[ 36.219834][ T27] audit: type=1800 audit(1550683168.417:27): pid=7553 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [ 36.240632][ T27] audit: type=1800 audit(1550683168.417:28): pid=7553 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="ssh" dev="sda1" ino=2417 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 36.951757][ T27] audit: type=1800 audit(1550683169.197:29): pid=7553 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0 [ 36.972146][ T27] audit: type=1800 audit(1550683169.197:30): pid=7553 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2423 res=0 Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.211' (ECDSA) to the list of known hosts. 2019/02/20 17:19:39 fuzzer started 2019/02/20 17:19:41 dialing manager at 10.128.0.26:33245 2019/02/20 17:19:42 syscalls: 1 2019/02/20 17:19:42 code coverage: enabled 2019/02/20 17:19:42 comparison tracing: enabled 2019/02/20 17:19:42 extra coverage: extra coverage is not supported by the kernel 2019/02/20 17:19:42 setuid sandbox: enabled 2019/02/20 17:19:42 namespace sandbox: enabled 2019/02/20 17:19:42 Android sandbox: /sys/fs/selinux/policy does not exist 2019/02/20 17:19:42 fault injection: enabled 2019/02/20 17:19:42 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/02/20 17:19:42 net packet injection: enabled 2019/02/20 17:19:42 net device setup: enabled 17:22:20 executing program 0: r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x100) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffff9c, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x402}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f00000000c0)={r1, 0x100}, &(0x7f0000000100)=0x8) connect$ax25(r0, &(0x7f0000000140)={{0x3, @bcast, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}, 0x48) r3 = socket$can_raw(0x1d, 0x3, 0x1) futex(&(0x7f00000001c0), 0x4, 0x2, &(0x7f0000000200)={0x77359400}, &(0x7f0000000240)=0x2, 0x0) mkdirat$cgroup(r0, &(0x7f0000000280)='syz1\x00', 0x1ff) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f00000002c0)={0xfffffffffffffff7, 0x2, 0xffffffffffffb011, 0x1, 0x1, 0x3a50}) ioctl$VIDIOC_S_TUNER(r0, 0x4054561e, &(0x7f0000000300)={0x2, "4ef65c386794f5e4a6d5adb7132884cba68bae6f5f0df0a38af0c89f94c80eed", 0x5, 0x2, 0x3, 0x7, 0x4, 0x6, 0x80000001, 0x7}) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000380)={0x29, 0x4, 0x0, {0x0, 0x7, 0x1, 0x0, [0x0]}}, 0x29) accept$ax25(r0, 0x0, &(0x7f00000003c0)) ioctl$KVM_SET_GUEST_DEBUG(r0, 0x4048ae9b, &(0x7f0000000400)={0x20000, 0x0, [0x9, 0x100000000, 0x7, 0x0, 0x5aa, 0x6, 0x4c00, 0x4]}) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r0, 0xc0305616, &(0x7f0000000480)={0x0, {0x800, 0x1000}}) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f00000004c0)={0x0, 0x2710}, 0x10) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000500)={r2, 0x1}, &(0x7f0000000540)=0x8) ioctl$VIDIOC_DBG_S_REGISTER(r0, 0x4038564f, &(0x7f0000000580)={{0x1, @addr=0x5}, 0x8, 0x8, 0x3}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r0, 0xc05c5340, &(0x7f00000005c0)={0x1, 0x4, 0x4, {0x0, 0x1c9c380}, 0x3, 0x4}) getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000640)=@assoc_value={r2, 0x2}, &(0x7f0000000680)=0x8) ioctl$RTC_PIE_ON(r0, 0x7005) r5 = mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xf, 0x40010, r0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00000006c0)={r5}) setsockopt$inet_dccp_buf(r0, 0x21, 0x80, &(0x7f0000000700)="616c4cfdc6a7b608117163", 0xb) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000740)={r4, 0x8, 0x7, 0x9, 0x8, 0xf2ea}, &(0x7f0000000780)=0x14) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f00000007c0)='/dev/snd/pcmC#D#p\x00') ioctl$NBD_CLEAR_SOCK(r0, 0xab04) ioctl$EVIOCRMFF(r0, 0x40044581, &(0x7f0000000800)) ioctl$KVM_PPC_GET_SMMU_INFO(r0, 0x8250aea6, &(0x7f0000000840)=""/83) close(r3) prctl$PR_GET_DUMPABLE(0x3) syzkaller login: [ 208.050722][ T7717] IPVS: ftp: loaded support on port[0] = 21 17:22:20 executing program 1: r0 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x100, 0x80000) ioctl$VIDIOC_G_SELECTION(r0, 0xc040565e, &(0x7f0000000040)={0x1, 0x3, 0x6, {0x0, 0x7fffffff, 0x3, 0x1ff}}) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000080)={0xa, 0x3, 0x1000, 0x4000, r0}) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f00000000c0)=0x109, 0x4) ioctl$void(r1, 0xc0045c78) ioctl$KVM_GET_NESTED_STATE(r0, 0xc080aebe, &(0x7f0000000100)={0x0, 0x0, 0x2080}) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000002180)={0x0, 0x9, 0x0, 0x100, 0x5}, 0x14) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f00000021c0)={0x80000000, 0x30364d54, 0x10000, 0x7ff, 0x3, @stepwise={{0x8, 0x4}, {0x6, 0x917d}, {0x0, 0x6}}}) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f0000002200)={0x2, 0x7733575f, 0x100000000, 0x47, 0x3, @discrete={0x1, 0x8001}}) lsetxattr$security_selinux(&(0x7f0000002240)='./file0\x00', &(0x7f0000002280)='security.selinux\x00', &(0x7f00000022c0)='system_u:object_r:initrc_var_run_t:s0\x00', 0x26, 0x1) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000002300)={0x57, 0x3, 0x80000001, {0x1, 0x20000000}, {0x1, 0x5}, @rumble={0x4, 0x100}}) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f0000002340)={0x1000, "c9872631a88599e31f660a9ed0359e716faa721a31c7d57ea3cb923b9812b5b8", 0x6, 0x10, 0x7, 0x5, 0x8, 0x2, 0x6}) r2 = shmget(0x2, 0x4000, 0x4, &(0x7f0000ffc000/0x4000)=nil) shmctl$SHM_LOCK(r2, 0xb) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f00000023c0)={0x0, 0x9, 0x3, 0xaaf, 0x3, 0x7fff}, &(0x7f0000002400)=0x14) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000002440)=@sack_info={r3, 0x9, 0x7}, 0xc) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) writev(r4, &(0x7f0000002700)=[{&(0x7f0000002480)="a9ce541ff18ca3dca45a28d7dab375d22d5f8d183f52934f070bf880b015a1660acf32059807a674533cd2e58591a176f6a2b16350f58a4a3997dc0155566c8ba141eb0b985649d8a7709f7a6e6f34c8e785cea2e99c7ec77d7b0a4b930082c445b79b1732683372789a9207081e0bea8e57145a018d7523a4b0e6c36de9b97379aa168a6b7f1e65554915960b72e1790783d01c30c64236b2a5f725afb184f48c994c9fad054b5b1e5b01587ae08ed76e2dd2bb7de8ba6c336a91998b6b0e19f2e16c68", 0xc4}, {&(0x7f0000002580)="22ec6a6dfd44b4ced64846c55a68d753c6c76c04666662fe026ba155315164eb93fbb270032bca2f256aa7211110598f447fefedbb54e39d05e0b62c07c62c5e9cc76bf7e2579715989ab79a3540c66ac929662f598ef96f9de4b3c4efaebedec59781", 0x63}, {&(0x7f0000002600)="1f6d7eec5a68c13b90e525a17ff184f6d46826795aa806e52bcf25f288ef1538850f73f84c5b9b34c3c3c845351054770a07672f6b1fa59c82f511abc5f8bbafcee9f7d57191589cf8810580942b561f1f0864c2254736e9263667ecd91a6b6eb4556bca30a5e1acea9015bb3d79c168834cd576449af965cd841f8ac73f9f7aaea00b472c4f420047757d3fc2ba1f2218b47b693a1a16347db24292641217326f8a752490b2a206d1150d95079b34d3c358996883ded70f20ef30b6a9d2982fe127913500192f17", 0xc8}], 0x3) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000002800)={0x0, 0x0}, 0xffffffffffffffff) mount$9p_tcp(&(0x7f0000002740)='127.0.0.1\x00', &(0x7f0000002780)='./file0\x00', &(0x7f00000027c0)='9p\x00', 0x1000, &(0x7f0000002840)={'trans=tcp,', {'port', 0x3d, 0x4e22}, 0x2c, {[{@posixacl='posixacl'}, {@privport='privport'}, {@privport='privport'}], [{@obj_type={'obj_type'}}, {@euid_gt={'euid>', r5}}, {@smackfsfloor={'smackfsfloor', 0x3d, '/dev/adsp#\x00'}}]}}) preadv(r4, &(0x7f0000002c00)=[{&(0x7f00000028c0)=""/220, 0xdc}, {&(0x7f00000029c0)=""/47, 0x2f}, {&(0x7f0000002a00)=""/184, 0xb8}, {&(0x7f0000002ac0)=""/161, 0xa1}, {&(0x7f0000002b80)=""/95, 0x5f}], 0x5, 0x0) write$P9_RSYMLINK(r0, &(0x7f0000002c80)={0x14, 0x11, 0x1, {0x1, 0x1, 0x7}}, 0x14) ftruncate(r4, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000002d40)={0x9b0000, 0xd1f4, 0x8, [], &(0x7f0000002d00)={0x990bef, 0x40, [], @p_u32=&(0x7f0000002cc0)=0x2}}) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x100010, r0, 0x0) fadvise64(r0, 0x0, 0x8, 0x0) write$binfmt_elf64(r4, &(0x7f0000002d80)={{0x7f, 0x45, 0x4c, 0x46, 0xe2, 0x8000, 0x3ff, 0x8, 0x7f, 0x3, 0x6, 0x800, 0x30c, 0x40, 0x251, 0x8137, 0x5, 0x38, 0x2, 0x8, 0x1, 0x7}, [{0x7, 0xffff, 0x3, 0x5, 0x3, 0x4400000000000000, 0x80000001, 0x7fff}], "92a0c8cd52c79ce4788bc1e88bab321cd6f569", [[], [], [], [], [], [], [], [], []]}, 0x98b) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r1, 0x118, 0x1, &(0x7f0000003740)=0x300000000000, 0x4) ioctl$KDMKTONE(r0, 0x4b30, 0x31830a0d) ioctl$KVM_RUN(r0, 0xae80, 0x0) [ 208.161546][ T7717] chnl_net:caif_netlink_parms(): no params data found [ 208.214010][ T7717] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.222171][ T7717] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.231699][ T7717] device bridge_slave_0 entered promiscuous mode [ 208.240689][ T7717] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.248249][ T7717] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.257642][ T7717] device bridge_slave_1 entered promiscuous mode [ 208.283199][ T7717] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 208.294388][ T7717] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 208.320593][ T7717] team0: Port device team_slave_0 added [ 208.327699][ T7717] team0: Port device team_slave_1 added [ 208.341530][ T7720] IPVS: ftp: loaded support on port[0] = 21 17:22:20 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x40) ioctl$PPPIOCGDEBUG(r0, 0x80047441, &(0x7f0000000040)) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000080)=0x6, 0x4) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000000c0)=0x0) syz_open_procfs(r1, &(0x7f0000000100)='wchan\x00') r2 = syz_open_dev$mice(&(0x7f0000000140)='/dev/input/mice\x00', 0x0, 0x402000) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f00000001c0)={0x0, @dev, @remote}, &(0x7f0000000200)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)={'team0\x00', r3}) ioctl$BLKGETSIZE(r2, 0x1260, &(0x7f0000000280)) setsockopt$RXRPC_SECURITY_KEY(r0, 0x110, 0x1, &(0x7f00000002c0)='team0\x00', 0x6) fsetxattr$trusted_overlay_origin(r0, &(0x7f0000000300)='trusted.overlay.origin\x00', &(0x7f0000000340)='y\x00', 0x2, 0x3) setsockopt$sock_void(r0, 0x1, 0x3f, 0x0, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000380)) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000400)={'hsr0\x00', &(0x7f00000003c0)=@ethtool_sfeatures={0x3b, 0x1, [{0x9, 0x1}]}}) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000440)={0x0, 0x9f39}, &(0x7f0000000480)=0x8) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f00000004c0)={r4, 0xa4, "99e7cc61670e59f3218733e7b78bdb39d936cd2f6ccf2ccb20fd51e5006ddb5aa8c07c5378a052a16ef13a54ca8ddf0201c268e210314c1f295e9d69c01a99fe99813c541b5283ef4137748fc1382a6f1a2fdbf49aecde563995e876927bcfa3a3e94db719ed664671ce59e21ecb111c78b7ccf4e3b779977cd043f91c6c514f25379ef0a388c9ff1ef8ac3be677d45a9499819229728a174caf9d007c4e15078156b46e"}, &(0x7f0000000580)=0xac) sendmsg(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f00000005c0)="36a86751d645957da2bf5d5e4e403437d4afbfa17343249ccbde591ec20975e4204f93f771a7bd05691ef46ee2702297f7c9f79b5527dc8dcc13a0d94f6064c843d347aed3a9cda7a034a23848652bfb1b5bcde28b7593083420ea3d5857f09625c7a9e636", 0x65}, {&(0x7f0000000640)="fdce86bae38ae4f88246037787d6d30501b860999ea867340d8722103f4d40f6db107112cdba305c7bbee3f702cefee00986a0e58cbe86a4a22850962a36ab4716225ddcd3a691b8903d9dfe4158b94cb984919fa38679b602c7d0b5297095806ff25ba76d8e97b6cda377fa234356f02385b00a2058c9f31a4469fe56577ddbc43d9dfe4977296dec3ad7ad7616989ef9886e1ae96a300f108c7cef6a2a2c763462e7fac6b33eabc5610bb030e3d8bc", 0xb0}, {&(0x7f0000000700)="a6c63e01c4d89e48bababf98d3b132ebc9ccebeacb4b1ba87d586a77f9e007119d8444ccdce56bc8ade0978509c98204d576f050fadba2c97b59344cbd518a6f4f18fb0c21ec6de446f2ae86063c0d2537d804b79c16254a107a6a9d9c06cc3303b446c94299948fdeab4d5976564185f4eb7c4c6d751399a042f088798ce0ade370914b3bf66883", 0x88}], 0x3, &(0x7f0000000800)=[{0x30, 0x10f, 0x5, "721e5e1d63d2f25b3713a1d6fd88bd08bdfb933ebab994df3a601f"}, {0x80, 0x1ff, 0x7ff00, "a8e719c2a059c1ac170abd83498c5cace4459d33aa35cbe63e14efadb82d256cc459cb9110425f8c2b1ac92c1204362149fc77d2edbec40c4a41467e5fb192a821633ff8878173ddf429637faddd642ea44da19e67b367fb7e4b868c7f634e7e133dd633f52cf56af447f60e93f338b2"}, {0x48, 0x115, 0x8, "0dea5f185686a242f39fc1eeb2ee7dafe9be8f4d33e1d0ac0e588a164b52e4952be7404de8d8eca91cbcb7386f06bafa3a1573d6de"}], 0xf8}, 0x1) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) ioctl$KDDISABIO(r0, 0x4b37) io_setup(0x9, &(0x7f0000000940)=0x0) io_cancel(r5, &(0x7f0000001980)={0x0, 0x0, 0x0, 0x8, 0x9, r2, &(0x7f0000000980)="52d2310e1a3159ac3ec1f79a59438b348f94cf993f721a2e7de3c754e8787a66a98ce75ba0707f60c2179a32eb67cb11c56f57a1b69eaba20f0712004e0c96345de0e112fd6071cb805ebfdefc01f6c9d369fbab46afac69cf997ded2411cd2cfc5e53457b3d9deeecee494975c5da3a1ccbd8630179d96d9f05a75749e9b69ff5be3043c0bce984d6f78cbb6a4e1583aa0cc594647cb610f7fe2347c3bcd4bd5afcba4f4a808d2fd39d9dc31ce8aef3248399abc31e0555affc91120b801967c91822eafd84d05ff8d32b1933f3952674262f32500dcc97bf5a3fb3c42cd43e107c8c92a4a88ecc91c5a44a20320a381ba195cde9b31d7d31f256bc79d47b0a3dbd8da3bbbef70b9f884959066a006c5dbc6fce15e7655c61858b3a33edd36ae0dded45ef81f70e19fa3035c9fc111aa89a1560e7811e62d15362d62953eb5b1b3beb098b40c9e56e682700b34a280852bbfd44e5efbca9df2235bc66b90ab4c467a7b564db8fe7c9ef736e44797b0cd36023b353ca32f958c25ef1308f887b93dd78ef6ebefd22f9fbb28b9de61c60d5c0a56f57af69a1b2fc63501535df25c50999f0ae2da9c8152d1f6d443b8fc17b1f09059190ffede16646bf275be1357497618ed4269db333142b365fac1f801a3014a136831150c247513e5709268b536a912379461b5f8bf70d6f0b921ba7cce992aa37d9b5782ba91b2bec6326aafa0a53844b989cdc0d7f25388d25e3d3945309df8850e9df4bed702246b087bc24952b76880f217bd038644c47c41db77168b813cfe69ccc62693ec07787be7d64b9323f0d159a14ac6ce0c96ded9efa61b8ba9cdb5f074d762b586db6102c7ada84ca18763e9cfb6ad6bd8e00f2ee9a489300e7287e090dca91445ce6bedf2499babbc423d32bf511f2f44a59fba14deaea7f2e8d19600c2a0bfc0098331b7a40b6d2a2d0c97bea0071da60520cfeb28ec1b4e0a05b967961921a447f11678b20cf6485422e7eecdb2aafbb840295fd014cfb6207ad933db8da6c741f164c143e4b73d45d1f08e8474e03bb8c6c8dd09718fef5a02f57135eaf3fd02cdf4f76a48639dc2bc5098916c96d37139a564a2e93b517a251ee4cd99f9231b8a68dacebb73e066458afe2b27606a315dbd6fbe353c87b8454a6e0d510eb28781b032e33fdfa5cbb5db22d9107b35ff381c0da1ef9861cf32b93cc060229599ee8f7dbb8ee5b755ad26aa7d5bf845ed7b67d89374a52dfffdb9bfd81f511f17cd35dce7736d9ef68208c2307fac70e58f8d988beae1aa2454136fc4974c81d9e4457bc88d6f30a6e57ffce75520cb04ac13c6d363efbb8928d725a0c352d411a5cc0c319367719bb2f426069d5005fbdfa1d3bec4482b8507528d6ae3a1ce04b0d7d28db793c6a2004d08d386b66095b3b7621d4e3bacb84c6c1bae4ab9f18f16c9152da3108ad224af86c407d1c830cbba1cb95ae8bca6c2bb2eaef5c889593f4d0cbe28f21893e3f04226004d5f2ddd726a7dd0058758975a8722903b55dad3c672966747642c1a0b431d8e380f6ba93c3cf18c5a8323671d6ded7ad33a0c21a2cbae4727ed1b49007a04c2b3ab67f81bc8c2fc1cee3c644b1b69445e1ca0f5e73a11f62c1dbee21566c35e64158b69a8bce372f49a8d604edef8c46bb3f9517763d41f1ee28b8e055e269293e360b3d3fb8744272ce6976a475f9cebfc3c0773c16f2005671f62e88dd31cac32e3409f609571a1da097c53c0df2ad32e71e9d1eb6f5a708a58b7b6a39c9a38475dcec5a68135aa7ca848111fa98356bff3d76b5b7d8a7868a94ffb0c12bbe0cf125f01f1f148e11a908b9c35afe5bc29b957346c19af933cef9eb178e149f180d9728f2d118def12937d27dbdfdcc79f4082aeb65f251d4b695925df0c02dbf42c93a0dff426469177218b312e017b3acd60a09675651a2d3f83ffaeda845e4463b19645a4d998a2023a3dce03fde5cf35d0c2da8436ec7323c7626642c9ae9f7a6e55a56f4e7dd453095022c7d210eb974b9c8bfcc318b050589327ef740a5aec055f19437c80de1534bac5be49283dc1e0318f8a7cfb8cda1d31d79357e2d977a3d00736144e0554c922c0ad242bb3f0291d76e3f310a86c124e94307babb8adff725dd65104a4ee6c177b4ad92c123ba33a9e33e076416218350874da5e5b6c179e4ebf5d35f1917075abdf75900274de5b439558ca8cdd84a1a2d2fffbb7f95b2ae32051cb1834421c1c6c8317f641a1551cd4b5548122e075fb52863d6d4307e4cc049ad1c597c564d429c5f45b1ae5b8de7304b118b616a84f490fd9bc06777d59e15e21b0efeaa2aea4a30da773b0ce447e96f23c86027c53de515d03aca83b40aa89ce351a8e5e85068e2f896340e0fc1cb6b299fe5e4c7da0ffd18c94d3789e0847464c176dc670a2b2ae168c8ed10d507b59ac2715aecf8871e49025ddb8f48b976b37e11538ab1bf17493cf6eddf1fd5221fcf77a3ff61f0149a71da8d5f0e9d89d9e08bae14768ac3f951a1553467cf5338032e3ca3e0ddebc8cc60f9ec1d25b1d5cd8cc6f94a550c68a52dfd90d6ec4b455648a0e48b87bb88343044ef0b53732c3f9315570cda61e7d91db469a4da0ec23dfeaf5b8b694ca65b51757d6528f220cd944002f8eb9463144be6352568cf38b1592d187800a9516ba2cd7ba17642f4194525c4835052993033ae396f9849b115f916383e89623e72a02ddefd25db985a9adde4c20a5e09d865b6e9a75b7d5279e406