, {{0x60, 0x1, 0x2}, 0x8001, 0xffff, 0x7, './file0'}, {{0x4, 0x3, 0x1}, 0xffff, 0x164, 0xd, './file0/file0'}, {{0x10, 0x2, 0x5}, 0x5, 0x800, 0x7, './file0'}, {{0x80, 0x2}, 0x0, 0x3, 0xd, './file0/file0'}, {{0x0, 0x4}, 0xf, 0x6, 0x7, './file0'}, {{0x81, 0x2, 0x7}, 0x5, 0x649, 0x7, './file0'}, {{0xdb, 0x1, 0x6}, 0x6f1, 0x4, 0x7, './file0'}]}}, 0x10f) 15:33:16 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x402000, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$VIDIOC_S_OUTPUT(r1, 0xc004562f, &(0x7f0000000080)=0x2) sendmsg$nl_route(r0, &(0x7f0000000400)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)=@bridge_setlink={0x20, 0x13, 0x129}, 0x20}}, 0x0) ioctl$VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000300)={0x1, @win={{0xffff, 0x5, 0xcc39, 0x4}, 0x0, 0x40, &(0x7f0000000280)={{0x0, 0x80, 0x900000000000, 0x3}, &(0x7f0000000240)={{0x2, 0x20, 0x400, 0x5}, &(0x7f0000000200)={{0x0, 0x4, 0x74}}}}, 0xfffffffffffffff8, &(0x7f00000002c0)="cd8e7b50b60dd33ca968918dbdc63e91bcd94f95a32c28", 0x7fff}}) getsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000100), &(0x7f0000000140)=0x4) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000440)=0x3) inotify_init1(0x80000) write$FUSE_NOTIFY_INVAL_INODE(r1, &(0x7f0000000480)={0x28, 0x2, 0x0, {0x6, 0xfff, 0x2}}, 0x28) ioctl$EVIOCGUNIQ(r1, 0x80404508, &(0x7f0000000180)=""/14) 15:33:16 executing program 0: r0 = syz_open_dev$sg(0x0, 0x0, 0x2) write$binfmt_script(r0, &(0x7f0000000640)={'#! ', './file0', [], 0xa, "d1266d12e95afed85a1bf38aaf1b4ba88686b1d7eefe93e87be1cded9d0d73f957a0dc"}, 0x2e) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_script(r0, &(0x7f0000000440)={'#! ', './file0', [], 0xa, "96de86d81aacdb3ba584580de2bfff37e108271616dfd5e3fb5cabab678bd9cf0b8b1c"}, 0x2e) write$P9_RREAD(r0, &(0x7f0000000180)={0x2e, 0x75, 0x0, {0x23, "3035949eec64fef5cbb1d182820bc8bced96d6919b684878bef38a5998c79a92fc2af5"}}, 0x2e) write$binfmt_script(r0, &(0x7f0000000540)={'#! ', './file0', [], 0xa, "b8d958259b7169b2d643c65434fc53e2538fbfd5866cd9cf2f180b8b4d8ded"}, 0x2a) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, 'eth0'}, {0x20, '#! '}, {0x20, '${'}, {0x20, '/dev/sg#\x00'}, {0x20, '#! '}], 0xa, "00fbdd695d"}, 0x2a) write$binfmt_script(r0, &(0x7f0000000080)={'#! ', './file0', [{0x20, '/dev/sg#\x00'}, {0x20, '/dev/sg#\x00'}], 0xa, "7370e8c9eb584ee345b2d52bd5ac60"}, 0x2e) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 15:33:17 executing program 1: openat$userio(0xffffffffffffff9c, &(0x7f0000000380)='/dev/userio\x00', 0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$KVM_GET_MSRS(r0, 0xc008ae88, &(0x7f0000000000)={0x2, 0x0, [{}, {}]}) pselect6(0x40, &(0x7f00000000c0)={0x64}, 0x0, 0x0, 0x0, 0x0) 15:33:17 executing program 0: r0 = syz_open_dev$sg(0x0, 0x0, 0x2) write$binfmt_script(r0, &(0x7f0000000640)={'#! ', './file0', [], 0xa, "d1266d12e95afed85a1bf38aaf1b4ba88686b1d7eefe93e87be1cded9d0d73f957a0dc"}, 0x2e) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_script(r0, &(0x7f0000000440)={'#! ', './file0', [], 0xa, "96de86d81aacdb3ba584580de2bfff37e108271616dfd5e3fb5cabab678bd9cf0b8b1c"}, 0x2e) write$P9_RREAD(r0, &(0x7f0000000180)={0x2e, 0x75, 0x0, {0x23, "3035949eec64fef5cbb1d182820bc8bced96d6919b684878bef38a5998c79a92fc2af5"}}, 0x2e) write$binfmt_script(r0, &(0x7f0000000540)={'#! ', './file0', [], 0xa, "b8d958259b7169b2d643c65434fc53e2538fbfd5866cd9cf2f180b8b4d8ded"}, 0x2a) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, 'eth0'}, {0x20, '#! '}, {0x20, '${'}, {0x20, '/dev/sg#\x00'}, {0x20, '#! '}], 0xa, "00fbdd695d"}, 0x2a) write$binfmt_script(r0, &(0x7f0000000080)={'#! ', './file0', [{0x20, '/dev/sg#\x00'}, {0x20, '/dev/sg#\x00'}], 0xa, "7370e8c9eb584ee345b2d52bd5ac60"}, 0x2e) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 15:33:17 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'eql\x00', 0x803}) ioctl$TUNGETFILTER(r0, 0x801054db, 0x0) ioctl$TUNGETFILTER(r0, 0x801054db, &(0x7f0000000100)=""/4096) 15:33:17 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000640)={'#! ', './file0', [], 0xa, "d1266d12e95afed85a1bf38aaf1b4ba88686b1d7eefe93e87be1cded9d0d73f957a0dc"}, 0x2e) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_script(r0, &(0x7f0000000440)={'#! ', './file0', [], 0xa, "96de86d81aacdb3ba584580de2bfff37e108271616dfd5e3fb5cabab678bd9cf0b8b1c"}, 0x2e) write$P9_RREAD(r0, &(0x7f0000000180)={0x2e, 0x75, 0x0, {0x23, "3035949eec64fef5cbb1d182820bc8bced96d6919b684878bef38a5998c79a92fc2af5"}}, 0x2e) write$binfmt_script(r0, &(0x7f0000000540)={'#! ', './file0', [], 0xa, "b8d958259b7169b2d643c65434fc53e2538fbfd5866cd9cf2f180b8b4d8ded"}, 0x2a) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, 'eth0'}, {0x20, '#! '}, {0x20, '${'}, {0x20, '/dev/sg#\x00'}, {0x20, '#! '}], 0xa, "00fbdd695d"}, 0x2a) write$binfmt_script(r0, &(0x7f0000000080)={'#! ', './file0', [{0x20, '/dev/sg#\x00'}, {0x20, '/dev/sg#\x00'}], 0xa, "7370e8c9eb584ee345b2d52bd5ac60"}, 0x2e) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 15:33:17 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000640)={'#! ', './file0', [], 0xa, "d1266d12e95afed85a1bf38aaf1b4ba88686b1d7eefe93e87be1cded9d0d73f957a0dc"}, 0x2e) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_script(r0, &(0x7f0000000440)={'#! ', './file0', [], 0xa, "96de86d81aacdb3ba584580de2bfff37e108271616dfd5e3fb5cabab678bd9cf0b8b1c"}, 0x2e) write$P9_RREAD(r0, &(0x7f0000000180)={0x2e, 0x75, 0x0, {0x23, "3035949eec64fef5cbb1d182820bc8bced96d6919b684878bef38a5998c79a92fc2af5"}}, 0x2e) write$binfmt_script(r0, &(0x7f0000000540)={'#! ', './file0', [], 0xa, "b8d958259b7169b2d643c65434fc53e2538fbfd5866cd9cf2f180b8b4d8ded"}, 0x2a) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, 'eth0'}, {0x20, '#! '}, {0x20, '${'}, {0x20, '/dev/sg#\x00'}, {0x20, '#! '}], 0xa, "00fbdd695d"}, 0x2a) write$binfmt_script(r0, &(0x7f0000000080)={'#! ', './file0', [{0x20, '/dev/sg#\x00'}, {0x20, '/dev/sg#\x00'}], 0xa, "7370e8c9eb584ee345b2d52bd5ac60"}, 0x2e) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 15:33:17 executing program 1: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)={0x4000201f}) epoll_pwait(r1, &(0x7f0000000100)=[{}], 0x1, 0x0, &(0x7f0000000080), 0x8) 15:33:17 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xe, &(0x7f0000000000)=0x7, 0x4) r1 = socket$netlink(0x10, 0x3, 0x4) write(r1, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) socket$packet(0x11, 0x2, 0x300) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) ioctl$ASHMEM_SET_PROT_MASK(r2, 0x40087705, &(0x7f0000000080)={0x2, 0xfffffffffffffff8}) recvmmsg(r1, &(0x7f0000006500), 0x2c7, 0x0, &(0x7f0000006700)) 15:33:17 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000640)={'#! ', './file0', [], 0xa, "d1266d12e95afed85a1bf38aaf1b4ba88686b1d7eefe93e87be1cded9d0d73f957a0dc"}, 0x2e) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_script(r0, &(0x7f0000000440)={'#! ', './file0', [], 0xa, "96de86d81aacdb3ba584580de2bfff37e108271616dfd5e3fb5cabab678bd9cf0b8b1c"}, 0x2e) write$P9_RREAD(r0, &(0x7f0000000180)={0x2e, 0x75, 0x0, {0x23, "3035949eec64fef5cbb1d182820bc8bced96d6919b684878bef38a5998c79a92fc2af5"}}, 0x2e) write$binfmt_script(r0, &(0x7f0000000540)={'#! ', './file0', [], 0xa, "b8d958259b7169b2d643c65434fc53e2538fbfd5866cd9cf2f180b8b4d8ded"}, 0x2a) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, 'eth0'}, {0x20, '#! '}, {0x20, '${'}, {0x20, '/dev/sg#\x00'}, {0x20, '#! '}], 0xa, "00fbdd695d"}, 0x2a) write$binfmt_script(r0, &(0x7f0000000080)={'#! ', './file0', [{0x20, '/dev/sg#\x00'}, {0x20, '/dev/sg#\x00'}], 0xa, "7370e8c9eb584ee345b2d52bd5ac60"}, 0x2e) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 15:33:17 executing program 1: unshare(0x20400) r0 = socket$inet_tcp(0x2, 0x3, 0x6) socket$packet(0x11, 0x3, 0x300) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000000040)={0x1, 'yam0\x00'}, 0x18) 15:33:17 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000640)={'#! ', './file0', [], 0xa, "d1266d12e95afed85a1bf38aaf1b4ba88686b1d7eefe93e87be1cded9d0d73f957a0dc"}, 0x2e) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_script(r0, &(0x7f0000000440)={'#! ', './file0', [], 0xa, "96de86d81aacdb3ba584580de2bfff37e108271616dfd5e3fb5cabab678bd9cf0b8b1c"}, 0x2e) write$P9_RREAD(r0, &(0x7f0000000180)={0x2e, 0x75, 0x0, {0x23, "3035949eec64fef5cbb1d182820bc8bced96d6919b684878bef38a5998c79a92fc2af5"}}, 0x2e) write$binfmt_script(r0, &(0x7f0000000540)={'#! ', './file0', [], 0xa, "b8d958259b7169b2d643c65434fc53e2538fbfd5866cd9cf2f180b8b4d8ded"}, 0x2a) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, 'eth0'}, {0x20, '#! '}, {0x20, '${'}, {0x20, '/dev/sg#\x00'}, {0x20, '#! '}], 0xa, "00fbdd695d"}, 0x2a) write$binfmt_script(r0, &(0x7f0000000080)={'#! ', './file0', [{0x20, '/dev/sg#\x00'}, {0x20, '/dev/sg#\x00'}], 0xa, "7370e8c9eb584ee345b2d52bd5ac60"}, 0x2e) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 15:33:18 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, 0x0) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f0000000000)) 15:33:18 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000640)={'#! ', './file0', [], 0xa, "d1266d12e95afed85a1bf38aaf1b4ba88686b1d7eefe93e87be1cded9d0d73f957a0dc"}, 0x2e) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_script(r0, &(0x7f0000000440)={'#! ', './file0', [], 0xa, "96de86d81aacdb3ba584580de2bfff37e108271616dfd5e3fb5cabab678bd9cf0b8b1c"}, 0x2e) write$P9_RREAD(r0, &(0x7f0000000180)={0x2e, 0x75, 0x0, {0x23, "3035949eec64fef5cbb1d182820bc8bced96d6919b684878bef38a5998c79a92fc2af5"}}, 0x2e) write$binfmt_script(r0, &(0x7f0000000540)={'#! ', './file0', [], 0xa, "b8d958259b7169b2d643c65434fc53e2538fbfd5866cd9cf2f180b8b4d8ded"}, 0x2a) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, 'eth0'}, {0x20, '#! '}, {0x20, '${'}, {0x20, '/dev/sg#\x00'}, {0x20, '#! '}], 0xa, "00fbdd695d"}, 0x2a) write$binfmt_script(r0, &(0x7f0000000080)={'#! ', './file0', [{0x20, '/dev/sg#\x00'}, {0x20, '/dev/sg#\x00'}], 0xa, "7370e8c9eb584ee345b2d52bd5ac60"}, 0x2e) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 15:33:18 executing program 1: sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[]}}, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000002c0)="0b8493da69d419d3e5a313affec5c48780fa42c0606761a2404a9a6c5a567525af09b4ae9ae6a36177018ff55a012c3fa3d9a196466f930c37b676633bbcdd54ad15d1d19aa5b95e6b797acddbacf7ed0796c0f196dfbb8bbe0d57cab508ca10839a6750dab329b861c57d41508204309f85c612f8e5b88a528d442e05736cbb65dc347f371e3b617e807818682759751ae85a5f6de6d672fdf84dfe6317c6c4a7e11b8fd8babb2127430a3eb34f68c6487f", 0xb2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0x40, 0x4242) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_NAME_TABLE_GET(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f00000005c0)={0x250, r3, 0x300, 0x70bd2a, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0x38, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfff}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x400000000000}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_BEARER={0x104, 0x1, [@TIPC_NLA_BEARER_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}]}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'ib', 0x3a, 'veth0_to_team\x00'}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x78e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x101}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5da6e98f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_BEARER_PROP={0x54, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1650}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x8, @dev={0xfe, 0x80, [], 0x23}, 0x8}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x0, @ipv4={[], [], @broadcast}, 0x1000}}}}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x40}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_SOCK={0x40, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xed}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}]}, @TIPC_NLA_SOCK={0x40, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x101}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x100000000}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5b}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}]}, @TIPC_NLA_LINK={0x48, 0x4, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x67a4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xbca}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}]}]}, 0x250}, 0x1, 0x0, 0x0, 0x8800}, 0x24040011) add_key(0x0, 0x0, &(0x7f0000000480)="9605550835d6548b5ad5805000b57a8ecc", 0x11, 0xfffffffffffffff8) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fde000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r4, 0x4008ae93, &(0x7f0000000580)=0x2fff) ioctl$KVM_GET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000280)) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cgroup.controllers\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r5, 0xc06864a2, &(0x7f0000000100)={&(0x7f0000000040)=[0x8, 0x5, 0x3ff, 0x4, 0xb767, 0x3, 0x2, 0x0, 0x6], 0x9, 0x5, 0x2, 0x100, 0x1, 0x81, {0x2, 0x5, 0x0, 0x2, 0x4, 0x1000, 0x4, 0xf, 0x1, 0xfff, 0xf33, 0x9, 0x4, 0x8, "560be149079c610f8855ddeeee0e1e3ea7f0072083507b111202ea050f126415"}}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 15:33:18 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000640)={'#! ', './file0', [], 0xa, "d1266d12e95afed85a1bf38aaf1b4ba88686b1d7eefe93e87be1cded9d0d73f957a0dc"}, 0x2e) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_script(r0, &(0x7f0000000440)={'#! ', './file0', [], 0xa, "96de86d81aacdb3ba584580de2bfff37e108271616dfd5e3fb5cabab678bd9cf0b8b1c"}, 0x2e) write$P9_RREAD(r0, &(0x7f0000000180)={0x2e, 0x75, 0x0, {0x23, "3035949eec64fef5cbb1d182820bc8bced96d6919b684878bef38a5998c79a92fc2af5"}}, 0x2e) write$binfmt_script(r0, &(0x7f0000000540)={'#! ', './file0', [], 0xa, "b8d958259b7169b2d643c65434fc53e2538fbfd5866cd9cf2f180b8b4d8ded"}, 0x2a) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, 'eth0'}, {0x20, '#! '}, {0x20, '${'}, {0x20, '/dev/sg#\x00'}, {0x20, '#! '}], 0xa, "00fbdd695d"}, 0x2a) write$binfmt_script(r0, &(0x7f0000000080)={'#! ', './file0', [{0x20, '/dev/sg#\x00'}, {0x20, '/dev/sg#\x00'}], 0xa, "7370e8c9eb584ee345b2d52bd5ac60"}, 0x2e) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 15:33:18 executing program 2: syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_GET_THP_DISABLE(0x2a) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) 15:33:18 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_script(r0, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_script(r0, &(0x7f0000000440)={'#! ', './file0', [], 0xa, "96de86d81aacdb3ba584580de2bfff37e108271616dfd5e3fb5cabab678bd9cf0b8b1c"}, 0x2e) write$P9_RREAD(r0, &(0x7f0000000180)={0x2e, 0x75, 0x0, {0x23, "3035949eec64fef5cbb1d182820bc8bced96d6919b684878bef38a5998c79a92fc2af5"}}, 0x2e) write$binfmt_script(r0, &(0x7f0000000540)={'#! ', './file0', [], 0xa, "b8d958259b7169b2d643c65434fc53e2538fbfd5866cd9cf2f180b8b4d8ded"}, 0x2a) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, 'eth0'}, {0x20, '#! '}, {0x20, '${'}, {0x20, '/dev/sg#\x00'}, {0x20, '#! '}], 0xa, "00fbdd695d"}, 0x2a) write$binfmt_script(r0, &(0x7f0000000080)={'#! ', './file0', [{0x20, '/dev/sg#\x00'}, {0x20, '/dev/sg#\x00'}], 0xa, "7370e8c9eb584ee345b2d52bd5ac60"}, 0x2e) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 15:33:18 executing program 2: keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6e65772064656661756c74207573654b3a6e6f64657620303030303030303030302730303007933d3b303030"], 0x2c, 0x0) r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x400, 0x80000) fcntl$getflags(r0, 0x40b) r1 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x1f1, 0xfffffffffffffffe) keyctl$update(0x2, r1, 0x0, 0x0) setxattr$trusted_overlay_redirect(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.redirect\x00', &(0x7f00000000c0)='./file0\x00', 0x8, 0x0) 15:33:18 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000100)='/dev/audio#\x00', 0x7, 0x80000) ioctl$DRM_IOCTL_RM_MAP(r2, 0x4028641b, &(0x7f0000000140)={&(0x7f0000ffd000/0x3000)=nil, 0x9, 0x4, 0x21, &(0x7f0000fff000/0x1000)=nil, 0x1}) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x101002, 0x0) setsockopt$inet6_tcp_buf(r3, 0x6, 0x2f, &(0x7f00000000c0)="62e35a36618f6995fe10f99c3a0fc455ebbe4c2d0392727f0ca7fbdf9b28eafc5358b87a3f57747a448d18c98fb1056d1b", 0x31) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'eql\x00\x00\x00\x05\x00', 0x803}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x304) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ifreq(r4, 0x8914, &(0x7f0000000040)={'eql\x00\x00\x00\xa9[\x00', @ifru_mtu=0x1}) 15:33:18 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_script(r0, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_script(r0, &(0x7f0000000440)={'#! ', './file0', [], 0xa, "96de86d81aacdb3ba584580de2bfff37e108271616dfd5e3fb5cabab678bd9cf0b8b1c"}, 0x2e) write$P9_RREAD(r0, &(0x7f0000000180)={0x2e, 0x75, 0x0, {0x23, "3035949eec64fef5cbb1d182820bc8bced96d6919b684878bef38a5998c79a92fc2af5"}}, 0x2e) write$binfmt_script(r0, &(0x7f0000000540)={'#! ', './file0', [], 0xa, "b8d958259b7169b2d643c65434fc53e2538fbfd5866cd9cf2f180b8b4d8ded"}, 0x2a) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, 'eth0'}, {0x20, '#! '}, {0x20, '${'}, {0x20, '/dev/sg#\x00'}, {0x20, '#! '}], 0xa, "00fbdd695d"}, 0x2a) write$binfmt_script(r0, &(0x7f0000000080)={'#! ', './file0', [{0x20, '/dev/sg#\x00'}, {0x20, '/dev/sg#\x00'}], 0xa, "7370e8c9eb584ee345b2d52bd5ac60"}, 0x2e) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) [ 340.851855] encrypted_key: master key parameter 'useK:nodev' is invalid [ 340.877169] encrypted_key: master key parameter 'useK:nodev' is invalid 15:33:18 executing program 1: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcs\x00', 0x0, 0x0) r1 = epoll_create1(0x0) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x2, 0x18, 0x200, 0xb, 0x19, 0x0, 0x70bd2c, 0x25dfdbfb, [@sadb_address={0x3, 0x17, 0x2b, 0x0, 0x0, @in={0x2, 0x231, @broadcast}}, @sadb_address={0x3, 0x17, 0x3c, 0x80, 0x0, @in={0x2, 0x4e24, @broadcast}}, @sadb_key={0x4, 0x8, 0x98, 0x0, "4c34d40615c877bf9671d501169a47fc04eb2b"}, @sadb_x_nat_t_port={0x1, 0x17, 0x4e24}, @sadb_x_sa2={0x2, 0x13, 0xf7, 0x0, 0x0, 0x70bd27, 0x3507}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x6e6bbf, 0x4, {0x6, 0x2b, 0x4, 0x6, 0x0, 0x9, 0x0, @in6=@rand_addr="2eb66d2c55d3622cf194a5402004aec2", @in6=@mcast2}}, @sadb_spirange={0x2, 0x10, 0x4d2, 0x4d6}]}, 0xc8}}, 0x40080) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000d4a000)={0xc0000001}) epoll_wait(r1, &(0x7f0000000000)=[{}], 0x2de, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f00000001c0)={0x4, [0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000200)=0x14) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) 15:33:19 executing program 2: keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6e65772064656661756c74207573654b3a6e6f64657620303030303030303030302730303007933d3b303030"], 0x2c, 0x0) r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x400, 0x80000) fcntl$getflags(r0, 0x40b) r1 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x1f1, 0xfffffffffffffffe) keyctl$update(0x2, r1, 0x0, 0x0) setxattr$trusted_overlay_redirect(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.redirect\x00', &(0x7f00000000c0)='./file0\x00', 0x8, 0x0) 15:33:19 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_script(r0, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_script(r0, &(0x7f0000000440)={'#! ', './file0', [], 0xa, "96de86d81aacdb3ba584580de2bfff37e108271616dfd5e3fb5cabab678bd9cf0b8b1c"}, 0x2e) write$P9_RREAD(r0, &(0x7f0000000180)={0x2e, 0x75, 0x0, {0x23, "3035949eec64fef5cbb1d182820bc8bced96d6919b684878bef38a5998c79a92fc2af5"}}, 0x2e) write$binfmt_script(r0, &(0x7f0000000540)={'#! ', './file0', [], 0xa, "b8d958259b7169b2d643c65434fc53e2538fbfd5866cd9cf2f180b8b4d8ded"}, 0x2a) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, 'eth0'}, {0x20, '#! '}, {0x20, '${'}, {0x20, '/dev/sg#\x00'}, {0x20, '#! '}], 0xa, "00fbdd695d"}, 0x2a) write$binfmt_script(r0, &(0x7f0000000080)={'#! ', './file0', [{0x20, '/dev/sg#\x00'}, {0x20, '/dev/sg#\x00'}], 0xa, "7370e8c9eb584ee345b2d52bd5ac60"}, 0x2e) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) [ 341.108480] encrypted_key: master key parameter 'useK:nodev' is invalid 15:33:19 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r2 = socket(0x200000000000011, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'bridge_slave_0\x00', 0x0}) bind$packet(r2, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @dev}, 0x14) io_setup(0x5, &(0x7f00000000c0)=0x0) setsockopt$sock_int(r0, 0x1, 0x26, &(0x7f0000000180)=0x9, 0x4b) io_submit(r4, 0x1, &(0x7f0000000600)=[&(0x7f0000000540)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0}]) 15:33:19 executing program 2: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000a7dfff)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000080)=ANY=[@ANYBLOB="6cefdc041413d972425133d328985a7d2dd8bcd93d4bd80e13ff80cfd98ddf9ef9614b00558cb7f67c673d81be838f8045ab682ee083431fed8d8ec95b16a687b279b8bc665193d1ec928ebb681290c7904de7e533721018023879623cbf08d334ac17d9cfb29efd947ee21e5cf670459830ab767cb7d151f92eded85b17806a4e5a5839bdc79c14bca3af4d949f"], &(0x7f0000343ff8)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f000000a000)) 15:33:19 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_script(r0, &(0x7f0000000640)={'#! ', './file0'}, 0xb) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_script(r0, &(0x7f0000000440)={'#! ', './file0', [], 0xa, "96de86d81aacdb3ba584580de2bfff37e108271616dfd5e3fb5cabab678bd9cf0b8b1c"}, 0x2e) write$P9_RREAD(r0, &(0x7f0000000180)={0x2e, 0x75, 0x0, {0x23, "3035949eec64fef5cbb1d182820bc8bced96d6919b684878bef38a5998c79a92fc2af5"}}, 0x2e) write$binfmt_script(r0, &(0x7f0000000540)={'#! ', './file0', [], 0xa, "b8d958259b7169b2d643c65434fc53e2538fbfd5866cd9cf2f180b8b4d8ded"}, 0x2a) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, 'eth0'}, {0x20, '#! '}, {0x20, '${'}, {0x20, '/dev/sg#\x00'}, {0x20, '#! '}], 0xa, "00fbdd695d"}, 0x2a) write$binfmt_script(r0, &(0x7f0000000080)={'#! ', './file0', [{0x20, '/dev/sg#\x00'}, {0x20, '/dev/sg#\x00'}], 0xa, "7370e8c9eb584ee345b2d52bd5ac60"}, 0x2e) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 15:33:19 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001c80)='TIPCv2\x00') sendmsg$TIPC_NL_MON_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x14, r1, 0xf01, 0x0, 0x0, {0x12, 0x0, 0x8}}, 0xffd2}}, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) 15:33:19 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_script(r0, &(0x7f0000000640)={'#! ', './file0'}, 0xb) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_script(r0, &(0x7f0000000440)={'#! ', './file0', [], 0xa, "96de86d81aacdb3ba584580de2bfff37e108271616dfd5e3fb5cabab678bd9cf0b8b1c"}, 0x2e) write$P9_RREAD(r0, &(0x7f0000000180)={0x2e, 0x75, 0x0, {0x23, "3035949eec64fef5cbb1d182820bc8bced96d6919b684878bef38a5998c79a92fc2af5"}}, 0x2e) write$binfmt_script(r0, &(0x7f0000000540)={'#! ', './file0', [], 0xa, "b8d958259b7169b2d643c65434fc53e2538fbfd5866cd9cf2f180b8b4d8ded"}, 0x2a) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, 'eth0'}, {0x20, '#! '}, {0x20, '${'}, {0x20, '/dev/sg#\x00'}, {0x20, '#! '}], 0xa, "00fbdd695d"}, 0x2a) write$binfmt_script(r0, &(0x7f0000000080)={'#! ', './file0', [{0x20, '/dev/sg#\x00'}, {0x20, '/dev/sg#\x00'}], 0xa, "7370e8c9eb584ee345b2d52bd5ac60"}, 0x2e) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 15:33:19 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x5, 0x8000) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r3, 0x404c534a, &(0x7f0000000100)={0xa00000000, 0x0, 0x100}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x22b) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x119000}) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="00007a31fff3843a2cff8f970f31a5261c03598c9576986b6f3dcba44f6aabc60d"], 0x2df) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfa, 0x0, 0x0, 0xfffffffffffffd9c) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:33:19 executing program 2: r0 = socket$inet(0x10, 0x3, 0xc) r1 = socket$rxrpc(0x21, 0x2, 0xa) listen(r1, 0x0) listen(r1, 0x1f) sendmsg(r0, &(0x7f000001d000)={0x0, 0x0, &(0x7f0000024000)=[{&(0x7f0000000100)="24000000100007031dff22946fa2830020200a0009000300001d85687f0000000400ff7e28000000020a43ba5d806055b6fdd80b40000000060001000029ec2400020cd37e99d69cda45a95e", 0x4c}], 0x1}, 0x0) [ 341.741464] netlink: 12 bytes leftover after parsing attributes in process `syz-executor2'. 