d6a97d2824c2d1420d522534839bb799f7a8f2c3a9eed4579fdf3127475c0171c90f4f10711c812d475d6f91d5bd654e3b2cd6e412a60e8b83d3b681a8f0f538b7b64ca90ff0215144d407b3684f6579cf7c83ffce0f2aa24c2b40298fdf69bd2c0bb62f72baa693ea6c2fdc358b4eda98877360c8e7cf78f193eddd7e76a1a9402fc882a4e2e32e70f21bcda192e974abb7cd43fb8ac507b32f3c5dfaed647c595fc696ecc7d14392cfb4255ca8fe7563081d2a70608ffa58bb6c8c084151e4c74f9dd04a248e2fd22bf9c7e950b9b3eb0fd201d09f515607d12e1e0fcc645f52f4830bd22fe3e2e13f8c4accf536bbdc016f09c75987f2fb29526eeec762fa930c26e0323a57b177325478d6cfcf31487209c3dad31d5e2a3e9d37c0e4063c8e88a58e831165a9f6b5c24d3546072b5b13402a88ac28667431cd925a36e42b8b2041a71fdc2ac3962b709ad351d5dd892099443f44fe31120f3f30524e342c54de799bc91c46b483d1a0a5eb05bbd1c7583697973aa7b668f221ca9fa6e63bd320a6bd6225c25fc1ab09a15c90ca2b5b004712bf9bd0c24e46143b9c1935e8d69ccc68b4d518251650b8163e859b78f2e323c0e78d1d06aa6122ec288ae5a15640f4e5f7d05a7b187d6d425a95084a2e1d5c067678211f06be773e1e31f19e3e73ca5b3500e340625a455a5ea2e2bc6b2c556ae5efe34d86bc4d4e87cba49146454d166518ce0457231b723c820764f27ea08af57d208dd6df028c292ffce7aa491c5a2e7ca09900a0809151050acbc0dedb3ebeb6c09f198ffe73632f5c406ae5767f9c28da06639a0d66edf413c9ee957e4b7f8493136af2a8c213b757ab870748bd0711860c833844c3cc0ae72cd446a223899d73e693b5f8e801ec7684e11768a7b41968ef14d783f78705f42267a905b86371b14533782db29151c981e2a7a95602e1ec159655f97c8b01920565599c9b78df786550577a47f5a743c884a812957a8d200772da3e577877647e29c9a1bccdc7494b0e065becb8fb3e487af7a001e85aa69211228c19d008a69c550cb6c6e6fb08966f9fb83f48c31e3b1c32c24231b732751c3be1a9f78541089a6470be76f41326c0c4af24b48d67cfb48f4febae83adf2b8d0a7ebdde3e2e8f77c4aecf97fd2a86a2ebf905eb5645cbf43eaae6da299a1dea6d9cb6999eb3941daee3dd8241bd62fb609fb2d4feea7d61476b185d7360a45be6a7f92e3e8a01e90ca2290256fb04a216f04a8d34775b57ad42535ef476a9b56032e2e0818d2972141f054dc7fdd20e16add2d6c308042a95124958e354771a3120003672f53a17bece99a0112fe24d6864ccac02ee6e4def466b7be94fb36f0fc654db1780b21ba40aad0224489fa94a5ddfe5fb3379ed08604e28f270af718a7b87c82279a49c1095f9cb91cf5d8255d293206f07c3922756b9bfe201ee728b5f6c4e43c101f3ff2aad04ebeddd73e280a33dc2797498f4a688ed16f2ba42d060ab9bdd895ed1196c564d0a2b3b1300ec51dce81215bc2d880ecddc03403af891e324072d08915aecf9d51ef205e2bf460960e2b317f8ff05455a72873f94b29457e34b4e125779e6b2fa5640de9484b94ae8fcb92ea3aeaf99e31be6f51cbb2c00ab29e085390b993dcf58e61f999c9665e8b4982b70da1de192fe3e3772d4757d241361e15c1f5d0a929a29f39196626b85b12b75aea39f3fa210e9637689a5357b2ed032d86027e042ba428b02fd8fd52c4355a228962f4c3381159617d8c2ce3f3811be1a389ea7693d45a8224cb380a46040a41f2180c4088ceb34ad2a2e92bc50c55d5d5bded4b13637075616fab9e08acc0b931d46d37f15631b81596a082985a5061ea4b172fd71d7e310019bf06f806528d8d127f1f0a63b3d53d49dfcdc36bd72d1188be7bf4742fd3bbeed2e2517c8e034c57e087d0c70b5b40d4ebe6d816c695ef4d674869cde937a96fded2e504697075624deedc981ddd903328779177c30f3426e47971da299e115b10766f0e5e4c3e3e273575976c07d264330049c48a5ca54b79023405129a802975a7c1e90c338b737aa8e033e75da498f80aa0fc3147250cca1869d159b7a66d42269f27a27d02ab376d4b953f7eb35e07066a96cd7b647ab7d14315313acb5bb9991373c4c432c81f79abdb45fe9524cea03a99a6862ddbb30e5387f38ad11f6ca959acf034ca3c75acdf0e9a6172c7bc5c1713ce7bfadca48f7c7a50c55df3950035d0f921e8ee2da656e21497d9b996422d924f1496edaf383c003cd933667ce6be3fa4f9a37d24bd9b135b5789b2b3b61e629bcdf6f6272f45ae9e4a834a08c80d6f5f55e058db38b89472163db3289baa7bf17b073ac71e9190494dec5651f7f8b2d285e8b513c139a5ddd9282f8e51e83f9873fa0edc782595f598fb33fb412b7b44194cf9a1202ba7ff5ec3c5a7a95ca20f84d2f6a2200ced1d30a9394787d533e66c321eabfcd7d922246a6677f4c5a77b333695882dfcad8fd94819bc934fec4edb1c4394e6b4268d5f82232efbcf328885b90371481b4a155f65bcdc2ab2f1f490bf21d6d41ceabe5b2424761f975cd976364840a05107bfca3a70198191713657deeea0dca0d5dbce518ad6888150b19caad264c17ab165386212c3dd4637d4422da32e3706f04a0e7b1c9141f214157ab790c838200c88bdc73450bb63de1ccda1632e18857666b4e124cda1235ed14aa0f787b35537c67330fcb921a1fd087e8d865ad18145668696cb241462cfe0e40ea6300835697999c7fa11dfcd7643e4cadb95ad4030f1356de71ad358f1113366b4420aee14dfa8cda1988dadc61384e71fe57fb929cbae63d2b0d8fe98431b9316981cd60078347f7adde60323f3b9725ecafdc469b5623d7b190658d948f3269645c9ecc7c00d88f7cbefe4dc6613f834ab517b02a8b9f85dc67d26e438199d8a3a40a675a265c8674b154639dadb226eb68c3691857328427683185fed9ad295bfe3f2d210a72a", 0x1000, 0x3, 0x0, 0x1, r2}, &(0x7f00000019c0)) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000001a00)={r4, @in={{0x2, 0x4e22, @multicast2}}}, 0x84) r6 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000001ac0)='/proc/capi/capi20\x00', 0x10000, 0x0) ioctl$BLKALIGNOFF(r6, 0x127a, &(0x7f0000001b00)) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000001b40)={r4, 0x9}, &(0x7f0000001b80)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r6, 0x84, 0x72, &(0x7f0000001bc0)={r7, 0x6, 0x30}, &(0x7f0000001c00)=0xc) ioctl$sock_rose_SIOCDELRT(r6, 0x890c, &(0x7f0000001c40)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x10200, @default, @netrom={'nr', 0x0}, 0x6, [@null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) ioctl$TCFLSH(r0, 0x540b, 0x2) recvmsg$kcm(r6, &(0x7f0000004100)={&(0x7f0000001cc0)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @initdev}}, 0x80, &(0x7f0000004080)=[{&(0x7f0000001d40)=""/189, 0xbd}, {&(0x7f0000001e00)=""/156, 0x9c}, {&(0x7f0000001ec0)=""/4096, 0x1000}, {&(0x7f0000002ec0)=""/113, 0x71}, {&(0x7f0000002f40)=""/37, 0x25}, {&(0x7f0000002f80)=""/4096, 0x1000}, {&(0x7f0000003f80)=""/146, 0x92}, {&(0x7f0000004040)=""/56, 0x38}], 0x8}, 0x20) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f0000004140)={0x8001002, 0xea3, 0x3}) [ 208.461859][ T7717] device hsr_slave_0 entered promiscuous mode [ 208.499049][ T7717] device hsr_slave_1 entered promiscuous mode [ 208.582785][ T7722] IPVS: ftp: loaded support on port[0] = 21 [ 208.638255][ T7720] chnl_net:caif_netlink_parms(): no params data found [ 208.648828][ T7717] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.655979][ T7717] bridge0: port 2(bridge_slave_1) entered forwarding state [ 208.663629][ T7717] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.670730][ T7717] bridge0: port 1(bridge_slave_0) entered forwarding state 17:22:21 executing program 3: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000000), &(0x7f0000000040)=0x30) r1 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x7, 0x2) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f00000000c0)=0x333004, 0x4) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2}) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000140)={0x6708, r2, 0x10001, 0x5}) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000180)={r0}) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f00000001c0), &(0x7f0000000200)=0x30) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000240)=0x7fff) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r3) ioctl$sock_rose_SIOCADDRT(r1, 0x890b, &(0x7f0000000340)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x2000000000000, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={'nr', 0x0}, 0x8, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @bcast, @null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) mincore(&(0x7f0000ffd000/0x3000)=nil, 0x3000, &(0x7f00000003c0)=""/206) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r1, 0x118, 0x1, &(0x7f00000004c0)=0x21b, 0x4) clock_getres(0x2, &(0x7f0000000500)) listen(r1, 0x100000001) write(r0, &(0x7f0000000540)="ca563cdc9bb7d849", 0x8) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r1, &(0x7f0000000740)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x10000110}, 0xc, &(0x7f0000000700)={&(0x7f0000000600)={0xdc, r4, 0x104, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x101}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_DAEMON={0x68, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={[], [], @multicast2}}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bpq0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x15}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x3}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bcsh0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_DAEMON={0x48, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x772}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x4000001}, 0x20000094) r5 = request_key(&(0x7f0000000800)='cifs.idmap\x00', &(0x7f0000000840)={'syz', 0x1}, &(0x7f0000000880)='trusted@+\x00', 0xfffffffffffffffc) add_key$keyring(&(0x7f0000000780)='keyring\x00', &(0x7f00000007c0)={'syz', 0x3}, 0x0, 0x0, r5) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f00000008c0), &(0x7f0000000900)=0x4) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000940)={0x0, @in={{0x2, 0x4e24, @multicast2}}}, &(0x7f0000000a00)=0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000a40)={r6, @in={{0x2, 0x4e20, @multicast1}}, 0x5, 0x100}, 0x90) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, &(0x7f0000000b00)) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000cc0)={r1, &(0x7f0000000b80)="29b9b3e9f3e18f400905dee1cd9f6f90f8f6d0c3750b9a9d8b62730e8d93cc69c0f65445547ce03177cda9560dfe57043643e6dc47f3ca87ba5c0943ac235272dde14bda28709b39afe749bfd8da1d24", &(0x7f0000000c00)="073ce2406fdcb7b4d01ff9d868656e0b57391ab1808d5e4486987fab1e83c2e3dd26a4cac1b711e4bbbfd41f4ac6263a17a083aa1dacd0694ec20b7e16e4896c29e290d519e85c38cea269e74bce7a54d457c6e1889c5bb32618b9ddfb372eb1553c696e02856280f1481ccf8070a7e7b45afea916acb17dcb2976eeb50e51ac21b7ac703284e8a3b7cadb9d4cdb45804e7525a27b1523517de9abde33efbde7596f23a8c77e", 0x2}, 0x20) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000d00)='tls\x00', 0x4) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000d80)='TIPC\x00') sendmsg$TIPC_CMD_GET_MAX_PORTS(r1, &(0x7f0000000e40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x1c, r7, 0x2, 0x70bd26, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendto(r1, &(0x7f0000000e80)="5d631302af13c3a50ed011c359ab67d7b45646a3d73d8b84303d9cc77f085a7b1d22189f20b143ff56f0b3e331ecfb457750d9dc1342a367abec19feb02d2497f192", 0x42, 0x4000, 0x0, 0x0) [ 208.747143][ T7720] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.754603][ T7720] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.765292][ T7720] device bridge_slave_0 entered promiscuous mode [ 208.773308][ T7720] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.782241][ T7720] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.791612][ T7720] device bridge_slave_1 entered promiscuous mode [ 208.848271][ T7720] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 208.870530][ T7720] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 208.909009][ T7717] 8021q: adding VLAN 0 to HW filter on device bond0 [ 208.934753][ T7725] IPVS: ftp: loaded support on port[0] = 21 [ 208.963736][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 208.975148][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.996273][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.006902][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 209.019509][ T7717] 8021q: adding VLAN 0 to HW filter on device team0 [ 209.032086][ T7720] team0: Port device team_slave_0 added [ 209.044143][ T7720] team0: Port device team_slave_1 added [ 209.057187][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready 17:22:21 executing program 4: r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @remote}, &(0x7f0000000040)=0x10, 0x800) getsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000080), &(0x7f00000000c0)=0x4) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffff9c, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x9d, 0x81, 0x4d75e6cf, 0x7, 0x101, 0x2, 0x3, {0x0, @in6={{0xa, 0x4e21, 0xff, @mcast2, 0x45}}, 0x101, 0x6, 0x210, 0x200, 0x80}}, &(0x7f00000001c0)=0xb0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000200)={r1, 0x82, "ce81549eb0662489a27e85cfd5b2f1e933c9fecde09f6f34e2714256184ea9ddd311b772bf5095827bbdd72521d0e74df44f824d30dee10acd681a348ec36d9cd98f74bb2abee0a04545072d5e9603bbd1ddccf1698e4e1ab74a78e3587506d8cdb5e6fdb31da63b73d0bb9eb1bbc1cd9d9e84ab94838e9cea4736bbaaa926bb8d36"}, &(0x7f00000002c0)=0x8a) r3 = dup3(r0, r0, 0x80000) setsockopt$inet6_MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f0000000300)={0xbc2, 0x1, 0x8, 0x9, 0x6}, 0xc) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000000380)={'filter\x00', 0x7, 0x4, 0x4a8, 0x280, 0x0, 0x280, 0x3c0, 0x3c0, 0x3c0, 0x4, &(0x7f0000000340), {[{{@uncond, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @loopback, @broadcast, 0x4, 0x1}}}, {{@uncond, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @broadcast, @multicast1, 0x4, 0xffffffff}}}, {{@uncond, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x2, 0xffffffff}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4f8) setsockopt$inet_buf(r3, 0x0, 0x26, &(0x7f0000000880)="51aea7ad9e91a954b3d25ef24e7077ecbdbc4835b9fd8d4bbb33063b5e5c7b286091bdde2eadd2c5acf942ad1721143bc2b62cabdb8c44b671d6e117279e39d0f4797b40aff881971b7301502a48a2a08ac1ef8c46e52bb06a4fff", 0x5b) write$9p(r3, &(0x7f0000000900)="4206ff42694f0635", 0x8) lstat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_set$uid(0x3, r4, 0x7f) ioctl$DRM_IOCTL_ADD_CTX(r3, 0xc0086420, &(0x7f0000000a00)={0x0}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r3, 0x4010641c, &(0x7f0000000b00)={r5, &(0x7f0000000a40)=""/131}) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000b40), &(0x7f0000000b80)=0x14) lsetxattr$trusted_overlay_opaque(&(0x7f0000000bc0)='./file0\x00', &(0x7f0000000c00)='trusted.overlay.opaque\x00', &(0x7f0000000c40)='y\x00', 0x2, 0x0) ioctl$EVIOCGKEY(r3, 0x80404518, &(0x7f0000000c80)=""/185) getrusage(0x0, &(0x7f0000000d40)) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000000e00)={0x0, 'lapb0\x00', 0x4}, 0x18) ioctl$VIDIOC_G_PARM(r3, 0xc0cc5615, &(0x7f0000000e40)={0xa, @capture={0x1000, 0x1, {0x101, 0x7fffffff}, 0x7, 0xfffffffffffffff9}}) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000f40)={{{@in=@multicast2, @in=@initdev}}, {{@in6=@local}, 0x0, @in=@multicast2}}, &(0x7f0000001040)=0xe8) fadvise64(r3, 0x0, 0x6, 0x7) io_setup(0x0, &(0x7f0000001080)=0x0) io_cancel(r6, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0, 0xa18, r0, &(0x7f00000010c0)="7e2f19f5af37309e523c9d2a9204b187b120da11fadb0e56caa97f85a8a68abc3b3b2184d1691f1d63d3d5ae5277e5bfc1c885ddbfac8e9b978e1a1645c178fdcbfa7ebbf4e0d3e05a753b215697a75a28097fc0c39732e06ade8f88edbcf1df6cd69ee1c8baee4d28d637e56f75c85d8d5e4782badb9fd13674a78f73ac9b6a713dc1cd25a8a04df508d7c6ef5f7d2552e257158e09b8d96a23bf6c4ece69bcc59c", 0xa2, 0x1, 0x0, 0x1, r3}, &(0x7f00000011c0)) setsockopt$inet6_int(r3, 0x29, 0xd0, &(0x7f0000001200)=0x3, 0x4) ioctl$EVIOCGBITSND(r3, 0x80404532, &(0x7f0000001240)=""/123) setsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f00000012c0)=@assoc_value={r2, 0xfffffffffffffff8}, 0x8) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000001300)) fchdir(r0) ioctl$ASHMEM_GET_PIN_STATUS(r3, 0x7709, 0x0) fcntl$setlease(r3, 0x400, 0x2) [ 209.066713][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.073828][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 209.162183][ T7726] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 209.174717][ T7726] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.181831][ T7726] bridge0: port 2(bridge_slave_1) entered forwarding state [ 209.211624][ T7726] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 209.231520][ T7726] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 209.278066][ T7717] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 209.291494][ T7717] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network 17:22:21 executing program 5: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x8200, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r0, 0x400448c9, &(0x7f0000000040)={{0x3e, 0xfff, 0x38f, 0x8, 0x7f}, 0x3f}) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0xffffffff, @reserved}, 0x10) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r0, 0x40045730, &(0x7f00000000c0)=0x1) r1 = accept4$alg(r0, 0x0, 0x0, 0x80800) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000100), &(0x7f0000000140)=0x4) ioctl$KVM_XEN_HVM_CONFIG(r0, 0x4038ae7a, &(0x7f0000000340)={0x6, 