15:33:19 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_script(r0, &(0x7f0000000640)={'#! ', './file0'}, 0xb) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_script(r0, &(0x7f0000000440)={'#! ', './file0', [], 0xa, "96de86d81aacdb3ba584580de2bfff37e108271616dfd5e3fb5cabab678bd9cf0b8b1c"}, 0x2e) write$P9_RREAD(r0, &(0x7f0000000180)={0x2e, 0x75, 0x0, {0x23, "3035949eec64fef5cbb1d182820bc8bced96d6919b684878bef38a5998c79a92fc2af5"}}, 0x2e) write$binfmt_script(r0, &(0x7f0000000540)={'#! ', './file0', [], 0xa, "b8d958259b7169b2d643c65434fc53e2538fbfd5866cd9cf2f180b8b4d8ded"}, 0x2a) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, 'eth0'}, {0x20, '#! '}, {0x20, '${'}, {0x20, '/dev/sg#\x00'}, {0x20, '#! '}], 0xa, "00fbdd695d"}, 0x2a) write$binfmt_script(r0, &(0x7f0000000080)={'#! ', './file0', [{0x20, '/dev/sg#\x00'}, {0x20, '/dev/sg#\x00'}], 0xa, "7370e8c9eb584ee345b2d52bd5ac60"}, 0x2e) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) [ 341.812726] netlink: 12 bytes leftover after parsing attributes in process `syz-executor2'. [ 341.896370] kvm: emulating exchange as write 15:33:20 executing program 2: r0 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x1, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f00000001c0)={0x100000000, 0x50565559, 0x2, @discrete={0xa1, 0xa1f}}) r1 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc4c85512, &(0x7f0000000080)={{0x0, 0x0, 0x0, 0x0, 'syz\x01\xa7\xba\x8c\xbe\x06\rR\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xd8Xdv\x00\x00V\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 15:33:20 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_script(r0, &(0x7f0000000640)={'#! ', './file0', [], 0xa, "d1266d12e95afed85a1bf38aaf1b4ba88686"}, 0x1d) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_script(r0, &(0x7f0000000440)={'#! ', './file0', [], 0xa, "96de86d81aacdb3ba584580de2bfff37e108271616dfd5e3fb5cabab678bd9cf0b8b1c"}, 0x2e) write$P9_RREAD(r0, &(0x7f0000000180)={0x2e, 0x75, 0x0, {0x23, "3035949eec64fef5cbb1d182820bc8bced96d6919b684878bef38a5998c79a92fc2af5"}}, 0x2e) write$binfmt_script(r0, &(0x7f0000000540)={'#! ', './file0', [], 0xa, "b8d958259b7169b2d643c65434fc53e2538fbfd5866cd9cf2f180b8b4d8ded"}, 0x2a) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, 'eth0'}, {0x20, '#! '}, {0x20, '${'}, {0x20, '/dev/sg#\x00'}, {0x20, '#! '}], 0xa, "00fbdd695d"}, 0x2a) write$binfmt_script(r0, &(0x7f0000000080)={'#! ', './file0', [{0x20, '/dev/sg#\x00'}, {0x20, '/dev/sg#\x00'}], 0xa, "7370e8c9eb584ee345b2d52bd5ac60"}, 0x2e) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 15:33:20 executing program 1: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer2\x00', 0x8a001, 0x0) write$P9_RSTATu(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="9400ff000000000052548b67f4b3273fb33dfa7c259f390676e798ec8f02caeef95112acf4eb10e2fe26bd7b4cd394a78d969ee35a1b7b65409ff8a0430f6e866df562ed337d71d9747f7b0d16917845099c"], 0x8) syncfs(r0) write$P9_RRENAMEAT(r0, &(0x7f0000000000)={0x7, 0x4b, 0x1}, 0x7) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000040)) 15:33:20 executing program 2: r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x41, 0x0, 0x0, 0xffffff7f}, 0x10) getsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000), &(0x7f0000000080)=0x4) 15:33:20 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_script(r0, &(0x7f0000000640)={'#! ', './file0', [], 0xa, "d1266d12e95afed85a1bf38aaf1b4ba88686"}, 0x1d) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_script(r0, &(0x7f0000000440)={'#! ', './file0', [], 0xa, "96de86d81aacdb3ba584580de2bfff37e108271616dfd5e3fb5cabab678bd9cf0b8b1c"}, 0x2e) write$P9_RREAD(r0, &(0x7f0000000180)={0x2e, 0x75, 0x0, {0x23, "3035949eec64fef5cbb1d182820bc8bced96d6919b684878bef38a5998c79a92fc2af5"}}, 0x2e) write$binfmt_script(r0, &(0x7f0000000540)={'#! ', './file0', [], 0xa, "b8d958259b7169b2d643c65434fc53e2538fbfd5866cd9cf2f180b8b4d8ded"}, 0x2a) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, 'eth0'}, {0x20, '#! '}, {0x20, '${'}, {0x20, '/dev/sg#\x00'}, {0x20, '#! '}], 0xa, "00fbdd695d"}, 0x2a) write$binfmt_script(r0, &(0x7f0000000080)={'#! ', './file0', [{0x20, '/dev/sg#\x00'}, {0x20, '/dev/sg#\x00'}], 0xa, "7370e8c9eb584ee345b2d52bd5ac60"}, 0x2e) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 15:33:20 executing program 2: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) mkdir(&(0x7f0000000240)='./file0\x00', 0x0) mount(&(0x7f0000000000), &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) mount(&(0x7f0000000040)=@sg0='/dev/sg0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='securityfs\x00', 0x100021, &(0x7f0000000000)) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x2000, 0x0) 15:33:20 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x800, 0x2000) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000040)={0x2, 0x1, 0x101, 0x0, 0x1f}) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4068aea3, &(0x7f00000001c0)={0x0, 0x0, [0x0, 0x0, 0x0, 0x4]}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) accept4(r3, &(0x7f0000000140)=@ethernet, &(0x7f0000000240)=0x80, 0x80000) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f00000000c0)) syz_kvm_setup_cpu$x86(r2, r5, &(0x7f0000fd7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) fcntl$setpipe(r4, 0x407, 0xb7) 15:33:20 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_script(r0, &(0x7f0000000640)={'#! ', './file0', [], 0xa, "d1266d12e95afed85a1bf38aaf1b4ba88686"}, 0x1d) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_script(r0, &(0x7f0000000440)={'#! ', './file0', [], 0xa, "96de86d81aacdb3ba584580de2bfff37e108271616dfd5e3fb5cabab678bd9cf0b8b1c"}, 0x2e) write$P9_RREAD(r0, &(0x7f0000000180)={0x2e, 0x75, 0x0, {0x23, "3035949eec64fef5cbb1d182820bc8bced96d6919b684878bef38a5998c79a92fc2af5"}}, 0x2e) write$binfmt_script(r0, &(0x7f0000000540)={'#! ', './file0', [], 0xa, "b8d958259b7169b2d643c65434fc53e2538fbfd5866cd9cf2f180b8b4d8ded"}, 0x2a) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, 'eth0'}, {0x20, '#! '}, {0x20, '${'}, {0x20, '/dev/sg#\x00'}, {0x20, '#! '}], 0xa, "00fbdd695d"}, 0x2a) write$binfmt_script(r0, &(0x7f0000000080)={'#! ', './file0', [{0x20, '/dev/sg#\x00'}, {0x20, '/dev/sg#\x00'}], 0xa, "7370e8c9eb584ee345b2d52bd5ac60"}, 0x2e) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) [ 342.607604] proc: unrecognized mount option "/dev/rtc0" or missing value 15:33:20 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_script(r0, &(0x7f0000000640)={'#! ', './file0', [], 0xa, "d1266d12e95afed85a1bf38aaf1b4ba88686b1d7eefe93e87be1cd"}, 0x26) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_script(r0, &(0x7f0000000440)={'#! ', './file0', [], 0xa, "96de86d81aacdb3ba584580de2bfff37e108271616dfd5e3fb5cabab678bd9cf0b8b1c"}, 0x2e) write$P9_RREAD(r0, &(0x7f0000000180)={0x2e, 0x75, 0x0, {0x23, "3035949eec64fef5cbb1d182820bc8bced96d6919b684878bef38a5998c79a92fc2af5"}}, 0x2e) write$binfmt_script(r0, &(0x7f0000000540)={'#! ', './file0', [], 0xa, "b8d958259b7169b2d643c65434fc53e2538fbfd5866cd9cf2f180b8b4d8ded"}, 0x2a) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, 'eth0'}, {0x20, '#! '}, {0x20, '${'}, {0x20, '/dev/sg#\x00'}, {0x20, '#! '}], 0xa, "00fbdd695d"}, 0x2a) write$binfmt_script(r0, &(0x7f0000000080)={'#! ', './file0', [{0x20, '/dev/sg#\x00'}, {0x20, '/dev/sg#\x00'}], 0xa, "7370e8c9eb584ee345b2d52bd5ac60"}, 0x2e) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 15:33:20 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x40000, 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, &(0x7f0000000080)) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x2) 15:33:20 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x800, 0x2000) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000040)={0x2, 0x1, 0x101, 0x0, 0x1f}) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4068aea3, &(0x7f00000001c0)={0x0, 0x0, [0x0, 0x0, 0x0, 0x4]}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) accept4(r3, &(0x7f0000000140)=@ethernet, &(0x7f0000000240)=0x80, 0x80000) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f00000000c0)) syz_kvm_setup_cpu$x86(r2, r5, &(0x7f0000fd7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) fcntl$setpipe(r4, 0x407, 0xb7) 15:33:21 executing program 2: sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f00000001c0), 0xc, 0x0}, 0x0) r0 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x34, 0x1001) writev(r0, &(0x7f00000000c0), 0x10000000000000a4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) 15:33:21 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_script(r0, &(0x7f0000000640)={'#! ', './file0', [], 0xa, "d1266d12e95afed85a1bf38aaf1b4ba88686b1d7eefe93e87be1cd"}, 0x26) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_script(r0, &(0x7f0000000440)={'#! ', './file0', [], 0xa, "96de86d81aacdb3ba584580de2bfff37e108271616dfd5e3fb5cabab678bd9cf0b8b1c"}, 0x2e) write$P9_RREAD(r0, &(0x7f0000000180)={0x2e, 0x75, 0x0, {0x23, "3035949eec64fef5cbb1d182820bc8bced96d6919b684878bef38a5998c79a92fc2af5"}}, 0x2e) write$binfmt_script(r0, &(0x7f0000000540)={'#! ', './file0', [], 0xa, "b8d958259b7169b2d643c65434fc53e2538fbfd5866cd9cf2f180b8b4d8ded"}, 0x2a) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, 'eth0'}, {0x20, '#! '}, {0x20, '${'}, {0x20, '/dev/sg#\x00'}, {0x20, '#! '}], 0xa, "00fbdd695d"}, 0x2a) write$binfmt_script(r0, &(0x7f0000000080)={'#! ', './file0', [{0x20, '/dev/sg#\x00'}, {0x20, '/dev/sg#\x00'}], 0xa, "7370e8c9eb584ee345b2d52bd5ac60"}, 0x2e) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 15:33:21 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x800, 0x2000) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000040)={0x2, 0x1, 0x101, 0x0, 0x1f}) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4068aea3, &(0x7f00000001c0)={0x0, 0x0, [0x0, 0x0, 0x0, 0x4]}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) accept4(r3, &(0x7f0000000140)=@ethernet, &(0x7f0000000240)=0x80, 0x80000) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f00000000c0)) syz_kvm_setup_cpu$x86(r2, r5, &(0x7f0000fd7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) fcntl$setpipe(r4, 0x407, 0xb7) 15:33:21 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_script(r0, &(0x7f0000000640)={'#! ', './file0', [], 0xa, "d1266d12e95afed85a1bf38aaf1b4ba88686b1d7eefe93e87be1cd"}, 0x26) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_script(r0, &(0x7f0000000440)={'#! ', './file0', [], 0xa, "96de86d81aacdb3ba584580de2bfff37e108271616dfd5e3fb5cabab678bd9cf0b8b1c"}, 0x2e) write$P9_RREAD(r0, &(0x7f0000000180)={0x2e, 0x75, 0x0, {0x23, "3035949eec64fef5cbb1d182820bc8bced96d6919b684878bef38a5998c79a92fc2af5"}}, 0x2e) write$binfmt_script(r0, &(0x7f0000000540)={'#! ', './file0', [], 0xa, "b8d958259b7169b2d643c65434fc53e2538fbfd5866cd9cf2f180b8b4d8ded"}, 0x2a) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, 'eth0'}, {0x20, '#! '}, {0x20, '${'}, {0x20, '/dev/sg#\x00'}, {0x20, '#! '}], 0xa, "00fbdd695d"}, 0x2a) write$binfmt_script(r0, &(0x7f0000000080)={'#! ', './file0', [{0x20, '/dev/sg#\x00'}, {0x20, '/dev/sg#\x00'}], 0xa, "7370e8c9eb584ee345b2d52bd5ac60"}, 0x2e) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 15:33:21 executing program 2: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000180)=""/151) ioctl$VIDIOC_G_PRIORITY(r0, 0x80045643, 0xfffffffffffffffe) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='nr0\x00', 0x10) ioctl$SG_SET_TIMEOUT(r0, 0x2201, &(0x7f0000000000)=0x4) 15:33:21 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r0) r2 = dup3(r1, r0, 0x80000) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') write$P9_RSYMLINK(r2, &(0x7f0000000380)={0x14, 0x11, 0x2, {0x4, 0x3, 0x8}}, 0x14) sendmsg$TIPC_NL_SOCK_GET(r2, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0xec, r3, 0x502, 0x70bd26, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x30, 0x5, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4ce62169}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x16c2}]}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_SOCK={0x2c, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}]}, @TIPC_NLA_NODE={0x20, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7fffffff}]}, @TIPC_NLA_SOCK={0x34, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x400}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MEDIA={0x1c, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x4000814}, 0x1431f6bbb5290995) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) r4 = dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, &(0x7f00000001c0)}) setsockopt$RDS_CANCEL_SENT_TO(r4, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x28}}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setsockopt$inet_udp_encap(r4, 0x11, 0x64, &(0x7f00000003c0)=0x2, 0x4) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="8485e72f5a24d9e600000000"], 0x1, 0xfffffdfd, &(0x7f0000000540)='K'}) 15:33:21 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x800, 0x2000) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000040)={0x2, 0x1, 0x101, 0x0, 0x1f}) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4068aea3, &(0x7f00000001c0)={0x0, 0x0, [0x0, 0x0, 0x0, 0x4]}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) accept4(r3, &(0x7f0000000140)=@ethernet, &(0x7f0000000240)=0x80, 0x80000) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f00000000c0)) syz_kvm_setup_cpu$x86(r2, r5, &(0x7f0000fd7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) fcntl$setpipe(r4, 0x407, 0xb7) 15:33:21 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_script(r0, &(0x7f0000000640)={'#! ', './file0', [], 0xa, "d1266d12e95afed85a1bf38aaf1b4ba88686b1d7eefe93e87be1cded9d0d73"}, 0x2a) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_script(r0, &(0x7f0000000440)={'#! ', './file0', [], 0xa, "96de86d81aacdb3ba584580de2bfff37e108271616dfd5e3fb5cabab678bd9cf0b8b1c"}, 0x2e) write$P9_RREAD(r0, &(0x7f0000000180)={0x2e, 0x75, 0x0, {0x23, "3035949eec64fef5cbb1d182820bc8bced96d6919b684878bef38a5998c79a92fc2af5"}}, 0x2e) write$binfmt_script(r0, &(0x7f0000000540)={'#! ', './file0', [], 0xa, "b8d958259b7169b2d643c65434fc53e2538fbfd5866cd9cf2f180b8b4d8ded"}, 0x2a) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, 'eth0'}, {0x20, '#! '}, {0x20, '${'}, {0x20, '/dev/sg#\x00'}, {0x20, '#! '}], 0xa, "00fbdd695d"}, 0x2a) write$binfmt_script(r0, &(0x7f0000000080)={'#! ', './file0', [{0x20, '/dev/sg#\x00'}, {0x20, '/dev/sg#\x00'}], 0xa, "7370e8c9eb584ee345b2d52bd5ac60"}, 0x2e) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) [ 343.613508] binder: 11325 RLIMIT_NICE not set [ 343.638454] binder: 11324:11325 unknown command 803702148 [ 343.644184] binder: 11324:11325 ioctl c0306201 200005c0 returned -22 15:33:21 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x800, 0x2000) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000040)={0x2, 0x1, 0x101, 0x0, 0x1f}) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4068aea3, &(0x7f00000001c0)={0x0, 0x0, [0x0, 0x0, 0x0, 0x4]}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe2(&(0x7f0000000340)={0xffffffffffffffff}, 0x4800) accept4(r3, &(0x7f0000000140)=@ethernet, &(0x7f0000000240)=0x80, 0x80000) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f00000000c0)) syz_kvm_setup_cpu$x86(r2, r4, &(0x7f0000fd7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 15:33:21 executing program 3: utime(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x573f, 0x8000000000000000}) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x4) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r0, 0x40405515, &(0x7f00000000c0)={0x5, 0x7, 0x5, 0x2, '\x00', 0x2}) ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x40305652, &(0x7f0000000100)={0x2, 0x5, 0xffff, 0x5, 0x3edf, 0x200, 0x9}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x2, 0x0) lstat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = getgid() mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='fuse\x00', 0x840810, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xe000}, 0x2c, {'user_id', 0x3d, r1}, 0x2c, {'group_id', 0x3d, r3}, 0x2c, {[{@allow_other='allow_other'}, {@allow_other='allow_other'}, {@blksize={'blksize', 0x3d, 0x400}}, {@blksize={'blksize', 0x3d, 0x1a00}}, {@max_read={'max_read', 0x3d, 0xfffffffffffffffb}}, {@default_permissions='default_permissions'}], [{@dont_appraise='dont_appraise'}, {@audit='audit'}, {@audit='audit'}]}}) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x8000, 0x0) ioctl$KVM_PPC_ALLOCATE_HTAB(r0, 0xc004aea7, &(0x7f0000000440)=0x9af) connect$caif(r4, &(0x7f0000000480)=@rfm={0x25, 0x2, "1b9fb7243e554f6e07e1d4f82aa8546a"}, 0x18) ioctl$DRM_IOCTL_AGP_ALLOC(r4, 0xc0206434, &(0x7f00000004c0)={0x6000000000, 0x0, 0x2}) ioctl$DRM_IOCTL_AGP_FREE(r4, 0x40206435, &(0x7f0000000500)={0xe6b, r5, 0x2, 0x3f}) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) ioctl$KVM_GET_MP_STATE(r0, 0x8004ae98, &(0x7f0000000540)) connect(r0, &(0x7f0000000580)=@vsock, 0x80) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000600)={0x0, 0x8, 0xa, [0x10001, 0x1ff, 0x6, 0x0, 0x2, 0x8000, 0x9, 0xffffffffffffffe0, 0xd3, 0x4]}, &(0x7f0000000640)=0x1c) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000680)={r6, 0x7, 0x30}, 0xc) setxattr$security_ima(&(0x7f00000006c0)='./file0\x00', &(0x7f0000000700)='security.ima\x00', &(0x7f0000000740)=@sha1={0x1, "156119036592916003600f952c280b59f34d757d"}, 0x15, 0x3) ioctl$BLKGETSIZE64(r4, 0x80081272, &(0x7f0000000780)) lsetxattr$security_capability(&(0x7f00000007c0)='./file0/file0\x00', &(0x7f0000000800)='security.capability\x00', &(0x7f0000000840)=@v1={0x1000000, [{0x1000, 0x8}]}, 0xc, 0x1) r7 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r7) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000880)={0x168, 0x0, 0x1, [{{0x6, 0x2, 0x6, 0xfffffffffffffff8, 0x1, 0x80, {0x5, 0x7fff, 0x9297, 0x7, 0x3f, 0x6, 0x7fffffff, 0x2, 0x8, 0x3f, 0x20, r1, r2, 0xfff, 0x3}}, {0x5, 0x9, 0x19, 0x3, 'wlan1posix_acl_accesseth0'}}, {{0x3, 0x0, 0x4, 0xabc, 0xb92, 0x1, {0x2, 0x81, 0x7fff, 0x7c, 0xffffffff00000001, 0x401, 0x40, 0x3, 0x800, 0x56, 0x400, r1, r2, 0x100000001, 0x5}}, {0x4, 0x200, 0x5, 0x180, 'audit'}}]}, 0x168) prctl$PR_SET_FP_MODE(0x2d, 0x2) syz_execute_func(&(0x7f0000000a00)="c423797b99b9306c5b00400f38f0900808a694c4c1edd0efc401356566f46767360f1b5ae9c4e281aeeb660f38dd690cc443f9178b0500000008660f38dc09c4e37904e700") writev(r4, &(0x7f0000000e40)=[{&(0x7f0000000a80)="d7b17b6007e2b2d73fa8aac7095e598d516de7bd3b703aa038f13cf9e51e18ad9d5cb82eef15f76388f626557004258aab326af06cb0c3aa65cea0e7ff1f3c8e72b35be834ddf8534ccee2f4518f1087828ed7f421c41bfa7b2a698f58171d9dd0389256188540a2b90a5b608279dd548efdedc1610914e3ad52", 0x7a}, {&(0x7f0000000b00)="ee70f597ae7143ad9908004bebffa04157d40762135036cded0af40224d686693afcb694d23013921cdd39943a24e1bac11a5866db8ea6a1a4cb7768d8241935fcc1ce164dd9f85894fb64fc51456562b0f49ddb781cb392ef956d9b2a686633ec527a577ee3fe41221dfedf65f5c1c786ed7a8d9d0a25024648c67a9baf3417e628742b922ec12b52c89b42a256747b414f7a", 0x93}, {&(0x7f0000000bc0)="dafa9d129d03bc841a25de07616f5a6ac0d060c4b9a62799539bc33bd00e9d134d9d3c78bbf36f4a849383d99d6ac46e5e707c31207319db79e7a8f22ff023f94789e1", 0x43}, {&(0x7f0000000c40)}, {&(0x7f0000000c80)="f242cd37d5d70707d885c7a9389f93032cc61dd9feb3a7aa141029187c24a7c507f7c3f6bb19d60c24090ed3ef672a87542e13aed46cbfd3053fb53df7e3d84f695b6d7711533c088eded8dadb950d1f309d74301768d6c3e8bcb116e41058e204e46c8cd1ca281a5e22b6c5719b4239ae87b0ba7656808c6aa02a8d21bb95139fd0a8dd34a8e1539553122710e52e84ce41d15f6ce4567186a333630df16100c7d4dbec", 0xa4}, {&(0x7f0000000d40)="d1a1082984ba02635181e1947c96377c2be860c2cbc614da09f49ebe9b1c5ddea4f76bb00f007c6340e82362d24ff543d68b1628e30e6ef752536ed118f1307201d1144f008acea39ae4", 0x4a}, {&(0x7f0000000dc0)="21e992625109ca6982c254304ea123cae16c8301293bb88d4551db36034bd01ea4bc9443771326009a759979214574ba35b6e197bf0c74b10fa27a", 0x3b}, {&(0x7f0000000e00)="816f29250a42bde8b474a2904f29a690bc85613055f4b1fe93020cd9d72adf7ae2f006e8485dcdaad8530444", 0x2c}], 0x8) setxattr$security_capability(&(0x7f0000000ec0)='./file0\x00', &(0x7f0000000f00)='security.capability\x00', &(0x7f0000000f40)=@v3={0x3000000, [{0x8, 0x9}, {0x9, 0x1}], r1}, 0x18, 0x2) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000f80), 0x4) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f0000000fc0)={{0xa, 0x4e23, 0x2, @dev={0xfe, 0x80, [], 0x14}, 0x6}, {0xa, 0x4e24, 0x5, @loopback, 0x1}, 0x3, [0x7fffffff, 0x8, 0xb3a9, 0x0, 0x9, 0x7, 0x2, 0x3]}, 0x5c) 15:33:21 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2e, 0x34, 0x10}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42]}, 0x48) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x200, 0x0) r1 = getuid() ioctl$TUNSETOWNER(r0, 0x400454cc, r1) [ 343.770297] binder: undelivered death notification, 0000000000000000 15:33:21 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_script(r0, &(0x7f0000000640)={'#! ', './file0', [], 0xa, "d1266d12e95afed85a1bf38aaf1b4ba88686b1d7eefe93e87be1cded9d0d73"}, 0x2a) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_script(r0, &(0x7f0000000440)={'#! ', './file0', [], 0xa, "96de86d81aacdb3ba584580de2bfff37e108271616dfd5e3fb5cabab678bd9cf0b8b1c"}, 0x2e) write$P9_RREAD(r0, &(0x7f0000000180)={0x2e, 0x75, 0x0, {0x23, "3035949eec64fef5cbb1d182820bc8bced96d6919b684878bef38a5998c79a92fc2af5"}}, 0x2e) write$binfmt_script(r0, &(0x7f0000000540)={'#! ', './file0', [], 0xa, "b8d958259b7169b2d643c65434fc53e2538fbfd5866cd9cf2f180b8b4d8ded"}, 0x2a) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, 'eth0'}, {0x20, '#! '}, {0x20, '${'}, {0x20, '/dev/sg#\x00'}, {0x20, '#! '}], 0xa, "00fbdd695d"}, 0x2a) write$binfmt_script(r0, &(0x7f0000000080)={'#! ', './file0', [{0x20, '/dev/sg#\x00'}, {0x20, '/dev/sg#\x00'}], 0xa, "7370e8c9eb584ee345b2d52bd5ac60"}, 0x2e) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 15:33:22 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x03\x00', 0x19, 0x1, 0x0, [0x200003c0, 0x0, 0x0, 0x200003f0, 0x20000420], 0x0, 0x0, &(0x7f00000003c0)=ANY=[]}, 0x78) 15:33:22 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x800, 0x2000) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000040)={0x2, 0x1, 0x101, 0x0, 0x1f}) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4068aea3, &(0x7f00000001c0)={0x0, 0x0, [0x0, 0x0, 0x0, 0x4]}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe2(&(0x7f0000000340)={0xffffffffffffffff}, 0x4800) accept4(r3, &(0x7f0000000140)=@ethernet, &(0x7f0000000240)=0x80, 0x80000) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f00000000c0)) syz_kvm_setup_cpu$x86(r2, r4, &(0x7f0000fd7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 15:33:22 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_script(r0, &(0x7f0000000640)={'#! ', './file0', [], 0xa, "d1266d12e95afed85a1bf38aaf1b4ba88686b1d7eefe93e87be1cded9d0d73"}, 0x2a) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_script(r0, &(0x7f0000000440)={'#! ', './file0', [], 0xa, "96de86d81aacdb3ba584580de2bfff37e108271616dfd5e3fb5cabab678bd9cf0b8b1c"}, 0x2e) write$P9_RREAD(r0, &(0x7f0000000180)={0x2e, 0x75, 0x0, {0x23, "3035949eec64fef5cbb1d182820bc8bced96d6919b684878bef38a5998c79a92fc2af5"}}, 0x2e) write$binfmt_script(r0, &(0x7f0000000540)={'#! ', './file0', [], 0xa, "b8d958259b7169b2d643c65434fc53e2538fbfd5866cd9cf2f180b8b4d8ded"}, 0x2a) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, 'eth0'}, {0x20, '#! '}, {0x20, '${'}, {0x20, '/dev/sg#\x00'}, {0x20, '#! '}], 0xa, "00fbdd695d"}, 0x2a) write$binfmt_script(r0, &(0x7f0000000080)={'#! ', './file0', [{0x20, '/dev/sg#\x00'}, {0x20, '/dev/sg#\x00'}], 0xa, "7370e8c9eb584ee345b2d52bd5ac60"}, 0x2e) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) [ 344.218052] kernel msg: ebtables bug: please report to author: Entries_size never zero 15:33:22 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070") r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r1, 0x40045731, &(0x7f0000000040)=0x6) r2 = syz_open_dev$evdev(&(0x7f0000000200)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGLED(r2, 0x80404519, &(0x7f0000000240)=""/4096) 15:33:22 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_script(r0, &(0x7f0000000640)={'#! ', './file0', [], 0xa, "d1266d12e95afed85a1bf38aaf1b4ba88686b1d7eefe93e87be1cded9d0d73f957"}, 0x2c) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_script(r0, &(0x7f0000000440)={'#! ', './file0', [], 0xa, "96de86d81aacdb3ba584580de2bfff37e108271616dfd5e3fb5cabab678bd9cf0b8b1c"}, 0x2e) write$P9_RREAD(r0, &(0x7f0000000180)={0x2e, 0x75, 0x0, {0x23, "3035949eec64fef5cbb1d182820bc8bced96d6919b684878bef38a5998c79a92fc2af5"}}, 0x2e) write$binfmt_script(r0, &(0x7f0000000540)={'#! ', './file0', [], 0xa, "b8d958259b7169b2d643c65434fc53e2538fbfd5866cd9cf2f180b8b4d8ded"}, 