0xb3b, &(0x7f0000000180)="0931929405903029d5d4b900b4635ad5a004df5fe1e1a8505af38e29fe4bf29c1c6e4294a63f3a30246e378c37f5047d73790bc3e062204a382317c98a8ca050013e4914248917db1368402abc2b8c0faa397b2a18e90e78980fb87de4a0fa7d8b2fb349d78285b96247da6d9e14d2c74a0713ae0134fca1b2ead2e1b7bd3acc998478e2329ea69ef00dc2cb4b20e9fa5282d882b9b728c58c8db9d5e562d8a0d4c1fc300eb705563fac1927830b847a837595305209d76ba33e8426f89e71c4", &(0x7f0000000240)="2abc2d51573d7b17809910c745f952e150ef222cd566d8631ca13112e8094bb63867cf77c64b0983b537d0097c626be5952e32a167eb7f1ecaa1647183049573a7e200c6efe95759d45745d9fe0c4f2e9c2b40bde765602194648d8569fe81a990fa59d431f0e4332280ae23501d83b482120daab2ce30e2fdcd87aca56ca26945fb27460d0d21fc9e05a99c011298a30db95f1d42832577df98edcf402ec7f0f6831acfac4004de1db0011997571bba0a3f913cc0b99afd52bf160d494e2e1b1cfc68d623120d9b5fe30c635f145f413234eb11703b9408383ceb286ae4", 0xc0, 0xde}) bind$bt_rfcomm(r0, &(0x7f0000000380)={0x1f, {0x1, 0x2, 0x80, 0x8, 0x0, 0x5fcb}, 0x4}, 0xa) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f00000003c0)=[@in={0x2, 0x4e20, @loopback}, @in6={0xa, 0x4e23, 0x80000000, @mcast2, 0x3}, @in6={0xa, 0x4e24, 0xe, @mcast1, 0x40}], 0x48) ioctl$TCGETA(r0, 0x5405, &(0x7f0000000440)) fdatasync(r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) bind$vsock_dgram(r0, &(0x7f0000000480)={0x28, 0x0, 0x2710, @host}, 0x10) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000500)={0x2, &(0x7f00000004c0)=[{0x0}, {}]}) ioctl$DRM_IOCTL_RM_CTX(r0, 0xc0086421, &(0x7f0000000540)={r3, 0x1}) getsockopt$TIPC_NODE_RECVQ_DEPTH(r0, 0x10f, 0x83, &(0x7f0000000580), &(0x7f00000005c0)=0x4) fcntl$getownex(r0, 0x10, &(0x7f0000000600)={0x0, 0x0}) sched_getaffinity(r4, 0x8, &(0x7f0000000640)) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r0, 0xc05c5340, &(0x7f0000000680)={0x1, 0xff, 0x0, {0x77359400}, 0x9, 0x1}) ioctl$KDSIGACCEPT(r0, 0x4b4e, 0xf) sendfile(r2, r2, &(0x7f0000000700), 0x2) fstat(r0, &(0x7f0000000740)) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000007c0)=0x3, 0x4) connect$vsock_stream(r0, &(0x7f0000000800)={0x28, 0x0, 0xffffffff}, 0x10) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000840)={0x80, 0x0, 0x0, 0x7c0}) ioctl$DRM_IOCTL_AGP_UNBIND(r0, 0x40106437, &(0x7f0000000880)={r5, 0x800}) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f00000008c0)={0x8, 0x1, 0x0, 0xd15e, 0x0}, &(0x7f0000000900)=0x10) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000940)=@assoc_id=r6, 0x4) r7 = syz_open_dev$media(&(0x7f0000000980)='/dev/media#\x00', 0x6, 0x301000) ioctl$SIOCGETNODEID(r7, 0x89e1, &(0x7f00000009c0)={0x4}) [ 209.382793][ T7720] device hsr_slave_0 entered promiscuous mode [ 209.438995][ T7720] device hsr_slave_1 entered promiscuous mode [ 209.511963][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 209.520192][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 209.528305][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 209.537232][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 209.545602][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 209.554849][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 209.569549][ T7722] chnl_net:caif_netlink_parms(): no params data found [ 209.588530][ T7732] IPVS: ftp: loaded support on port[0] = 21 [ 209.594585][ T7730] IPVS: ftp: loaded support on port[0] = 21 [ 209.734188][ T7722] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.741472][ T7722] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.749633][ T7722] device bridge_slave_0 entered promiscuous mode [ 209.757415][ T7722] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.765009][ T7722] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.772795][ T7722] device bridge_slave_1 entered promiscuous mode [ 209.804837][ T7725] chnl_net:caif_netlink_parms(): no params data found [ 209.827349][ T7722] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 209.841126][ T7717] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 209.865654][ T7722] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 209.944707][ T7722] team0: Port device team_slave_0 added [ 209.967942][ T7725] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.975155][ T7725] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.983443][ T7725] device bridge_slave_0 entered promiscuous mode [ 209.991243][ T7725] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.998293][ T7725] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.006570][ T7725] device bridge_slave_1 entered promiscuous mode [ 210.019079][ T7722] team0: Port device team_slave_1 added [ 210.126690][ T7725] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 210.202110][ T7722] device hsr_slave_0 entered promiscuous mode [ 210.239074][ T7722] device hsr_slave_1 entered promiscuous mode [ 210.279133][ T7732] chnl_net:caif_netlink_parms(): no params data found [ 210.301592][ T7725] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 210.316443][ T7730] chnl_net:caif_netlink_parms(): no params data found 17:22:22 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x288002, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f00000007c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f00000006c0)={0xc4, r1, 0xf04, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x2c, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'syz_tun\x00'}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'rose0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8}]}, @TIPC_NLA_LINK={0x84, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffffffff0cf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5f1c}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ffa1ed2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x101}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x4040000}, 0x4000) r2 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x3, 0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='trusted.overlay.opaque\x00', &(0x7f0000000680)='y\x00', 0x2, 0x0) ioctl$SG_GET_SG_TABLESIZE(0xffffffffffffffff, 0x227f, &(0x7f0000000240)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpgid(0x0) lsetxattr$trusted_overlay_opaque(&(0x7f0000000140)='./file0\x00', &(0x7f0000000300)='trusted.overlay.opaque\x00', 0x0, 0x0, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000080)}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SG_GET_SCSI_ID(0xffffffffffffffff, 0x2276, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000380)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x0, &(0x7f0000000000)) write$eventfd(r3, &(0x7f0000000340)=0x80000000, 0x8) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$P9_RSTAT(r3, &(0x7f0000000540)=ANY=[@ANYBLOB="8a0000007d0200000096020000030000000002000000000000000000000f4953797a00000000000000000000000000090000000000000056fe2f6d696d655f747970656e6f6465762873656375726974795e0f006e667300eff16117129ed0598aa8d41d00657468307070703047504c21232173656c696e757873797374656d2d7d0b0047504c6e6f64"], 0x8a) write$cgroup_subtree(r3, &(0x7f00000000c0), 0x0) r4 = syz_open_dev$usbmon(&(0x7f00000001c0)='/dev/usbmon#\x00', 0x5, 0x800) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) ioctl$VIDIOC_G_DV_TIMINGS(0xffffffffffffffff, 0xc0845658, 0x0) ioctl$VIDIOC_DECODER_CMD(r2, 0xc0485660, &(0x7f0000000480)={0x5, 0x0, @start={0x2}}) syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x4000) ioctl$sock_inet_SIOCGIFPFLAGS(r4, 0x8935, &(0x7f0000000280)={'bond_slave_1\x00'}) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r4, 0x894b, &(0x7f0000000bc0)) getuid() syz_mount_image$ext4(&(0x7f00000002c0)='ext2\x00', &(0x7f0000000500)='./file0\x00', 0x1, 0x1, &(0x7f0000000a80)=[{&(0x7f0000000a00)="8ba8238707c114ab9a87ef9f42b5f4ea47272f6ea7def5e9a3af62021ebfe4932c9f6dc350a7176141d906e79ce53fe02d80615f111c5e24d8574c7330bced845903b6ac4cdc79e769d974b4060614ab23bfe8cbb2", 0x55, 0x1}], 0x0, 0x0) [ 210.340915][ T7720] 8021q: adding VLAN 0 to HW filter on device bond0 [ 210.416126][ T7725] team0: Port device team_slave_0 added [ 210.422827][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 210.430710][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 210.434365][ C1] hrtimer: interrupt took 54524 ns [ 210.440765][ T7720] 8021q: adding VLAN 0 to HW filter on device team0 [ 210.478149][ T7725] team0: Port device team_slave_1 added [ 210.513175][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready 17:22:22 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x288002, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f00000007c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f00000006c0)={0xc4, r1, 0xf04, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x2c, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'syz_tun\x00'}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'rose0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8}]}, @TIPC_NLA_LINK={0x84, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffffffff0cf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5f1c}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ffa1ed2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x101}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x4040000}, 0x4000) r2 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x3, 0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='trusted.overlay.opaque\x00', &(0x7f0000000680)='y\x00', 0x2, 0x0) ioctl$SG_GET_SG_TABLESIZE(0xffffffffffffffff, 0x227f, &(0x7f0000000240)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpgid(0x0) lsetxattr$trusted_overlay_opaque(&(0x7f0000000140)='./file0\x00', &(0x7f0000000300)='trusted.overlay.opaque\x00', 0x0, 0x0, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000080)}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SG_GET_SCSI_ID(0xffffffffffffffff, 0x2276, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000380)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x0, &(0x7f0000000000)) write$eventfd(r3, &(0x7f0000000340)=0x80000000, 0x8) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$P9_RSTAT(r3, &(0x7f0000000540)=ANY=[@ANYBLOB="8a0000007d0200000096020000030000000002000000000000000000000f4953797a00000000000000000000000000090000000000000056fe2f6d696d655f747970656e6f6465762873656375726974795e0f006e667300eff16117129ed0598aa8d41d00657468307070703047504c21232173656c696e757873797374656d2d7d0b0047504c6e6f64"], 0x8a) write$cgroup_subtree(r3, &(0x7f00000000c0), 0x0) r4 = syz_open_dev$usbmon(&(0x7f00000001c0)='/dev/usbmon#\x00', 0x5, 0x800) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) ioctl$VIDIOC_G_DV_TIMINGS(0xffffffffffffffff, 0xc0845658, 0x0) ioctl$VIDIOC_DECODER_CMD(r2, 0xc0485660, &(0x7f0000000480)={0x5, 0x0, @start={0x2}}) syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x4000) ioctl$sock_inet_SIOCGIFPFLAGS(r4, 0x8935, &(0x7f0000000280)={'bond_slave_1\x00'}) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r4, 0x894b, &(0x7f0000000bc0)) getuid() syz_mount_image$ext4(&(0x7f00000002c0)='ext2\x00', &(0x7f0000000500)='./file0\x00', 0x1, 0x1, &(0x7f0000000a80)=[{&(0x7f0000000a00)="8ba8238707c114ab9a87ef9f42b5f4ea47272f6ea7def5e9a3af62021ebfe4932c9f6dc350a7176141d906e79ce53fe02d80615f111c5e24d8574c7330bced845903b6ac4cdc79e769d974b4060614ab23bfe8cbb2", 0x55, 0x1}], 0x0, 0x0) [ 210.522204][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 210.533097][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.540204][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 210.541348][ T7732] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.554756][ T7732] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.563030][ T7732] device bridge_slave_0 entered promiscuous mode [ 210.591069][ T7730] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.598172][ T7730] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.606897][ T7730] device bridge_slave_0 entered promiscuous mode [ 210.615752][ T7730] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.623445][ T7730] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.631959][ T7730] device bridge_slave_1 entered promiscuous mode 17:22:22 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x288002, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f00000007c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f00000006c0)={0xc4, r1, 0xf04, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x2c, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'syz_tun\x00'}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'rose0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8}]}, @TIPC_NLA_LINK={0x84, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffffffff0cf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5f1c}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ffa1ed2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x101}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x4040000}, 0x4000) r2 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x3, 0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='trusted.overlay.opaque\x00', &(0x7f0000000680)='y\x00', 0x2, 0x0) ioctl$SG_GET_SG_TABLESIZE(0xffffffffffffffff, 0x227f, &(0x7f0000000240)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpgid(0x0) lsetxattr$trusted_overlay_opaque(&(0x7f0000000140)='./file0\x00', &(0x7f0000000300)='trusted.overlay.opaque\x00', 0x0, 0x0, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000080)}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SG_GET_SCSI_ID(0xffffffffffffffff, 0x2276, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000380)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x0, &(0x7f0000000000)) write$eventfd(r3, &(0x7f0000000340)=0x80000000, 0x8) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$P9_RSTAT(r3, &(0x7f0000000540)=ANY=[@ANYBLOB="8a0000007d0200000096020000030000000002000000000000000000000f4953797a00000000000000000000000000090000000000000056fe2f6d696d655f747970656e6f6465762873656375726974795e0f006e667300eff16117129ed0598aa8d41d00657468307070703047504c21232173656c696e757873797374656d2d7d0b0047504c6e6f64"], 0x8a) write$cgroup_subtree(r3, &(0x7f00000000c0), 0x0) r4 = syz_open_dev$usbmon(&(0x7f00000001c0)='/dev/usbmon#\x00', 0x5, 0x800) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) ioctl$VIDIOC_G_DV_TIMINGS(0xffffffffffffffff, 0xc0845658, 0x0) ioctl$VIDIOC_DECODER_CMD(r2, 0xc0485660, &(0x7f0000000480)={0x5, 0x0, @start={0x2}}) syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x4000) ioctl$sock_inet_SIOCGIFPFLAGS(r4, 0x8935, &(0x7f0000000280)={'bond_slave_1\x00'}) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r4, 0x894b, &(0x7f0000000bc0)) getuid() syz_mount_image$ext4(&(0x7f00000002c0)='ext2\x00', &(0x7f0000000500)='./file0\x00', 0x1, 0x1, &(0x7f0000000a80)=[{&(0x7f0000000a00)="8ba8238707c114ab9a87ef9f42b5f4ea47272f6ea7def5e9a3af62021ebfe4932c9f6dc350a7176141d906e79ce53fe02d80615f111c5e24d8574c7330bced845903b6ac4cdc79e769d974b4060614ab23bfe8cbb2", 0x55, 0x1}], 0x0, 0x0) [ 210.646413][ T7726] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 210.663864][ T7726] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 210.676132][ T7726] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready 17:22:23 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x288002, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f00000007c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f00000006c0)={0xc4, r1, 0xf04, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x2c, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'syz_tun\x00'}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'rose0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8}]}, @TIPC_NLA_LINK={0x84, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffffffff0cf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5f1c}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ffa1ed2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x101}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x4040000}, 0x4000) r2 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x3, 0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='trusted.overlay.opaque\x00', &(0x7f0000000680)='y\x00', 0x2, 0x0) ioctl$SG_GET_SG_TABLESIZE(0xffffffffffffffff, 0x227f, &(0x7f0000000240)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpgid(0x0) lsetxattr$trusted_overlay_opaque(&(0x7f0000000140)='./file0\x00', &(0x7f0000000300)='trusted.overlay.opaque\x00', 0x0, 0x0, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000080)}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SG_GET_SCSI_ID(0xffffffffffffffff, 0x2276, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000380)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x0, &(0x7f0000000000)) write$eventfd(r3, &(0x7f0000000340)=0x80000000, 0x8) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$P9_RSTAT(r3, &(0x7f0000000540)=ANY=[@ANYBLOB="8a0000007d0200000096020000030000000002000000000000000000000f4953797a00000000000000000000000000090000000000000056fe2f6d696d655f747970656e6f6465762873656375726974795e0f006e667300eff16117129ed0598aa8d41d00657468307070703047504c21232173656c696e757873797374656d2d7d0b0047504c6e6f64"], 0x8a) write$cgroup_subtree(r3, &(0x7f00000000c0), 0x0) r4 = syz_open_dev$usbmon(&(0x7f00000001c0)='/dev/usbmon#\x00', 0x5, 0x800) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) ioctl$VIDIOC_G_DV_TIMINGS(0xffffffffffffffff, 0xc0845658, 0x0) ioctl$VIDIOC_DECODER_CMD(r2, 0xc0485660, &(0x7f0000000480)={0x5, 0x0, @start={0x2}}) syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x4000) ioctl$sock_inet_SIOCGIFPFLAGS(r4, 0x8935, &(0x7f0000000280)={'bond_slave_1\x00'}) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r4, 0x894b, &(0x7f0000000bc0)) getuid() syz_mount_image$ext4(&(0x7f00000002c0)='ext2\x00', &(0x7f0000000500)='./file0\x00', 0x1, 0x1, &(0x7f0000000a80)=[{&(0x7f0000000a00)="8ba8238707c114ab9a87ef9f42b5f4ea47272f6ea7def5e9a3af62021ebfe4932c9f6dc350a7176141d906e79ce53fe02d80615f111c5e24d8574c7330bced845903b6ac4cdc79e769d974b4060614ab23bfe8cbb2", 0x55, 0x1}], 0x0, 0x0) [ 210.704483][ T7726] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.711623][ T7726] bridge0: port 2(bridge_slave_1) entered forwarding state [ 210.731149][ T7732] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.738225][ T7732] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.752122][ T7732] device bridge_slave_1 entered promiscuous mode [ 210.793384][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 210.832951][ T7730] bond0: Enslaving bond_slave_0 as an active interface with an up link 17:22:23 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x288002, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f00000007c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f00000006c0)={0xc4, r1, 0xf04, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x2c, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'syz_tun\x00'}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'rose0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8}]}, @TIPC_NLA_LINK={0x84, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffffffff0cf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5f1c}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ffa1ed2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x101}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x4040000}, 0x4000) r2 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x3, 0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='trusted.overlay.opaque\x00', &(0x7f0000000680)='y\x00', 0x2, 0x0) ioctl$SG_GET_SG_TABLESIZE(0xffffffffffffffff, 0x227f, &(0x7f0000000240)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpgid(0x0) lsetxattr$trusted_overlay_opaque(&(0x7f0000000140)='./file0\x00', &(0x7f0000000300)='trusted.overlay.opaque\x00', 0x0, 0x0, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000080)}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SG_GET_SCSI_ID(0xffffffffffffffff, 0x2276, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000380)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x0, &(0x7f0000000000)) write$eventfd(r3, &(0x7f0000000340)=0x80000000, 0x8) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$P9_RSTAT(r3, &(0x7f0000000540)=ANY=[@ANYBLOB="8a0000007d0200000096020000030000000002000000000000000000000f4953797a00000000000000000000000000090000000000000056fe2f6d696d655f747970656e6f6465762873656375726974795e0f006e667300eff16117129ed0598aa8d41d00657468307070703047504c21232173656c696e757873797374656d2d7d0b0047504c6e6f64"], 0x8a) write$cgroup_subtree(r3, &(0x7f00000000c0), 0x0) r4 = syz_open_dev$usbmon(&(0x7f00000001c0)='/dev/usbmon#\x00', 0x5, 0x800) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) ioctl$VIDIOC_G_DV_TIMINGS(0xffffffffffffffff, 0xc0845658, 0x0) ioctl$VIDIOC_DECODER_CMD(r2, 0xc0485660, &(0x7f0000000480)={0x5, 0x0, @start={0x2}}) syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x4000) ioctl$sock_inet_SIOCGIFPFLAGS(r4, 0x8935, &(0x7f0000000280)={'bond_slave_1\x00'}) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r4, 0x894b, &(0x7f0000000bc0)) getuid() syz_mount_image$ext4(&(0x7f00000002c0)='ext2\x00', &(0x7f0000000500)='./file0\x00', 0x1, 0x1, &(0x7f0000000a80)=[{&(0x7f0000000a00)="8ba8238707c114ab9a87ef9f42b5f4ea47272f6ea7def5e9a3af62021ebfe4932c9f6dc350a7176141d906e79ce53fe02d80615f111c5e24d8574c7330bced845903b6ac4cdc79e769d974b4060614ab23bfe8cbb2", 0x55, 0x1}], 0x0, 0x0) [ 210.850431][ T7730] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 210.901707][ T7725] device hsr_slave_0 entered promiscuous mode [ 210.959029][ T7725] device hsr_slave_1 entered promiscuous mode [ 211.048615][ T7726] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 211.056976][ T7770] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 211.064560][ T7726] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 211.073154][ T7726] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 211.089658][ T7726] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 211.160971][ T7732] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 211.197683][ T7730] team0: Port device team_slave_0 added [ 211.217782][ T3480] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 211.231748][ T3480] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 211.253116][ T7732] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 211.295973][ T7730] team0: Port device team_slave_1 added [ 211.301970][ T7720] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 211.320723][ T7720] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 211.362395][ T3480] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 211.370876][ T3480] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 211.379996][ T3480] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 211.388254][ T3480] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 211.404091][ T7732] team0: Port device team_slave_0 added 17:22:23 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'batadv0\x00', 0x2}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x3, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7fe3, 0x0, 0x200003e6, 0x61}]}, &(0x7f0000000240)='GPL\x00', 0x7fffffff, 0xfcb1, &(0x7f0000000380)=""/251}, 0x48) r2 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x100) write$uinput_user_dev(r2, &(0x7f0000000500)={'syz1\x00', {0x33, 0x3, 0x3, 0x3}, 0x22, [0xc845, 0x5, 0x1, 0x7, 0x7, 0x0, 0x101, 0x7, 0x0, 0xfffffffffffffffa, 0xa16, 0x8, 0x7, 0x0, 0x9, 0xfffffffffffffffa, 0x9, 0x7f, 0x3, 0x200, 0xbbe, 0x1, 0x6, 0xfffffffffffffffe, 0x8, 0x3, 0x8, 0x8, 0x1ff, 0x1000, 0x0, 0x80000001, 0x2, 0x7ff, 0x3f, 0x2, 0x6, 0x7, 0x7, 0x8, 0x5, 0x9, 0xffffffffffff6048, 0x100, 0x6, 0x100000000000000, 0x8, 0x5, 0x1, 0xfffffffffffffffc, 0x8, 0x2, 0x6, 0x5, 0x3f, 0x4, 0x1, 0x6, 0x1, 0x401, 0xffff, 0x75cf, 0x800000, 0x10001], [0x2, 0xfffffffffffffff7, 0xff4, 0x2, 0xffff, 0x7, 0x7fffffff, 0x72bfbe3f, 0x18e8, 0x9, 0xc13c, 0x80000000, 0xffff, 0x1, 0x9, 0x20, 0x80, 0x4, 0x5, 0x1, 0xfffffffffffffffb, 0x9, 0xffffffff, 0x98a4, 0x6, 0x9, 0xffffffff, 0x8000, 0x4, 0x8, 0x2, 0x7fff, 0x8, 0xffffffffffff7085, 0x6, 0x0, 0x0, 0x9, 0x7, 0x10001, 0x6, 0x3, 0x96, 0x2, 0x0, 0x55e, 0x6, 0x400, 0x9, 0x4, 0xfa9, 0xac, 0x3, 0x0, 0x8, 0x9, 0x3, 0x5, 0x53, 0x2, 0x0, 0x2, 0xe7, 0x4], [0xb32e, 0x4, 0x97c, 0xf2, 0xffffffffffff8001, 0x20, 0x4, 0x8000, 0x7, 0x4, 0x0, 0x80, 0xc51, 0xae6, 0xb195, 0x6, 0x80, 0x2, 0x100000001, 0x2, 0x2, 0xffffffff, 0x100000000, 0x44, 0x3f, 0x7, 0x9, 0x200, 0xffffffffffffffff, 0xfffffffffffffffc, 0x1c7b, 0x3, 0x6, 0x7fff, 0x1f, 0x8, 0x0, 0xd57, 0x3f, 0x1000, 0x7, 0x6, 0xffff, 0x2, 0x54, 0x8, 0xfcf, 0x10000, 0x101, 0x1000, 0x6, 0xfffffffffffffffa, 0xb141, 0x569c, 0x5, 0x6, 0x9, 0x9, 0x4, 0x9, 0x0, 0x1, 0x2, 0x80000001], [0x2d0, 0x20, 0x1000, 0x9, 0xe0, 0x0, 0x1ff, 0x3, 0x4, 0x3, 0x4, 0x1, 0xa9300000000000, 0x2, 0x6, 0x100000001, 0x7, 0x2, 0xb2, 0x0, 0x0, 0x8, 0xff, 0x4, 0x1, 0x400, 0x4, 0x5, 0x1, 0x800, 0x2, 0x7, 0x9, 0x4, 0x7fffffff, 0x2, 0x0, 0x8, 0x2, 0x1f, 0x0, 0x0, 0x8, 0x4, 0x8000, 0x0, 0x9000, 0x101, 0x7fff, 0x0, 0x6, 0x2, 0x2, 0x5, 0x401, 0x100000001, 0x9f, 0x80000001, 0xda1, 0x5, 0x4, 0x5, 0xfffffffffffffffd, 0x8]}, 0x45c) ioctl$FS_IOC_SETFSLABEL(r1, 0x41009432, &(0x7f0000000080)="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") [ 211.419422][ T7732] team0: Port device team_slave_1 added [ 211.457408][ T3480] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 211.518392][ T7725] 8021q: adding VLAN 0 to HW filter on device bond0 [ 211.539507][ T7720] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 211.572352][ T7732] device hsr_slave_0 entered promiscuous mode [ 211.629428][ T7732] device hsr_slave_1 entered promiscuous mode [ 211.931732][ T7730] device hsr_slave_0 entered promiscuous mode [ 211.989157][ T7730] device hsr_slave_1 entered promiscuous mode 17:22:24 executing program 0: r0 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x0) getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f00000000c0)=@assoc_value={0x0, 0x3}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000180)={r1, 0xe1, "78cbc6342dcc172fca7ed41050b3107ea7824cbbbb4f4c5dd202b1f28dd144f403dedcfabf6377df84d4f18b697884fd57f8c00e0af76319c20e09a969397f6eb32c71acdfa4bbb4df990b4a50e8105969ec9befc4ae8b7867ff11ff9509b7e90344ed39ad64bb51a4d3729233dc585fe816a7cc3a6d540e170fcf446887d4e352109f2e404089f1daa95c0992e61904e507b6322e1f42c18cad4e85d5b3b69e22aae89a125171885616defca775094f676663912716114429ab5169ce13af7a534da6629735d4c7b3beb73c803a3be9cd8bfdccc259846451011760918509c346"}, &(0x7f0000000280)=0xe9) write$P9_RLINK(r0, &(0x7f0000000080)={0x7, 0x47, 0x1}, 0x7) rt_sigprocmask(0x0, &(0x7f00001b6ff8)={0xfffffffffffffffe}, 0x0, 0x8) r2 = memfd_create(&(0x7f0000000040)='\x02\x00\x00\x00\b\xa8\xdf\x9ec\xdc\x9e\x1d\x8b\xe6', 0x4) ftruncate(r2, 0x100040001) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip6_mr_cache\x00') setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, &(0x7f0000000100)=0xc91, 0xfeee) [ 212.031519][ T7722] 8021q: adding VLAN 0 to HW filter on device bond0 [ 212.061537][ T3480] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 212.070935][ T3480] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 212.098553][ T7722] 8021q: adding VLAN 0 to HW filter on device team0 [ 212.128379][ T7725] 8021q: adding VLAN 0 to HW filter on device team0 [ 212.145424][ T3480] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 212.162869][ T3480] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 17:22:24 executing program 1: r0 = socket$inet6(0xa, 0x803, 0x20) setsockopt$inet6_mreq(r0, 0x29, 0x8000000001b, &(0x7f00000000c0)={@remote}, 0x2ad) syz_emit_ethernet(0x4a, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6083313200148700fe8000000000000000000000008000bbfe8000000000000000000000000000bb00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="8600000090780000"], 0x0) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x800, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r1, 0x40206417, &(0x7f0000000040)={0x1, 0xfffffffffffffffa, 0x20, 0x4fc, 0x2, 0x34}) [ 212.209804][ T3480] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 212.226835][ T3480] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 212.256338][ T3480] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.263507][ T3480] bridge0: port 1(bridge_slave_0) entered forwarding state [ 212.273817][ T3480] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 212.282636][ T3480] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 212.291039][ T3480] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.298074][ T3480] bridge0: port 1(bridge_slave_0) entered forwarding state [ 212.306424][ T3480] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 212.314964][ T3480] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 212.323340][ T3480] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.330403][ T3480] bridge0: port 2(bridge_slave_1) entered forwarding state [ 212.337887][ T3480] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 212.372510][ T3480] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 212.380771][ T3480] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 212.388473][ T3480] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 212.397102][ T3480] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 212.405458][ T3480] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.412548][ T3480] bridge0: port 2(bridge_slave_1) entered forwarding state [ 212.438276][ T7792] syz-executor.1 (7792) used greatest stack depth: 22880 bytes left [ 212.455365][ T7732] 8021q: adding VLAN 0 to HW filter on device bond0 [ 212.462871][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 212.478485][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 212.487488][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 212.496340][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 212.506808][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 212.517074][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 212.526362][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 212.541707][ T7730] 8021q: adding VLAN 0 to HW filter on device bond0 [ 212.558606][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 212.566429][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 212.575108][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 212.583696][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 212.592464][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 212.602368][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 212.610183][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 212.618422][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 212.637563][ T7730] 8021q: adding VLAN 0 to HW filter on device team0 [ 212.648410][ T7726] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 212.656993][ T7726] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 212.665334][ T7726] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 212.673105][ T7726] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 212.680849][ T7726] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 212.688377][ T7726] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 212.696094][ T7726] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 212.704612][ T7726] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 212.717607][ T7732] 8021q: adding VLAN 0 to HW filter on device team0 [ 212.726004][ T7722] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 212.745685][ T3480] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 212.754108][ T3480] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 212.764619][ T3480] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 212.773481][ T3480] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 212.782170][ T3480] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.789294][ T3480] bridge0: port 1(bridge_slave_0) entered forwarding state [ 212.797660][ T7725] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 212.813344][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 212.822361][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 212.831700][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 212.840543][ T22] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.847583][ T22] bridge0: port 2(bridge_slave_1) entered forwarding state [ 212.855714][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 212.874927][ T7722] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 212.888786][ T7795] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 212.897348][ T7795] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 212.906795][ T7795] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.913956][ T7795] bridge0: port 1(bridge_slave_0) entered forwarding state [ 212.925751][ T7795] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 212.933809][ T7795] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 