0x2a) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, 'eth0'}, {0x20, '#! '}, {0x20, '${'}, {0x20, '/dev/sg#\x00'}, {0x20, '#! '}], 0xa, "00fbdd695d"}, 0x2a) write$binfmt_script(r0, &(0x7f0000000080)={'#! ', './file0', [{0x20, '/dev/sg#\x00'}, {0x20, '/dev/sg#\x00'}], 0xa, "7370e8c9eb584ee345b2d52bd5ac60"}, 0x2e) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) [ 344.577246] IPVS: ftp: loaded support on port[0] = 21 15:33:22 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x800, 0x2000) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000040)={0x2, 0x1, 0x101, 0x0, 0x1f}) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4068aea3, &(0x7f00000001c0)={0x0, 0x0, [0x0, 0x0, 0x0, 0x4]}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe2(&(0x7f0000000340)={0xffffffffffffffff}, 0x4800) accept4(r3, &(0x7f0000000140)=@ethernet, &(0x7f0000000240)=0x80, 0x80000) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f00000000c0)) 15:33:22 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='\x00\x00\x00\x00\x00') openat$cgroup_ro(r0, &(0x7f00000003c0)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0xffffffffffffffff}, 0x4800) accept4(r3, &(0x7f0000000140)=@ethernet, &(0x7f0000000240)=0x80, 0x80000) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) 15:33:24 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000180)='wlan0\x00', 0x0) r1 = getpid() ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x7) syz_open_procfs(r1, &(0x7f0000000040)='fdinfo\x00') fcntl$setstatus(r0, 0x4, 0x0) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x800, 0x0) ioctl$PPPIOCATTCHAN(r2, 0x40047438, &(0x7f0000000100)) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, 0x0, &(0x7f0000000080)) 15:33:24 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f00000000c0), 0x1c) r2 = syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x3, 0x2) setsockopt$RXRPC_SECURITY_KEYRING(r2, 0x110, 0x2, &(0x7f0000000340)='cryptd(ctr(aes-aesni))\x00', 0x17) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000840)={0xff, 0x1, 0x9ec, 0x7, 0x0}, &(0x7f0000000880)=0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000008c0)={r3, 0x9, 0x20}, 0xc) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000100)={{{@in=@loopback, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6}}, &(0x7f0000000000)=0xe8) sendmsg$nl_xfrm(r4, &(0x7f000014f000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newpolicy={0x120, 0x13, 0x600, 0x70bd25, 0x25dfdbfc, {{@in6=@empty, @in=@empty, 0x4e20, 0x0, 0x4e22, 0x9, 0xa, 0xa0, 0xa0, 0xff, 0x0, r5}, {0x3, 0x184, 0x2, 0xff, 0xfffffffffffff800, 0xffffffffffffffff, 0x39b, 0x401}, {0x9, 0x8c, 0x7, 0x93d3}, 0x10001, 0x6e6bb0, 0x1, 0x1, 0x2}, [@algo_crypt={0x5c, 0x2, {{'cryptd(ctr(aes-aesni))\x00'}, 0x90, "12f49789f6d46151624bd0bb5a3145a41fd6"}}, @mark={0xc, 0x15, {0x35075d, 0xfffffffffffff7e5}}]}, 0x120}}, 0x0) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000000380)={0x20, {{0xa, 0x4e20, 0x7, @loopback, 0x6}}, 0x1, 0x8, [{{0xa, 0x4e23, 0xffffffff, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x8}}, {{0xa, 0x4e23, 0x1, @mcast2, 0x5}}, {{0xa, 0x4e22, 0x2, @rand_addr="ed57049560ca85e7c99590ebad019575", 0x6}}, {{0xa, 0x4e24, 0xc7, @rand_addr="75a0929b140d5bb7ef38452f2a6a89ea", 0x2}}, {{0xa, 0x4e20, 0x4, @mcast2, 0x81}}, {{0xa, 0x4e21, 0x8, @empty, 0x5d}}, {{0xa, 0x4e22, 0x7, @empty, 0x3}}, {{0xa, 0x4e22, 0x0, @loopback, 0x3}}]}, 0x490) 15:33:24 executing program 2: clone(0x41fc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f00000000c0)) ptrace(0x10, r0) ptrace(0xd, r0) r1 = dup(0xffffffffffffff9c) ioctl$SG_GET_VERSION_NUM(r1, 0x2282, &(0x7f0000000000)) [ 346.702752] hrtimer: interrupt took 31190 ns 15:33:24 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_script(r0, &(0x7f0000000640)={'#! ', './file0', [], 0xa, "d1266d12e95afed85a1bf38aaf1b4ba88686b1d7eefe93e87be1cded9d0d73f957a0"}, 0x2d) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_script(r0, &(0x7f0000000440)={'#! ', './file0', [], 0xa, "96de86d81aacdb3ba584580de2bfff37e108271616dfd5e3fb5cabab678bd9cf0b8b1c"}, 0x2e) write$P9_RREAD(r0, &(0x7f0000000180)={0x2e, 0x75, 0x0, {0x23, "3035949eec64fef5cbb1d182820bc8bced96d6919b684878bef38a5998c79a92fc2af5"}}, 0x2e) write$binfmt_script(r0, &(0x7f0000000540)={'#! ', './file0', [], 0xa, "b8d958259b7169b2d643c65434fc53e2538fbfd5866cd9cf2f180b8b4d8ded"}, 0x2a) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, 'eth0'}, {0x20, '#! '}, {0x20, '${'}, {0x20, '/dev/sg#\x00'}, {0x20, '#! '}], 0xa, "00fbdd695d"}, 0x2a) write$binfmt_script(r0, &(0x7f0000000080)={'#! ', './file0', [{0x20, '/dev/sg#\x00'}, {0x20, '/dev/sg#\x00'}], 0xa, "7370e8c9eb584ee345b2d52bd5ac60"}, 0x2e) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 15:33:24 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x800, 0x2000) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000040)={0x2, 0x1, 0x101, 0x0, 0x1f}) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4068aea3, &(0x7f00000001c0)={0x0, 0x0, [0x0, 0x0, 0x0, 0x4]}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe2(&(0x7f0000000340)={0xffffffffffffffff}, 0x4800) accept4(r3, &(0x7f0000000140)=@ethernet, &(0x7f0000000240)=0x80, 0x80000) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) 15:33:24 executing program 3: r0 = socket$kcm(0x29, 0x5, 0x0) setrlimit(0x7, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000e21000)) r1 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x5, 0x420442) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000000c0)=0x14) [ 346.875330] ptrace attach of "/root/syz-executor2"[11389] was attempted by "/root/syz-executor2"[11392] 15:33:25 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x80800, 0x0) ioctl$VIDIOC_G_STD(r2, 0x80085617, &(0x7f0000000080)=0x0) ioctl$VIDIOC_S_STD(r2, 0x40085618, &(0x7f00000000c0)=r3) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040)=r2, 0x4) recvfrom$inet(r2, &(0x7f00000001c0)=""/78, 0x4e, 0x100, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, &(0x7f0000000140)={0x0, 0x40, 0x300f}) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x15, 0x10, 0xc6, 0x0, 0xc}, 0x2c) 15:33:25 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x800, 0x2000) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000040)={0x2, 0x1, 0x101, 0x0, 0x1f}) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4068aea3, &(0x7f00000001c0)={0x0, 0x0, [0x0, 0x0, 0x0, 0x4]}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe2(&(0x7f0000000340)={0xffffffffffffffff}, 0x4800) accept4(r3, &(0x7f0000000140)=@ethernet, &(0x7f0000000240)=0x80, 0x80000) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) 15:33:25 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_script(r0, &(0x7f0000000640)={'#! ', './file0', [], 0xa, "d1266d12e95afed85a1bf38aaf1b4ba88686b1d7eefe93e87be1cded9d0d73f957a0"}, 0x2d) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_script(r0, &(0x7f0000000440)={'#! ', './file0', [], 0xa, "96de86d81aacdb3ba584580de2bfff37e108271616dfd5e3fb5cabab678bd9cf0b8b1c"}, 0x2e) write$P9_RREAD(r0, &(0x7f0000000180)={0x2e, 0x75, 0x0, {0x23, "3035949eec64fef5cbb1d182820bc8bced96d6919b684878bef38a5998c79a92fc2af5"}}, 0x2e) write$binfmt_script(r0, &(0x7f0000000540)={'#! ', './file0', [], 0xa, "b8d958259b7169b2d643c65434fc53e2538fbfd5866cd9cf2f180b8b4d8ded"}, 0x2a) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, 'eth0'}, {0x20, '#! '}, {0x20, '${'}, {0x20, '/dev/sg#\x00'}, {0x20, '#! '}], 0xa, "00fbdd695d"}, 0x2a) write$binfmt_script(r0, &(0x7f0000000080)={'#! ', './file0', [{0x20, '/dev/sg#\x00'}, {0x20, '/dev/sg#\x00'}], 0xa, "7370e8c9eb584ee345b2d52bd5ac60"}, 0x2e) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 15:33:25 executing program 3: pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) ioctl$VIDIOC_QUERYSTD(r0, 0x8008563f, &(0x7f0000000080)) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000280)='cgroup.clone_children\x00', 0x2, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f0000000000)='cpuacct.usage_all\x00', 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000380)={{{@in=@local, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@local}}, &(0x7f0000000100)=0xe8) fsetxattr$security_capability(r2, &(0x7f00000000c0)='security.capability\x00', &(0x7f0000000140)=@v3={0x3000000, [{0x3, 0x2}, {0x66, 0x7}], r4}, 0x18, 0x2) r5 = dup2(r3, r2) pread64(r5, &(0x7f00000002c0)=""/135, 0x87, 0x0) 15:33:25 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x21, &(0x7f0000013e95), 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r2, 0x29, 0xd2, &(0x7f0000000000)={{0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, [], 0x22}, 0x81}, {0xa, 0x4e24, 0x5, @dev={0xfe, 0x80, [], 0x15}, 0x4}, 0x80d, [0xfff, 0x1, 0x5, 0x4, 0xfffffffffffffffa, 0x6, 0x6, 0x1f]}, 0x5c) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r2, 0x84, 0x4, 0x0, 0x0) close(r2) close(r1) 15:33:25 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x800, 0x2000) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000040)={0x2, 0x1, 0x101, 0x0, 0x1f}) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4068aea3, &(0x7f00000001c0)={0x0, 0x0, [0x0, 0x0, 0x0, 0x4]}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe2(&(0x7f0000000340)={0xffffffffffffffff}, 0x4800) accept4(r2, &(0x7f0000000140)=@ethernet, &(0x7f0000000240)=0x80, 0x80000) 15:33:25 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_script(r0, &(0x7f0000000640)={'#! ', './file0', [], 0xa, "d1266d12e95afed85a1bf38aaf1b4ba88686b1d7eefe93e87be1cded9d0d73f957a0"}, 0x2d) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_script(r0, &(0x7f0000000440)={'#! ', './file0', [], 0xa, "96de86d81aacdb3ba584580de2bfff37e108271616dfd5e3fb5cabab678bd9cf0b8b1c"}, 0x2e) write$P9_RREAD(r0, &(0x7f0000000180)={0x2e, 0x75, 0x0, {0x23, "3035949eec64fef5cbb1d182820bc8bced96d6919b684878bef38a5998c79a92fc2af5"}}, 0x2e) write$binfmt_script(r0, &(0x7f0000000540)={'#! ', './file0', [], 0xa, "b8d958259b7169b2d643c65434fc53e2538fbfd5866cd9cf2f180b8b4d8ded"}, 0x2a) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, 'eth0'}, {0x20, '#! '}, {0x20, '${'}, {0x20, '/dev/sg#\x00'}, {0x20, '#! '}], 0xa, "00fbdd695d"}, 0x2a) write$binfmt_script(r0, &(0x7f0000000080)={'#! ', './file0', [{0x20, '/dev/sg#\x00'}, {0x20, '/dev/sg#\x00'}], 0xa, "7370e8c9eb584ee345b2d52bd5ac60"}, 0x2e) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 15:33:25 executing program 3: openat$tun(0xffffffffffffff9c, 0x0, 0xfffffffffffffffc, 0x0) sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x0, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f00000006c0)=""/4096, 0x1000}], 0x1, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000180)={0x0, r1}) gettid() ioctl$UI_SET_RELBIT(0xffffffffffffffff, 0x40045566, 0x8) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) 15:33:25 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = gettid() set_mempolicy(0x2, &(0x7f0000000040)=0x400000000002, 0x9) r2 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x3, 0x2800) ioctl$BLKPBSZGET(r2, 0x127b, &(0x7f0000000100)) write$P9_RWALK(r2, &(0x7f00000000c0)={0x3d, 0x6f, 0x1, {0x4, [{0x20, 0x2, 0x5}, {0x1a, 0x4, 0x7}, {0x0, 0x2, 0x6}, {0x10, 0x2, 0x9}]}}, 0x3d) ioctl$VIDIOC_SUBDEV_G_SELECTION(r2, 0xc040563d, &(0x7f0000000140)={0x1, 0x0, 0x101, 0x1, {0x6, 0x3, 0x101, 0x3ff}}) process_vm_writev(r1, &(0x7f00000000c0), 0x0, &(0x7f0000000080)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) 15:33:25 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_script(r0, &(0x7f0000000640)={'#! ', './file0', [], 0xa, "d1266d12e95afed85a1bf38aaf1b4ba88686b1d7eefe93e87be1cded9d0d73f957a0dc"}, 0x2e) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) write$binfmt_script(r0, &(0x7f0000000440)={'#! ', './file0', [], 0xa, "96de86d81aacdb3ba584580de2bfff37e108271616dfd5e3fb5cabab678bd9cf0b8b1c"}, 0x2e) write$P9_RREAD(r0, &(0x7f0000000180)={0x2e, 0x75, 0x0, {0x23, "3035949eec64fef5cbb1d182820bc8bced96d6919b684878bef38a5998c79a92fc2af5"}}, 0x2e) write$binfmt_script(r0, &(0x7f0000000540)={'#! ', './file0', [], 0xa, "b8d958259b7169b2d643c65434fc53e2538fbfd5866cd9cf2f180b8b4d8ded"}, 0x2a) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, 'eth0'}, {0x20, '#! '}, {0x20, '${'}, {0x20, '/dev/sg#\x00'}, {0x20, '#! '}], 0xa, "00fbdd695d"}, 0x2a) write$binfmt_script(r0, &(0x7f0000000080)={'#! ', './file0', [{0x20, '/dev/sg#\x00'}, {0x20, '/dev/sg#\x00'}], 0xa, "7370e8c9eb584ee345b2d52bd5ac60"}, 0x2e) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 15:33:25 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x800, 0x2000) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000040)={0x2, 0x1, 0x101, 0x0, 0x1f}) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4068aea3, &(0x7f00000001c0)={0x0, 0x0, [0x0, 0x0, 0x0, 0x4]}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) accept4(0xffffffffffffffff, &(0x7f0000000140)=@ethernet, &(0x7f0000000240)=0x80, 0x80000) 15:33:25 executing program 3: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x3) syz_open_dev$loop(0x0, 0x4, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) clone(0x2102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() clone(0xa0140100, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x11) wait4(0x0, 0x0, 0x0, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0x0, 0x800) uname(&(0x7f0000000000)=""/100) truncate(&(0x7f0000000240)='./bus\x00', 0xffffffffffffffff) open(0x0, 0x0, 0x0) lseek(0xffffffffffffffff, 0x8000000000000000, 0x2) [ 347.944224] protocol 88fb is buggy, dev hsr_slave_0 [ 347.949908] protocol 88fb is buggy, dev hsr_slave_1 15:33:26 executing program 2: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video1\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_G_EDID(r0, 0xc0285628, &(0x7f0000000080)={0x0, 0xbb, 0x2, [], &(0x7f0000000040)=0x3}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000180)={{{@in=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0xa0}}, {{}, 0x0, @in=@dev}}, 0xe8) 15:33:26 executing program 3: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x200040, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3, 0x84010, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet_mreqsrc(r1, 0x88, 0x67, &(0x7f0000013ff4)={@remote}, 0xc) 15:33:26 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_script(r0, &(0x7f0000000640)={'#! ', './file0', [], 0xa, "d1266d12e95afed85a1bf38aaf1b4ba88686b1d7eefe93e87be1cded9d0d73f957a0dc"}, 0x2e) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) write$binfmt_script(r0, &(0x7f0000000440)={'#! ', './file0', [], 0xa, "96de86d81aacdb3ba584580de2bfff37e108271616dfd5e3fb5cabab678bd9cf0b8b1c"}, 0x2e) write$P9_RREAD(r0, &(0x7f0000000180)={0x2e, 0x75, 0x0, {0x23, "3035949eec64fef5cbb1d182820bc8bced96d6919b684878bef38a5998c79a92fc2af5"}}, 0x2e) write$binfmt_script(r0, &(0x7f0000000540)={'#! ', './file0', [], 0xa, "b8d958259b7169b2d643c65434fc53e2538fbfd5866cd9cf2f180b8b4d8ded"}, 0x2a) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, 'eth0'}, {0x20, '#! '}, {0x20, '${'}, {0x20, '/dev/sg#\x00'}, {0x20, '#! '}], 0xa, "00fbdd695d"}, 0x2a) write$binfmt_script(r0, &(0x7f0000000080)={'#! ', './file0', [{0x20, '/dev/sg#\x00'}, {0x20, '/dev/sg#\x00'}], 0xa, "7370e8c9eb584ee345b2d52bd5ac60"}, 0x2e) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 15:33:26 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x800, 0x2000) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000040)={0x2, 0x1, 0x101, 0x0, 0x1f}) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4068aea3, &(0x7f00000001c0)={0x0, 0x0, [0x0, 0x0, 0x0, 0x4]}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) accept4(0xffffffffffffffff, &(0x7f0000000140)=@ethernet, &(0x7f0000000240)=0x80, 0x80000) 15:33:26 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f0000000040)="0a5c2d02402b6285717070") r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r2 = socket$inet(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f00000002c0), &(0x7f0000000440)=0x40) setsockopt$inet_group_source_req(r2, 0x0, 0x2e, &(0x7f0000000300)={0x1, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @broadcast}}}, 0x108) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000040)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="b7859cb8eec705f2288a933d66593ae164c990a0028e6640c522b60bdfedb810dcfa16bf33733b7a8961f9ec26a783f8", 0x30) r4 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x0, 0x2) ioctl$KVM_SET_DEVICE_ATTR(r4, 0x4018aee1, &(0x7f00000001c0)={0x0, 0x100, 0x3, &(0x7f0000000180)=0x4}) getsockopt$TIPC_IMPORTANCE(r4, 0x10f, 0x7f, &(0x7f0000000200), &(0x7f0000000240)=0x4) ioctl$KVM_DEASSIGN_PCI_DEVICE(r4, 0x4040ae72, &(0x7f0000000140)={0x6, 0x800, 0x2960, 0x1, 0x6}) getsockopt$ARPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x63, &(0x7f0000000000)={'TPROXY\x00'}, &(0x7f00000000c0)=0x1e) r5 = accept$alg(r3, 0x0, 0x0) read(r5, &(0x7f0000000bc0)=""/93, 0x5d) recvmsg(r5, &(0x7f0000d43000)={0x0, 0x0, &(0x7f0000ae0fc0)=[{&(0x7f0000b9ff8b)=""/117, 0xfffffffffffffead}], 0x1}, 0xfffffffffffffffc) 15:33:26 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_script(r0, &(0x7f0000000640)={'#! ', './file0', [], 0xa, "d1266d12e95afed85a1bf38aaf1b4ba88686b1d7eefe93e87be1cded9d0d73f957a0dc"}, 0x2e) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) write$binfmt_script(r0, &(0x7f0000000440)={'#! ', './file0', [], 0xa, "96de86d81aacdb3ba584580de2bfff37e108271616dfd5e3fb5cabab678bd9cf0b8b1c"}, 0x2e) write$P9_RREAD(r0, &(0x7f0000000180)={0x2e, 0x75, 0x0, {0x23, "3035949eec64fef5cbb1d182820bc8bced96d6919b684878bef38a5998c79a92fc2af5"}}, 0x2e) write$binfmt_script(r0, &(0x7f0000000540)={'#! ', './file0', [], 0xa, "b8d958259b7169b2d643c65434fc53e2538fbfd5866cd9cf2f180b8b4d8ded"}, 0x2a) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, 'eth0'}, {0x20, '#! '}, {0x20, '${'}, {0x20, '/dev/sg#\x00'}, {0x20, '#! '}], 0xa, "00fbdd695d"}, 0x2a) write$binfmt_script(r0, &(0x7f0000000080)={'#! ', './file0', [{0x20, '/dev/sg#\x00'}, {0x20, '/dev/sg#\x00'}], 0xa, "7370e8c9eb584ee345b2d52bd5ac60"}, 0x2e) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 15:33:26 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x800, 0x2000) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000040)={0x2, 0x1, 0x101, 0x0, 0x1f}) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4068aea3, &(0x7f00000001c0)={0x0, 0x0, [0x0, 0x0, 0x0, 0x4]}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) accept4(0xffffffffffffffff, &(0x7f0000000140)=@ethernet, &(0x7f0000000240)=0x80, 0x80000) 15:33:26 executing program 3: r0 = syz_open_dev$binder(&(0x7f00000006c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x1, 0x0, &(0x7f0000000200)='k'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xfdc4, 0x0, &(0x7f00004ee64e)}) 15:33:26 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_script(r0, &(0x7f0000000640)={'#! ', './file0', [], 0xa, "d1266d12e95afed85a1bf38aaf1b4ba88686b1d7eefe93e87be1cded9d0d73f957a0dc"}, 0x2e) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000440)={'#! ', './file0', [], 0xa, "96de86d81aacdb3ba584580de2bfff37e108271616dfd5e3fb5cabab678bd9cf0b8b1c"}, 0x2e) write$P9_RREAD(r0, &(0x7f0000000180)={0x2e, 0x75, 0x0, {0x23, "3035949eec64fef5cbb1d182820bc8bced96d6919b684878bef38a5998c79a92fc2af5"}}, 0x2e) write$binfmt_script(r0, &(0x7f0000000540)={'#! ', './file0', [], 0xa, "b8d958259b7169b2d643c65434fc53e2538fbfd5866cd9cf2f180b8b4d8ded"}, 0x2a) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, 'eth0'}, {0x20, '#! '}, {0x20, '${'}, {0x20, '/dev/sg#\x00'}, {0x20, '#! '}], 0xa, "00fbdd695d"}, 0x2a) write$binfmt_script(r0, &(0x7f0000000080)={'#! ', './file0', [{0x20, '/dev/sg#\x00'}, {0x20, '/dev/sg#\x00'}], 0xa, "7370e8c9eb584ee345b2d52bd5ac60"}, 0x2e) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 15:33:26 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x1, 0x47, 0x2, 0x8000000001}, 0x2c) r1 = bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x9fc2, 0x1, 0x10020000000, 0x0, 0x101}, 0x2c) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r1, &(0x7f0000000180)="e9a800966fe9f9b7efe4f982aaeabd0b1f384d42dd16b814dc8e6fd46a9e2728b97909b94ba9bc47c3212f78fd935f117558364ed90603c714655ac1c657842bafe20b5d24d7ab3fd352c4d7fc1575cd5a1083bae14a037532ad54d952f4bcf99eb829ddbbbea96caeaf804258dab83af51d6c01bfb47be755fa095686eecb975f53331e0e64354b00831001098b4db4e8ea35c907ecd3e39f647418aebad1298638bca7f59ae0ced2b2199646", &(0x7f0000000000)=""/54}, 0x18) userfaultfd(0x80000) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r0, &(0x7f0000000040), 0x0}, 0xffffffffffffff8e) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x20000, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r2, 0x810c5701, &(0x7f0000000240)) [ 348.739554] binder: 11478 RLIMIT_NICE not set [ 348.789136] binder: 11478 RLIMIT_NICE not set 15:33:26 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x800, 0x2000) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000040)={0x2, 0x1, 0x101, 0x0, 0x1f}) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4068aea3, &(0x7f00000001c0)={0x0, 0x0, [0x0, 0x0, 0x0, 0x4]}) pipe2(&(0x7f0000000340)={0xffffffffffffffff}, 0x4800) accept4(r1, &(0x7f0000000140)=@ethernet, &(0x7f0000000240)=0x80, 0x80000) [ 348.812519] protocol 88fb is buggy, dev hsr_slave_0 [ 348.818315] protocol 88fb is buggy, dev hsr_slave_1 [ 348.824529] protocol 88fb is buggy, dev hsr_slave_0 [ 348.830294] protocol 88fb is buggy, dev hsr_slave_1 15:33:27 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_script(r0, &(0x7f0000000640)={'#! ', './file0', [], 0xa, "d1266d12e95afed85a1bf38aaf1b4ba88686b1d7eefe93e87be1cded9d0d73f957a0dc"}, 0x2e) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000440)={'#! ', './file0', [], 0xa, "96de86d81aacdb3ba584580de2bfff37e108271616dfd5e3fb5cabab678bd9cf0b8b1c"}, 0x2e) write$P9_RREAD(r0, &(0x7f0000000180)={0x2e, 0x75, 0x0, {0x23, "3035949eec64fef5cbb1d182820bc8bced96d6919b684878bef38a5998c79a92fc2af5"}}, 0x2e) write$binfmt_script(r0, &(0x7f0000000540)={'#! ', './file0', [], 0xa, "b8d958259b7169b2d643c65434fc53e2538fbfd5866cd9cf2f180b8b4d8ded"}, 0x2a) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, 'eth0'}, {0x20, '#! '}, {0x20, '${'}, {0x20, '/dev/sg#\x00'}, {0x20, '#! '}], 0xa, "00fbdd695d"}, 0x2a) write$binfmt_script(r0, &(0x7f0000000080)={'#! ', './file0', [{0x20, '/dev/sg#\x00'}, {0x20, '/dev/sg#\x00'}], 0xa, "7370e8c9eb584ee345b2d52bd5ac60"}, 0x2e) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 15:33:27 executing program 3: mkdir(&(0x7f0000001b40)='./file0\x00', 0x0) mount(&(0x7f00000005c0)=ANY=[], &(0x7f0000000040)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xa4=\x9a \x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x275a, 0x0) unlink(&(0x7f0000000100)='./file0\x00') [ 349.022197] binder: release 11477:11478 transaction 4 in, still active [ 349.028941] binder: send failed reply for transaction 4 to 11477:11481 [ 349.050940] binder: undelivered TRANSACTION_ERROR: 29189 15:33:27 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000280)={0x77, 0x0, [0x10000048b]}) r4 = dup3(r0, r3, 0x80000) ioctl$SCSI_IOCTL_SEND_COMMAND(r4, 0x1, &(0x7f0000000100)={0xb8, 0xdc, 0x0, "b2a9c1f50e5a4296f8bdef4a3f1446df6ec4e82d66b7018d838e710280c8317a3c0ceb99c82ca6ab9693bbefeb36d34fb31dcaf782e7c155b046bf23a078addc797dac9808ec11536ce0c911ffa5df818418b080ac30fb280fee6aa3ef0b8d5a74602c4a74981873c3f2a3fae2c13ed1e08ab2d26a5e66e3623da4f0e4125652f2d6bf4680bcf7a0661bb1253b1b148277d9f37c9e322238f40fb4c5bd6b0969829bb52972da6f7bb32cdbe31153e840a845100bf9701f43"}) 15:33:27 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x800, 0x2000) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000040)={0x2, 0x1, 0x101, 0x0, 0x1f}) pipe2(&(0x7f0000000340)={0xffffffffffffffff}, 0x4800) accept4(r1, &(0x7f0000000140)=@ethernet, &(0x7f0000000240)=0x80, 0x80000) 15:33:27 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_script(r0, &(0x7f0000000640)={'#! ', './file0', [], 0xa, "d1266d12e95afed85a1bf38aaf1b4ba88686b1d7eefe93e87be1cded9d0d73f957a0dc"}, 0x2e) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000440)={'#! ', './file0', [], 0xa, "96de86d81aacdb3ba584580de2bfff37e108271616dfd5e3fb5cabab678bd9cf0b8b1c"}, 0x2e) write$P9_RREAD(r0, &(0x7f0000000180)={0x2e, 0x75, 0x0, {0x23, "3035949eec64fef5cbb1d182820bc8bced96d6919b684878bef38a5998c79a92fc2af5"}}, 0x2e) write$binfmt_script(r0, &(0x7f0000000540)={'#! ', './file0', [], 0xa, "b8d958259b7169b2d643c65434fc53e2538fbfd5866cd9cf2f180b8b4d8ded"}, 0x2a) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, 'eth0'}, {0x20, '#! '}, {0x20, '${'}, {0x20, '/dev/sg#\x00'}, {0x20, '#! '}], 0xa, "00fbdd695d"}, 