212.955813][ T7725] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 212.969450][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 212.977986][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 212.987456][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.994567][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 213.012898][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 213.021774][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 213.030234][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 213.038596][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 213.047542][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready 17:22:25 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000440)=""/146) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0xfffffde0) r3 = socket$rxrpc(0x21, 0x2, 0x4000000000000a) ioctl$int_in(r0, 0x5473, &(0x7f0000000340)=0xfffffffffffff001) bind$rxrpc(r3, &(0x7f0000000140)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e22, 0x2, @remote, 0x4}}, 0x24) listen(r3, 0x9) modify_ldt$write(0x1, &(0x7f0000000300)={0x0, 0x20001000, 0xf6a19cc09ebfc357, 0x3, 0x400, 0x9, 0x3f, 0x100000001, 0x10001, 0x7}, 0x10) fstat(0xffffffffffffff9c, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x1ec51da1abe9f22b, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f0000000280)={0x7, 0x0, 0x4, 0x100, {r4, r5/1000+30000}, {0x7, 0xb, 0x1, 0x10001, 0xffffffff, 0x9, "c8c0963d"}, 0x1, 0x2, @offset=0x7, 0x4}) wait4(0x0, 0x0, 0x80000002, 0x0) r6 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x8000, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r6, 0xc0045516, &(0x7f0000000040)=0x5) tkill(r1, 0x2a) ptrace$cont(0x18, r1, 0x0, 0x0) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x31}) getsockopt$IP6T_SO_GET_ENTRIES(r7, 0x29, 0x41, &(0x7f0000000500)=ANY=[@ANYBLOB="7365637572697479000000000000000000000006000000000000000000000200000000000000e1294da536fded81cbe53bdca3a74371909220b97d520f26ab2dec2dffaee2b75b8a1ce780f7f6d2a621edddeec32a53cce7ec92eba46e5c6bb11f15b73a5c65efbb7bb931bceb81f0ea64be35157633cd49b21b47fbf88e57af885b10062bc1b7762271d7fd29"], 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r1, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1f, 0x2200) ioctl(r0, 0xfffffffffff3ffb8, &(0x7f0000000080)="b841cdea41") [ 213.065124][ T7726] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 213.073527][ T7726] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 213.083215][ T7726] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 213.094890][ T7730] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 213.106509][ T7730] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 213.139416][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 213.158017][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 213.204523][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 213.216311][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 213.233256][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready 17:22:25 executing program 3: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000000), &(0x7f0000000040)=0x30) r1 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x7, 0x2) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f00000000c0)=0x333004, 0x4) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2}) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000140)={0x6708, r2, 0x10001, 0x5}) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000180)={r0}) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f00000001c0), &(0x7f0000000200)=0x30) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000240)=0x7fff) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r3) ioctl$sock_rose_SIOCADDRT(r1, 0x890b, &(0x7f0000000340)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x2000000000000, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={'nr', 0x0}, 0x8, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @bcast, @null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) mincore(&(0x7f0000ffd000/0x3000)=nil, 0x3000, &(0x7f00000003c0)=""/206) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r1, 0x118, 0x1, &(0x7f00000004c0)=0x21b, 0x4) clock_getres(0x2, &(0x7f0000000500)) listen(r1, 0x100000001) write(r0, &(0x7f0000000540)="ca563cdc9bb7d849", 0x8) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r1, &(0x7f0000000740)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x10000110}, 0xc, &(0x7f0000000700)={&(0x7f0000000600)={0xdc, r4, 0x104, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x101}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_DAEMON={0x68, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={[], [], @multicast2}}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bpq0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x15}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x3}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bcsh0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_DAEMON={0x48, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x772}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x4000001}, 0x20000094) r5 = request_key(&(0x7f0000000800)='cifs.idmap\x00', &(0x7f0000000840)={'syz', 0x1}, &(0x7f0000000880)='trusted@+\x00', 0xfffffffffffffffc) add_key$keyring(&(0x7f0000000780)='keyring\x00', &(0x7f00000007c0)={'syz', 0x3}, 0x0, 0x0, r5) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f00000008c0), &(0x7f0000000900)=0x4) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000940)={0x0, @in={{0x2, 0x4e24, @multicast2}}}, &(0x7f0000000a00)=0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000a40)={r6, @in={{0x2, 0x4e20, @multicast1}}, 0x5, 0x100}, 0x90) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, &(0x7f0000000b00)) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000cc0)={r1, &(0x7f0000000b80)="29b9b3e9f3e18f400905dee1cd9f6f90f8f6d0c3750b9a9d8b62730e8d93cc69c0f65445547ce03177cda9560dfe57043643e6dc47f3ca87ba5c0943ac235272dde14bda28709b39afe749bfd8da1d24", &(0x7f0000000c00)="073ce2406fdcb7b4d01ff9d868656e0b57391ab1808d5e4486987fab1e83c2e3dd26a4cac1b711e4bbbfd41f4ac6263a17a083aa1dacd0694ec20b7e16e4896c29e290d519e85c38cea269e74bce7a54d457c6e1889c5bb32618b9ddfb372eb1553c696e02856280f1481ccf8070a7e7b45afea916acb17dcb2976eeb50e51ac21b7ac703284e8a3b7cadb9d4cdb45804e7525a27b1523517de9abde33efbde7596f23a8c77e", 0x2}, 0x20) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000d00)='tls\x00', 0x4) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000d80)='TIPC\x00') sendmsg$TIPC_CMD_GET_MAX_PORTS(r1, &(0x7f0000000e40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x1c, r7, 0x2, 0x70bd26, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendto(r1, &(0x7f0000000e80)="5d631302af13c3a50ed011c359ab67d7b45646a3d73d8b84303d9cc77f085a7b1d22189f20b143ff56f0b3e331ecfb457750d9dc1342a367abec19feb02d2497f192", 0x42, 0x4000, 0x0, 0x0) [ 213.262230][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 213.282309][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 213.300726][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 213.314688][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 213.331975][ T7732] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 213.355131][ T7732] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 213.375864][ T7730] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 213.385547][ T7726] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 213.394201][ T7726] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 213.403238][ T7726] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 213.442164][ T7732] 8021q: adding VLAN 0 to HW filter on device batadv0 17:22:25 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) setsockopt$IP_VS_SO_SET_DELDEST(0xffffffffffffffff, 0x0, 0x488, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, 0x0, &(0x7f00002bdffc)) mprotect(&(0x7f00002bd000/0x1000)=nil, 0x1000, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)='veth1\x00\x00\x00\x00\xff\xff\xff\xff\xff\xef\x00', 0xb) r1 = dup2(r0, r0) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x1}}, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000000), 0xfffffdef, 0xc0, 0x0, 0x0) mincore(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) ioctl$KVM_ASSIGN_PCI_DEVICE(r1, 0x8040ae69, &(0x7f00000000c0)={0x100000001, 0x4, 0x7, 0x4, 0x7fff}) ioctl$FS_IOC_GETFLAGS(r0, 0x80046601, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000003c0), &(0x7f00000002c0)=0x1000000da) pipe(&(0x7f0000000000)) socket$packet(0x11, 0x0, 0x300) connect$inet6(0xffffffffffffffff, &(0x7f0000000080), 0x1c) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$sndtimer(0x0, 0x0, 0x3fff) r2 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x6, 0x40) ioctl$KDSKBSENT(r2, 0x4b49, &(0x7f0000000080)="2fab0406bab546e61d383ecef687027a96c08549bb9b6411a375127c523f4dfe1dadad50147a4d42fa529e59e712c63231671d733d7aae1b4a7ae7") 17:22:25 executing program 0: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x200, 0x0) ioctl$BLKSECDISCARD(r0, 0x127d, &(0x7f0000000040)) 17:22:25 executing program 1: pkey_alloc(0x0, 0x3) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcs\x00', 0x0, 0x0) gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(0xffffffffffffffff, 0xc1105511, 0x0) ioctl$SIOCX25GCALLUSERDATA(r1, 0x89e4, &(0x7f00000002c0)={0x1e, "0faae0520a9ba45901937d097590050df923ba3e590e8f35bf8cc478f7df9c9c29580727b7a58c26d1b3f2e726ecb5ee74408b8cd6b7adbb333178e46717b881f6c45cc508ffb09dc08354e3edd5957d09d808cb86c3e2f41935b794e43fb8d6b720cf2a5937d24f283ffa3f695b558bbc790bb1eeb9f9b048e0d4befad5c296"}) getxattr(&(0x7f0000000240)='./file0\x00', &(0x7f0000000380)=@random={'os2.', 'selfuser.em1/!{wlan0,\x00'}, &(0x7f0000000400)=""/69, 0x45) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000840)={{{@in=@remote, @in6}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000940)=0xffffffffffffffc9) getgid() r2 = socket$nl_generic(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r2, 0x89f2, &(0x7f0000000180)={'ip6gre0\x00'}) getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x100000000000000, 0x0, 0x0) dup2(r2, r0) syz_open_procfs(0x0, 0x0) timerfd_create(0x0, 0x80080000) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r3, 0x0, 0x0) timer_create(0x0, 0x0, &(0x7f00000001c0)) fcntl$getown(r4, 0x9) rt_sigqueueinfo(0x0, 0x5, &(0x7f0000000100)={0x3}) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000003c0)='ip6_vti0\x00', 0x10) r5 = socket$l2tp(0x18, 0x1, 0x1) connect$inet6(r3, &(0x7f0000000280)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) connect$l2tp(r5, &(0x7f0000000200)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) sendmmsg(r5, &(0x7f0000000380), 0x48afcdf47daca1f, 0x44) 17:22:25 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000440)=""/146) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0xfffffde0) r3 = socket$rxrpc(0x21, 0x2, 0x4000000000000a) ioctl$int_in(r0, 0x5473, &(0x7f0000000340)=0xfffffffffffff001) bind$rxrpc(r3, &(0x7f0000000140)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e22, 0x2, @remote, 0x4}}, 0x24) listen(r3, 0x9) modify_ldt$write(0x1, &(0x7f0000000300)={0x0, 0x20001000, 0xf6a19cc09ebfc357, 0x3, 0x400, 0x9, 0x3f, 0x100000001, 0x10001, 0x7}, 0x10) fstat(0xffffffffffffff9c, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x1ec51da1abe9f22b, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f0000000280)={0x7, 0x0, 0x4, 0x100, {r4, r5/1000+30000}, {0x7, 0xb, 0x1, 0x10001, 0xffffffff, 0x9, "c8c0963d"}, 0x1, 0x2, @offset=0x7, 0x4}) wait4(0x0, 0x0, 0x80000002, 0x0) r6 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x8000, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r6, 0xc0045516, &(0x7f0000000040)=0x5) tkill(r1, 0x2a) ptrace$cont(0x18, r1, 0x0, 0x0) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x31}) getsockopt$IP6T_SO_GET_ENTRIES(r7, 0x29, 0x41, &(0x7f0000000500)=ANY=[@ANYBLOB="7365637572697479000000000000000000000006000000000000000000000200000000000000e1294da536fded81cbe53bdca3a74371909220b97d520f26ab2dec2dffaee2b75b8a1ce780f7f6d2a621edddeec32a53cce7ec92eba46e5c6bb11f15b73a5c65efbb7bb931bceb81f0ea64be35157633cd49b21b47fbf88e57af885b10062bc1b7762271d7fd29"], 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r1, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1f, 0x2200) ioctl(r0, 0xfffffffffff3ffb8, &(0x7f0000000080)="b841cdea41") 17:22:25 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000440)=""/146) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0xfffffde0) r3 = socket$rxrpc(0x21, 0x2, 0x4000000000000a) ioctl$int_in(r0, 0x5473, &(0x7f0000000340)=0xfffffffffffff001) bind$rxrpc(r3, &(0x7f0000000140)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e22, 0x2, @remote, 0x4}}, 0x24) listen(r3, 0x9) modify_ldt$write(0x1, &(0x7f0000000300)={0x0, 0x20001000, 0xf6a19cc09ebfc357, 0x3, 0x400, 0x9, 0x3f, 0x100000001, 0x10001, 0x7}, 0x10) fstat(0xffffffffffffff9c, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x1ec51da1abe9f22b, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f0000000280)={0x7, 0x0, 0x4, 0x100, {r4, r5/1000+30000}, {0x7, 0xb, 0x1, 0x10001, 0xffffffff, 0x9, "c8c0963d"}, 0x1, 0x2, @offset=0x7, 0x4}) wait4(0x0, 0x0, 0x80000002, 0x0) r6 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x8000, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r6, 0xc0045516, &(0x7f0000000040)=0x5) tkill(r1, 0x2a) ptrace$cont(0x18, r1, 0x0, 0x0) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x31}) getsockopt$IP6T_SO_GET_ENTRIES(r7, 0x29, 0x41, &(0x7f0000000500)=ANY=[@ANYBLOB="7365637572697479000000000000000000000006000000000000000000000200000000000000e1294da536fded81cbe53bdca3a74371909220b97d520f26ab2dec2dffaee2b75b8a1ce780f7f6d2a621edddeec32a53cce7ec92eba46e5c6bb11f15b73a5c65efbb7bb931bceb81f0ea64be35157633cd49b21b47fbf88e57af885b10062bc1b7762271d7fd29"], 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r1, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1f, 0x2200) ioctl(r0, 0xfffffffffff3ffb8, &(0x7f0000000080)="b841cdea41") 17:22:25 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) socket$nl_xfrm(0x10, 0x3, 0x6) fcntl$setstatus(r1, 0x4, 0x2800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000fd6000)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000380)=0x6) ioctl$TCFLSH(r0, 0x540b, 0x0) 17:22:25 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x13, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_user\x00', 0x0, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000080)={0x1, 0x401, 0x2}) ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000040)={0x60000000000, 0x3, 0x800, 0x9}) 17:22:26 executing program 2: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x2000, 0x0) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000080)={0x1, 0x1000, 0x4}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={0xffffffffffffffff, 0x0, 0x0}, 0x20) clone(0x1006210f, 0x0, 0x0, &(0x7f0000000000), 0x0) 17:22:26 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x3e, &(0x7f0000000080)=0xffffffff, 0x4) r1 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x1, 0x101000) getsockopt$inet6_dccp_int(r1, 0x21, 0xf, &(0x7f0000000040), &(0x7f00000000c0)=0x4) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_VOICE(r2, 0x112, 0xb, 0x0, 0xf3220f2d64ca06ab) [ 213.879217][ C1] protocol 88fb is buggy, dev hsr_slave_0 17:22:26 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) socket$nl_xfrm(0x10, 0x3, 0x6) fcntl$setstatus(r1, 0x4, 0x2800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000fd6000)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000380)=0x6) ioctl$TCFLSH(r0, 0x540b, 0x0) 17:22:26 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000440)=""/146) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0xfffffde0) r3 = socket$rxrpc(0x21, 0x2, 0x4000000000000a) ioctl$int_in(r0, 0x5473, &(0x7f0000000340)=0xfffffffffffff001) bind$rxrpc(r3, &(0x7f0000000140)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e22, 0x2, @remote, 0x4}}, 0x24) listen(r3, 0x9) modify_ldt$write(0x1, &(0x7f0000000300)={0x0, 0x20001000, 0xf6a19cc09ebfc357, 0x3, 0x400, 0x9, 0x3f, 0x100000001, 0x10001, 0x7}, 0x10) fstat(0xffffffffffffff9c, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x1ec51da1abe9f22b, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f0000000280)={0x7, 0x0, 0x4, 0x100, {r4, r5/1000+30000}, {0x7, 0xb, 0x1, 0x10001, 0xffffffff, 0x9, "c8c0963d"}, 0x1, 0x2, @offset=0x7, 0x4}) wait4(0x0, 0x0, 0x80000002, 0x0) r6 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x8000, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r6, 0xc0045516, &(0x7f0000000040)=0x5) tkill(r1, 0x2a) ptrace$cont(0x18, r1, 0x0, 0x0) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x31}) getsockopt$IP6T_SO_GET_ENTRIES(r7, 0x29, 0x41, &(0x7f0000000500)=ANY=[@ANYBLOB="7365637572697479000000000000000000000006000000000000000000000200000000000000e1294da536fded81cbe53bdca3a74371909220b97d520f26ab2dec2dffaee2b75b8a1ce780f7f6d2a621edddeec32a53cce7ec92eba46e5c6bb11f15b73a5c65efbb7bb931bceb81f0ea64be35157633cd49b21b47fbf88e57af885b10062bc1b7762271d7fd29"], 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r1, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1f, 0x2200) ioctl(r0, 0xfffffffffff3ffb8, &(0x7f0000000080)="b841cdea41") 17:22:26 executing program 0: syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="696e6f646533322c00512b679ce8d314554f2ae38a5649ee94f90cbf28cbef96a3536f481ee2825c541942e39cf69bd2122e736cf21aa21a49ada2933eb0e597bbfb26874e3c3a194ca04b83b17f886427c05e16665d48c99c7d293c94e88bfec8f15f0e00b0b291622907a1954b08ce482cbce821e0e2fcee5dccd6f0510a0619f17a856e31da3b66fc6f2eca8cb9b4d093d3"]) [ 214.234139][ T7872] XFS (loop0): Invalid superblock magic number 17:22:26 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) setsockopt$IP_VS_SO_SET_DELDEST(0xffffffffffffffff, 0x0, 0x488, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, 0x0, &(0x7f00002bdffc)) mprotect(&(0x7f00002bd000/0x1000)=nil, 0x1000, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)='veth1\x00\x00\x00\x00\xff\xff\xff\xff\xff\xef\x00', 0xb) r1 = dup2(r0, r0) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x1}}, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000000), 0xfffffdef, 0xc0, 0x0, 0x0) mincore(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) ioctl$KVM_ASSIGN_PCI_DEVICE(r1, 0x8040ae69, &(0x7f00000000c0)={0x100000001, 0x4, 0x7, 0x4, 0x7fff}) ioctl$FS_IOC_GETFLAGS(r0, 0x80046601, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000003c0), &(0x7f00000002c0)=0x1000000da) pipe(&(0x7f0000000000)) socket$packet(0x11, 0x0, 0x300) connect$inet6(0xffffffffffffffff, &(0x7f0000000080), 0x1c) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$sndtimer(0x0, 0x0, 0x3fff) r2 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x6, 0x40) ioctl$KDSKBSENT(r2, 0x4b49, &(0x7f0000000080)="2fab0406bab546e61d383ecef687027a96c08549bb9b6411a375127c523f4dfe1dadad50147a4d42fa529e59e712c63231671d733d7aae1b4a7ae7") 17:22:26 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x8) r0 = socket(0x10, 0x2, 0x0) syslog(0x3, &(0x7f00000000c0)=""/147, 0x37a8ec531be3c41f) setsockopt$netrom_NETROM_T4(r0, 0x103, 0x6, &(0x7f0000000080)=0x6, 0x4) open(&(0x7f0000000e00)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000180)=ANY=[], &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') sendfile(r0, r1, 0x0, 0x800000080000002) 17:22:26 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = open(&(0x7f0000000140)='./file0\x00', 0x400, 0x20) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f00000002c0)={0x2, 0x3000, 0x3f, 0x9, 0xfffffffffffffff9}) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @ipv4}}}, 0x108) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r2, &(0x7f0000000440)=[{&(0x7f0000000180)=""/3, 0x3}, {&(0x7f00000001c0)=""/199, 0xc7}], 0x2, 0x0) 17:22:26 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_all\x00', 0x0, 0x0) sendmsg$nfc_llcp(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x27, 0x0, 0x0, 0x7, 0x9, 0x800, "f5bbf46900232c9fec23c529c12f43c8dcd0878670fd426c2ec6d98e4a49505b58b13309299994568be90000b90f8a204f416c4e205d27e288fb125810c470", 0x1e}, 0x60, &(0x7f00000000c0)=[{&(0x7f0000000200)="6500047a82ac85d33d13bdc6b90194dbe361a656e9cc0b46de9fab6e36ba2a2d5ab706e22811b28f2ba0b67a0cc5a151bf51ca09703bf69704fc53956465f7eb066f08d76ac5fe214a2e0ff46f82d0a8e80e4ad9754932b5", 0x58}, {&(0x7f0000000340)="e30033a28e10d7aed247184211c092590c74957aab0bc372d8d3760d4a8be27d4a311e80ea2550e82b5e859f92dac33a84b8420658f7689644e6e1281084095fd69e1bae8a366b748bd12298855e4cf9e35af7169a9d4a5b76b3c6c7398d0ae90a5238ac", 0x64}], 0x2, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0xffffffffffffff9f, 0x4040090}, 0x80) inotify_init() r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='/gro<#\xfbW\xe6\xc6\x0f\x1fKE\xb7M\x99\x9a\x9a\x8c,\xe1[&\xe5\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ}\xb7\xf3\xfe\xf6\xe0.+\xe3\x89\xde\x139E\xa3\x85\xbd\x81\xe9\xbd\xee\xee\x03\x00\x00\x00\x00\x00\x00\x00[T\aE\xdfK\x1d\xeeH;\x15v$\xc5\xbcq\x9a\t\x9ej5\t\x00\x00\x009\x8c4', 0x2761, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0xda4fff08) perf_event_open(&(0x7f00000002c0)={0x0, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x40000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x29, 0x0, 0x0) ioctl$PIO_FONT(r1, 0x4b61, &(0x7f0000000540)="3b424f1ca745945e8513fce02f97962ac4071d41bb9b938702fe02c21a8fe3b8d8dac94d33c65154da148bbe3d25e56f050f2fca46f5e010bd0def418e4aea9906dd3e87397fc464beee95b887c138060e0cd05fcaf101f27f95b2a018ef33eb7d2d244ee38f823f257f1fd0a4af4783ec44a8e3e99209431c40fa42af2d494f5096e59460663eb449b34d4ab7c9e0928136631374c1071cb9d4052ba10b3d8f5075fdf4e6b354b3c389720b33d7be9e4e2e211bba99da155cdee1df9d39f68892b8cd1c103d819b07348078a1b2809fc7dc3f5cdb1787da87598e") perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpeername$ax25(r0, &(0x7f0000000440)={{0x3, @netrom}, [@netrom, @netrom, @remote, @rose, @netrom, @remote, @remote, @rose]}, &(0x7f00000004c0)=0x48) syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x80, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x660c, 0x0) modify_ldt$write(0x1, &(0x7f0000000500)={0x1, 0xffffffffffffffff, 0x2400, 0x8, 0x1, 0x3, 0xb, 0x9, 0x2}, 0x10) 17:22:26 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000440)=""/146) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0xfffffde0) r3 = socket$rxrpc(0x21, 0x2, 0x4000000000000a) ioctl$int_in(r0, 0x5473, &(0x7f0000000340)=0xfffffffffffff001) bind$rxrpc(r3, &(0x7f0000000140)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e22, 0x2, @remote, 0x4}}, 0x24) listen(r3, 0x9) modify_ldt$write(0x1, &(0x7f0000000300)={0x0, 0x20001000, 0xf6a19cc09ebfc357, 0x3, 0x400, 0x9, 0x3f, 0x100000001, 0x10001, 0x7}, 0x10) fstat(0xffffffffffffff9c, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x1ec51da1abe9f22b, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f0000000280)={0x7, 0x0, 0x4, 0x100, {r4, r5/1000+30000}, {0x7, 0xb, 0x1, 0x10001, 0xffffffff, 0x9, "c8c0963d"}, 0x1, 0x2, @offset=0x7, 0x4}) wait4(0x0, 0x0, 0x80000002, 0x0) r6 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x8000, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r6, 0xc0045516, &(0x7f0000000040)=0x5) tkill(r1, 0x2a) ptrace$cont(0x18, r1, 0x0, 0x0) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x31}) getsockopt$IP6T_SO_GET_ENTRIES(r7, 0x29, 0x41, &(0x7f0000000500)=ANY=[@ANYBLOB="7365637572697479000000000000000000000006000000000000000000000200000000000000e1294da536fded81cbe53bdca3a74371909220b97d520f26ab2dec2dffaee2b75b8a1ce780f7f6d2a621edddeec32a53cce7ec92eba46e5c6bb11f15b73a5c65efbb7bb931bceb81f0ea64be35157633cd49b21b47fbf88e57af885b10062bc1b7762271d7fd29"], 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r1, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1f, 0x2200) ioctl(r0, 0xfffffffffff3ffb8, &(0x7f0000000080)="b841cdea41") 17:22:26 executing program 0: mkdir(&(0x7f0000000200)='./file0\x00', 0x100) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000000c0)='hugetlbfs\x00', 0x0, 0x0) chdir(&(0x7f0000000080)='./file0\x00') mknod$loop(&(0x7f0000000180)='./file0\x00', 0x0, 0xffffffffffffffff) 17:22:26 executing program 2: r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x8000, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f0000000080)={0x0, 0x1, 0x30, 0x80, 0x101}, &(0x7f00000000c0)=0x18) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000100)={r1, 0x4}, 0x8) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="0af51f023c123f3188a070") r3 = socket$alg(0x26, 0x5, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003440)=[{{0x0, 0x0, &(0x7f0000002040)=[{0x0}, {&(0x7f00000004c0)=""/71, 0x47}], 0x2}}], 0x1, 0x0, 0x0) bind$alg(r3, &(0x7f0000000340)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000001c0)="e180db4e3b23cdde86a3b7ae4fdb961983a44c4bca5351a6904cf9b053d46ee6", 0x20) r4 = accept4(r3, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f0000001bc0), 0xfe, 0x0, &(0x7f0000001d00)={0x77359400}) 17:22:26 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, r3+30000000}}, 0x0) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(0xffffffffffffff9c, 0x84, 0x74, &(0x7f00000003c0)=""/247, &(0x7f00000004c0)=0xf7) readv(r1, &(0x7f000058c000)=[{&(0x7f0000000240)=""/151, 0x282}], 0x10000000000001f4) r4 = dup3(r0, r1, 0x0) tkill(r2, 0x1000000000014) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(r4, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)={0x4c, r5, 0x0, 0x70bd2b, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x28, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x81}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x10, 0x16}}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffffffffffffb}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) 17:22:26 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) setsockopt$IP_VS_SO_SET_DELDEST(0xffffffffffffffff, 0x0, 0x488, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, 0x0, &(0x7f00002bdffc)) mprotect(&(0x7f00002bd000/0x1000)=nil, 0x1000, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)='veth1\x00\x00\x00\x00\xff\xff\xff\xff\xff\xef\x00', 0xb) r1 = dup2(r0, r0) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x1}}, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000000), 0xfffffdef, 0xc0, 0x0, 0x0) mincore(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) ioctl$KVM_ASSIGN_PCI_DEVICE(r1, 0x8040ae69, &(0x7f00000000c0)={0x100000001, 0x4, 0x7, 0x4, 0x7fff}) ioctl$FS_IOC_GETFLAGS(r0, 0x80046601, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000003c0), &(0x7f00000002c0)=0x1000000da) pipe(&(0x7f0000000000)) socket$packet(0x11, 0x0, 0x300) connect$inet6(0xffffffffffffffff, &(0x7f0000000080), 0x1c) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$sndtimer(0x0, 0x0, 0x3fff) r2 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x6, 0x40) ioctl$KDSKBSENT(r2, 0x4b49, &(0x7f0000000080)="2fab0406bab546e61d383ecef687027a96c08549bb9b6411a375127c523f4dfe1dadad50147a4d42fa529e59e712c63231671d733d7aae1b4a7ae7") 17:22:27 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000440)=""/146) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0xfffffde0) r3 = socket$rxrpc(0x21, 0x2, 0x4000000000000a) ioctl$int_in(r0, 0x5473, &(0x7f0000000340)=0xfffffffffffff001) bind$rxrpc(r3, &(0x7f0000000140)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e22, 0x2, @remote, 0x4}}, 0x24) listen(r3, 0x9) modify_ldt$write(0x1, &(0x7f0000000300)={0x0, 0x20001000, 0xf6a19cc09ebfc357, 0x3, 0x400, 0x9, 0x3f, 0x100000001, 0x10001, 0x7}, 0x10) fstat(0xffffffffffffff9c, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x1ec51da1abe9f22b, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f0000000280)={0x7, 0x0, 0x4, 0x100, {r4, r5/1000+30000}, {0x7, 0xb, 0x1, 0x10001, 0xffffffff, 0x9, "c8c0963d"}, 0x1, 0x2, @offset=0x7, 0x4}) wait4(0x0, 0x0, 0x80000002, 0x0) r6 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x8000, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r6, 0xc0045516, &(0x7f0000000040)=0x5) tkill(r1, 0x2a) ptrace$cont(0x18, r1, 0x0, 0x0) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x31}) getsockopt$IP6T_SO_GET_ENTRIES(r7, 0x29, 0x41, &(0x7f0000000500)=ANY=[@ANYBLOB="7365637572697479000000000000000000000006000000000000000000000200000000000000e1294da536fded81cbe53bdca3a74371909220b97d520f26ab2dec2dffaee2b75b8a1ce780f7f6d2a621edddeec32a53cce7ec92eba46e5c6bb11f15b73a5c65efbb7bb931bceb81f0ea64be35157633cd49b21b47fbf88e57af885b10062bc1b7762271d7fd29"], 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r1, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1f, 0x2200) 17:22:27 executing program 2: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23}, 0x1c) listen(r0, 0x200000000002) r1 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x326) r2 = open(&(0x7f0000000080)='./file0\x00', 0x900, 0x0) ioctl$VIDIOC_G_PRIORITY(r2, 0x80045643, 0x1) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000000)=[@in={0x2, 0x4e23, @local}], 0x10) 17:22:27 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) setsockopt$IP_VS_SO_SET_DELDEST(0xffffffffffffffff, 0x0, 0x488, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, 0x0, &(0x7f00002bdffc)) mprotect(&(0x7f00002bd000/0x1000)=nil, 0x1000, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)='veth1\x00\x00\x00\x00\xff\xff\xff\xff\xff\xef\x00', 0xb) r1 = dup2(r0, r0) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x1}}, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000000), 0xfffffdef, 0xc0, 0x0, 0x0) mincore(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) ioctl$KVM_ASSIGN_PCI_DEVICE(r1, 0x8040ae69, &(0x7f00000000c0)={0x100000001, 0x4, 0x7, 0x4, 0x7fff}) ioctl$FS_IOC_GETFLAGS(r0, 0x80046601, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000003c0), &(0x7f00000002c0)=0x1000000da) pipe(&(0x7f0000000000)) socket$packet(0x11, 0x0, 0x300) connect$inet6(0xffffffffffffffff, &(0x7f0000000080), 0x1c) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$sndtimer(0x0, 0x0, 0x3fff) r2 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x6, 0x40) ioctl$KDSKBSENT(r2, 0x4b49, &(0x7f0000000080)="2fab0406bab546e61d383ecef687027a96c08549bb9b6411a375127c523f4dfe1dadad50147a4d42fa529e59e712c63231671d733d7aae1b4a7ae7") 17:22:27 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000440)=""/146) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0xfffffde0) r3 = socket$rxrpc(0x21, 0x2, 0x4000000000000a) ioctl$int_in(r0, 0x5473, &(0x7f0000000340)=0xfffffffffffff001) bind$rxrpc(r3, &(0x7f0000000140)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e22, 0x2, @remote, 0x4}}, 0x24) listen(r3, 0x9) modify_ldt$write(0x1, &(0x7f0000000300)={0x0, 0x20001000, 0xf6a19cc09ebfc357, 0x3, 0x400, 0x9, 0x3f, 0x100000001, 0x10001, 0x7}, 0x10) fstat(0xffffffffffffff9c, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x1ec51da1abe9f22b, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f0000000280)={0x7, 0x0, 0x4, 0x100, {r4, r5/1000+30000}, {0x7, 0xb, 0x1, 0x10001, 0xffffffff, 0x9, "c8c0963d"}, 0x1, 0x2, @offset=0x7, 0x4}) wait4(0x0, 0x0, 0x80000002, 0x0) r6 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x8000, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r6, 0xc0045516, &(0x7f0000000040)=0x5) tkill(r1, 0x2a) ptrace$cont(0x18, r1, 0x0, 0x0) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x31}) getsockopt$IP6T_SO_GET_ENTRIES(r7, 0x29, 0x41, &(0x7f0000000500)=ANY=[@ANYBLOB="7365637572697479000000000000000000000006000000000000000000000200000000000000e1294da536fded81cbe53bdca3a74371909220b97d520f26ab2dec2dffaee2b75b8a1ce780f7f6d2a621edddeec32a53cce7ec92eba46e5c6bb11f15b73a5c65efbb7bb931bceb81f0ea64be35157633cd49b21b47fbf88e57af885b10062bc1b7762271d7fd29"], 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r1, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1f, 0x2200) 17:22:27 executing program 1: socketpair$unix(0x1, 0x1000000000000002, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$msdos(&(0x7f0000000440)='msdos\x00', &(0x7f0000000480)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)={[{@fat=@showexec='showexec'}, {@fat=@sys_immutable='sys_immutable'}]}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r1, 0x400c6615, &(0x7f0000000000)) 17:22:27 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, r3+30000000}}, 0x0) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(0xffffffffffffff9c, 0x84, 0x74, &(0x7f00000003c0)=""/247, &(0x7f00000004c0)=0xf7) readv(r1, &(0x7f000058c000)=[{&(0x7f0000000240)=""/151, 0x282}], 0x10000000000001f4) r4 = dup3(r0, r1, 0x0) tkill(r2, 