0x2a) write$binfmt_script(r0, &(0x7f0000000080)={'#! ', './file0', [{0x20, '/dev/sg#\x00'}, {0x20, '/dev/sg#\x00'}], 0xa, "7370e8c9eb584ee345b2d52bd5ac60"}, 0x2e) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 15:33:27 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x800, 0x2000) pipe2(&(0x7f0000000340)={0xffffffffffffffff}, 0x4800) accept4(r0, &(0x7f0000000140)=@ethernet, &(0x7f0000000240)=0x80, 0x80000) 15:33:27 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x9}, 0x10) r1 = syz_open_dev$admmidi(&(0x7f00000000c0)='/dev/admmidi#\x00', 0x80000000, 0x400000) ioctl$TIOCLINUX4(r1, 0x541c, &(0x7f0000000100)) ioctl$VIDIOC_SUBDEV_G_EDID(r1, 0xc0285628, &(0x7f0000000180)={0x0, 0x30b5, 0x0, [], &(0x7f0000000140)=0x3}) r2 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x3, 0x40640) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000240)=0x1, 0x4) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x40000, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r2, 0xc0286415, &(0x7f00000001c0)={&(0x7f0000ffd000/0x2000)=nil, 0x100000801, 0x5, 0x10, &(0x7f0000ffe000/0x1000)=nil, 0x9}) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$UHID_DESTROY(r2, &(0x7f0000000040), 0xffffffffffffff43) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x4, 0x4, 0x100080001, 0x0, r0}, 0x2c) 15:33:27 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_script(r0, &(0x7f0000000640)={'#! ', './file0', [], 0xa, "d1266d12e95afed85a1bf38aaf1b4ba88686b1d7eefe93e87be1cded9d0d73f957a0dc"}, 0x2e) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_script(r0, 0x0, 0x0) write$P9_RREAD(r0, &(0x7f0000000180)={0x2e, 0x75, 0x0, {0x23, "3035949eec64fef5cbb1d182820bc8bced96d6919b684878bef38a5998c79a92fc2af5"}}, 0x2e) write$binfmt_script(r0, &(0x7f0000000540)={'#! ', './file0', [], 0xa, "b8d958259b7169b2d643c65434fc53e2538fbfd5866cd9cf2f180b8b4d8ded"}, 0x2a) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, 'eth0'}, {0x20, '#! '}, {0x20, '${'}, {0x20, '/dev/sg#\x00'}, {0x20, '#! '}], 0xa, "00fbdd695d"}, 0x2a) write$binfmt_script(r0, &(0x7f0000000080)={'#! ', './file0', [{0x20, '/dev/sg#\x00'}, {0x20, '/dev/sg#\x00'}], 0xa, "7370e8c9eb584ee345b2d52bd5ac60"}, 0x2e) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 15:33:27 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x4, 0x800) ioctl$LOOP_SET_CAPACITY(r0, 0x1262) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, &(0x7f0000000080)={0x0, @in6={{0xa, 0x4e21, 0x1, @mcast1, 0x80000000}}, 0x9, 0x8, 0xd8, 0x36, 0x4}, &(0x7f0000000140)=0x98) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000180)={r2, 0x7}, &(0x7f00000001c0)=0xc) [ 349.612519] protocol 88fb is buggy, dev hsr_slave_0 [ 349.618252] protocol 88fb is buggy, dev hsr_slave_1 15:33:27 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x101002, 0x0) openat$cgroup_procs(r1, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x8) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000e86000)="0022040000ffffebfffffffeffffffff144e0000ff000207835eebf116b208feefaf234b4ff8b4cc4c39bdc8451792b903f4b7d8c8cf2153622652328c19ef68234f905557c4070000008735e9ab2f77c62e0a5cdd2cf9984c070400000000000003ff23353d8b2fc6a3ae1ebfcb49004a3ccd3560ae01010000079c60ed7449b842f3e253be8a62b37f820fe75a9ea937ea4e2540019ccbd9f6672837496d00ad7765abaac2ec0f91c88a1ea1ff6ee308c72febedcf00798d41991ac25bb6fce2220c25ea380c7e112ab358c3a6bd8a59c100000001b4e82cb03419544a3988bc226a85abe6eb60cd7cf8d103d38c31c7c86d16c4d86cbe4ab390c092d077ce70590fbbd4f8bf4d6ab1cea6dbe9d4a54c17aac0db6e3845", 0x118) ioctl$SIOCGSTAMPNS(r1, 0x8907, &(0x7f00000000c0)) connect$inet6(r0, &(0x7f0000aacfe4), 0x1c) write$binfmt_script(r0, 0x0, 0x0) 15:33:27 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_script(r0, &(0x7f0000000640)={'#! ', './file0', [], 0xa, "d1266d12e95afed85a1bf38aaf1b4ba88686b1d7eefe93e87be1cded9d0d73f957a0dc"}, 0x2e) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_script(r0, 0x0, 0x0) write$P9_RREAD(r0, &(0x7f0000000180)={0x2e, 0x75, 0x0, {0x23, "3035949eec64fef5cbb1d182820bc8bced96d6919b684878bef38a5998c79a92fc2af5"}}, 0x2e) write$binfmt_script(r0, &(0x7f0000000540)={'#! ', './file0', [], 0xa, "b8d958259b7169b2d643c65434fc53e2538fbfd5866cd9cf2f180b8b4d8ded"}, 0x2a) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, 'eth0'}, {0x20, '#! '}, {0x20, '${'}, {0x20, '/dev/sg#\x00'}, {0x20, '#! '}], 0xa, "00fbdd695d"}, 0x2a) write$binfmt_script(r0, &(0x7f0000000080)={'#! ', './file0', [{0x20, '/dev/sg#\x00'}, {0x20, '/dev/sg#\x00'}], 0xa, "7370e8c9eb584ee345b2d52bd5ac60"}, 0x2e) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 15:33:27 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) pipe2(&(0x7f0000000340)={0xffffffffffffffff}, 0x4800) accept4(r0, &(0x7f0000000140)=@ethernet, &(0x7f0000000240)=0x80, 0x80000) 15:33:28 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f0000000040), 0x4) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x40001, 0x0) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f00000000c0)) ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, &(0x7f0000000180)={0x5, 0xfff, 0x5, 0x9}) socket$alg(0x26, 0x5, 0x0) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000140)={0xfffffffffffeffff, 0x42, 0x800, 0x80000000, 0x7, 0x8, 0x4, 0x6, 0x20, 0xaf93, 0x7ff, 0x6607}) setsockopt$IP_VS_SO_SET_ZERO(r1, 0x0, 0x48f, &(0x7f0000000100)={0x73, @loopback, 0x4f20, 0x1, 'lc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x9d?\x00', 0x4, 0x9, 0x81}, 0x2c) setsockopt$inet6_int(r0, 0x29, 0xdf, &(0x7f0000000000), 0x4) [ 350.012632] protocol 88fb is buggy, dev hsr_slave_0 [ 350.018359] protocol 88fb is buggy, dev hsr_slave_1 15:33:28 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1f, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, 0xffffffffffffffff) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f0000000280)={0x2, 0x10001}) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f00000001c0), &(0x7f0000000200)=0x4) getsockopt(r1, 0x420cc562, 0xf1, &(0x7f00000000c0)=""/211, &(0x7f0000000000)=0xd3) ioctl$NBD_CLEAR_QUE(r1, 0xab05) socket$inet6_tcp(0xa, 0x1, 0x0) 15:33:28 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_script(r0, &(0x7f0000000640)={'#! ', './file0', [], 0xa, "d1266d12e95afed85a1bf38aaf1b4ba88686b1d7eefe93e87be1cded9d0d73f957a0dc"}, 0x2e) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_script(r0, 0x0, 0x0) write$P9_RREAD(r0, &(0x7f0000000180)={0x2e, 0x75, 0x0, {0x23, "3035949eec64fef5cbb1d182820bc8bced96d6919b684878bef38a5998c79a92fc2af5"}}, 0x2e) write$binfmt_script(r0, &(0x7f0000000540)={'#! ', './file0', [], 0xa, "b8d958259b7169b2d643c65434fc53e2538fbfd5866cd9cf2f180b8b4d8ded"}, 0x2a) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, 'eth0'}, {0x20, '#! '}, {0x20, '${'}, {0x20, '/dev/sg#\x00'}, {0x20, '#! '}], 0xa, "00fbdd695d"}, 0x2a) write$binfmt_script(r0, &(0x7f0000000080)={'#! ', './file0', [{0x20, '/dev/sg#\x00'}, {0x20, '/dev/sg#\x00'}], 0xa, "7370e8c9eb584ee345b2d52bd5ac60"}, 0x2e) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 15:33:28 executing program 1: pipe2(&(0x7f0000000340)={0xffffffffffffffff}, 0x4800) accept4(r0, &(0x7f0000000140)=@ethernet, &(0x7f0000000240)=0x80, 0x80000) 15:33:28 executing program 2: r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ftruncate(r0, 0x2081fc) r1 = open(&(0x7f0000000140)='./file0\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fd\x00') fchdir(r2) ioctl$KVM_S390_UCAS_MAP(r0, 0x4018ae50, &(0x7f00000000c0)={0x9, 0x284c, 0x9}) r3 = memfd_create(&(0x7f0000000b80)='keyringlo\x00\xf9\xe32\x10^\xef\xf0\xfb\xca\x82\xbf\xc2K\x1c\x95\xaaPv\xben\x8b\xd7\xaf\fn\xdd\xf0\x18\'\"\xfe\xff+\x9a\x00\xce\xf0\xfbi\x84\xe5``\xde\xb0\x90\x81]\x9e\xf9\xfb\xc9\xfe\xbc\xd2e}\x98\x06_c\x0f\x14\xbc\xe0\xd3.,\xbf4\xf6\x03D\xd5\xd1tU\xfd\x1b\x7f&`t\xc3F<\x13\xbf\xbd\xc2c\xe8\xe6\xc0\xe4\xfd\xb0\xb3S\xd9n\x05\xf4\xaf\xda\xa5\xe9\xa21\x03\x00\x00\x00\xb3\xd7yO\xd3>\xcc\x81\x1fm\xb8\x06\xdaT\xef+:\xc6l\xdbA\xbd\xb6B-8\x9e\xf5;\x01l\xb1\'\xcb\xae|ggX\xe1\x99u$\xeaoW\xfe\x8e1X\xa0\xb8\x939\xf5Mm\x86\xb3\xf1\xd5\xebN\x93.J\"\xb6\xda\r\x1d>\xaf\xf99\xd91 \x19\xfc\x98\x82\xc3{d\xcc?\xf3\xe0\x01(\x1cv#\xc8\x91\x16\xa7\xdd\x8a\xefj!\x10\xb5\xc8\"q}\x7f\x9d\x03\x01a(\xean\x95\xa6ok\xb4\x17X;\xf0\xddT\xd1\xcd\x01[0\xf2\x96\xd8\xf6\xe5\xeeC\x8b&|\xf4\x03\x9a\x90_j\x83\t\x92v\x96\xe6\xdcb\xa6\xa1\x88\xba\x10\xeaWk\xd6\x99\xbc\x90x\xd3\xed\xec\xcf\xbd\xbf\xc5_C\xdd\x899\x9e\xd3XD\xe7{\xf9[\xa7\x9f\x17\xbb\x93\xbf\x85\xe1l\xf6*\x13\xb5,%\xc2R\xb7\xe4QO\x01\x1c\x9d\xa6\xb2\xcb\x7f\x19\b\xfeX\xceer\x16\xb2\xa5\x19\x0e\nrp\x99\xab\r\x83\xcc\xdd\xdb\xaag\x92\xf2\xbe\xbf\x9a\x8bqk=\xd8\x8d\x15\x90\xc1\xd4\xfc\xc1\xe8\x18\xdc\x822F\xd6\xd5\x9eD\x9f\xcf\xf4\x97\x0f\xf8\x88\xefc\xc1\'}v\xc8Y\xf6\xeb\x9f\x8c\x01=+\xba\ry\x18t\x03\xbf\xe4]\"\xa2\xb8\xdc\xb5\xffg\x9et\x81V\xc5{2e%os\x97\xf6\xc1\x8c\x91\"\xdb[\xdf\xb6pv\xee\x1a\x04\xdc\xcf\xd3&\x99\xaa\xd4q\x99\xbd\xe5\x05\x00\x00\x00\x00\x00\x00\xf2\b\xd6\xfecP\xd6\xd32\xfd\xe7\x19\xea\xe2\x97\xb7\xb4\x00', 0x0) socket$inet_dccp(0x2, 0x6, 0x0) ioctl$RTC_SET_TIME(r1, 0x4024700a, &(0x7f0000000040)={0x38, 0xd, 0x17, 0x5, 0xb, 0x3, 0x2, 0xa1}) write(r3, &(0x7f0000000300)="6963e64243ea486da3a74e3deec6fc7bb9650b5de56946c568f95d22467190ba3b6d59a5958d6fa9259c8a2ac4677b00000000000000000000200000f8bf54da32", 0x41) ioctl$TUNGETIFF(r3, 0x800454d2, &(0x7f0000000080)) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) readlink(&(0x7f0000000180)='./file0\x00', &(0x7f0000000000)=""/60, 0x3c) 15:33:28 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_script(r0, &(0x7f0000000640)={'#! ', './file0', [], 0xa, "d1266d12e95afed85a1bf38aaf1b4ba88686b1d7eefe93e87be1cded9d0d73f957a0dc"}, 0x2e) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_script(r0, &(0x7f0000000440)={'#! ', './file0'}, 0xb) write$P9_RREAD(r0, &(0x7f0000000180)={0x2e, 0x75, 0x0, {0x23, "3035949eec64fef5cbb1d182820bc8bced96d6919b684878bef38a5998c79a92fc2af5"}}, 0x2e) write$binfmt_script(r0, &(0x7f0000000540)={'#! ', './file0', [], 0xa, "b8d958259b7169b2d643c65434fc53e2538fbfd5866cd9cf2f180b8b4d8ded"}, 0x2a) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, 'eth0'}, {0x20, '#! '}, {0x20, '${'}, {0x20, '/dev/sg#\x00'}, {0x20, '#! '}], 0xa, "00fbdd695d"}, 0x2a) write$binfmt_script(r0, &(0x7f0000000080)={'#! ', './file0', [{0x20, '/dev/sg#\x00'}, {0x20, '/dev/sg#\x00'}], 0xa, "7370e8c9eb584ee345b2d52bd5ac60"}, 0x2e) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 15:33:28 executing program 1: pipe2(0x0, 0x4800) accept4(0xffffffffffffffff, &(0x7f0000000140)=@ethernet, &(0x7f0000000240)=0x80, 0x80000) 15:33:28 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f0000000180), 0x0, 0x0, 0x8) r1 = shmget$private(0x0, 0x3000, 0x420, &(0x7f0000ffb000/0x3000)=nil) shmctl$SHM_STAT(r1, 0xd, &(0x7f0000000000)=""/62) r2 = getpid() rt_tgsigqueueinfo(r2, r2, 0x16, &(0x7f0000000100)) ptrace(0x4206, r2) rt_tgsigqueueinfo(r2, r2, 0x12, &(0x7f0000001180)={0x0, 0x0, 0xffffffffffffc58e}) ptrace(0x4208, r2) 15:33:28 executing program 1: pipe2(0x0, 0x4800) accept4(0xffffffffffffffff, &(0x7f0000000140)=@ethernet, &(0x7f0000000240)=0x80, 0x80000) 15:33:28 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_script(r0, &(0x7f0000000640)={'#! ', './file0', [], 0xa, "d1266d12e95afed85a1bf38aaf1b4ba88686b1d7eefe93e87be1cded9d0d73f957a0dc"}, 0x2e) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_script(r0, &(0x7f0000000440)={'#! ', './file0'}, 0xb) write$P9_RREAD(r0, &(0x7f0000000180)={0x2e, 0x75, 0x0, {0x23, "3035949eec64fef5cbb1d182820bc8bced96d6919b684878bef38a5998c79a92fc2af5"}}, 0x2e) write$binfmt_script(r0, &(0x7f0000000540)={'#! ', './file0', [], 0xa, "b8d958259b7169b2d643c65434fc53e2538fbfd5866cd9cf2f180b8b4d8ded"}, 0x2a) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, 'eth0'}, {0x20, '#! '}, {0x20, '${'}, {0x20, '/dev/sg#\x00'}, {0x20, '#! '}], 0xa, "00fbdd695d"}, 0x2a) write$binfmt_script(r0, &(0x7f0000000080)={'#! ', './file0', [{0x20, '/dev/sg#\x00'}, {0x20, '/dev/sg#\x00'}], 0xa, "7370e8c9eb584ee345b2d52bd5ac60"}, 0x2e) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 15:33:28 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="850000513669952fb50da57c7bf94e9a028422002e00000000"], &(0x7f0000000180)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2'}, 0x48) r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff8) r1 = add_key(&(0x7f00000002c0)='cifs.idmap\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f00000004c0)="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", 0xfffffffffffffe8c, 0xffffffffffffffff) keyctl$instantiate(0xc, r0, &(0x7f00000003c0)=@encrypted_new={'new ', 'ecryptfs', 0x20, 'trusted:', 'EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x20, 0x5}, 0xc1, r1) 15:33:28 executing program 1: pipe2(0x0, 0x4800) accept4(0xffffffffffffffff, &(0x7f0000000140)=@ethernet, &(0x7f0000000240)=0x80, 0x80000) 15:33:29 executing program 2: r0 = socket$unix(0x1, 0x2, 0x0) r1 = dup2(r0, r0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x2, 0x0, 0x1, 0xe3}) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, &(0x7f0000000100)={0x0, r2, 0x2, 0x65}) connect$unix(r0, &(0x7f0000000000)=@abs={0x1}, 0x6e) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000080)) 15:33:29 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_script(r0, &(0x7f0000000640)={'#! ', './file0', [], 0xa, "d1266d12e95afed85a1bf38aaf1b4ba88686b1d7eefe93e87be1cded9d0d73f957a0dc"}, 0x2e) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_script(r0, &(0x7f0000000440)={'#! ', './file0'}, 0xb) write$P9_RREAD(r0, &(0x7f0000000180)={0x2e, 0x75, 0x0, {0x23, "3035949eec64fef5cbb1d182820bc8bced96d6919b684878bef38a5998c79a92fc2af5"}}, 0x2e) write$binfmt_script(r0, &(0x7f0000000540)={'#! ', './file0', [], 0xa, "b8d958259b7169b2d643c65434fc53e2538fbfd5866cd9cf2f180b8b4d8ded"}, 0x2a) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, 'eth0'}, {0x20, '#! '}, {0x20, '${'}, {0x20, '/dev/sg#\x00'}, {0x20, '#! '}], 0xa, "00fbdd695d"}, 0x2a) write$binfmt_script(r0, &(0x7f0000000080)={'#! ', './file0', [{0x20, '/dev/sg#\x00'}, {0x20, '/dev/sg#\x00'}], 0xa, "7370e8c9eb584ee345b2d52bd5ac60"}, 0x2e) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 15:33:29 executing program 1: pipe2(&(0x7f0000000340)={0xffffffffffffffff}, 0x0) accept4(r0, &(0x7f0000000140)=@ethernet, &(0x7f0000000240)=0x80, 0x80000) 15:33:29 executing program 2: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x20002) ioctl$FS_IOC_FSGETXATTR(r0, 0x8038550a, &(0x7f0000000000)={0x3, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x7ff0bdbe}) ioctl$VIDIOC_S_PRIORITY(r0, 0x40045644, 0x0) 15:33:29 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_script(r0, &(0x7f0000000640)={'#! ', './file0', [], 0xa, "d1266d12e95afed85a1bf38aaf1b4ba88686b1d7eefe93e87be1cded9d0d73f957a0dc"}, 0x2e) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_script(r0, &(0x7f0000000440)={'#! ', './file0', [], 0xa, "96de86d81aacdb3ba584580de2bfff37e108"}, 0x1d) write$P9_RREAD(r0, &(0x7f0000000180)={0x2e, 0x75, 0x0, {0x23, "3035949eec64fef5cbb1d182820bc8bced96d6919b684878bef38a5998c79a92fc2af5"}}, 0x2e) write$binfmt_script(r0, &(0x7f0000000540)={'#! ', './file0', [], 0xa, "b8d958259b7169b2d643c65434fc53e2538fbfd5866cd9cf2f180b8b4d8ded"}, 0x2a) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, 'eth0'}, {0x20, '#! '}, {0x20, '${'}, {0x20, '/dev/sg#\x00'}, {0x20, '#! '}], 0xa, "00fbdd695d"}, 0x2a) write$binfmt_script(r0, &(0x7f0000000080)={'#! ', './file0', [{0x20, '/dev/sg#\x00'}, {0x20, '/dev/sg#\x00'}], 0xa, "7370e8c9eb584ee345b2d52bd5ac60"}, 0x2e) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 15:33:29 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x3a) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000001}, 0xc) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast1, 0x0, 0x2b}, 0x0, @in=@remote, 0x0, 0x0, 0x0, 0xa2f}}, 0xe8) epoll_create1(0x80000) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @rand_addr, 0xfffffffffffffffd}, 0x1c) 15:33:29 executing program 1: pipe2(&(0x7f0000000340), 0x0) accept4(0xffffffffffffffff, &(0x7f0000000140)=@ethernet, &(0x7f0000000240)=0x80, 0x80000) 15:33:29 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000000)=""/28, 0x23c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r0, 0xc0305302, &(0x7f0000000080)) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000100)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) r2 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x6a01, 0x0) accept4$unix(r2, &(0x7f0000000240)=@abs, &(0x7f00000002c0)=0x6e, 0x80800) bind$isdn(r2, &(0x7f0000000200)={0x22, 0x1, 0x5, 0x6, 0x8001}, 0x6) 15:33:29 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_script(r0, &(0x7f0000000640)={'#! ', './file0', [], 0xa, "d1266d12e95afed85a1bf38aaf1b4ba88686b1d7eefe93e87be1cded9d0d73f957a0dc"}, 0x2e) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_script(r0, &(0x7f0000000440)={'#! ', './file0', [], 0xa, "96de86d81aacdb3ba584580de2bfff37e108"}, 0x1d) write$P9_RREAD(r0, &(0x7f0000000180)={0x2e, 0x75, 0x0, {0x23, "3035949eec64fef5cbb1d182820bc8bced96d6919b684878bef38a5998c79a92fc2af5"}}, 0x2e) write$binfmt_script(r0, &(0x7f0000000540)={'#! ', './file0', [], 0xa, "b8d958259b7169b2d643c65434fc53e2538fbfd5866cd9cf2f180b8b4d8ded"}, 0x2a) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, 'eth0'}, {0x20, '#! '}, {0x20, '${'}, {0x20, '/dev/sg#\x00'}, {0x20, '#! '}], 0xa, "00fbdd695d"}, 0x2a) write$binfmt_script(r0, &(0x7f0000000080)={'#! ', './file0', [{0x20, '/dev/sg#\x00'}, {0x20, '/dev/sg#\x00'}], 0xa, "7370e8c9eb584ee345b2d52bd5ac60"}, 0x2e) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 15:33:29 executing program 1: pipe2(&(0x7f0000000340), 0x0) accept4(0xffffffffffffffff, &(0x7f0000000140)=@ethernet, &(0x7f0000000240)=0x80, 0x80000) 15:33:29 executing program 3: io_setup(0x101, &(0x7f0000000000)=0x0) socket$inet6(0xa, 0x3, 0x3) r1 = syz_open_dev$adsp(&(0x7f0000000100)='/dev/adsp#\x00', 0xa3, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$GIO_CMAP(r1, 0x4b70, &(0x7f0000000040)) io_submit(r0, 0x1, &(0x7f0000000700)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x0, 0x0, 0x1, r2}]) 15:33:29 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_script(r0, &(0x7f0000000640)={'#! ', './file0', [], 0xa, "d1266d12e95afed85a1bf38aaf1b4ba88686b1d7eefe93e87be1cded9d0d73f957a0dc"}, 0x2e) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_script(r0, &(0x7f0000000440)={'#! ', './file0', [], 0xa, "96de86d81aacdb3ba584580de2bfff37e108"}, 0x1d) write$P9_RREAD(r0, &(0x7f0000000180)={0x2e, 0x75, 0x0, {0x23, "3035949eec64fef5cbb1d182820bc8bced96d6919b684878bef38a5998c79a92fc2af5"}}, 0x2e) write$binfmt_script(r0, &(0x7f0000000540)={'#! ', './file0', [], 0xa, "b8d958259b7169b2d643c65434fc53e2538fbfd5866cd9cf2f180b8b4d8ded"}, 0x2a) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, 'eth0'}, {0x20, '#! '}, {0x20, '${'}, {0x20, '/dev/sg#\x00'}, {0x20, '#! '}], 0xa, "00fbdd695d"}, 0x2a) write$binfmt_script(r0, &(0x7f0000000080)={'#! ', './file0', [{0x20, '/dev/sg#\x00'}, {0x20, '/dev/sg#\x00'}], 0xa, "7370e8c9eb584ee345b2d52bd5ac60"}, 0x2e) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 15:33:29 executing program 1: pipe2(&(0x7f0000000340), 0x0) accept4(0xffffffffffffffff, &(0x7f0000000140)=@ethernet, &(0x7f0000000240)=0x80, 0x80000) 15:33:30 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_script(r0, &(0x7f0000000640)={'#! ', './file0', [], 0xa, "d1266d12e95afed85a1bf38aaf1b4ba88686b1d7eefe93e87be1cded9d0d73f957a0dc"}, 0x2e) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_script(r0, &(0x7f0000000440)={'#! ', './file0', [], 0xa, "96de86d81aacdb3ba584580de2bfff37e108271616dfd5e3fb5cab"}, 0x26) write$P9_RREAD(r0, &(0x7f0000000180)={0x2e, 0x75, 0x0, {0x23, "3035949eec64fef5cbb1d182820bc8bced96d6919b684878bef38a5998c79a92fc2af5"}}, 0x2e) write$binfmt_script(r0, &(0x7f0000000540)={'#! ', './file0', [], 0xa, "b8d958259b7169b2d643c65434fc53e2538fbfd5866cd9cf2f180b8b4d8ded"}, 0x2a) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, 'eth0'}, {0x20, '#! '}, {0x20, '${'}, {0x20, '/dev/sg#\x00'}, {0x20, '#! '}], 0xa, "00fbdd695d"}, 0x2a) write$binfmt_script(r0, &(0x7f0000000080)={'#! ', './file0', [{0x20, '/dev/sg#\x00'}, {0x20, '/dev/sg#\x00'}], 0xa, "7370e8c9eb584ee345b2d52bd5ac60"}, 0x2e) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 15:33:30 executing program 1: pipe2(&(0x7f0000000340)={0xffffffffffffffff}, 0x0) accept4(r0, 0x0, &(0x7f0000000240), 0x80000) 15:33:30 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000080)={{0x81, 0x3}}) signalfd4(r0, &(0x7f0000000040)={0x2}, 0x8, 0x800) 15:33:30 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_script(r0, &(0x7f0000000640)={'#! ', './file0', [], 0xa, "d1266d12e95afed85a1bf38aaf1b4ba88686b1d7eefe93e87be1cded9d0d73f957a0dc"}, 0x2e) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_script(r0, &(0x7f0000000440)={'#! ', './file0', [], 0xa, "96de86d81aacdb3ba584580de2bfff37e108271616dfd5e3fb5cab"}, 0x26) write$P9_RREAD(r0, &(0x7f0000000180)={0x2e, 0x75, 0x0, {0x23, "3035949eec64fef5cbb1d182820bc8bced96d6919b684878bef38a5998c79a92fc2af5"}}, 0x2e) write$binfmt_script(r0, &(0x7f0000000540)={'#! ', './file0', [], 0xa, "b8d958259b7169b2d643c65434fc53e2538fbfd5866cd9cf2f180b8b4d8ded"}, 0x2a) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, 'eth0'}, {0x20, '#! '}, {0x20, '${'}, {0x20, '/dev/sg#\x00'}, {0x20, '#! '}], 0xa, "00fbdd695d"}, 0x2a) write$binfmt_script(r0, &(0x7f0000000080)={'#! ', './file0', [{0x20, '/dev/sg#\x00'}, {0x20, '/dev/sg#\x00'}], 0xa, "7370e8c9eb584ee345b2d52bd5ac60"}, 0x2e) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 15:33:30 executing program 1: pipe2(&(0x7f0000000340)={0xffffffffffffffff}, 0x0) accept4(r0, 0x0, 0x0, 0x80000) 15:33:30 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x400200, 0x0) r1 = getpgrp(0x0) fcntl$setown(r0, 0x8, r1) r2 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000100)={0x0, 0x42, "ae87d3cf873e2544176d950f2ee5cc8439c17f7e69eedd46ed9bf671686304846fff6b039cdba93d310b7f8f5a1a1667ba0a8679a06cf4846a4af4a4d91af48b845a"}, &(0x7f0000000180)=0x4a) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000001c0)=@assoc_value={r3, 0x831}, 0x8) getsockopt$bt_hci(r2, 0x65, 0x6, &(0x7f0000000240)=""/244, &(0x7f0000000000)=0x517) r4 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x8001, 0x101000) setsockopt$inet6_udp_int(r4, 0x11, 0x1, &(0x7f0000000080)=0x8, 0x4) 15:33:30 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_script(r0, &(0x7f0000000640)={'#! ', './file0', [], 0xa, "d1266d12e95afed85a1bf38aaf1b4ba88686b1d7eefe93e87be1cded9d0d73f957a0dc"}, 0x2e) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_script(r0, &(0x7f0000000440)={'#! ', './file0', [], 0xa, "96de86d81aacdb3ba584580de2bfff37e108271616dfd5e3fb5cab"}, 0x26) write$P9_RREAD(r0, &(0x7f0000000180)={0x2e, 0x75, 0x0, {0x23, "3035949eec64fef5cbb1d182820bc8bced96d6919b684878bef38a5998c79a92fc2af5"}}, 0x2e) write$binfmt_script(r0, &(0x7f0000000540)={'#! ', './file0', [], 0xa, "b8d958259b7169b2d643c65434fc53e2538fbfd5866cd9cf2f180b8b4d8ded"}, 0x2a) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, 'eth0'}, {0x20, '#! '}, {0x20, '${'}, {0x20, '/dev/sg#\x00'}, {0x20, '#! '}], 0xa, "00fbdd695d"}, 0x2a) write$binfmt_script(r0, &(0x7f0000000080)={'#! ', './file0', [{0x20, '/dev/sg#\x00'}, {0x20, '/dev/sg#\x00'}], 0xa, "7370e8c9eb584ee345b2d52bd5ac60"}, 0x2e) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 15:33:30 executing program 2: ioctl$VIDIOC_ENUMAUDOUT(0xffffffffffffffff, 0xc0345642, &(0x7f0000000040)={0x0, "40137633bb771f5a3553532e0706cdb427796eb45a1e922a4906f46fcc639f28", 0x2}) getegid() clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x0, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4110104}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, r1, 0x42c, 0x70bd25, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8}]}]}, 0x30}}, 0x40040) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x3, 0x80, 0x1}) fcntl$dupfd(r0, 0x406, r0) ioctl$DRM_IOCTL_CONTROL(r0, 0x40096102, 0x0) 15:33:30 executing program 1: pipe2(&(0x7f0000000340)={0xffffffffffffffff}, 0x0) accept4(r0, 0x0, 0x0, 0x0) 15:33:30 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x400000, 0x0) ioctl$TIOCLINUX2(r0, 0x541c, &(0x7f00000001c0)={0x2, 0x3, 0x4, 0x24, 0x0, 0x9}) r1 = socket$inet(0x2, 0x200000002, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x1e, &(0x7f0000000180)={@multicast2, @loopback}, 0xc) r2 = dup2(r1, r1) ioctl$DRM_IOCTL_MARK_BUFS(r2, 0x40206417, &(0x7f0000000080)={0x8, 0xa374, 0x5, 0x1f, 0x11, 0x3}) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) umount2(&(0x7f0000000040)='./file0\x00', 0x2) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f00000000c0)={@multicast1, @remote}, 0xc) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@random="b9a2d5b19422", @random="96fa99562389", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 15:33:30 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_script(r0, &(0x7f0000000640)={'#! ', './file0', [], 0xa, "d1266d12e95afed85a1bf38aaf1b4ba88686b1d7eefe93e87be1cded9d0d73f957a0dc"}, 0x2e) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_script(r0, &(0x7f0000000440)={'#! ', './file0', [], 0xa, "96de86d81aacdb3ba584580de2bfff37e108271616dfd5e3fb5cabab678bd9"}, 0x2a) write$P9_RREAD(r0, &(0x7f0000000180)={0x2e, 0x75, 0x0, {0x23, "3035949eec64fef5cbb1d182820bc8bced96d6919b684878bef38a5998c79a92fc2af5"}}, 0x2e) write$binfmt_script(r0, &(0x7f0000000540)={'#! ', './file0', [], 0xa, "b8d958259b7169b2d643c65434fc53e2538fbfd5866cd9cf2f180b8b4d8ded"}, 0x2a) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, 'eth0'}, {0x20, '#! '}, {0x20, '${'}, {0x20, '/dev/sg#\x00'}, {0x20, '#! '}], 0xa, "00fbdd695d"}, 0x2a) write$binfmt_script(r0, &(0x7f0000000080)={'#! ', './file0', [{0x20, '/dev/sg#\x00'}, {0x20, '/dev/sg#\x00'}], 0xa, "7370e8c9eb584ee345b2d52bd5ac60"}, 0x2e) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 15:33:30 executing program 1 (fault-call:1 fault-nth:0): pipe2(&(0x7f0000000340)={0xffffffffffffffff}, 0x0) accept4(r0, 0x0, 0x0, 0x0) 15:33:30 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f0000000000)={0x7, {{0x2, 0x4e24, @local}}}, 0x88) 15:33:31 executing program 3: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000002000)=@ethernet, 0x80) sendmsg$can_bcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x6, 0x494, 0x0, {0x0, 0x7530}, {}, {0x1}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "d3c3a12eb9a5a4e3"}}, 0x48}}, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) r2 = syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0x7fffffff, 0x20000) getpeername$packet(0xffffffffffffff9c, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000200)=0x14) setsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000240)={{{@in=@multicast1, @in=@local, 0x4e24, 0x6, 0x4e22, 0x0, 0xa, 0x80, 0x80, 0x84, r3, r1}, {0x89, 0x2, 0x8, 0x0, 0x87, 0x61, 0x100000000, 0xe66}, {0x10000, 0x1, 0x80000000, 0xffffffff80000000}, 0x1, 0x6e6bb8, 0x2, 0x1, 0x3, 0x2}, {{@in6=@loopback, 0x4d5, 0x7f}, 0xa, @in=@loopback, 0x3500, 0x7, 0x3, 0xb9c9, 0x8, 0xae7, 0x5}}, 0xe8) [ 352.972393] net_ratelimit: 8 callbacks suppressed [ 352.972414] protocol 88fb is buggy, dev hsr_slave_0 [ 352.983081] protocol 88fb is buggy, dev hsr_slave_1 [ 352.988963] protocol 88fb is buggy, dev hsr_slave_0 [ 352.994603] protocol 88fb is buggy, dev hsr_slave_1 15:33:31 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_script(r0, &(0x7f0000000640)={'#! ', './file0', [], 0xa, "d1266d12e95afed85a1bf38aaf1b4ba88686b1d7eefe93e87be1cded9d0d73f957a0dc"}, 0x2e) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_script(r0, &(0x7f0000000440)={'#! ', './file0', [], 0xa, "96de86d81aacdb3ba584580de2bfff37e108271616dfd5e3fb5cabab678bd9"}, 0x2a) write$P9_RREAD(r0, &(0x7f0000000180)={0x2e, 0x75, 0x0, {0x23, "3035949eec64fef5cbb1d182820bc8bced96d6919b684878bef38a5998c79a92fc2af5"}}, 0x2e) write$binfmt_script(r0, &(0x7f0000000540)={'#! ', './file0', [], 0xa, "b8d958259b7169b2d643c65434fc53e2538fbfd5866cd9cf2f180b8b4d8ded"}, 0x2a) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, 'eth0'}, {0x20, '#! '}, {0x20, '${'}, {0x20, '/dev/sg#\x00'}, {0x20, '#! '}], 0xa, "00fbdd695d"}, 0x2a) write$binfmt_script(r0, &(0x7f0000000080)={'#! ', './file0', [{0x20, '/dev/sg#\x00'}, {0x20, '/dev/sg#\x00'}], 0xa, "7370e8c9eb584ee345b2d52bd5ac60"}, 0x2e) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 15:33:31 executing program 1: pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) accept4(r0, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(r1, 0x80086601, &(0x7f0000000000)) 15:33:31 executing program 2: r0 = syz_open_dev$vbi(&(0x7f0000000380)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc058565d, &(0x7f0000000140)={0x0, 0x6, 0x0, [], 0x0}) 15:33:31 executing program 3: r0 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x2, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f0000000040)) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='2\xc9Pu\xad\xebf7\x00') mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x0, 0x31, 0xffffffffffffffff, 0x0) write(r1, &(0x7f0000000100)="d7", 0x1) 15:33:31 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_script(r0, &(0x7f0000000640)={'#! ', './file0', [], 0xa, "d1266d12e95afed85a1bf38aaf1b4ba88686b1d7eefe93e87be1cded9d0d73f957a0dc"}, 0x2e) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_script(r0, &(0x7f0000000440)={'#! ', './file0', [], 0xa, "96de86d81aacdb3ba584580de2bfff37e108271616dfd5e3fb5cabab678bd9"}, 0x2a) write$P9_RREAD(r0, &(0x7f0000000180)={0x2e, 0x75, 0x0, {0x23, "3035949eec64fef5cbb1d182820bc8bced96d6919b684878bef38a5998c79a92fc2af5"}}, 0x2e) write$binfmt_script(r0, &(0x7f0000000540)={'#! ', './file0', [], 0xa, "b8d958259b7169b2d643c65434fc53e2538fbfd5866cd9cf2f180b8b4d8ded"}, 0x2a) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, 'eth0'}, {0x20, '#! '}, {0x20, '${'}, {0x20, '/dev/sg#\x00'}, {0x20, '#! '}], 0xa, "00fbdd695d"}, 0x2a) write$binfmt_script(r0, &(0x7f0000000080)={'#! ', './file0', [{0x20, '/dev/sg#\x00'}, {0x20, '/dev/sg#\x00'}], 0xa, "7370e8c9eb584ee345b2d52bd5ac60"}, 0x2e) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 15:33:31 executing program 1: socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000000)) pipe2(&(0x7f0000000340)={0xffffffffffffffff}, 0x0) accept4(r0, 0x0, 0x0, 0x0) 15:33:31 executing program 2: add_key(&(0x7f0000000080)='user\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000140)="4269a4adc2f8c0", 0x7, 0xfffffffffffffffd) request_key(&(0x7f0000000180)='blacklist\x00', &(0x7f00000001c0)={'syz', 0x1}, &(0x7f0000000240)='syz', 0xfffffffffffffffe) r0 = request_key(&(0x7f00000003c0)='.request_key_auth\x00', &(0x7f0000000400)={'syz', 0x0}, &(0x7f0000000440)='cifs.spnego\x00', 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000380)='keyring\x00', &(0x7f0000000340)={'syz', 0x1}, 0x0, 0x0, r0) add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r2 = add_key$keyring(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000300)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$search(0xa, r1, &(0x7f0000000200)='cifs.spnego\x00', &(0x7f0000000280)={'syz'}, r2) 15:33:31 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_script(r0, &(0x7f0000000640)={'#! ', './file0', [], 0xa, "d1266d12e95afed85a1bf38aaf1b4ba88686b1d7eefe93e87be1cded9d0d73f957a0dc"}, 0x2e) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_script(r0, &(0x7f0000000440)={'#! ', './file0', [], 0xa, "96de86d81aacdb3ba584580de2bfff37e108271616dfd5e3fb5cabab678bd9cf0b"}, 0x2c) write$P9_RREAD(r0, &(0x7f0000000180)={0x2e, 0x75, 0x0, {0x23, "3035949eec64fef5cbb1d182820bc8bced96d6919b684878bef38a5998c79a92fc2af5"}}, 0x2e) write$binfmt_script(r0, &(0x7f0000000540)={'#! ', './file0', [], 0xa, "b8d958259b7169b2d643c65434fc53e2538fbfd5866cd9cf2f180b8b4d8ded"}, 0x2a) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, 'eth0'}, {0x20, '#! '}, {0x20, '${'}, {0x20, '/dev/sg#\x00'}, {0x20, '#! '}], 0xa, "00fbdd695d"}, 0x2a) write$binfmt_script(r0, &(0x7f0000000080)={'#! ', './file0', [{0x20, '/dev/sg#\x00'}, {0x20, '/dev/sg#\x00'}], 0xa, "7370e8c9eb584ee345b2d52bd5ac60"}, 0x2e) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 15:33:31 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x49, &(0x7f0000000040)={@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4ffffff]}}, 0x25) fchmod(r1, 0x40) 15:33:31 executing program 1: pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000000)=@req={0x10001, 0x8, 0x3, 0x8}, 0x10) accept4(r0, 0x0, 0x0, 0x0) [ 353.772605] protocol 88fb is buggy, dev hsr_slave_0 [ 353.778445] protocol 88fb is buggy, dev hsr_slave_1 15:33:31 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_script(r0, &(0x7f0000000640)={'#! ', './file0', [], 0xa, "d1266d12e95afed85a1bf38aaf1b4ba88686b1d7eefe93e87be1cded9d0d73f957a0dc"}, 0x2e) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_script(r0, &(0x7f0000000440)={'#! ', './file0', [], 0xa, "96de86d81aacdb3ba584580de2bfff37e108271616dfd5e3fb5cabab678bd9cf0b"}, 0x2c) write$P9_RREAD(r0, &(0x7f0000000180)={0x2e, 0x75, 0x0, {0x23, "3035949eec64fef5cbb1d182820bc8bced96d6919b684878bef38a5998c79a92fc2af5"}}, 0x2e) write$binfmt_script(r0, &(0x7f0000000540)={'#! ', './file0', [], 0xa, "b8d958259b7169b2d643c65434fc53e2538fbfd5866cd9cf2f180b8b4d8ded"}, 0x2a) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, 'eth0'}, {0x20, '#! '}, {0x20, '${'}, {0x20, '/dev/sg#\x00'}, {0x20, '#! '}], 0xa, "00fbdd695d"}, 0x2a) write$binfmt_script(r0, &(0x7f0000000080)={'#! ', './file0', [{0x20, '/dev/sg#\x00'}, {0x20, '/dev/sg#\x00'}], 0xa, "7370e8c9eb584ee345b2d52bd5ac60"}, 0x2e) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 15:33:31 executing program 2: r0 = gettid() setrlimit(0xb, &(0x7f0000000040)) r1 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x5, 0x101000) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x1, 0xc0) ioctl$FUSE_DEV_IOC_CLONE(r1, 0x8004e500, &(0x7f0000000100)=r2) rt_sigprocmask(0x0, &(0x7f0000037ff8)={0xfffffffffffffffe}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000000)={0xfffffffffffff6b1}, 0x0, 0x0, 0x8) rt_sigqueueinfo(r0, 0x1c, &(0x7f0000035000)={0x0, 0x0, 0xfffffffffffffffe}) 15:33:32 executing program 1: pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$sock_SIOCGIFBR(r1, 0x8940, &(0x7f0000000080)=@get={0x1, &(0x7f0000000000)=""/68}) accept4(r0, 0x0, 0x0, 0x0) ioctl$SIOCGETLINKNAME(r0, 0x89e0, &(0x7f00000000c0)={0x0, 0x3}) 15:33:32 executing program 3: pipe(&(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffe000/0x2000)=nil, 0x2000}, &(0x7f0000000040)=0x10) unshare(0x400) tee(r1, r0, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) 15:33:32 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_script(r0, &(0x7f0000000640)={'#! ', './file0', [], 0xa, "d1266d12e95afed85a1bf38aaf1b4ba88686b1d7eefe93e87be1cded9d0d73f957a0dc"}, 0x2e) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_script(r0, &(0x7f0000000440)={'#! ', './file0', [], 0xa, "96de86d81aacdb3ba584580de2bfff37e108271616dfd5e3fb5cabab678bd9cf0b"}, 0x2c) write$P9_RREAD(r0, &(0x7f0000000180)={0x2e, 0x75, 0x0, {0x23, "3035949eec64fef5cbb1d182820bc8bced96d6919b684878bef38a5998c79a92fc2af5"}}, 0x2e) write$binfmt_script(r0, &(0x7f0000000540)={'#! ', './file0', [], 0xa, "b8d958259b7169b2d643c65434fc53e2538fbfd5866cd9cf2f180b8b4d8ded"}, 0x2a) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, 'eth0'}, {0x20, '#! '}, {0x20, '${'}, {0x20, '/dev/sg#\x00'}, {0x20, '#! '}], 0xa, "00fbdd695d"}, 0x2a) write$binfmt_script(r0, &(0x7f0000000080)={'#! ', './file0', [{0x20, '/dev/sg#\x00'}, {0x20, '/dev/sg#\x00'}], 0xa, "7370e8c9eb584ee345b2d52bd5ac60"}, 0x2e) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) [ 354.172643] protocol 88fb is buggy, dev hsr_slave_0 [ 354.178452] protocol 88fb is buggy, dev hsr_slave_1 15:33:32 executing program 1: pipe2(&(0x7f0000000340)={0xffffffffffffffff}, 0x0) accept4(r0, 0x0, 0x0, 0x0) ioctl$BLKFLSBUF(r0, 0x1261, &(0x7f0000000000)=0x80000001) 15:33:32 executing program 3: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") bind$can_raw(r0, &(0x7f0000000180), 0xfffffffffffffe20) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000200)={0x1d, r2}, 0x10) 15:33:32 executing program 2: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rfkill\x00', 0x200000, 0x0) getsockname$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast2}, &(0x7f0000000240)=0x10) ioctl$TUNSETTXFILTER(0xffffffffffffff9c, 0x400454d1, &(0x7f00000003c0)=ANY=[@ANYBLOB="f79841ed64ed0559192a6c6cf5de64b10e57ed28ff87f0d5fbd2b76ebcb3f76230752e73a186e25ff7f07aa9c2d29ed087a49528aa5627cfd6a12c31122b63d98984e4a443d2e3b2c7f87ee1e58266ba1fa7ee76d1fe5fa1801caa972cf009dce24037d16efe3b25095b7356a3d301d95b11f6ae107a808be96c674476b3fd48cb2e2fa7e0c255a122f9abbb539e5d1154aa213a44958262b88cb78643c037a0ff35f9bdd44d656ffaa92833cb5d4397e12a8d4f10064771bcdbcdbe70144e06b662d64cdabd5b3d17da52629cef955a16052adc6e3e73a2d2a05d9298a1a4502bbac8736d11bc"]) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_user\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400201}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r2, 0x410, 0x70bd29, 0x25dfdbfb, {{}, 0x0, 0x4, 0x0, {0x8, 0x11, 0xfff}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) socket$inet_udplite(0x2, 0x2, 0x88) rt_sigsuspend(0x0, 0x286) r3 = fcntl$getown(0xffffffffffffff9c, 0x9) ioctl$TIOCSPGRP(r0, 0x5410, &(0x7f0000000180)=r3) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000280)={{{@in=@broadcast, @in=@local}}, {{@in6=@dev}, 0x0, @in6=@loopback}}, &(0x7f0000000380)=0xe8) 15:33:32 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_script(r0, &(0x7f0000000640)={'#! ', './file0', [], 0xa, "d1266d12e95afed85a1bf38aaf1b4ba88686b1d7eefe93e87be1cded9d0d73f957a0dc"}, 0x2e) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_script(r0, &(0x7f0000000440)={'#! ', './file0', [], 0xa, "96de86d81aacdb3ba584580de2bfff37e108271616dfd5e3fb5cabab678bd9cf0b8b"}, 0x2d) write$P9_RREAD(r0, &(0x7f0000000180)={0x2e, 0x75, 0x0, {0x23, "3035949eec64fef5cbb1d182820bc8bced96d6919b684878bef38a5998c79a92fc2af5"}}, 0x2e) write$binfmt_script(r0, &(0x7f0000000540)={'#! ', './file0', [], 0xa, "b8d958259b7169b2d643c65434fc53e2538fbfd5866cd9cf2f180b8b4d8ded"}, 0x2a) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, 'eth0'}, {0x20, '#! '}, {0x20, '${'}, {0x20, '/dev/sg#\x00'}, {0x20, '#! '}], 0xa, "00fbdd695d"}, 0x2a) write$binfmt_script(r0, &(0x7f0000000080)={'#! ', './file0', [{0x20, '/dev/sg#\x00'}, {0x20, '/dev/sg#\x00'}], 0xa, "7370e8c9eb584ee345b2d52bd5ac60"}, 0x2e) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 15:33:32 executing program 1: pipe2(&(0x7f0000000340)={0xffffffffffffffff}, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) arch_prctl$ARCH_SET_CPUID(0x1012, 0x40000000000100) r2 = geteuid() ioctl$VIDIOC_ENCODER_CMD(r0, 0xc028564d, &(0x7f0000000140)={0x3, 0x1, [0x2d4c8217, 0x5, 0xe0c, 0x6, 0x0, 0x6, 0x3, 0x200]}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000b00)=ANY=[@ANYBLOB="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", @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="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"], 0x608) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000680)) r6 = getpgrp(r3) fchownat(r0, &(0x7f0000000000)='./file0\x00', r2, r5, 0x1000) sendmsg$unix(r0, &(0x7f0000000280)={&(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000200)=[{&(0x7f0000001280)="296714d6b66ffee85d8511a44d382b9c1cbbe4362748effd5fdb076a149c9881701d0a0a13c35bcd12ebab50db1542fc4e28b6914a6c4fc8999a7db763322e40e2d1d2124534083a8c168c29b73bec10c7b8bdb9ac9839a9252df798aa2d42138ef12bd66df0191a23b2108ff3407feff4ed001a2c4c9849f2bf2f610e683300c74cd478389f2fb5b9c306ec51c8f82747b646a7f4abe7903daa12f7d6491cfee0870126fe649d61fc34cfd9123f352dbe8075fc51f93685535097265840032c559e422bd48029b35d7bda5448e6407f0411b612930eaaf18348e8e5b6e47236301e213edcc6a4345713066b23ece148e3e06cc025b082d7011591404b4d18f668fc0c7b7c61f48e443ea87f3a0e530177f40765c71bea937cafce367ac08baa489869d0075d8b333a38ce1894f7f210f14201572e4fa802326919966e8371cdf897097bc657e6fbb75453b9717d67d3768e8bafd6d2e1941d6abdee43a9793d3edb12e10a90648cb066127f7ffb93bbfd84afa0d341a9a3e11d8fa5f0c83c79fd15c48a9573cb3d91a30ae8e39e35fc3cb7ce7d1b3cd833f388f99d4eb67591d54632bb1a42728fd60d13ea300932b9ff783a71afa80d6b07605be8d6c9ca589e7ef8431466d42675e4c93cc917331ea3be2131551c22d5cfbc7f43fee9ca7c7393653fa23f0d404c50934064c9358793c4677049185929024d66137fe78ff60c1ebc048af917c168659ce6618fabfdd94654e676182308ffa1f6e4e6767af6e15292e092f830acda44d463837ab985284218e7b09117f5116dc0f14290e85892ef00e147c6aeef67794e91c2eb294f9b6b877cdfbe84fec54b118f83675f913a8b65411fd5bb3e1a2f0f0a266e4695f922113a2afa8ec368b7d0271c187c03d9078ec3642e0fbc8e8d6d6abb33c48ba2b3a60ef6e43c65d70e5b6e1a11df18cd0fca13b22377644980b1b1d93ac73d4a9300df5353ec98bdcda5bd18731dc0aa2a4fa761c8c2311d18f04e2956b8be459e99248fadafc6e5a545d7a4fd18fb6a78375ad085d1db98d5a9d00cf6101233ba3b59ea8acf4beb5e486a8981c7160f94eb66d4e67a565ed2267852b5154d76811b0dfec17e6a12008cf42665bb009c1c7129669fcc8183daf63fca27f57e07976526ef3ce9b3f4c22a8a48f5b1eaa44a81f5ad55c66e0917d9e3de23d9cb39ffaf2691ca9daf05f9b999dedbe2924ca8e704ded44cc93d6ecb4b9dd668d68642f02d5c0a6837eee86589cbb1198e2e62f31898b62dc8fc36d0641e0e296e46da5fbc120d314125a823dced2c00bc22ac2f6d65dce0f3b92bc8cceb82e455a758bea0e593b894cf066ef45a527706185d740a6fb8e09cfecf4d25b9ab2e1a455acb22e80b6ba44eadbee01666cfb6d409282e985bea4069f08e2976d9f955b239f65296a8b8c5639173f7878188e6596576559c5d19a558fe497973bc3bc68e49069a0ee25181b7b9bbfd411d0db3cc6ec42f73d2e7f44fdb3c560c5a835fbfbd4dc74688759c3d031df42895a369126dd60765fc7c360388038f547e7d44af0cbaca0d077ec9bb6f2b59cb6d1ae5eaf5043a1fa88b0615a1e01b2989d9bcd8a08f5d1d02dd4b6b3452b1c118cd4929192282258db6427bc34ce904853741d14749a4aaafab3f36bc2812f50767bb5d46bba782c0fd99ba7439e6c7177c9c28a9290f2beadba63ecabb4b344b131fe10c9add75a0d2d2c4de119463a0e870292a989f05fe7b4854cff76a3d35af0822d31d2f51f7c7fa31bb177913daf172697a171f13d4c0c24fc45ea93b55f1c7647d4ca8760d0d024614424c314fbed3795944c9a988f5d773febc61ec917de6f1ddf06863d1136f9aa707e453fadb5351669354dc2299cd9a95b3e0532455eed7f6181d4c18630d71e6d42aeb39a8d6234dc6c192354767944cf28d111b958cd99b728fb0875edd9be2e87d0ee1ba9167050302fb9e139e06a1960780e48a75d84ac9f5fde983602561731dd9b796d4e18e3f11be0f41aa05a64d95deb570dc8b523cf7f9711eb5560fa00636ced2a1ba0d6d4d7120700292740d17c1a9a9c8450fad08e378b41914091659229d219a62d13af7e7ded8c0bb2a68dd467c2f17d31c43305532c6777e2533167866a3f5e382902f3d8339eca2559705a61497131e99e87dfbf3c779ed18914a2b20ab9920231d323c2ea2dd08b4099d9fa955d731ee64b4818925f4a7c123750d1babc240bc00d873ce75621c58881e4a23b0af5d7a942bafc76302bd29bf29ba4d7a0827ce48aec605dec69fe5de5bab7320013c9aa2631eacdaa066dec566494ce224d5e03580720209159657e02a9b1c9487002b3576d5e393627a43f7a261034449332511107d7286c16443559cb37c20a841b796a50e3b4544320835a1145cfa1fe8461d4afe783ada2582686c7351b4bd97bf488df5fd2685a3738f37a19a668268d46cca0ac0c31f4d67bbd771efe64bb384535f849d20548307136c627dbd015e1cc0eee00172fd34a737281de021013c9f2912f03a1cf460dc3b5f1d22b1bfbd48a81467d79a0544a863c5953f408ca6ba0193d30e0067bc1a496c3e881a7f01c98d69b2fdd17ac39e2b60aabc23ce955eec52d03ac9a71d34d29bf93b951a2a7499a7007089b2c71bd2fa7fac14de857477bfbcd40724dbe23110ab6a47995b80634cec14834e9e2240b1f7c633d302c64898528672a3bc9e3b3324766fe6ed948011996eb02df82e234ac7b6f21c3f4b425e28e180f8a8386d41d65b5244f6087928da55a3da91259547bda9e8d3ba5ad6cdd25c55d6bc0dff774d2ee21bc39ac1432b089c2d26397a0f1b2b103ecd32ca6ab48e21e980c184948f07c4c8d9f396126fc54825fad19df221d25949539a14ba5ffeb7c80dd4ae6ef7ef81dc0faaec9a32603caf686ef3fd09c7ebf7ce6b508b8c1cf0ae0f5a028662b6daa25de0b2e972accfbc9124f790e86e9fed9b44fae39c7975509ff6b4a4c64eb20650258d29d509276cfcb53a79b0904fb4b313f2959bc7ea76ca5966fe1b2a453501a3a7b3ed5fb110d9e47fd1b901417887bf35e5d511082a0fc1974dcca389748f039ebb67c8e88ffc45bc8657d526cc6182c030d9fd716e56b758dd9741be19ea88f9096306a820dd869419b4f65d8fde986b97d4b5f609b8568cde949fcebeb3f0db48d0db72eb2d9c379a93e2b6e347f8119726be6b16701edcdc135f744363de4248dd3b4f852dd65d3711afb0067f7099a54eb50a7b2e3073b14e1bf2418f70e5133399d8dc4b764021bfabad189c5737e19859e6e022f8a595986f4a53cb3b365a4c503b3e15cb32737649028d27b1403687920052c3a590590da66ffd0a5c32dae50e77a9f7d71fd185e84fefa57a387e63f2fd88483814589c614f0dfc5b275a6c35cd2e1f2e1ffb3e5bb7ebef02377bc2eec66d2b2351be59d38042411528e8e3a68ccbc83b21420aef721ed27c566ff6316f06c4cee0b5c2ecef5141fb29c0a062b0398a29b2d789ac20448e6148b6dd6b2a83020f963f83fb8fb80f42e557ab5704942bf80784a5c773d084fc892dce437f2f8969d05b1103c8a377c70aab05d7ec63449469a492057cb48ea63d6b295d33f8bd9a17349364f4a70ef89874fbf1909ba1c377315a37efad9c653eb770887095e94aed8d50a2c770b35e9a62ea34860d1a9d08c1c0a8ad178696a5ebe96e39bbff9a60c17b3b11db81bec4affccfb8fb246097b22c67efc3981e1691d99cd7857ea64517c107c55f9991156bdfa0a166f73c361e1f87581d784ce7b4765de3dd8921b581b218fe15cba1eba92791aa589122b3392cf8c11b873bf9c46259f72bc27ce0e890bdf6c24460a52b781e9d6cbbfe47904612a1a2653490c4878ad97b92f027cd02cfe121e7351535158f7c046882e05040c57317784528ba69b4821355c346d4282e3c02d323b7f1f6b6d27b7446f0273038cf2a2537f7e3a87646431b9d7101e6511f663d88afa172d17e107e51b4cc2af1f3d33f7a906d29f1fb48f12da20bd028f6a39e78ae0f93e2749d3120e5816f06850e68c4f5c121564bf62bf6791b2134eb10f6c9de822639f366925dd271712c41914c1a631265074ae62c9711e6ce1fa97e337d32492bb27822fbbec705c36e2061b6d073adc4c580c35e9cd1ce8d6adb2458aea73304b19bf9a8bc952ccbb4a525c60bd8723c28e46efd227cc1df9cf6cb78b916ded3d903ef03e24d65d1e0ad9b3d7ddf091d76a6e5a5d057e3f2951f9dfe8d8efdfa55b9f8aab1eb6529b9bad1241eb0d824dbfda727ba403924c108b52da12d0c61f57f4a4f770551c39a4d0e7f2992ae2265bc974a55fbb214208a11254ff7984558afd06ccd74fbad0696adc8853e8d0c9c55801f159137c8b9aa031624d23cc52d852741f9b247d343f97b9f27a67c521212fe07027cf78438aafcd5726ffa990eba908a949b0c219de97ab7333507e05931b101a99165d666d34f8ae58e5e04f5a3ecaaa3c86c1ebdcc46e47234a2d29b47616de94c18a78adfd3bf51335ee24ad39a61665e91763a8161bafe9a90a23e6d9b93097e1067dd9026e38bbbd542f52309ce95d4a928ce5f8eea8e4bef7baa5e819548f90f6c963f462d52e8bea9bfdd9d22dbee776b4ab397e9e541055ade32431a5f339e7e27ce857310c7d86acf338ecadaf36d32e5dd8ff126669065582142c72f60950eba5d926f24550bcdbfd2789592e642c4b5c2ef46b6147f221fd341c1949b76ca8f287de3debb541c89a1be02ff66d2fd3bd122483edf3cf04741dbea87cdda750f46cd9f57199c33258e8644f729ad305463d034cd561871e051d62dfc96815e4104260366d4a7d95e69b003b576bb56c93913ca1b52b850003e95194caf999515616bbe9381c78446397982536abc1f2d984797b41355b52d41ff90da827fc6624b772b9881c0ca96a500f8667af03ca86fdc41479e21dc8ddb4fa1e07ca2c8d24d930b1cd877a2f3cc5a405d4dbc7d8cf8f617a100ad8429823b3af4a97be1466f0c46911945b7f6d7db00af8bfe52234c95914c8303004f3d31b1469bd30928b05549070539696848242415943176bb559a0f4e2e738274a57749ed76d8d7e452c07cd4b30ed4dc177df3adfac42f85604d9b94b6df301931c87843398a9306f1fec3764a403270929153f0d89175c31ec6f631063b02f0bcd9db40aa3dcdba66881f2b659b7020b0bea3a1f84387f4efccab42f4e1442edf89c694ed3e7500cc4f389c5718e6d6277f8ecc9383dd8e9000936410d4da9745417bff4aeff5c9296eba07afad6370bdcc942be6a41cafdd02ab60a06119fb47a6a989cb515610f8f9c1cfa5a2167f7986f36a4d9b609518320540beaa12e95539438c75f5475c60b7474bffe2f857c3e3a2988520b662a82a0ae121bb8324916be47ebff3dce24a30204d21c5f824580cc685efc4a269b69ae395f780e3c8e9dd6d1e2401c8b50283edf80dd7325f11c7523764e1238b7b3ca6beda0eec072032dd264b78ecfd0bd45d636c20ae64a8fba26cb16c6f7096e2252906b09953b259c0b385e74bd2558eea4c3dd3fad469526bc1826ef290aaac3e33ab88ba446272523f17c3d3b071d2aa6796116be5ede2892c67eb7a4723158e17d8485f27b112065ca60993245b2f58ac0044f9691d8a38a4ad7a43589a5e3b101f218db546eac82aad44e520d6e0697f0779c083ac4b5c2045221a8f23c2151487f6a2541493d2a303e2b0c100d6c6870843f14c62d88dae499422dfa4f7", 0x1000}], 0x1, &(0x7f0000000240)=[@cred={0x20, 0x1, 0x2, r6, r4, r5}], 0x20, 0x4c810}, 0x4) 15:33:32 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x10a00, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x7fffffffffffffff) 15:33:32 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") r1 = socket(0x848000000015, 0x805, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000040)=0x3c, 0x4) getsockopt(r1, 0x114, 0x271b, 0x0, &(0x7f0000000000)) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/btrfs-control\x00', 0x880, 0x0) ioctl$DRM_IOCTL_INFO_BUFS(r2, 0xc0106418, &(0x7f00000000c0)={0x2, 0xffffffff80000000, 0xff, 0xc4180000000, 0xda891d933a4f570}) ioctl$KVM_ASSIGN_SET_MSIX_NR(r2, 0x4008ae73, &(0x7f0000000100)={0x30000000000, 0xff}) 15:33:32 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_script(r0, &(0x7f0000000640)={'#! ', './file0', [], 0xa, "d1266d12e95afed85a1bf38aaf1b4ba88686b1d7eefe93e87be1cded9d0d73f957a0dc"}, 0x2e) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_script(r0, &(0x7f0000000440)={'#! ', './file0', [], 0xa, "96de86d81aacdb3ba584580de2bfff37e108271616dfd5e3fb5cabab678bd9cf0b8b"}, 0x2d) write$P9_RREAD(r0, &(0x7f0000000180)={0x2e, 0x75, 0x0, {0x23, "3035949eec64fef5cbb1d182820bc8bced96d6919b684878bef38a5998c79a92fc2af5"}}, 0x2e) write$binfmt_script(r0, &(0x7f0000000540)={'#! ', './file0', [], 0xa, "b8d958259b7169b2d643c65434fc53e2538fbfd5866cd9cf2f180b8b4d8ded"}, 0x2a) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, 'eth0'}, {0x20, '#! '}, {0x20, '${'}, {0x20, '/dev/sg#\x00'}, {0x20, '#! '}], 0xa, "00fbdd695d"}, 