0x1000000000014) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(r4, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)={0x4c, r5, 0x0, 0x70bd2b, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x28, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x81}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x10, 0x16}}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffffffffffffb}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) 17:22:27 executing program 5: r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vfio/vfio\x00', 0xa00, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000080)) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) setrlimit(0x1, &(0x7f00000000c0)) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) setrlimit(0xe, &(0x7f0000000000)={0xd52, 0xadb2}) fallocate(r1, 0x10, 0x0, 0x9) 17:22:27 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000440)=""/146) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0xfffffde0) r3 = socket$rxrpc(0x21, 0x2, 0x4000000000000a) ioctl$int_in(r0, 0x5473, &(0x7f0000000340)=0xfffffffffffff001) bind$rxrpc(r3, &(0x7f0000000140)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e22, 0x2, @remote, 0x4}}, 0x24) listen(r3, 0x9) modify_ldt$write(0x1, &(0x7f0000000300)={0x0, 0x20001000, 0xf6a19cc09ebfc357, 0x3, 0x400, 0x9, 0x3f, 0x100000001, 0x10001, 0x7}, 0x10) fstat(0xffffffffffffff9c, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x1ec51da1abe9f22b, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f0000000280)={0x7, 0x0, 0x4, 0x100, {r4, r5/1000+30000}, {0x7, 0xb, 0x1, 0x10001, 0xffffffff, 0x9, "c8c0963d"}, 0x1, 0x2, @offset=0x7, 0x4}) wait4(0x0, 0x0, 0x80000002, 0x0) r6 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x8000, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r6, 0xc0045516, &(0x7f0000000040)=0x5) tkill(r1, 0x2a) ptrace$cont(0x18, r1, 0x0, 0x0) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x31}) getsockopt$IP6T_SO_GET_ENTRIES(r7, 0x29, 0x41, &(0x7f0000000500)=ANY=[@ANYBLOB="7365637572697479000000000000000000000006000000000000000000000200000000000000e1294da536fded81cbe53bdca3a74371909220b97d520f26ab2dec2dffaee2b75b8a1ce780f7f6d2a621edddeec32a53cce7ec92eba46e5c6bb11f15b73a5c65efbb7bb931bceb81f0ea64be35157633cd49b21b47fbf88e57af885b10062bc1b7762271d7fd29"], 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r1, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1f, 0x2200) 17:22:27 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000440)=""/146) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0xfffffde0) r3 = socket$rxrpc(0x21, 0x2, 0x4000000000000a) ioctl$int_in(r0, 0x5473, &(0x7f0000000340)=0xfffffffffffff001) bind$rxrpc(r3, &(0x7f0000000140)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e22, 0x2, @remote, 0x4}}, 0x24) listen(r3, 0x9) modify_ldt$write(0x1, &(0x7f0000000300)={0x0, 0x20001000, 0xf6a19cc09ebfc357, 0x3, 0x400, 0x9, 0x3f, 0x100000001, 0x10001, 0x7}, 0x10) fstat(0xffffffffffffff9c, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x1ec51da1abe9f22b, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f0000000280)={0x7, 0x0, 0x4, 0x100, {r4, r5/1000+30000}, {0x7, 0xb, 0x1, 0x10001, 0xffffffff, 0x9, "c8c0963d"}, 0x1, 0x2, @offset=0x7, 0x4}) wait4(0x0, 0x0, 0x80000002, 0x0) r6 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x8000, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r6, 0xc0045516, &(0x7f0000000040)=0x5) tkill(r1, 0x2a) ptrace$cont(0x18, r1, 0x0, 0x0) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x31}) getsockopt$IP6T_SO_GET_ENTRIES(r7, 0x29, 0x41, &(0x7f0000000500)=ANY=[@ANYBLOB="7365637572697479000000000000000000000006000000000000000000000200000000000000e1294da536fded81cbe53bdca3a74371909220b97d520f26ab2dec2dffaee2b75b8a1ce780f7f6d2a621edddeec32a53cce7ec92eba46e5c6bb11f15b73a5c65efbb7bb931bceb81f0ea64be35157633cd49b21b47fbf88e57af885b10062bc1b7762271d7fd29"], 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r1, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1f, 0x2200) 17:22:27 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000440)=""/146) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0xfffffde0) r3 = socket$rxrpc(0x21, 0x2, 0x4000000000000a) ioctl$int_in(r0, 0x5473, &(0x7f0000000340)=0xfffffffffffff001) bind$rxrpc(r3, &(0x7f0000000140)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e22, 0x2, @remote, 0x4}}, 0x24) listen(r3, 0x9) modify_ldt$write(0x1, &(0x7f0000000300)={0x0, 0x20001000, 0xf6a19cc09ebfc357, 0x3, 0x400, 0x9, 0x3f, 0x100000001, 0x10001, 0x7}, 0x10) fstat(0xffffffffffffff9c, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x1ec51da1abe9f22b, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f0000000280)={0x7, 0x0, 0x4, 0x100, {r4, r5/1000+30000}, {0x7, 0xb, 0x1, 0x10001, 0xffffffff, 0x9, "c8c0963d"}, 0x1, 0x2, @offset=0x7, 0x4}) wait4(0x0, 0x0, 0x80000002, 0x0) r6 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x8000, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r6, 0xc0045516, &(0x7f0000000040)=0x5) tkill(r1, 0x2a) ptrace$cont(0x18, r1, 0x0, 0x0) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x31}) getsockopt$IP6T_SO_GET_ENTRIES(r7, 0x29, 0x41, &(0x7f0000000500)=ANY=[@ANYBLOB="7365637572697479000000000000000000000006000000000000000000000200000000000000e1294da536fded81cbe53bdca3a74371909220b97d520f26ab2dec2dffaee2b75b8a1ce780f7f6d2a621edddeec32a53cce7ec92eba46e5c6bb11f15b73a5c65efbb7bb931bceb81f0ea64be35157633cd49b21b47fbf88e57af885b10062bc1b7762271d7fd29"], 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r1, 0x0, 0x0) 17:22:27 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000440)=""/146) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0xfffffde0) r3 = socket$rxrpc(0x21, 0x2, 0x4000000000000a) ioctl$int_in(r0, 0x5473, &(0x7f0000000340)=0xfffffffffffff001) bind$rxrpc(r3, &(0x7f0000000140)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e22, 0x2, @remote, 0x4}}, 0x24) listen(r3, 0x9) modify_ldt$write(0x1, &(0x7f0000000300)={0x0, 0x20001000, 0xf6a19cc09ebfc357, 0x3, 0x400, 0x9, 0x3f, 0x100000001, 0x10001, 0x7}, 0x10) fstat(0xffffffffffffff9c, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x1ec51da1abe9f22b, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f0000000280)={0x7, 0x0, 0x4, 0x100, {r4, r5/1000+30000}, {0x7, 0xb, 0x1, 0x10001, 0xffffffff, 0x9, "c8c0963d"}, 0x1, 0x2, @offset=0x7, 0x4}) wait4(0x0, 0x0, 0x80000002, 0x0) r6 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x8000, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r6, 0xc0045516, &(0x7f0000000040)=0x5) tkill(r1, 0x2a) ptrace$cont(0x18, r1, 0x0, 0x0) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x31}) getsockopt$IP6T_SO_GET_ENTRIES(r7, 0x29, 0x41, &(0x7f0000000500)=ANY=[@ANYBLOB="7365637572697479000000000000000000000006000000000000000000000200000000000000e1294da536fded81cbe53bdca3a74371909220b97d520f26ab2dec2dffaee2b75b8a1ce780f7f6d2a621edddeec32a53cce7ec92eba46e5c6bb11f15b73a5c65efbb7bb931bceb81f0ea64be35157633cd49b21b47fbf88e57af885b10062bc1b7762271d7fd29"], 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r1, 0x0, 0x0) 17:22:27 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000440)=""/146) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0xfffffde0) r3 = socket$rxrpc(0x21, 0x2, 0x4000000000000a) ioctl$int_in(r0, 0x5473, &(0x7f0000000340)=0xfffffffffffff001) bind$rxrpc(r3, &(0x7f0000000140)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e22, 0x2, @remote, 0x4}}, 0x24) listen(r3, 0x9) modify_ldt$write(0x1, &(0x7f0000000300)={0x0, 0x20001000, 0xf6a19cc09ebfc357, 0x3, 0x400, 0x9, 0x3f, 0x100000001, 0x10001, 0x7}, 0x10) fstat(0xffffffffffffff9c, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x1ec51da1abe9f22b, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f0000000280)={0x7, 0x0, 0x4, 0x100, {r4, r5/1000+30000}, {0x7, 0xb, 0x1, 0x10001, 0xffffffff, 0x9, "c8c0963d"}, 0x1, 0x2, @offset=0x7, 0x4}) wait4(0x0, 0x0, 0x80000002, 0x0) r6 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x8000, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r6, 0xc0045516, &(0x7f0000000040)=0x5) tkill(r1, 0x2a) ptrace$cont(0x18, r1, 0x0, 0x0) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x31}) getsockopt$IP6T_SO_GET_ENTRIES(r7, 0x29, 0x41, &(0x7f0000000500)=ANY=[@ANYBLOB="7365637572697479000000000000000000000006000000000000000000000200000000000000e1294da536fded81cbe53bdca3a74371909220b97d520f26ab2dec2dffaee2b75b8a1ce780f7f6d2a621edddeec32a53cce7ec92eba46e5c6bb11f15b73a5c65efbb7bb931bceb81f0ea64be35157633cd49b21b47fbf88e57af885b10062bc1b7762271d7fd29"], 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r1, 0x0, 0x0) 17:22:27 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000440)=""/146) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0xfffffde0) r3 = socket$rxrpc(0x21, 0x2, 0x4000000000000a) ioctl$int_in(r0, 0x5473, &(0x7f0000000340)=0xfffffffffffff001) bind$rxrpc(r3, &(0x7f0000000140)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e22, 0x2, @remote, 0x4}}, 0x24) listen(r3, 0x9) modify_ldt$write(0x1, &(0x7f0000000300)={0x0, 0x20001000, 0xf6a19cc09ebfc357, 0x3, 0x400, 0x9, 0x3f, 0x100000001, 0x10001, 0x7}, 0x10) fstat(0xffffffffffffff9c, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x1ec51da1abe9f22b, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f0000000280)={0x7, 0x0, 0x4, 0x100, {r4, r5/1000+30000}, {0x7, 0xb, 0x1, 0x10001, 0xffffffff, 0x9, "c8c0963d"}, 0x1, 0x2, @offset=0x7, 0x4}) wait4(0x0, 0x0, 0x80000002, 0x0) r6 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x8000, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r6, 0xc0045516, &(0x7f0000000040)=0x5) tkill(r1, 0x2a) ptrace$cont(0x18, r1, 0x0, 0x0) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x31}) getsockopt$IP6T_SO_GET_ENTRIES(r7, 0x29, 0x41, &(0x7f0000000500)=ANY=[@ANYBLOB="7365637572697479000000000000000000000006000000000000000000000200000000000000e1294da536fded81cbe53bdca3a74371909220b97d520f26ab2dec2dffaee2b75b8a1ce780f7f6d2a621edddeec32a53cce7ec92eba46e5c6bb11f15b73a5c65efbb7bb931bceb81f0ea64be35157633cd49b21b47fbf88e57af885b10062bc1b7762271d7fd29"], 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r1, 0x0, 0x0) [ 215.665572][ T7973] FAT-fs (loop1): bogus number of reserved sectors [ 215.686769][ T7973] FAT-fs (loop1): Can't find a valid FAT filesystem [ 215.777686][ T7983] FAT-fs (loop1): bogus number of reserved sectors [ 215.814073][ T7983] FAT-fs (loop1): Can't find a valid FAT filesystem 17:22:28 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000440)=""/146) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0xfffffde0) r3 = socket$rxrpc(0x21, 0x2, 0x4000000000000a) ioctl$int_in(r0, 0x5473, &(0x7f0000000340)=0xfffffffffffff001) bind$rxrpc(r3, &(0x7f0000000140)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e22, 0x2, @remote, 0x4}}, 0x24) listen(r3, 0x9) modify_ldt$write(0x1, &(0x7f0000000300)={0x0, 0x20001000, 0xf6a19cc09ebfc357, 0x3, 0x400, 0x9, 0x3f, 0x100000001, 0x10001, 0x7}, 0x10) fstat(0xffffffffffffff9c, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x1ec51da1abe9f22b, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f0000000280)={0x7, 0x0, 0x4, 0x100, {r4, r5/1000+30000}, {0x7, 0xb, 0x1, 0x10001, 0xffffffff, 0x9, "c8c0963d"}, 0x1, 0x2, @offset=0x7, 0x4}) wait4(0x0, 0x0, 0x80000002, 0x0) r6 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x8000, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r6, 0xc0045516, &(0x7f0000000040)=0x5) tkill(r1, 0x2a) ptrace$cont(0x18, r1, 0x0, 0x0) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x31}) getsockopt$IP6T_SO_GET_ENTRIES(r7, 0x29, 0x41, &(0x7f0000000500)=ANY=[@ANYBLOB="7365637572697479000000000000000000000006000000000000000000000200000000000000e1294da536fded81cbe53bdca3a74371909220b97d520f26ab2dec2dffaee2b75b8a1ce780f7f6d2a621edddeec32a53cce7ec92eba46e5c6bb11f15b73a5c65efbb7bb931bceb81f0ea64be35157633cd49b21b47fbf88e57af885b10062bc1b7762271d7fd29"], 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r1, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1f, 0x2200) 17:22:28 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000440)=""/146) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0xfffffde0) r3 = socket$rxrpc(0x21, 0x2, 0x4000000000000a) ioctl$int_in(r0, 0x5473, &(0x7f0000000340)=0xfffffffffffff001) bind$rxrpc(r3, &(0x7f0000000140)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e22, 0x2, @remote, 0x4}}, 0x24) listen(r3, 0x9) modify_ldt$write(0x1, &(0x7f0000000300)={0x0, 0x20001000, 0xf6a19cc09ebfc357, 0x3, 0x400, 0x9, 0x3f, 0x100000001, 0x10001, 0x7}, 0x10) fstat(0xffffffffffffff9c, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x1ec51da1abe9f22b, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f0000000280)={0x7, 0x0, 0x4, 0x100, {r4, r5/1000+30000}, {0x7, 0xb, 0x1, 0x10001, 0xffffffff, 0x9, "c8c0963d"}, 0x1, 0x2, @offset=0x7, 0x4}) wait4(0x0, 0x0, 0x80000002, 0x0) r6 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x8000, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r6, 0xc0045516, &(0x7f0000000040)=0x5) tkill(r1, 0x2a) ptrace$cont(0x18, r1, 0x0, 0x0) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x31}) getsockopt$IP6T_SO_GET_ENTRIES(r7, 0x29, 0x41, &(0x7f0000000500)=ANY=[@ANYBLOB="7365637572697479000000000000000000000006000000000000000000000200000000000000e1294da536fded81cbe53bdca3a74371909220b97d520f26ab2dec2dffaee2b75b8a1ce780f7f6d2a621edddeec32a53cce7ec92eba46e5c6bb11f15b73a5c65efbb7bb931bceb81f0ea64be35157633cd49b21b47fbf88e57af885b10062bc1b7762271d7fd29"], 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r1, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1f, 0x2200) 17:22:28 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000440)=""/146) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0xfffffde0) r3 = socket$rxrpc(0x21, 0x2, 0x4000000000000a) ioctl$int_in(r0, 0x5473, &(0x7f0000000340)=0xfffffffffffff001) bind$rxrpc(r3, &(0x7f0000000140)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e22, 0x2, @remote, 0x4}}, 0x24) listen(r3, 0x9) modify_ldt$write(0x1, &(0x7f0000000300)={0x0, 0x20001000, 0xf6a19cc09ebfc357, 0x3, 0x400, 0x9, 0x3f, 0x100000001, 0x10001, 0x7}, 0x10) fstat(0xffffffffffffff9c, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x1ec51da1abe9f22b, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f0000000280)={0x7, 0x0, 0x4, 0x100, {r4, r5/1000+30000}, {0x7, 0xb, 0x1, 0x10001, 0xffffffff, 0x9, "c8c0963d"}, 0x1, 0x2, @offset=0x7, 0x4}) wait4(0x0, 0x0, 0x80000002, 0x0) r6 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x8000, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r6, 0xc0045516, &(0x7f0000000040)=0x5) tkill(r1, 0x2a) ptrace$cont(0x18, r1, 0x0, 0x0) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x31}) getsockopt$IP6T_SO_GET_ENTRIES(r7, 0x29, 0x41, &(0x7f0000000500)=ANY=[@ANYBLOB="7365637572697479000000000000000000000006000000000000000000000200000000000000e1294da536fded81cbe53bdca3a74371909220b97d520f26ab2dec2dffaee2b75b8a1ce780f7f6d2a621edddeec32a53cce7ec92eba46e5c6bb11f15b73a5c65efbb7bb931bceb81f0ea64be35157633cd49b21b47fbf88e57af885b10062bc1b7762271d7fd29"], 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r1, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1f, 0x2200) 17:22:28 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000440)=""/146) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0xfffffde0) r3 = socket$rxrpc(0x21, 0x2, 0x4000000000000a) ioctl$int_in(r0, 0x5473, &(0x7f0000000340)=0xfffffffffffff001) bind$rxrpc(r3, &(0x7f0000000140)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e22, 0x2, @remote, 0x4}}, 0x24) listen(r3, 0x9) modify_ldt$write(0x1, &(0x7f0000000300)={0x0, 0x20001000, 0xf6a19cc09ebfc357, 0x3, 0x400, 0x9, 0x3f, 0x100000001, 0x10001, 0x7}, 0x10) fstat(0xffffffffffffff9c, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x1ec51da1abe9f22b, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f0000000280)={0x7, 0x0, 0x4, 0x100, {r4, r5/1000+30000}, {0x7, 0xb, 0x1, 0x10001, 0xffffffff, 0x9, "c8c0963d"}, 0x1, 0x2, @offset=0x7, 0x4}) wait4(0x0, 0x0, 0x80000002, 0x0) r6 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x8000, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r6, 0xc0045516, &(0x7f0000000040)=0x5) tkill(r1, 0x2a) ptrace$cont(0x18, r1, 0x0, 