0x2a) write$binfmt_script(r0, &(0x7f0000000080)={'#! ', './file0', [{0x20, '/dev/sg#\x00'}, {0x20, '/dev/sg#\x00'}], 0xa, "7370e8c9eb584ee345b2d52bd5ac60"}, 0x2e) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 15:33:32 executing program 1: pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) accept4(r0, 0x0, 0x0, 0x0) 15:33:32 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000280)='./file0\x00', 0x8000000000000411) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000080)='./file0\x00') r2 = dup2(r0, r1) fcntl$getownex(r0, 0x10, &(0x7f0000000200)={0x0, 0x0}) write$cgroup_pid(r2, &(0x7f0000000240)=r3, 0x12) r4 = syz_genetlink_get_family_id$net_dm(&(0x7f00000000c0)='NET_DM\x00') sendmsg$NET_DM_CMD_START(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1810}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r4, 0x514, 0x70bd2a, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) getcwd(&(0x7f0000000380)=""/157, 0x9d) 15:33:33 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) sendmmsg(r0, &(0x7f0000005e00)=[{{&(0x7f0000000600)=@nfc={0x27, 0x2}, 0x80, 0x0, 0x0, &(0x7f00000029c0)=ANY=[@ANYBLOB="10000000000000000100000502000000"], 0x10}}], 0x1, 0x0) [ 355.052531] protocol 88fb is buggy, dev hsr_slave_0 [ 355.058311] protocol 88fb is buggy, dev hsr_slave_1 15:33:33 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_script(r0, &(0x7f0000000640)={'#! ', './file0', [], 0xa, "d1266d12e95afed85a1bf38aaf1b4ba88686b1d7eefe93e87be1cded9d0d73f957a0dc"}, 0x2e) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_script(r0, &(0x7f0000000440)={'#! ', './file0', [], 0xa, "96de86d81aacdb3ba584580de2bfff37e108271616dfd5e3fb5cabab678bd9cf0b8b"}, 0x2d) write$P9_RREAD(r0, &(0x7f0000000180)={0x2e, 0x75, 0x0, {0x23, "3035949eec64fef5cbb1d182820bc8bced96d6919b684878bef38a5998c79a92fc2af5"}}, 0x2e) write$binfmt_script(r0, &(0x7f0000000540)={'#! ', './file0', [], 0xa, "b8d958259b7169b2d643c65434fc53e2538fbfd5866cd9cf2f180b8b4d8ded"}, 0x2a) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, 'eth0'}, {0x20, '#! '}, {0x20, '${'}, {0x20, '/dev/sg#\x00'}, {0x20, '#! '}], 0xa, "00fbdd695d"}, 0x2a) write$binfmt_script(r0, &(0x7f0000000080)={'#! ', './file0', [{0x20, '/dev/sg#\x00'}, {0x20, '/dev/sg#\x00'}], 0xa, "7370e8c9eb584ee345b2d52bd5ac60"}, 0x2e) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 15:33:33 executing program 1: accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) 15:33:33 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x2) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000180)="529cd86bf10000be19cba82507da0d00", 0x10) r2 = accept4(r1, &(0x7f0000000100)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000000000)=0x9, 0x4) 15:33:33 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000001000)={0x4000000000000001, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}}}}, 0x108) r1 = syz_open_procfs(0x0, &(0x7f0000000980)='net/mcfilter6\x00') preadv(r1, &(0x7f0000fc5fc0)=[{&(0x7f00003b0000)=""/4096, 0x1000}], 0x1, 0x68) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') getresuid(&(0x7f0000000240)=0x0, &(0x7f0000000280), &(0x7f00000002c0)) r4 = geteuid() getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000400)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000440)={{{@in6=@ipv4={[], [], @remote}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@dev}}, &(0x7f0000000540)=0xe8) r7 = geteuid() getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000580)={{{@in=@initdev, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@local}}, &(0x7f0000000680)=0xe8) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000006c0)={0x0, 0x0}, &(0x7f0000000700)=0xc) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000740)={0x0, 0x0}, &(0x7f0000000780)=0xc) stat(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000880)={0x0, 0x0, 0x0}, &(0x7f00000008c0)=0xc) r13 = getegid() fsetxattr$system_posix_acl(r1, &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000900)={{}, {0x1, 0x7}, [{0x2, 0x7, r3}, {0x2, 0x2, r4}, {0x2, 0x4, r5}, {0x2, 0x4, r6}, {0x2, 0x1, r7}, {0x2, 0x1, r8}, {0x2, 0x0, r9}, {0x2, 0x7, r10}, {0x2, 0x5, r11}], {0x4, 0x7}, [{0x8, 0x2, r12}, {0x8, 0x1, r13}], {0x10, 0x2}, {0x20, 0x1}}, 0x7c, 0x3) sendmsg$TIPC_NL_PUBL_GET(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="d8000000", @ANYRES16=r2, @ANYBLOB="00002dbd7000fbdbdf25070000000c00090008000100010000007400050008000100657468001c000200082001001c000000080001001a00000008000100180000000c00020008000100150000002c0002000800030001000000080002008100000008000300040000000800020003000000080003000008000008000100756470000c000200080003000100000030000200080002000100000008000100ff00000008000100eb00000004000400040004000800020007000000040004001400020008000100ec3300000400040004000400"], 0xd8}, 0x1, 0x0, 0x0, 0x4000040}, 0x90) 15:33:33 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_script(r0, &(0x7f0000000640)={'#! ', './file0', [], 0xa, "d1266d12e95afed85a1bf38aaf1b4ba88686b1d7eefe93e87be1cded9d0d73f957a0dc"}, 0x2e) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_script(r0, &(0x7f0000000440)={'#! ', './file0', [], 0xa, "96de86d81aacdb3ba584580de2bfff37e108271616dfd5e3fb5cabab678bd9cf0b8b1c"}, 0x2e) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000180)={0x2e, 0x75, 0x0, {0x23, "3035949eec64fef5cbb1d182820bc8bced96d6919b684878bef38a5998c79a92fc2af5"}}, 0x2e) write$binfmt_script(r0, &(0x7f0000000540)={'#! ', './file0', [], 0xa, "b8d958259b7169b2d643c65434fc53e2538fbfd5866cd9cf2f180b8b4d8ded"}, 0x2a) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, 'eth0'}, {0x20, '#! '}, {0x20, '${'}, {0x20, '/dev/sg#\x00'}, {0x20, '#! '}], 0xa, "00fbdd695d"}, 0x2a) write$binfmt_script(r0, &(0x7f0000000080)={'#! ', './file0', [{0x20, '/dev/sg#\x00'}, {0x20, '/dev/sg#\x00'}], 0xa, "7370e8c9eb584ee345b2d52bd5ac60"}, 0x2e) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 15:33:33 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$netlink(0x10, 0x3, 0xd) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0x7, &(0x7f0000000080)={0x1f, 0xbb, 0x8, 0xdc0}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001900010400000000000000000a000000000000000020000008001700000000002367e0c0f659c29d5899575fef0f0ba1071265d06290d68bc043f704b6c55030253a"], 0x24}}, 0x0) 15:33:33 executing program 1: pipe2(&(0x7f0000000340)={0xffffffffffffffff}, 0x0) r1 = getpgrp(0xffffffffffffffff) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r0, 0xc1105518, &(0x7f0000000040)={{0x8, 0x5, 0x1ff, 0xfffffffffffffe00, '\x00', 0x9}, 0x1, 0x1000062b, 0xfffffffffffffff8, r1, 0x1, 0x100000000, 'syz1\x00', &(0x7f0000000000)=['\x00'], 0x1, [], [0x0, 0x8, 0x1000, 0x5e]}) accept4(r0, 0x0, 0x0, 0x0) 15:33:33 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_script(r0, &(0x7f0000000640)={'#! ', './file0', [], 0xa, "d1266d12e95afed85a1bf38aaf1b4ba88686b1d7eefe93e87be1cded9d0d73f957a0dc"}, 0x2e) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_script(r0, &(0x7f0000000440)={'#! ', './file0', [], 0xa, "96de86d81aacdb3ba584580de2bfff37e108271616dfd5e3fb5cabab678bd9cf0b8b1c"}, 0x2e) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000180)={0x2e, 0x75, 0x0, {0x23, "3035949eec64fef5cbb1d182820bc8bced96d6919b684878bef38a5998c79a92fc2af5"}}, 0x2e) write$binfmt_script(r0, &(0x7f0000000540)={'#! ', './file0', [], 0xa, "b8d958259b7169b2d643c65434fc53e2538fbfd5866cd9cf2f180b8b4d8ded"}, 0x2a) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, 'eth0'}, {0x20, '#! '}, {0x20, '${'}, {0x20, '/dev/sg#\x00'}, {0x20, '#! '}], 0xa, "00fbdd695d"}, 0x2a) write$binfmt_script(r0, &(0x7f0000000080)={'#! ', './file0', [{0x20, '/dev/sg#\x00'}, {0x20, '/dev/sg#\x00'}], 0xa, "7370e8c9eb584ee345b2d52bd5ac60"}, 0x2e) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 15:33:33 executing program 1: pipe2(&(0x7f0000000340)={0xffffffffffffffff}, 0x0) accept4(r0, 0x0, 0x0, 0x0) 15:33:33 executing program 2: r0 = socket(0x1, 0x80000080001, 0x0) io_setup(0x8, &(0x7f00000001c0)=0x0) io_submit(r1, 0x2, &(0x7f0000000000)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000080), 0x121}]) 15:33:34 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_script(r0, &(0x7f0000000640)={'#! ', './file0', [], 0xa, "d1266d12e95afed85a1bf38aaf1b4ba88686b1d7eefe93e87be1cded9d0d73f957a0dc"}, 0x2e) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_script(r0, &(0x7f0000000440)={'#! ', './file0', [], 0xa, "96de86d81aacdb3ba584580de2bfff37e108271616dfd5e3fb5cabab678bd9cf0b8b1c"}, 0x2e) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000180)={0x2e, 0x75, 0x0, {0x23, "3035949eec64fef5cbb1d182820bc8bced96d6919b684878bef38a5998c79a92fc2af5"}}, 0x2e) write$binfmt_script(r0, &(0x7f0000000540)={'#! ', './file0', [], 0xa, "b8d958259b7169b2d643c65434fc53e2538fbfd5866cd9cf2f180b8b4d8ded"}, 0x2a) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, 'eth0'}, {0x20, '#! '}, {0x20, '${'}, {0x20, '/dev/sg#\x00'}, {0x20, '#! '}], 0xa, "00fbdd695d"}, 0x2a) write$binfmt_script(r0, &(0x7f0000000080)={'#! ', './file0', [{0x20, '/dev/sg#\x00'}, {0x20, '/dev/sg#\x00'}], 0xa, "7370e8c9eb584ee345b2d52bd5ac60"}, 0x2e) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 15:33:34 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x80000, 0x0) ioctl$VIDIOC_G_AUDIO(r3, 0x80345621, &(0x7f0000000040)) ioctl$VIDIOC_CROPCAP(r1, 0x400455c8, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r3, 0x29, 0x41, &(0x7f0000000140)={'mangle\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) 15:33:34 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20\x00', 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$TIPC_CMD_SHOW_PORTS(0xffffffffffffffff, 0x0, 0x40000) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) getsockopt$inet_tcp_buf(r2, 0x6, 0x1f, &(0x7f0000000300)=""/161, &(0x7f0000000480)=0xa1) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0x40a85323, &(0x7f00000001c0)={{0x3f}, 'port1\x00', 0x82, 0x2, 0x1, 0xffffffff, 0x80000001, 0x4cc, 0x6919, 0x0, 0x6, 0x10001}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000400)='nodev}..[em0\x00', r2}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000001640)={'team0\x00', 0x0}) setsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f0000001680)={@ipv4={[], [], @multicast2}, r6}, 0x14) ioctl$FITRIM(r3, 0xc0185879, &(0x7f00000003c0)={0x1f, 0x1ff, 0x7}) write(r5, &(0x7f00000002c0)="c1793c3d558527a1dddc55530225af5a17b43b547c6c80aad8c534280e4fa7e84fcc296e07dc2a77f0f1c9878992d4", 0x2f) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000280)) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fde000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r5, 0x4008ae93, &(0x7f0000000580)=0x2fff) ioctl$KVM_GET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f0000000100)) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000000)={[], 0x0, 0x20600}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 15:33:34 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_script(r0, &(0x7f0000000640)={'#! ', './file0', [], 0xa, "d1266d12e95afed85a1bf38aaf1b4ba88686b1d7eefe93e87be1cded9d0d73f957a0dc"}, 0x2e) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_script(r0, &(0x7f0000000440)={'#! ', './file0', [], 0xa, "96de86d81aacdb3ba584580de2bfff37e108271616dfd5e3fb5cabab678bd9cf0b8b1c"}, 0x2e) write$P9_RREAD(r0, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000540)={'#! ', './file0', [], 0xa, "b8d958259b7169b2d643c65434fc53e2538fbfd5866cd9cf2f180b8b4d8ded"}, 0x2a) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, 'eth0'}, {0x20, '#! '}, {0x20, '${'}, {0x20, '/dev/sg#\x00'}, {0x20, '#! '}], 0xa, "00fbdd695d"}, 0x2a) write$binfmt_script(r0, &(0x7f0000000080)={'#! ', './file0', [{0x20, '/dev/sg#\x00'}, {0x20, '/dev/sg#\x00'}], 0xa, "7370e8c9eb584ee345b2d52bd5ac60"}, 0x2e) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 15:33:34 executing program 4: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x0, 0x0) r1 = dup3(r0, r0, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r1, 0x40044900, 0x1f) r2 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x0, 0x2) clock_settime(0x4, &(0x7f0000000080)={0x0, 0x1c9c380}) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000000c0)={{{@in=@empty, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6}}, &(0x7f00000001c0)=0xe8) setsockopt$packet_drop_memb(r1, 0x107, 0x2, &(0x7f0000000200)={r3, 0x1, 0x6}, 0x10) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_drop_memb(r2, 0x107, 0x2, &(0x7f0000000240)={r3, 0x1, 0x6}, 0x10) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@ipv4={[], [], @loopback}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@multicast1}}, &(0x7f0000000380)=0xe8) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r1, 0xc10c5541, &(0x7f00000003c0)={0x100, 0x5, 0x101, 0x0, 0x0, [], [], [], 0x1, 0x2}) unshare(0x62000000) write$UHID_SET_REPORT_REPLY(r1, &(0x7f0000000500)={0xe, 0x8, 0x0, 0xcc, 0x1000, "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"}, 0x100c) lsetxattr$trusted_overlay_redirect(&(0x7f0000001540)='./file0\x00', &(0x7f0000001580)='trusted.overlay.redirect\x00', &(0x7f00000015c0)='./file0\x00', 0x8, 0x3) r7 = add_key$user(&(0x7f0000001600)='user\x00', &(0x7f0000001640)={'syz', 0x3}, &(0x7f0000001680)="22c8e971c7af9bb96c4b6907a07a23b11e18fe3dcbd0bf7d5739d89490a77c96fa2f6b5f68357e738dadaeb1", 0x2c, 0xfffffffffffffffa) r8 = add_key(&(0x7f00000016c0)='cifs.spnego\x00', &(0x7f0000001700)={'syz', 0x1}, &(0x7f0000001740)="65a87609d809d7d3ba7a67022876528d5f09a79219e93073f6e254094d3b831d88fa84983f0813b886e18782e28e2020d65413c17403fd500b82bd651614e9c0e0f2ca8a8a3a326a94e818a12b2ec26cb2ee5e94a96ac47e6effb1c9156ed45e28f1", 0x62, 0xfffffffffffffff9) keyctl$link(0x8, r7, r8) lsetxattr$security_evm(&(0x7f00000017c0)='./file0\x00', &(0x7f0000001800)='security.evm\x00', &(0x7f0000001840)=@ng={0x4, 0x3f}, 0x2, 0x2) ioctl$VIDIOC_S_EDID(r1, 0xc0285629, &(0x7f00000018c0)={0x0, 0x40, 0x957, [], &(0x7f0000001880)=0x8}) ioctl$RNDGETENTCNT(r1, 0x80045200, &(0x7f0000001900)) r9 = msgget(0x1, 0x0) r10 = getgid() r11 = getegid() fcntl$getownex(r5, 0x10, &(0x7f0000001940)={0x0, 0x0}) r13 = getpid() msgctl$IPC_SET(r9, 0x1, &(0x7f0000001980)={{0x4, r6, r10, r4, r11, 0x12, 0x80000000}, 0x7fff, 0x9, 0x100000001, 0x1000, 0x20, 0x7dd7, r12, r13}) mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3000009, 0x40010, r2, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000001a00)={0x0, 0x0, 0x100}, &(0x7f0000001a40)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000001a80)={r14, 0x4}, &(0x7f0000001ac0)=0xc) statfs(&(0x7f0000001b00)='./file0\x00', &(0x7f0000001b40)=""/185) 15:33:34 executing program 1: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x101200, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r1, 0x100, 0x70bd27, 0x25dfdbfd, {{}, 0x0, 0x4102, 0x0, {0x10, 0x13, @l2={'eth', 0x3a, 'lapb0\x00'}}}, [""]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) pipe2(&(0x7f0000000340)={0xffffffffffffffff}, 0x0) accept4(r2, 0x0, 0x0, 0x0) [ 356.403887] *** Guest State *** [ 356.407396] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 356.416431] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 356.425420] CR3 = 0x0000000000000000 [ 356.429184] RSP = 0x0000000000000000 RIP = 0x0000000000000000 [ 356.435278] RFLAGS=0x00020602 DR7 = 0x0000000000000400 [ 356.441288] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 356.448091] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 356.456203] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 356.464770] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 356.472933] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 356.480975] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 356.489074] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 356.497199] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 356.505331] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 356.513465] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 356.521573] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 356.529580] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 356.536137] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 356.543766] Interruptibility = 00000000 ActivityState = 00000000 [ 356.550027] *** Host State *** [ 356.553326] RIP = 0xffffffff812fec40 RSP = 0xffff88803c46f3b0 [ 356.559357] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 356.565897] FSBase=00007f0849c53700 GSBase=ffff88812fd00000 TRBase=fffffe000003d000 [ 356.573837] GDTBase=fffffe000003b000 IDTBase=fffffe0000000000 [ 356.579788] CR0=0000000080050033 CR3=000000008ea5d000 CR4=00000000001426e0 [ 356.586938] Sysenter RSP=fffffe000003c200 CS:RIP=0010:ffffffff8ae015f0 [ 356.593722] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 356.599820] *** Control State *** [ 356.603544] PinBased=0000003f CPUBased=b5a06dfa SecondaryExec=000000c3 [ 356.610247] EntryControls=0000d1ff ExitControls=002fefff [ 356.615849] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 356.622961] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 356.629668] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 356.636361] reason=80000021 qualification=0000000000000000 [ 356.642793] IDTVectoring: info=00000000 errcode=00000000 [ 356.648295] TSC Offset = 0xffffff3cf568812b [ 356.652716] TPR Threshold = 0x00 [ 356.656132] EPT pointer = 0x000000009d30501e 15:33:34 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_script(r0, &(0x7f0000000640)={'#! ', './file0', [], 0xa, "d1266d12e95afed85a1bf38aaf1b4ba88686b1d7eefe93e87be1cded9d0d73f957a0dc"}, 0x2e) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_script(r0, &(0x7f0000000440)={'#! ', './file0', [], 0xa, "96de86d81aacdb3ba584580de2bfff37e108271616dfd5e3fb5cabab678bd9cf0b8b1c"}, 0x2e) write$P9_RREAD(r0, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000540)={'#! ', './file0', [], 0xa, "b8d958259b7169b2d643c65434fc53e2538fbfd5866cd9cf2f180b8b4d8ded"}, 0x2a) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, 'eth0'}, {0x20, '#! '}, {0x20, '${'}, {0x20, '/dev/sg#\x00'}, {0x20, '#! '}], 0xa, "00fbdd695d"}, 0x2a) write$binfmt_script(r0, &(0x7f0000000080)={'#! ', './file0', [{0x20, '/dev/sg#\x00'}, {0x20, '/dev/sg#\x00'}], 0xa, "7370e8c9eb584ee345b2d52bd5ac60"}, 0x2e) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) [ 356.832365] *** Guest State *** [ 356.835735] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 356.844845] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 356.853828] CR3 = 0x0000000000000000 [ 356.857605] RSP = 0x0000000000000000 RIP = 0x0000000000000000 [ 356.863705] RFLAGS=0x00020602 DR7 = 0x0000000000000400 [ 356.869719] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 356.876511] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 356.884616] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 356.899376] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 356.907504] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 356.915592] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 356.923690] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 356.931758] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 356.939776] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 356.947850] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 356.955955] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 356.964466] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 356.970925] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 356.978482] Interruptibility = 00000000 ActivityState = 00000000 [ 356.984828] *** Host State *** [ 356.988076] RIP = 0xffffffff812fec40 RSP = 0xffff88803c58f3b0 [ 356.994233] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 357.000700] FSBase=00007f0849c31700 GSBase=ffff88812fd00000 TRBase=fffffe000003d000 [ 357.008635] GDTBase=fffffe000003b000 IDTBase=fffffe0000000000 [ 357.014626] CR0=0000000080050033 CR3=000000008ea5d000 CR4=00000000001426e0 [ 357.021819] Sysenter RSP=fffffe000003c200 CS:RIP=0010:ffffffff8ae015f0 [ 357.028538] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 357.034718] *** Control State *** [ 357.038212] PinBased=0000003f CPUBased=b5a06dfa SecondaryExec=000000c3 [ 357.045052] EntryControls=0000d1ff ExitControls=002fefff [ 357.050548] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 357.057653] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 357.064471] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 357.071109] reason=80000021 qualification=0000000000000000 [ 357.077569] IDTVectoring: info=00000000 errcode=00000000 15:33:35 executing program 1: pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000000240)=""/4) ioctl$VIDIOC_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000180)={0x0, @reserved}) pipe2(&(0x7f0000000100), 0x80000) r2 = accept4(r0, 0x0, 0x0, 0x80000) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYBLOB="a5000000c934fc6003853463edbbe799cfce139db0c50c9345805b1d61857ecc5b676339de884daf23020375661f82c9ea65b6b0b122ffee78f36524d09ee9c5993de4421c69a8d0bda2a3ef7a87b69630c79fa15c0180e769b3ea42a66091c8f85cdf3102e3244bbaa974e0ab473802bfe6f49456adb1a5255a5deaf0f21f59689feaa4c3bde5ce81f7e55b79b888c639ee2240d59eaeba4e51d50bde561fed352967d59f012e8784"], &(0x7f00000000c0)=0xad) [ 357.083133] TSC Offset = 0xffffff3cf568812b [ 357.087482] TPR Threshold = 0x00 [ 357.090888] EPT pointer = 0x000000009d30501e 15:33:35 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f0000000100)="760bcee13b1bb125e04d046ddf4e226caa758669b8c2bb8874beedbc0f18f6cd1d64e6096aa8caf4c21145155f08164475010af410efe9698044566a0b3b436b4b023f7cff1f", 0x46) r1 = dup2(r0, r0) ioctl$DRM_IOCTL_GET_UNIQUE(r1, 0xc0106401, &(0x7f00000000c0)={0x78, &(0x7f0000000000)=""/120}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0xa, 0x800000000080002, 0x80000000) sendmmsg$alg(r2, &(0x7f0000003200)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[@op={0x18}], 0x18}], 0x1, 0x0) 15:33:35 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_script(r0, &(0x7f0000000640)={'#! ', './file0', [], 0xa, "d1266d12e95afed85a1bf38aaf1b4ba88686b1d7eefe93e87be1cded9d0d73f957a0dc"}, 0x2e) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_script(r0, &(0x7f0000000440)={'#! ', './file0', [], 0xa, "96de86d81aacdb3ba584580de2bfff37e108271616dfd5e3fb5cabab678bd9cf0b8b1c"}, 0x2e) write$P9_RREAD(r0, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000540)={'#! ', './file0', [], 0xa, "b8d958259b7169b2d643c65434fc53e2538fbfd5866cd9cf2f180b8b4d8ded"}, 0x2a) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, 'eth0'}, {0x20, '#! '}, {0x20, '${'}, {0x20, '/dev/sg#\x00'}, {0x20, '#! '}], 0xa, "00fbdd695d"}, 0x2a) write$binfmt_script(r0, &(0x7f0000000080)={'#! ', './file0', [{0x20, '/dev/sg#\x00'}, {0x20, '/dev/sg#\x00'}], 0xa, "7370e8c9eb584ee345b2d52bd5ac60"}, 0x2e) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 15:33:35 executing program 1: pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000000), 0x4) accept4(r0, 0x0, 0x0, 0x8421e) 15:33:35 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) ioctl$PPPIOCGDEBUG(r0, 0x80047441, &(0x7f0000000040)) times(0xfffffffffffffffe) 15:33:35 executing program 1: pipe2(&(0x7f0000000340)={0xffffffffffffffff}, 0x0) timer_create(0x7, &(0x7f0000000140)={0x0, 0xf, 0x0, @thr={&(0x7f0000000000)="037cf1a7baa6249b9deaea507d914fb6e8ec06f369a5e609a1086128d8f1283bd840f2e1c02dd98e1392c4462f6737977304a1d4d740bbce9e8469db5c871dee5e5f7a8223504890", &(0x7f0000000080)="1a5c05d71130b48d3a97fbcf122debcd75e2b80efa2f809968defca85956412644482d8a46cb426d7e4e82dfbaed223c6bf01ed379273d4e0b90f18ca965ff878b78b234291cae7fd32c55429083622384435464ca6688864e4b06c5764d15e3b2348bb4c7c151dfceae36bf9331488dd00ce1c0bfe5ef938ff9c3794fb23ea3204f02e5015609ffacde2b9afc2c318b006f08d8e31b00c2667fa9349fd6d3aa8b91c0ce"}}, &(0x7f0000000180)=0x0) timer_gettime(r1, &(0x7f00000001c0)) accept4(r0, 0x0, 0x0, 0x0) [ 357.756067] IPVS: ftp: loaded support on port[0] = 21 [ 358.064315] chnl_net:caif_netlink_parms(): no params data found [ 358.146335] bridge0: port 1(bridge_slave_0) entered blocking state [ 358.153124] bridge0: port 1(bridge_slave_0) entered disabled state [ 358.161712] device bridge_slave_0 entered promiscuous mode [ 358.173929] Bluetooth: hci0: command 0x1003 tx timeout [ 358.178133] bridge0: port 2(bridge_slave_1) entered blocking state [ 358.179435] Bluetooth: hci0: sending frame failed (-49) [ 358.186083] bridge0: port 2(bridge_slave_1) entered disabled state [ 358.199597] device bridge_slave_1 entered promiscuous mode [ 358.238156] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 358.250210] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 358.262525] Bluetooth: hci1: command 0x1003 tx timeout [ 358.284176] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 358.293189] team0: Port device team_slave_0 added [ 358.300195] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 358.309113] team0: Port device team_slave_1 added [ 358.316010] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 358.325032] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 358.342664] net_ratelimit: 12 callbacks suppressed [ 358.342682] protocol 88fb is buggy, dev hsr_slave_0 [ 358.353414] protocol 88fb is buggy, dev hsr_slave_1 [ 358.417073] device hsr_slave_0 entered promiscuous mode [ 358.465131] device hsr_slave_1 entered promiscuous mode [ 358.505227] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 358.513272] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 358.550975] bridge0: port 2(bridge_slave_1) entered blocking state [ 358.557586] bridge0: port 2(bridge_slave_1) entered forwarding state [ 358.564848] bridge0: port 1(bridge_slave_0) entered blocking state [ 358.571415] bridge0: port 1(bridge_slave_0) entered forwarding state [ 358.691930] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 358.698074] 8021q: adding VLAN 0 to HW filter on device bond0 [ 358.713790] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 358.729146] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 358.738970] bridge0: port 1(bridge_slave_0) entered disabled state [ 358.748563] bridge0: port 2(bridge_slave_1) entered disabled state [ 358.759860] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 358.782829] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 358.788964] 8021q: adding VLAN 0 to HW filter on device team0 [ 358.809145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 358.821611] bridge0: port 1(bridge_slave_0) entered blocking state [ 358.828118] bridge0: port 1(bridge_slave_0) entered forwarding state [ 358.884531] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 358.892938] bridge0: port 2(bridge_slave_1) entered blocking state [ 358.899439] bridge0: port 2(bridge_slave_1) entered forwarding state [ 358.910225] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 358.920017] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 358.942507] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 358.950924] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 358.967161] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 358.983141] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 358.989237] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 359.027096] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 359.057213] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 359.102603] protocol 88fb is buggy, dev hsr_slave_0 [ 359.108336] protocol 88fb is buggy, dev hsr_slave_1 [ 359.212640] protocol 88fb is buggy, dev hsr_slave_0 [ 359.218565] protocol 88fb is buggy, dev hsr_slave_1 [ 359.224920] protocol 88fb is buggy, dev hsr_slave_0 [ 359.230684] protocol 88fb is buggy, dev hsr_slave_1 [ 359.236925] protocol 88fb is buggy, dev hsr_slave_0 [ 359.242761] protocol 88fb is buggy, dev hsr_slave_1 [ 359.329744] IPVS: ftp: loaded support on port[0] = 21 [ 360.257150] Bluetooth: hci0: command 0x1001 tx timeout [ 360.262850] Bluetooth: hci0: sending frame failed (-49) [ 360.333352] Bluetooth: hci1: command 0x1001 tx timeout [ 362.331732] Bluetooth: hci0: command 0x1009 tx timeout [ 362.412184] Bluetooth: hci1: command 0x1009 tx timeout [ 363.372528] net_ratelimit: 18 callbacks suppressed [ 363.377711] protocol 88fb is buggy, dev hsr_slave_0 [ 363.383260] protocol 88fb is buggy, dev hsr_slave_1 [ 363.388972] protocol 88fb is buggy, dev hsr_slave_0 [ 363.394544] protocol 88fb is buggy, dev hsr_slave_1 [ 363.612532] protocol 88fb is buggy, dev hsr_slave_0 [ 363.618147] protocol 88fb is buggy, dev hsr_slave_1 [ 364.172322] protocol 88fb is buggy, dev hsr_slave_0 [ 364.177762] protocol 88fb is buggy, dev hsr_slave_1 [ 364.574092] protocol 88fb is buggy, dev hsr_slave_0 [ 364.579518] protocol 88fb is buggy, dev hsr_slave_1 15:33:44 executing program 3: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'bridge0\x00\x00\x01\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000440)={'bridge0\x00\xff\xff\xfd\xfd\x00', 0xfffffffffffffffb}) 15:33:44 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_script(r0, &(0x7f0000000640)={'#! ', './file0', [], 0xa, "d1266d12e95afed85a1bf38aaf1b4ba88686b1d7eefe93e87be1cded9d0d73f957a0dc"}, 0x2e) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_script(r0, &(0x7f0000000440)={'#! ', './file0', [], 0xa, "96de86d81aacdb3ba584580de2bfff37e108271616dfd5e3fb5cabab678bd9cf0b8b1c"}, 0x2e) write$P9_RREAD(r0, &(0x7f0000000180)={0xb}, 0xb) write$binfmt_script(r0, &(0x7f0000000540)={'#! ', './file0', [], 0xa, "b8d958259b7169b2d643c65434fc53e2538fbfd5866cd9cf2f180b8b4d8ded"}, 0x2a) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, 'eth0'}, {0x20, '#! '}, {0x20, '${'}, {0x20, '/dev/sg#\x00'}, {0x20, '#! '}], 0xa, "00fbdd695d"}, 0x2a) write$binfmt_script(r0, &(0x7f0000000080)={'#! ', './file0', [{0x20, '/dev/sg#\x00'}, {0x20, '/dev/sg#\x00'}], 0xa, "7370e8c9eb584ee345b2d52bd5ac60"}, 0x2e) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 15:33:44 executing program 1: pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$XDP_MMAP_OFFSETS(r0, 0x11b, 0x1, &(0x7f0000000000), &(0x7f0000000080)=0x60) accept4(r0, 0x0, 0x0, 0x7fffe) 15:33:44 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0xc) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000008c0)={0x0, 0x0, 0x0}, &(0x7f0000000900)=0xc) fsetxattr$system_posix_acl(r1, &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000010002000000000000000000", @ANYRES32=r2, @ANYBLOB="040000000000000008000100", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=r3, @ANYBLOB="10f4f205ff0000002000060000000000"], 0x3c, 0x3) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000080)) socket$inet_icmp_raw(0x2, 0x3, 0x1) 15:33:44 executing program 5: r0 = dup3(0xffffffffffffff9c, 0xffffffffffffffff, 0x80000) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x3, 0x0, &(0x7f0000000000)=""/238, &(0x7f0000000100)=""/30, &(0x7f0000000140)=""/126, 0x6001}) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000200)=0x7fff) r1 = getgid() setgid(r1) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f0000000240)=0x200, 0x8) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000280)=0x800001d) lstat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_open_pts(r0, 0x509000) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000380)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) prctl$PR_GET_PDEATHSIG(0x2, &(0x7f00000003c0)) kexec_load(0x2, 0x7, &(0x7f00000007c0)=[{&(0x7f0000000400)="ac7f8f0c176ba76e48f006a21cedb9c059ea8a85df706453aab217e11b17256f60532a5e4a866ac42aae027dd126620adaf37576fdea96ae5894452bca8970df3b91884900511ca6318047b35cafe398747c07c55024aa67ad8df29ccbee8b31", 0x60, 0x7f, 0x81}, {&(0x7f0000000480)="e30db5cf9871c2c50c9ba8ceac7934993b3f2f32233016e1b6387ca5930a263f1f80f22a86458958e2b32d92b9309565b9751f85eb378a610b10695fe2f7294a7f464d22a157acc46051e4aeaa02da52", 0x50, 0x7, 0x7}, {&(0x7f0000000500)="c715ed49f223bd8c529a97bca638e774faa9318ed2725db043ee2281bf33b735489f3dbbea34e2ac3a13017cfb3b0517418727b732fbf87a9a1c4f01e043869f4dd20b20dd5b8df3ac505f537691289a934ad20ff2ab02d10b486e739dfaec1408b695", 0x63, 0x800, 0x9}, {&(0x7f0000000580)="7d3462a4be4270af66af2663e3f9c53367f5fa7cf02db0c9111f5f0df474636a1319bd6eff7682e5232671c8e6487790ed808e45b946902090eae3044a0f6c33f3bfe1e8254bee76", 0x48, 0x7, 0x7}, {&(0x7f0000000600)="31533ffb453641f1ced2e457949b747058593dad5179c2f3d23123fce33b60086f2538fea4e2b999f9d41044d0cfaee64c420544ccc4d07a7b7619e5f2e423645e05ae46c11b8a1c1d7e6d5a7deb6cb7f4eceaf40586bdc4cfaf753b300d27a61c16b34db1ffdef2db6fe7c4d659b51d605e009f2051aa359757cb0d26f9628ee7485baaf017bdde8ef29f93e742bf280e194c639165892d7ce7a8a956befaaae5a7da73638a9554c98b0dbe5da8512513328fe6", 0xb4, 0x1ff, 0x100000001}, {&(0x7f00000006c0)="49339e938cd46ba37b97221beb98dd9dad40d6298b067b3c656a0d3006772e58610c6b0297d61b90fa8f710997b4b51a99ba7fda704dc875bd6fb0c5e643f2ff3f63ec3f7c7127c10ec1969a0e24118ed1838e37920d7404649f48f72454f0cdb9b417c9e79d39dfb0ef7f074f93a07480cbd0abffad2aad00a23a63b7362f50bb14653593408711c1b39f5e57fd9a44de78e44ba0fdd4b7e90011", 0x9b, 0x3, 0x9}, {&(0x7f0000000780)="b163a3cdea3ebd0bd58bd3d29c376953e7805123b951de68e0a44ec2", 0x1c, 0x1, 0x8f}], 0x3f0000) socketpair$unix(0x1, 0x7, 0x0, &(0x7f00000008c0)) socket$bt_rfcomm(0x1f, 0x0, 0x3) r5 = shmat(0xffffffffffffffff, &(0x7f0000ffe000/0x2000)=nil, 0x5000) shmdt(r5) mlockall(0x2) r6 = socket(0xa, 0x80802, 0x82c9) setxattr$trusted_overlay_nlink(&(0x7f0000000900)='./file0\x00', &(0x7f0000000940)='trusted.overlay.nlink\x00', &(0x7f0000000980)={'U-', 0x8}, 0x28, 0x1) getsockopt$inet6_mreq(r6, 0x29, 0x1c, &(0x7f00000009c0)={@dev, 0x0}, &(0x7f0000000a00)=0x14) ioctl$sock_inet6_SIOCSIFDSTADDR(r6, 0x8918, &(0x7f0000000a40)={@local, 0x50, r7}) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000a80)={0x0}) ioctl$DRM_IOCTL_LOCK(r0, 0x4008642a, &(0x7f0000000ac0)={r8}) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r6, 0x84, 0x21, &(0x7f0000000b00), &(0x7f0000000b40)=0x4) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r6, 0x84, 0xc, &(0x7f0000000b80), &(0x7f0000000bc0)=0x4) write$FUSE_ENTRY(r0, &(0x7f0000000c00)={0x90, 0x0, 0x7, {0x4, 0x3, 0x943, 0x4, 0x20000000000000, 0x6, {0x0, 0x7, 0x9, 0x3, 0x15c1, 0x3, 0x3, 0x4, 0x7, 0x7fffffff, 0x7fffffff, r2, r3, 0x7, 0xffffffff00000001}}}, 0x90) setgid(r3) ioctl$CAPI_MANUFACTURER_CMD(r0, 0xc0104320, &(0x7f0000000d00)={0x1, &(0x7f0000000cc0)="e68417"}) ioctl$KVM_GET_CLOCK(r4, 0x8030ae7c, &(0x7f0000000d40)) ioctl$TIOCCONS(r4, 0x541d) 15:33:44 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) socket$rxrpc(0x21, 0x2, 0x2) fcntl$setstatus(r0, 0x4, 0x0) io_setup(0x8, &(0x7f0000000100)=0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000140)="d5", 0x1}]) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) r3 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x1, 0x18b000) ioctl$KVM_DEASSIGN_DEV_IRQ(r3, 0x4040ae75, &(0x7f0000000080)={0x81, 0x1, 0xfff, 0x106}) ioctl$KIOCSOUND(r3, 0x4b2f, 0x9) 15:33:44 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_script(r0, &(0x7f0000000640)={'#! ', './file0', [], 0xa, "d1266d12e95afed85a1bf38aaf1b4ba88686b1d7eefe93e87be1cded9d0d73f957a0dc"}, 0x2e) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_script(r0, &(0x7f0000000440)={'#! ', './file0', [], 0xa, "96de86d81aacdb3ba584580de2bfff37e108271616dfd5e3fb5cabab678bd9cf0b8b1c"}, 0x2e) write$P9_RREAD(r0, &(0x7f0000000180)={0xb}, 0xb) write$binfmt_script(r0, &(0x7f0000000540)={'#! ', './file0', [], 0xa, "b8d958259b7169b2d643c65434fc53e2538fbfd5866cd9cf2f180b8b4d8ded"}, 0x2a) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, 'eth0'}, {0x20, '#! '}, {0x20, '${'}, {0x20, '/dev/sg#\x00'}, {0x20, '#! '}], 0xa, "00fbdd695d"}, 0x2a) write$binfmt_script(r0, &(0x7f0000000080)={'#! ', './file0', [{0x20, '/dev/sg#\x00'}, {0x20, '/dev/sg#\x00'}], 0xa, "7370e8c9eb584ee345b2d52bd5ac60"}, 0x2e) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) [ 366.750937] bridge0: port 2(bridge_slave_1) entered disabled state [ 366.758392] bridge0: port 1(bridge_slave_0) entered disabled state 15:33:44 executing program 1: pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x84000) accept4(r0, 0x0, 0x0, 0x80000) ioctl$KVM_ARM_SET_DEVICE_ADDR(r0, 0x4010aeab, &(0x7f0000000000)={0x401, 0xf000}) 15:33:44 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1024}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f00000000c0)='systemem1em1-wlan1lo%-\x00') openat$cgroup_type(r1, &(0x7f0000000000)='cgroup.type\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000340)='cpuacct.usage_user\x00', 0x0, 0x0) write$cgroup_subtree(r2, &(0x7f0000000380)={[{0x2b, 'memory'}]}, 0x8) r3 = openat$cgroup_ro(r1, &(0x7f0000000100)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) r4 = openat$cgroup_ro(r1, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000240)) r5 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) write$cgroup_int(r4, &(0x7f0000000280)=0x6, 0x12) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r1, 0x0, 0x1, 0x5, 0x0}, 0x20) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x200002, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f00000002c0)='%\x00') write$cgroup_int(r5, 0x0, 0x0) openat$cgroup_int(r4, &(0x7f0000000300)='memory.swap.max\x00', 0x2, 0x0) 15:33:45 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_script(r0, &(0x7f0000000640)={'#! ', './file0', [], 0xa, "d1266d12e95afed85a1bf38aaf1b4ba88686b1d7eefe93e87be1cded9d0d73f957a0dc"}, 0x2e) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_script(r0, &(0x7f0000000440)={'#! ', './file0', [], 0xa, "96de86d81aacdb3ba584580de2bfff37e108271616dfd5e3fb5cabab678bd9cf0b8b1c"}, 0x2e) write$P9_RREAD(r0, &(0x7f0000000180)={0xb}, 0xb) write$binfmt_script(r0, &(0x7f0000000540)={'#! ', './file0', [], 0xa, "b8d958259b7169b2d643c65434fc53e2538fbfd5866cd9cf2f180b8b4d8ded"}, 0x2a) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, 'eth0'}, {0x20, '#! '}, {0x20, '${'}, {0x20, '/dev/sg#\x00'}, {0x20, '#! '}], 0xa, "00fbdd695d"}, 0x2a) write$binfmt_script(r0, &(0x7f0000000080)={'#! ', './file0', [{0x20, '/dev/sg#\x00'}, {0x20, '/dev/sg#\x00'}], 0xa, "7370e8c9eb584ee345b2d52bd5ac60"}, 0x2e) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 15:33:45 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f023c123f3188a070") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffff9c, 0x0, 0x13, &(0x7f0000000000)=',ppp0eth0}vboxnet0\x00'}, 0x30) write$P9_RREAD(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYBLOB="913aabe095dc8ac728cbd750f1b6651f85c42c0ee2165d3abddedb9cfe27726d4b099c992020542a0f8ec0c2204cd6d317cfc73588d1c9023f2b61805d27845284d98cee85eef7efc15ca2f3"], 0x4c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) 15:33:45 executing program 1: r0 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0xe8a, 0x6000) ioctl$IMGETVERSION(r0, 0x80044942, &(0x7f0000000080)) r1 = accept$packet(0xffffffffffffff9c, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14) ioctl$sock_inet_SIOCSIFBRDADDR(r1, 0x891a, &(0x7f0000000000)={'erspan0\x00', {0x2, 0x4e24, @rand_addr=0x1000}}) fsync(r1) write$cgroup_int(r0, &(0x7f0000000240)=0x100000001, 0x12) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000140)=ANY=[@ANYBLOB="070000000000000000000080e7c50000040000000080000001000100000000000f0000000365da4d9f781ee0be1c1f5205acd1e31bc18d00000077000000000015001900002b080000001c0b000000000000000000800000000000000000930000000800000001000000010000000000000007000000018000000004000004000000e8026de6c9b41bd1268c383d5dce0e00000000000007040000000080a23f526bdaac50000006000000000000000f0000c0fbffffff1f000000090000000002000000000000"]) accept4(r2, 0x0, 0x0, 0x0) accept4$alg(r3, 0x0, 0x0, 0x80000) [ 367.230580] syz-executor2 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 367.240691] CPU: 1 PID: 11894 Comm: syz-executor2 Not tainted 5.0.0-rc1+ #7 [ 367.247838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 367.257260] Call Trace: [ 367.259988] dump_stack+0x173/0x1d0 [ 367.263705] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 367.269085] dump_header+0x1e7/0x1960 [ 367.273002] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 367.278268] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 367.283801] oom_kill_process+0x301/0x1020 [ 367.288101] ? mem_cgroup_scan_tasks+0x2cb/0x6d0 [ 367.292943] ? oom_kill_memcg_member+0x140/0x140 [ 367.297778] out_of_memory+0x1250/0x1d00 [ 367.302135] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 367.307411] memory_max_write+0x51e/0x820 [ 367.311645] ? memory_max_show+0x1b0/0x1b0 [ 367.315961] cgroup_file_write+0x44a/0x8e0 [ 367.320272] ? cgroup_seqfile_stop+0x150/0x150 [ 367.324948] kernfs_fop_write+0x569/0x840 [ 367.329176] ? kernfs_fop_read+0x9a0/0x9a0 [ 367.333680] __vfs_write+0x1e2/0xc20 [ 367.337478] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 367.342926] ? __sb_start_write+0x10c/0x230 [ 367.347321] vfs_write+0x481/0x920 [ 367.350962] __se_sys_write+0x17a/0x370 [ 367.355015] __x64_sys_write+0x4a/0x70 [ 367.358978] do_syscall_64+0xbc/0xf0 [ 367.362819] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 367.368078] RIP: 0033:0x457ec9 [ 367.371346] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 367.390475] RSP: 002b:00007f0849c52c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 367.398249] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457ec9 [ 367.405570] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000007 [ 367.412962] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 367.420281] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f0849c536d4 [ 367.427597] R13: 00000000004c7133 R14: 00000000004dc868 R15: 00000000ffffffff [ 367.435486] memory: usage 8516kB, limit 0kB, failcnt 0 [ 367.441398] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 367.448514] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 367.454980] Memory cgroup stats for /syz2: cache:0KB rss:6568KB rss_huge:6144KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:6552KB inactive_file:0KB active_file:0KB unevictable:0KB [ 367.476411] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor2,pid=11102,uid=0 [ 367.491448] Memory cgroup out of memory: Kill process 11102 (syz-executor2) score 9018000 or sacrifice child [ 367.501988] Killed process 11102 (syz-executor2) total-vm:70664kB, anon-rss:2204kB, file-rss:33740kB, shmem-rss:0kB [ 367.573331] oom_reaper: reaped process 11102 (syz-executor2), now anon-rss:0kB, file-rss:32780kB, shmem-rss:0kB [ 367.585498] syz-executor2 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 367.595364] CPU: 1 PID: 11894 Comm: syz-executor2 Not tainted 5.0.0-rc1+ #7 [ 367.602519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 367.611937] Call Trace: [ 367.614598] dump_stack+0x173/0x1d0 [ 367.618291] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 367.623545] dump_header+0x1e7/0x1960 [ 367.627424] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 367.632682] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 367.638209] oom_kill_process+0x301/0x1020 [ 367.642500] ? mem_cgroup_scan_tasks+0x2cb/0x6d0 [ 367.647309] ? oom_kill_memcg_member+0x140/0x140 [ 367.652135] out_of_memory+0x1250/0x1d00 [ 367.656265] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 367.661532] memory_max_write+0x51e/0x820 [ 367.665762] ? memory_max_show+0x1b0/0x1b0 [ 367.670055] cgroup_file_write+0x44a/0x8e0 [ 367.674369] ? cgroup_seqfile_stop+0x150/0x150 [ 367.679020] kernfs_fop_write+0x569/0x840 [ 367.683241] ? kernfs_fop_read+0x9a0/0x9a0 [ 367.687542] __vfs_write+0x1e2/0xc20 [ 367.691330] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 367.696751] ? __sb_start_write+0x10c/0x230 [ 367.701139] vfs_write+0x481/0x920 [ 367.704759] __se_sys_write+0x17a/0x370 [ 367.708811] __x64_sys_write+0x4a/0x70 [ 367.712762] do_syscall_64+0xbc/0xf0 [ 367.716548] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 367.721787] RIP: 0033:0x457ec9 [ 367.725032] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 367.743984] RSP: 002b:00007f0849c52c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 367.751904] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457ec9 [ 367.759236] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000007 [ 367.766548] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 367.773858] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f0849c536d4 [ 367.781300] R13: 00000000004c7133 R14: 00000000004dc868 R15: 00000000ffffffff [ 367.794694] memory: usage 6340kB, limit 0kB, failcnt 0 [ 367.800207] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 367.807353] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 367.813926] Memory cgroup stats for /syz2: cache:0KB rss:4336KB rss_huge:4096KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:4380KB inactive_file:0KB active_file:0KB unevictable:0KB [ 367.835513] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor2,pid=11392,uid=0 [ 367.850570] Memory cgroup out of memory: Kill process 11392 (syz-executor2) score 9002000 or sacrifice child [ 367.860925] Killed process 11392 (syz-executor2) total-vm:70664kB, anon-rss:2212kB, file-rss:33668kB, shmem-rss:0kB [ 367.964745] oom_reaper: reaped process 11392 (syz-executor2), now anon-rss:0kB, file-rss:32708kB, shmem-rss:0kB [ 367.975571] syz-executor2 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 367.985459] CPU: 1 PID: 11894 Comm: syz-executor2 Not tainted 5.0.0-rc1+ #7 [ 367.992600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 368.002065] Call Trace: [ 368.004729] dump_stack+0x173/0x1d0 [ 368.008430] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 368.013683] dump_header+0x1e7/0x1960 [ 368.017551] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 368.022804] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 368.028365] oom_kill_process+0x301/0x1020 [ 368.032658] ? mem_cgroup_scan_tasks+0x2cb/0x6d0 [ 368.037471] ? oom_kill_memcg_member+0x140/0x140 [ 368.042304] out_of_memory+0x1250/0x1d00 [ 368.046434] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 368.051689] memory_max_write+0x51e/0x820 [ 368.055938] ? memory_max_show+0x1b0/0x1b0 [ 368.060230] cgroup_file_write+0x44a/0x8e0 [ 368.064548] ? cgroup_seqfile_stop+0x150/0x150 [ 368.069184] kernfs_fop_write+0x569/0x840 [ 368.073453] ? kernfs_fop_read+0x9a0/0x9a0 [ 368.077779] __vfs_write+0x1e2/0xc20 [ 368.081574] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 368.087103] ? __sb_start_write+0x10c/0x230 [ 368.091486] vfs_write+0x481/0x920 [ 368.095102] __se_sys_write+0x17a/0x370 [ 368.099147] __x64_sys_write+0x4a/0x70 [ 368.103090] do_syscall_64+0xbc/0xf0 [ 368.106873] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 368.112127] RIP: 0033:0x457ec9 [ 368.115377] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 368.134333] RSP: 002b:00007f0849c52c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 368.142108] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457ec9 [ 368.149425] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000007 [ 368.156746] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 368.164065] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f0849c536d4 [ 368.171386] R13: 00000000004c7133 R14: 00000000004dc868 R15: 00000000ffffffff [ 368.178919] memory: usage 4096kB, limit 0kB, failcnt 19 [ 368.184508] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 368.191640] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 368.198056] Memory cgroup stats for /syz2: cache:0KB rss:2160KB rss_huge:2048KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:2204KB inactive_file:0KB active_file:0KB unevictable:0KB [ 368.219435] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor2,pid=11893,uid=0 [ 368.234223] Memory cgroup out of memory: Kill process 11893 (syz-executor2) score 8762000 or sacrifice child [ 368.237199] IPVS: ftp: loaded support on port[0] = 21 [ 368.244776] Killed process 11893 (syz-executor2) total-vm:70664kB, anon-rss:2152kB, file-rss:32768kB, shmem-rss:0kB [ 368.263625] oom_reaper: reaped process 11893 (syz-executor2), now anon-rss:0kB, file-rss:31808kB, shmem-rss:0kB [ 368.326761] syz-executor2 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 368.336727] CPU: 0 PID: 11893 Comm: syz-executor2 Not tainted 5.0.0-rc1+ #7 [ 368.343874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 368.353287] Call Trace: [ 368.355963] dump_stack+0x173/0x1d0 [ 368.359658] dump_header+0x1e7/0x1960 [ 368.363528] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 368.368795] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 368.374324] oom_kill_process+0x301/0x1020 [ 368.378623] ? mem_cgroup_scan_tasks+0x2cb/0x6d0 [ 368.383439] ? oom_kill_memcg_member+0x140/0x140 [ 368.388269] out_of_memory+0x1250/0x1d00 [ 368.392402] try_charge+0x21cd/0x39c0 [ 368.396312] mem_cgroup_try_charge+0x7df/0xf50 [ 368.400983] mem_cgroup_try_charge_delay+0x7e/0x140 [ 368.406063] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 368.411316] handle_mm_fault+0x55e1/0x9e30 [ 368.415645] __do_page_fault+0xdfd/0x1800 [ 368.419935] do_page_fault+0xe9/0x5c0 [ 368.423762] ? kmsan_unpoison_pt_regs+0x2a/0x30 [ 368.428466] ? page_fault+0x2b/0x50 [ 368.432124] ? page_fault+0x8/0x50 [ 368.435677] page_fault+0x3d/0x50 [ 368.439163] RIP: 0033:0x40f8ef [ 368.442387] Code: Bad RIP value. [ 368.445760] RSP: 002b:0000000000a4fb10 EFLAGS: 00010206 [ 368.451350] RAX: 00007f0849bf1000 RBX: 0000000000020000 RCX: 0000000000457f1a [ 368.458776] RDX: 0000000000021000 RSI: 0000000000021000 RDI: 0000000000000000 [ 368.466299] RBP: 0000000000a4fbf0 R08: ffffffffffffffff R09: 0000000000000000 [ 368.473607] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000a4fcd0 [ 368.480931] R13: 00007f0849c11700 R14: 000000000073c04c R15: 000000000073c04c [ 368.488538] memory: usage 1504kB, limit 0kB, failcnt 23 [ 368.494027] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 368.500828] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 368.507168] Memory cgroup stats for /syz2: cache:0KB rss:8KB rss_huge:0KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:60KB inactive_file:0KB active_file:0KB unevictable:0KB [ 368.526875] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor2,pid=11008,uid=0 [ 368.541631] Memory cgroup out of memory: Kill process 11008 (syz-executor2) score 8488000 or sacrifice child [ 368.551767] Killed process 11008 (syz-executor2) total-vm:70268kB, anon-rss:104kB, file-rss:33728kB, shmem-rss:0kB [ 368.563797] oom_reaper: reaped process 11008 (syz-executor2), now anon-rss:0kB, file-rss:32832kB, shmem-rss:0kB [ 368.574987] syz-executor2 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 368.575799] bridge0: port 2(bridge_slave_1) entered blocking state [ 368.585605] CPU: 0 PID: 11901 Comm: syz-executor2 Not tainted 5.0.0-rc1+ #7 [ 368.591284] bridge0: port 2(bridge_slave_1) entered forwarding state [ 368.598250] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 368.598267] Call Trace: [ 368.598333] dump_stack+0x173/0x1d0 [ 368.598391] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 368.605634] bridge0: port 1(bridge_slave_0) entered blocking state [ 368.614280] dump_header+0x1e7/0x1960 [ 368.614319] ? css_task_iter_end+0x45e/0x530 [ 368.614367] ? mem_cgroup_scan_tasks+0x2cb/0x6d0 [ 368.617107] bridge0: port 1(bridge_slave_0) entered forwarding state [ 368.620614] ? oom_kill_memcg_member+0x140/0x140 [ 368.626552] device bridge0 entered promiscuous mode [ 368.632144] out_of_memory+0x129e/0x1d00 [ 368.632207] try_charge+0x21cd/0x39c0 [ 368.632293] memcg_kmem_charge_memcg+0x10d/0x610 [ 368.637711] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 368.640481] new_slab+0x72b/0x20b0 [ 368.683928] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 368.689209] ___slab_alloc+0x1577/0x2060 [ 368.693330] ? seq_open+0xd2/0x390 [ 368.696969] kmem_cache_alloc+0xae8/0xb60 [ 368.701164] ? seq_open+0xd2/0x390 [ 368.704790] seq_open+0xd2/0x390 [ 368.708211] ? cgroup_file_release+0xe0/0xe0 [ 368.712678] kernfs_fop_open+0xc5e/0x17d0 [ 368.716912] ? kernfs_fop_mmap+0x6a0/0x6a0 [ 368.721361] do_dentry_open+0xf4f/0x1750 [ 368.725496] vfs_open+0xaf/0xe0 [ 368.728829] path_openat+0x185b/0x6b90 [ 368.732661] net_ratelimit: 18 callbacks suppressed [ 368.732679] protocol 88fb is buggy, dev hsr_slave_0 [ 368.732807] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 368.738368] protocol 88fb is buggy, dev hsr_slave_1 [ 368.742750] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 368.742789] do_filp_open+0x2b8/0x710 [ 368.742859] do_sys_open+0x642/0xa30 [ 368.765801] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 368.771069] __se_sys_openat+0xcb/0xe0 [ 368.775024] __x64_sys_openat+0x56/0x70 [ 368.779072] do_syscall_64+0xbc/0xf0 [ 368.782852] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 368.788094] RIP: 0033:0x457ec9 [ 368.791364] Code: Bad RIP value. [ 368.794755] RSP: 002b:00007f0849c31c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 368.802515] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000457ec9 [ 368.809834] RDX: 0000000000000002 RSI: 0000000020000000 RDI: 0000000000000009 [ 368.817193] RBP: 000000000073bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 368.824502] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f0849c326d4 [ 368.831806] R13: 00000000004c3e9d R14: 00000000004d6f10 R15: 00000000ffffffff [ 368.839268] memory: usage 1372kB, limit 0kB, failcnt 34 [ 368.845056] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 368.852003] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 368.858216] Memory cgroup stats for /syz2: cache:0KB rss:8KB rss_huge:0KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:0KB inactive_file:0KB active_file:0KB unevictable:0KB 15:33:46 executing program 3: r0 = perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000080)={0x400000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rfkill\x00', 0x0, 0x0) write$binfmt_aout(r0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setstatus(r0, 0x4, 0x2c00) write(r3, &(0x7f00000001c0), 0xfffffef3) read(r2, &(0x7f0000000540)=""/250, 0x446a6e69) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7, 0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0) 15:33:46 executing program 1: pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e24, @multicast2}}, 0x1ff, 0x1, 0x1, 0x1, 0x4}, &(0x7f0000000180)=0x98) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000001c0)={r2, 0x2b82}, 0x8) memfd_create(&(0x7f0000000040)='ppp1self\x00', 0x0) accept4(r0, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@mcast2, 0x10001, 0x1, 0x2, 0xd, 0x3, 0x1}, 0x20) 15:33:46 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_script(r0, &(0x7f0000000640)={'#! ', './file0', [], 0xa, "d1266d12e95afed85a1bf38aaf1b4ba88686b1d7eefe93e87be1cded9d0d73f957a0dc"}, 0x2e) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_script(r0, &(0x7f0000000440)={'#! ', './file0', [], 0xa, "96de86d81aacdb3ba584580de2bfff37e108271616dfd5e3fb5cabab678bd9cf0b8b1c"}, 0x2e) write$P9_RREAD(r0, &(0x7f0000000180)={0x1d, 0x75, 0x0, {0x12, "3035949eec64fef5cbb1d182820bc8bced96"}}, 0x1d) write$binfmt_script(r0, &(0x7f0000000540)={'#! ', './file0', [], 0xa, "b8d958259b7169b2d643c65434fc53e2538fbfd5866cd9cf2f180b8b4d8ded"}, 0x2a) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, 'eth0'}, {0x20, '#! '}, {0x20, '${'}, {0x20, '/dev/sg#\x00'}, {0x20, '#! '}], 0xa, "00fbdd695d"}, 0x2a) write$binfmt_script(r0, &(0x7f0000000080)={'#! ', './file0', [{0x20, '/dev/sg#\x00'}, {0x20, '/dev/sg#\x00'}], 0xa, "7370e8c9eb584ee345b2d52bd5ac60"}, 0x2e) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 15:33:46 executing program 4: r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, &(0x7f0000000000)=@in6={0x21, 0x4, 0x2, 0x1c}, 0x24) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f023c123f3188a070") dup2(r1, r0) [ 368.879679] Out of memory and no killable processes... [ 369.241017] chnl_net:caif_netlink_parms(): no params data found [ 369.340172] bridge0: port 1(bridge_slave_0) entered blocking state [ 369.346805] bridge0: port 1(bridge_slave_0) entered disabled state [ 369.355242] device bridge_slave_0 entered promiscuous mode [ 369.367055] bridge0: port 2(bridge_slave_1) entered blocking state [ 369.373654] bridge0: port 2(bridge_slave_1) entered disabled state [ 369.382257] device bridge_slave_1 entered promiscuous mode [ 369.424483] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 369.439985] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 369.471856] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 369.480666] team0: Port device team_slave_0 added [ 369.490325] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 369.499122] team0: Port device team_slave_1 added [ 369.508834] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 369.517956] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 369.585490] device hsr_slave_0 entered promiscuous mode [ 369.612424] protocol 88fb is buggy, dev hsr_slave_0 [ 369.618077] protocol 88fb is buggy, dev hsr_slave_1 [ 369.624014] protocol 88fb is buggy, dev hsr_slave_0 [ 369.629659] protocol 88fb is buggy, dev hsr_slave_1 [ 369.642339] device hsr_slave_1 entered promiscuous mode [ 369.675498] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 369.852367] protocol 88fb is buggy, dev hsr_slave_0 [ 369.858133] protocol 88fb is buggy, dev hsr_slave_1 [ 370.412279] protocol 88fb is buggy, dev hsr_slave_0 [ 370.417876] protocol 88fb is buggy, dev hsr_slave_1 [ 370.966187] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 370.981619] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 371.006983] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 371.384384] 8021q: adding VLAN 0 to HW filter on device bond0 [ 371.395213] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 371.407570] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 371.414444] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 371.422764] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 371.550164] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 371.556345] 8021q: adding VLAN 0 to HW filter on device team0 [ 371.567617] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 371.575022] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 371.583726] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 371.592099] bridge0: port 1(bridge_slave_0) entered blocking state [ 371.598530] bridge0: port 1(bridge_slave_0) entered forwarding state [ 371.607040] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 371.621246] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 371.628538] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 371.637422] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 371.645954] bridge0: port 2(bridge_slave_1) entered blocking state [ 371.652589] bridge0: port 2(bridge_slave_1) entered forwarding state [ 371.779159] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 371.786919] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 371.800566] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 371.807547] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 371.823437] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 371.946795] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 371.955343] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 371.969786] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 371.977699] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 371.986155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 371.994955] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 372.122376] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 372.129712] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 372.138294] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 372.151629] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 372.160145] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 372.173863] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 372.179985] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 372.310321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 372.318956] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 372.340270] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 372.365040] 8021q: adding VLAN 0 to HW filter on device batadv0 15:33:50 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x10102, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) pipe2(&(0x7f0000000340)={0xffffffffffffffff}, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) bind$bt_rfcomm(r2, &(0x7f0000000040)={0x1f, {0x1, 0x0, 0x8, 0x7ff, 0x4, 0x6}, 0x6}, 0xa) 15:33:50 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002740)}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='/\x02roup.stap\x00', 0x2761, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0xc0185879, 0x20000002) 15:33:50 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x2, &(0x7f0000000040)=@raw=[@ldst={0x0, 0x0, 0x6}, @exit], 0x0, 0xffffffffffffffff, 0xc3, &(0x7f0000000080)=""/195}, 0x48) 15:33:50 executing program 3: r0 = socket(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000500)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000180], 0x0, 0x0, &(0x7f0000000180)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0x0, 0x0, 'veth1_to_bond\x00', 'team_slave_1\x00', 'nr0\x00', 'bpq0\x00', @local, [], @local, [], 0x70, 0x70, 0xa0}}, @common=@dnat={'dnat\x00', 0xc, {{@random="2daf88d1300f", 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}]}, 0x1b0) 15:33:50 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1024}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f00000000c0)='systemem1em1-wlan1lo%-\x00') openat$cgroup_type(r1, &(0x7f0000000000)='cgroup.type\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000340)='cpuacct.usage_user\x00', 0x0, 0x0) write$cgroup_subtree(r2, &(0x7f0000000380)={[{0x2b, 'memory'}]}, 0x8) r3 = openat$cgroup_ro(r1, &(0x7f0000000100)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) r4 = openat$cgroup_ro(r1, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000240)) r5 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) write$cgroup_int(r4, &(0x7f0000000280)=0x6, 0x12) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r1, 0x0, 0x1, 0x5, 0x0}, 0x20) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x200002, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f00000002c0)='%\x00') write$cgroup_int(r5, 0x0, 0x0) openat$cgroup_int(r4, &(0x7f0000000300)='memory.swap.max\x00', 0x2, 0x0) 15:33:50 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_script(r0, &(0x7f0000000640)={'#! ', './file0', [], 0xa, "d1266d12e95afed85a1bf38aaf1b4ba88686b1d7eefe93e87be1cded9d0d73f957a0dc"}, 0x2e) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_script(r0, &(0x7f0000000440)={'#! ', './file0', [], 0xa, "96de86d81aacdb3ba584580de2bfff37e108271616dfd5e3fb5cabab678bd9cf0b8b1c"}, 0x2e) write$P9_RREAD(r0, &(0x7f0000000180)={0x1d, 0x75, 0x0, {0x12, "3035949eec64fef5cbb1d182820bc8bced96"}}, 0x1d) write$binfmt_script(r0, &(0x7f0000000540)={'#! ', './file0', [], 0xa, "b8d958259b7169b2d643c65434fc53e2538fbfd5866cd9cf2f180b8b4d8ded"}, 0x2a) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, 'eth0'}, {0x20, '#! '}, {0x20, '${'}, {0x20, '/dev/sg#\x00'}, {0x20, '#! '}], 0xa, "00fbdd695d"}, 0x2a) write$binfmt_script(r0, &(0x7f0000000080)={'#! ', './file0', [{0x20, '/dev/sg#\x00'}, {0x20, '/dev/sg#\x00'}], 0xa, "7370e8c9eb584ee345b2d52bd5ac60"}, 0x2e) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) [ 372.726385] kernel msg: ebtables bug: please report to author: Wrong len argument 15:33:50 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='smaps\x00') write$eventfd(r0, &(0x7f00000000c0)=0x7fffffff, 0x8) 15:33:50 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_script(r0, &(0x7f0000000640)={'#! ', './file0', [], 0xa, "d1266d12e95afed85a1bf38aaf1b4ba88686b1d7eefe93e87be1cded9d0d73f957a0dc"}, 0x2e) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_script(r0, &(0x7f0000000440)={'#! ', './file0', [], 0xa, "96de86d81aacdb3ba584580de2bfff37e108271616dfd5e3fb5cabab678bd9cf0b8b1c"}, 0x2e) write$P9_RREAD(r0, &(0x7f0000000180)={0x1d, 0x75, 0x0, {0x12, "3035949eec64fef5cbb1d182820bc8bced96"}}, 0x1d) write$binfmt_script(r0, &(0x7f0000000540)={'#! ', './file0', [], 0xa, "b8d958259b7169b2d643c65434fc53e2538fbfd5866cd9cf2f180b8b4d8ded"}, 0x2a) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, 'eth0'}, {0x20, '#! '}, {0x20, '${'}, {0x20, '/dev/sg#\x00'}, {0x20, '#! '}], 0xa, "00fbdd695d"}, 0x2a) write$binfmt_script(r0, &(0x7f0000000080)={'#! ', './file0', [{0x20, '/dev/sg#\x00'}, {0x20, '/dev/sg#\x00'}], 0xa, "7370e8c9eb584ee345b2d52bd5ac60"}, 0x2e) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 15:33:50 executing program 1: msgget(0x0, 0x4c4) pipe2(&(0x7f0000000340)={0xffffffffffffffff}, 0x0) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000000)={0x7, 0x100000000}) accept4(r0, 0x0, 0x0, 0x0) 15:33:51 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$kcm(0xa, 0x5, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8983, &(0x7f0000000040)={r0}) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) 15:33:51 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_script(r0, &(0x7f0000000640)={'#! ', './file0', [], 0xa, "d1266d12e95afed85a1bf38aaf1b4ba88686b1d7eefe93e87be1cded9d0d73f957a0dc"}, 0x2e) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_script(r0, &(0x7f0000000440)={'#! ', './file0', [], 0xa, "96de86d81aacdb3ba584580de2bfff37e108271616dfd5e3fb5cabab678bd9cf0b8b1c"}, 0x2e) write$P9_RREAD(r0, &(0x7f0000000180)={0x26, 0x75, 0x0, {0x1b, "3035949eec64fef5cbb1d182820bc8bced96d6919b684878bef38a"}}, 0x26) write$binfmt_script(r0, &(0x7f0000000540)={'#! ', './file0', [], 0xa, "b8d958259b7169b2d643c65434fc53e2538fbfd5866cd9cf2f180b8b4d8ded"}, 0x2a) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, 'eth0'}, {0x20, '#! '}, {0x20, '${'}, {0x20, '/dev/sg#\x00'}, {0x20, '#! '}], 0xa, "00fbdd695d"}, 0x2a) write$binfmt_script(r0, &(0x7f0000000080)={'#! ', './file0', [{0x20, '/dev/sg#\x00'}, {0x20, '/dev/sg#\x00'}], 0xa, "7370e8c9eb584ee345b2d52bd5ac60"}, 0x2e) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 15:33:51 executing program 1: pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x9}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000140)={r2, 0x3c, &(0x7f0000000100)=[@in6={0xa, 0x4e20, 0x2, @rand_addr="e2f7b3080613347b6241dd99bf2b4e32", 0x2}, @in={0x2, 0x4e22, @rand_addr=0x81}, @in={0x2, 0x4e23, @local}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f00000001c0)) accept4(r0, 0x0, 0x0, 0x0) 15:33:51 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f00000000c0)=0x1, 0x4) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000100)=0xfff, 0x4) sendto$inet6(r0, 0x0, 0xffffff8c, 0x0, &(0x7f0000000080)={0xa, 0x10000000004e21, 0x0, @dev}, 0x1c) recvmsg(r0, &(0x7f0000000400)={&(0x7f0000000000)=@nl=@proc, 0x80, 0x0}, 0x2000) [ 373.526233] ================================================================== [ 373.533649] BUG: KMSAN: kernel-infoleak in _copy_to_user+0x16b/0x1f0 [ 373.540156] CPU: 1 PID: 11979 Comm: syz-executor4 Not tainted 5.0.0-rc1+ #7 [ 373.547262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 373.556622] Call Trace: [ 373.559232] dump_stack+0x173/0x1d0 [ 373.562907] kmsan_report+0x12e/0x2a0 [ 373.566757] kmsan_internal_check_memory+0x465/0xb10 [ 373.571927] kmsan_copy_to_user+0xab/0xc0 [ 373.576101] _copy_to_user+0x16b/0x1f0 [ 373.580090] move_addr_to_user+0x311/0x570 [ 373.584426] ___sys_recvmsg+0xb65/0x1310 [ 373.588564] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 373.593965] ? __fget_light+0x6e1/0x750 [ 373.598005] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 373.603251] __se_sys_recvmsg+0x2fa/0x450 [ 373.607490] __x64_sys_recvmsg+0x4a/0x70 [ 373.611569] do_syscall_64+0xbc/0xf0 [ 373.615340] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 373.620548] RIP: 0033:0x457ec9 [ 373.623763] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 373.642682] RSP: 002b:00007f5d5c87fc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 373.650424] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457ec9 [ 373.657705] RDX: 0000000000002000 RSI: 0000000020000400 RDI: 0000000000000003 [ 373.664984] RBP: 000000000073bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 373.672262] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5d5c8806d4 [ 373.679546] R13: 00000000004c4a60 R14: 00000000004d8140 R15: 00000000ffffffff [ 373.686858] [ 373.688499] Uninit was stored to memory at: [ 373.692837] kmsan_internal_chain_origin+0x134/0x230 [ 373.698007] __msan_chain_origin+0x70/0xe0 [ 373.702330] ipv6_recv_error+0x1e3f/0x1eb0 [ 373.706636] udpv6_recvmsg+0x397/0x2520 [ 373.710650] inet_recvmsg+0x4fb/0x600 [ 373.714482] sock_recvmsg+0x1d1/0x230 [ 373.718298] ___sys_recvmsg+0xa6f/0x1310 [ 373.722375] __se_sys_recvmsg+0x2fa/0x450 [ 373.726566] __x64_sys_recvmsg+0x4a/0x70 [ 373.730657] do_syscall_64+0xbc/0xf0 [ 373.734443] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 373.739740] [ 373.741369] Uninit was created at: [ 373.744938] kmsan_internal_poison_shadow+0x92/0x150 [ 373.750061] kmsan_kmalloc+0xa6/0x130 [ 373.753878] kmsan_slab_alloc+0xe/0x10 [ 373.757809] __kmalloc_node_track_caller+0xe9e/0xff0 [ 373.762948] __alloc_skb+0x309/0xa20 [ 373.765726] IPVS: ftp: loaded support on port[0] = 21 [ 373.766717] ipv6_local_error+0x19f/0x9d0 15:33:51 executing program 5: accept$inet6(0xffffffffffffffff, &(0x7f0000000040), &(0x7f00000000c0)=0x1c) listen(0xffffffffffffffff, 0x24) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000080)) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) add_key$keyring(0x0, &(0x7f00000006c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff8) setsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000180)="fa8a814a03644a8d2a1ac7a1fb34ce8c7e2977a15ff4dceed8943f68b9d62c8de3bc2658301e5fb9a8fd6b03badb30a4401e43", 0x33) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000400)={'bridge_slave_0\x00', 0x2000000000400}) listen(0xffffffffffffffff, 0x80001000) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000440)=""/142) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000001440)={0x20, 0x17, 0x101, 0x0, 0x0, {0x4}, [@typed={0xc, 0x9, @u64=0x3}]}, 0x20}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 15:33:51 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_script(r0, &(0x7f0000000640)={'#! ', './file0', [], 0xa, "d1266d12e95afed85a1bf38aaf1b4ba88686b1d7eefe93e87be1cded9d0d73f957a0dc"}, 0x2e) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_script(r0, &(0x7f0000000440)={'#! ', './file0', [], 0xa, "96de86d81aacdb3ba584580de2bfff37e108271616dfd5e3fb5cabab678bd9cf0b8b1c"}, 0x2e) write$P9_RREAD(r0, &(0x7f0000000180)={0x26, 0x75, 0x0, {0x1b, "3035949eec64fef5cbb1d182820bc8bced96d6919b684878bef38a"}}, 0x26) write$binfmt_script(r0, &(0x7f0000000540)={'#! ', './file0', [], 0xa, "b8d958259b7169b2d643c65434fc53e2538fbfd5866cd9cf2f180b8b4d8ded"}, 0x2a) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, 'eth0'}, {0x20, '#! '}, {0x20, '${'}, {0x20, '/dev/sg#\x00'}, {0x20, '#! '}], 0xa, "00fbdd695d"}, 0x2a) write$binfmt_script(r0, &(0x7f0000000080)={'#! ', './file0', [{0x20, '/dev/sg#\x00'}, {0x20, '/dev/sg#\x00'}], 0xa, "7370e8c9eb584ee345b2d52bd5ac60"}, 0x2e) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 15:33:51 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$kcm(0xa, 0x5, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8983, &(0x7f0000000040)={r0}) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) [ 373.766809] __ip6_append_data+0x1092/0x5dc0 [ 373.780519] ip6_make_skb+0x6cc/0xcf0 [ 373.784328] udpv6_sendmsg+0x3f8e/0x45d0 [ 373.788415] inet_sendmsg+0x54a/0x720 [ 373.792232] __sys_sendto+0x8c4/0xac0 [ 373.796045] __se_sys_sendto+0x107/0x130 [ 373.800122] __x64_sys_sendto+0x6e/0x90 [ 373.804114] do_syscall_64+0xbc/0xf0 [ 373.807846] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 373.813045] [ 373.814680] Bytes 4-7 of 28 are uninitialized [ 373.819197] Memory access of size 28 starts at ffff88804b83fce0 [ 373.825258] Data copied to user address 0000000020000000 [ 373.830724] ================================================================== [ 373.838097] Disabling lock debugging due to kernel taint [ 373.843551] Kernel panic - not syncing: panic_on_warn set ... [ 373.849458] CPU: 1 PID: 11979 Comm: syz-executor4 Tainted: G B 5.0.0-rc1+ #7 [ 373.857946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 373.867317] Call Trace: [ 373.869951] dump_stack+0x173/0x1d0 [ 373.873621] panic+0x3d1/0xb01 15:33:51 executing program 1: pipe2(&(0x7f0000000340)={0xffffffffffffffff}, 0x0) r1 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x0, 0x20000) ioctl$KVM_ASSIGN_SET_MSIX_NR(r1, 0x4008ae73, &(0x7f0000000040)={0x2, 0x1}) accept4(r0, 0x0, 0x0, 0x2000) [ 373.876908] kmsan_report+0x293/0x2a0 [ 373.880752] kmsan_internal_check_memory+0x465/0xb10 [ 373.885918] kmsan_copy_to_user+0xab/0xc0 [ 373.890089] _copy_to_user+0x16b/0x1f0 [ 373.894013] move_addr_to_user+0x311/0x570 [ 373.898293] ___sys_recvmsg+0xb65/0x1310 [ 373.902423] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 373.907805] ? __fget_light+0x6e1/0x750 [ 373.911850] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 373.917083] __se_sys_recvmsg+0x2fa/0x450 [ 373.921296] __x64_sys_recvmsg+0x4a/0x70 [ 373.925431] do_syscall_64+0xbc/0xf0 [ 373.929177] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 373.934378] RIP: 0033:0x457ec9 [ 373.937591] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 373.956503] RSP: 002b:00007f5d5c87fc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 373.964228] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457ec9 [ 373.971528] RDX: 0000000000002000 RSI: 0000000020000400 RDI: 0000000000000003 [ 373.978822] RBP: 000000000073bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 373.986100] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5d5c8806d4 [ 373.993399] R13: 00000000004c4a60 R14: 00000000004d8140 R15: 00000000ffffffff [ 374.001707] Kernel Offset: disabled [ 374.005357] Rebooting in 86400 seconds..