0x0) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x31}) getsockopt$IP6T_SO_GET_ENTRIES(r7, 0x29, 0x41, &(0x7f0000000500)=ANY=[@ANYBLOB="7365637572697479000000000000000000000006000000000000000000000200000000000000e1294da536fded81cbe53bdca3a74371909220b97d520f26ab2dec2dffaee2b75b8a1ce780f7f6d2a621edddeec32a53cce7ec92eba46e5c6bb11f15b73a5c65efbb7bb931bceb81f0ea64be35157633cd49b21b47fbf88e57af885b10062bc1b7762271d7fd29"], 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1f, 0x2200) 17:22:28 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000440)=""/146) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0xfffffde0) r3 = socket$rxrpc(0x21, 0x2, 0x4000000000000a) ioctl$int_in(r0, 0x5473, &(0x7f0000000340)=0xfffffffffffff001) bind$rxrpc(r3, &(0x7f0000000140)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e22, 0x2, @remote, 0x4}}, 0x24) listen(r3, 0x9) modify_ldt$write(0x1, &(0x7f0000000300)={0x0, 0x20001000, 0xf6a19cc09ebfc357, 0x3, 0x400, 0x9, 0x3f, 0x100000001, 0x10001, 0x7}, 0x10) fstat(0xffffffffffffff9c, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x1ec51da1abe9f22b, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f0000000280)={0x7, 0x0, 0x4, 0x100, {r4, r5/1000+30000}, {0x7, 0xb, 0x1, 0x10001, 0xffffffff, 0x9, "c8c0963d"}, 0x1, 0x2, @offset=0x7, 0x4}) wait4(0x0, 0x0, 0x80000002, 0x0) r6 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x8000, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r6, 0xc0045516, &(0x7f0000000040)=0x5) tkill(r1, 0x2a) ptrace$cont(0x18, r1, 0x0, 0x0) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x31}) getsockopt$IP6T_SO_GET_ENTRIES(r7, 0x29, 0x41, &(0x7f0000000500)=ANY=[@ANYBLOB="7365637572697479000000000000000000000006000000000000000000000200000000000000e1294da536fded81cbe53bdca3a74371909220b97d520f26ab2dec2dffaee2b75b8a1ce780f7f6d2a621edddeec32a53cce7ec92eba46e5c6bb11f15b73a5c65efbb7bb931bceb81f0ea64be35157633cd49b21b47fbf88e57af885b10062bc1b7762271d7fd29"], 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r1, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1f, 0x2200) 17:22:28 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='gid_map\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[]}, 0x0) setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f0000000000)=0x8, 0x2) preadv(r0, &(0x7f00000017c0), 0x18c, 0x15a2) 17:22:28 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x200000000000013, 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x80000, 0x0) creat(&(0x7f0000000180)='./file0\x00', 0x110) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = accept$alg(0xffffffffffffffff, 0x0, 0x0) memfd_create(0x0, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x30000, 0x0) ioctl$RTC_WIE_ON(0xffffffffffffffff, 0x700f) syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x7968e71e, 0x0) syz_open_dev$usbmon(0x0, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000300)=@ethernet={0x0, @remote}, 0x80, 0x0}, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r2, 0x89a0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000080)) connect$inet6(r0, &(0x7f0000000000), 0x1c) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) listen(r0, 0x201) 17:22:28 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000440)=""/146) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0xfffffde0) r3 = socket$rxrpc(0x21, 0x2, 0x4000000000000a) ioctl$int_in(r0, 0x5473, &(0x7f0000000340)=0xfffffffffffff001) bind$rxrpc(r3, &(0x7f0000000140)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e22, 0x2, @remote, 0x4}}, 0x24) listen(r3, 0x9) modify_ldt$write(0x1, &(0x7f0000000300)={0x0, 0x20001000, 0xf6a19cc09ebfc357, 0x3, 0x400, 0x9, 0x3f, 0x100000001, 0x10001, 0x7}, 0x10) fstat(0xffffffffffffff9c, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x1ec51da1abe9f22b, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f0000000280)={0x7, 0x0, 0x4, 0x100, {r4, r5/1000+30000}, {0x7, 0xb, 0x1, 0x10001, 0xffffffff, 0x9, "c8c0963d"}, 0x1, 0x2, @offset=0x7, 0x4}) wait4(0x0, 0x0, 0x80000002, 0x0) r6 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x8000, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r6, 0xc0045516, &(0x7f0000000040)=0x5) tkill(r1, 0x2a) ptrace$cont(0x18, r1, 0x0, 0x0) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x31}) getsockopt$IP6T_SO_GET_ENTRIES(r7, 0x29, 0x41, &(0x7f0000000500)=ANY=[@ANYBLOB="7365637572697479000000000000000000000006000000000000000000000200000000000000e1294da536fded81cbe53bdca3a74371909220b97d520f26ab2dec2dffaee2b75b8a1ce780f7f6d2a621edddeec32a53cce7ec92eba46e5c6bb11f15b73a5c65efbb7bb931bceb81f0ea64be35157633cd49b21b47fbf88e57af885b10062bc1b7762271d7fd29"], 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r1, 0x0, 0x0) 17:22:28 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000440)=""/146) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0xfffffde0) r3 = socket$rxrpc(0x21, 0x2, 0x4000000000000a) ioctl$int_in(r0, 0x5473, &(0x7f0000000340)=0xfffffffffffff001) bind$rxrpc(r3, &(0x7f0000000140)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e22, 0x2, @remote, 0x4}}, 0x24) listen(r3, 0x9) modify_ldt$write(0x1, &(0x7f0000000300)={0x0, 0x20001000, 0xf6a19cc09ebfc357, 0x3, 0x400, 0x9, 0x3f, 0x100000001, 0x10001, 0x7}, 0x10) fstat(0xffffffffffffff9c, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x1ec51da1abe9f22b, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f0000000280)={0x7, 0x0, 0x4, 0x100, {r4, r5/1000+30000}, {0x7, 0xb, 0x1, 0x10001, 0xffffffff, 0x9, "c8c0963d"}, 0x1, 0x2, @offset=0x7, 0x4}) wait4(0x0, 0x0, 0x80000002, 0x0) r6 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x8000, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r6, 0xc0045516, &(0x7f0000000040)=0x5) tkill(r1, 0x2a) ptrace$cont(0x18, r1, 0x0, 0x0) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x31}) getsockopt$IP6T_SO_GET_ENTRIES(r7, 0x29, 0x41, &(0x7f0000000500)=ANY=[@ANYBLOB="7365637572697479000000000000000000000006000000000000000000000200000000000000e1294da536fded81cbe53bdca3a74371909220b97d520f26ab2dec2dffaee2b75b8a1ce780f7f6d2a621edddeec32a53cce7ec92eba46e5c6bb11f15b73a5c65efbb7bb931bceb81f0ea64be35157633cd49b21b47fbf88e57af885b10062bc1b7762271d7fd29"], 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r1, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1f, 0x2200) 17:22:28 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000440)=""/146) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0xfffffde0) r3 = socket$rxrpc(0x21, 0x2, 0x4000000000000a) ioctl$int_in(r0, 0x5473, &(0x7f0000000340)=0xfffffffffffff001) bind$rxrpc(r3, &(0x7f0000000140)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e22, 0x2, @remote, 0x4}}, 0x24) listen(r3, 0x9) modify_ldt$write(0x1, &(0x7f0000000300)={0x0, 0x20001000, 0xf6a19cc09ebfc357, 0x3, 0x400, 0x9, 0x3f, 0x100000001, 0x10001, 0x7}, 0x10) fstat(0xffffffffffffff9c, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x1ec51da1abe9f22b, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f0000000280)={0x7, 0x0, 0x4, 0x100, {r4, r5/1000+30000}, {0x7, 0xb, 0x1, 0x10001, 0xffffffff, 0x9, "c8c0963d"}, 0x1, 0x2, @offset=0x7, 0x4}) wait4(0x0, 0x0, 0x80000002, 0x0) r6 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x8000, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r6, 0xc0045516, &(0x7f0000000040)=0x5) tkill(r1, 0x2a) ptrace$cont(0x18, r1, 0x0, 0x0) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x31}) getsockopt$IP6T_SO_GET_ENTRIES(r7, 0x29, 0x41, &(0x7f0000000500)=ANY=[@ANYBLOB="7365637572697479000000000000000000000006000000000000000000000200000000000000e1294da536fded81cbe53bdca3a74371909220b97d520f26ab2dec2dffaee2b75b8a1ce780f7f6d2a621edddeec32a53cce7ec92eba46e5c6bb11f15b73a5c65efbb7bb931bceb81f0ea64be35157633cd49b21b47fbf88e57af885b10062bc1b7762271d7fd29"], 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1f, 0x2200) 17:22:28 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000440)=""/146) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0xfffffde0) r3 = socket$rxrpc(0x21, 0x2, 0x4000000000000a) ioctl$int_in(r0, 0x5473, &(0x7f0000000340)=0xfffffffffffff001) bind$rxrpc(r3, &(0x7f0000000140)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e22, 0x2, @remote, 0x4}}, 0x24) listen(r3, 0x9) modify_ldt$write(0x1, &(0x7f0000000300)={0x0, 0x20001000, 0xf6a19cc09ebfc357, 0x3, 0x400, 0x9, 0x3f, 0x100000001, 0x10001, 0x7}, 0x10) fstat(0xffffffffffffff9c, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x1ec51da1abe9f22b, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f0000000280)={0x7, 0x0, 0x4, 0x100, {r4, r5/1000+30000}, {0x7, 0xb, 0x1, 0x10001, 0xffffffff, 0x9, "c8c0963d"}, 0x1, 0x2, @offset=0x7, 0x4}) wait4(0x0, 0x0, 0x80000002, 0x0) r6 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x8000, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r6, 0xc0045516, &(0x7f0000000040)=0x5) tkill(r1, 0x2a) ptrace$cont(0x18, r1, 0x0, 0x0) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x31}) getsockopt$IP6T_SO_GET_ENTRIES(r7, 0x29, 0x41, &(0x7f0000000500)=ANY=[@ANYBLOB="7365637572697479000000000000000000000006000000000000000000000200000000000000e1294da536fded81cbe53bdca3a74371909220b97d520f26ab2dec2dffaee2b75b8a1ce780f7f6d2a621edddeec32a53cce7ec92eba46e5c6bb11f15b73a5c65efbb7bb931bceb81f0ea64be35157633cd49b21b47fbf88e57af885b10062bc1b7762271d7fd29"], 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1f, 0x2200) 17:22:28 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000440)=""/146) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0xfffffde0) r3 = socket$rxrpc(0x21, 0x2, 0x4000000000000a) ioctl$int_in(r0, 0x5473, &(0x7f0000000340)=0xfffffffffffff001) bind$rxrpc(r3, &(0x7f0000000140)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e22, 0x2, @remote, 0x4}}, 0x24) listen(r3, 0x9) modify_ldt$write(0x1, &(0x7f0000000300)={0x0, 0x20001000, 0xf6a19cc09ebfc357, 0x3, 0x400, 0x9, 0x3f, 0x100000001, 0x10001, 0x7}, 0x10) fstat(0xffffffffffffff9c, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x1ec51da1abe9f22b, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f0000000280)={0x7, 0x0, 0x4, 0x100, {r4, r5/1000+30000}, {0x7, 0xb, 0x1, 0x10001, 0xffffffff, 0x9, "c8c0963d"}, 0x1, 0x2, @offset=0x7, 0x4}) wait4(0x0, 0x0, 0x80000002, 0x0) r6 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x8000, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r6, 0xc0045516, &(0x7f0000000040)=0x5) tkill(r1, 0x2a) ptrace$cont(0x18, r1, 0x0, 0x0) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x31}) getsockopt$IP6T_SO_GET_ENTRIES(r7, 0x29, 0x41, &(0x7f0000000500)=ANY=[@ANYBLOB="7365637572697479000000000000000000000006000000000000000000000200000000000000e1294da536fded81cbe53bdca3a74371909220b97d520f26ab2dec2dffaee2b75b8a1ce780f7f6d2a621edddeec32a53cce7ec92eba46e5c6bb11f15b73a5c65efbb7bb931bceb81f0ea64be35157633cd49b21b47fbf88e57af885b10062bc1b7762271d7fd29"], 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1f, 0x2200) 17:22:28 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20\x00', 0x410600, 0x0) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000100)='team\x00') getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000380)={@multicast1, @multicast1, 0x0}, &(0x7f00000003c0)=0xc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffff9c, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000780)={{{@in6=@ipv4={[], [], @dev}, @in6=@ipv4={[], [], @loopback}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in=@dev}}, &(0x7f0000000880)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000008c0)={{{@in6=@empty, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@local}}, &(0x7f00000009c0)=0xe8) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000c40)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2080}, 0xc, &(0x7f0000000c00)={&(0x7f0000000a00)=ANY=[@ANYBLOB="d401360c", @ANYRES16=r1, @ANYBLOB="20012abd7000fcdbdf250000000008000100", @ANYRES32=r2, @ANYBLOB="44000200400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000200000008000600", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r4, @ANYBLOB="6c0102003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000008000300060000000400040008000600", @ANYRES32=r5, @ANYBLOB="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"], 0x1d4}, 0x1, 0x0, 0x0, 0x6076ef88db9100da}, 0x20004000) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r6, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc) getsockname(r6, 0x0, &(0x7f0000000000)) 17:22:29 executing program 5: r0 = socket(0x400000000000010, 0x802, 0x100) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000080)={'\x00', {0x2, 0x4e20, @broadcast}}) write(r0, &(0x7f00000000c0)="24000000200099f0003be90000ed190e0200081610000001a0ba0080080002007f196be0", 0x24) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000200), 0x4) getsockopt$inet_buf(r0, 0x0, 0x0, &(0x7f0000000100)=""/236, &(0x7f0000000040)=0xec) r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x800) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x6) 17:22:29 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000440)=""/146) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0xfffffde0) r3 = socket$rxrpc(0x21, 0x2, 0x4000000000000a) ioctl$int_in(r0, 0x5473, &(0x7f0000000340)=0xfffffffffffff001) bind$rxrpc(r3, &(0x7f0000000140)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e22, 0x2, @remote, 0x4}}, 0x24) listen(r3, 0x9) modify_ldt$write(0x1, &(0x7f0000000300)={0x0, 0x20001000, 0xf6a19cc09ebfc357, 0x3, 0x400, 0x9, 0x3f, 0x100000001, 0x10001, 0x7}, 0x10) fstat(0xffffffffffffff9c, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x1ec51da1abe9f22b, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f0000000280)={0x7, 0x0, 0x4, 0x100, {r4, r5/1000+30000}, {0x7, 0xb, 0x1, 0x10001, 0xffffffff, 0x9, "c8c0963d"}, 0x1, 0x2, @offset=0x7, 0x4}) wait4(0x0, 0x0, 0x80000002, 0x0) r6 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x8000, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r6, 0xc0045516, &(0x7f0000000040)=0x5) tkill(r1, 0x2a) ptrace$cont(0x18, r1, 0x0, 0x0) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x31}) getsockopt$IP6T_SO_GET_ENTRIES(r7, 0x29, 0x41, &(0x7f0000000500)=ANY=[@ANYBLOB="7365637572697479000000000000000000000006000000000000000000000200000000000000e1294da536fded81cbe53bdca3a74371909220b97d520f26ab2dec2dffaee2b75b8a1ce780f7f6d2a621edddeec32a53cce7ec92eba46e5c6bb11f15b73a5c65efbb7bb931bceb81f0ea64be35157633cd49b21b47fbf88e57af885b10062bc1b7762271d7fd29"], 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r1, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1f, 0x2200) 17:22:29 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$audion(&(0x7f0000000600)='/dev/audio#\x00', 0xffffffffffff0000, 0x800) getpeername$tipc(r1, &(0x7f0000000640)=@id, &(0x7f0000000680)=0x10) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={[], [], @local}}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockname$netlink(r2, &(0x7f0000000040), &(0x7f0000000080)=0xc) r3 = syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x0) ioctl$KVM_GET_XSAVE(r3, 0x9000aea4, &(0x7f00000001c0)) listen(0xffffffffffffffff, 0x0) ioctl$VT_SETMODE(0xffffffffffffffff, 0x5602, &(0x7f0000000100)={0xfffffffffffffeff, 0x6, 0xff, 0x3, 0xb364}) r4 = socket$netlink(0x10, 0x3, 0x8000000004) getsockopt$inet_tcp_buf(r1, 0x6, 0x1f, &(0x7f00000006c0)=""/167, &(0x7f0000000780)=0xa7) write$input_event(r3, &(0x7f00000005c0)={{0x77359400}, 0x15, 0x8, 0x40}, 0x18) writev(r4, &(0x7f0000e11ff0)=[{&(0x7f0000000140)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010009080800414900000004fcff", 0x58}], 0x1) 17:22:29 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) socket$packet(0x11, 0x3, 0x300) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x15, 0x8080f, 0x3) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x4, 0x4, 0x4, 0xfab}, 0x2c) close(r0) getpeername(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) r2 = dup(r1) semget(0xffffffffffffffff, 0x0, 0x0) semctl$IPC_INFO(0x0, 0x4, 0x3, &(0x7f0000000080)=""/205) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$PPPIOCSFLAGS1(r2, 0x40047459, &(0x7f00000003c0)=0x8000000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600), 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r4, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) r5 = open(&(0x7f0000000480)='./file1\x00', 0xfffffffffffffffe, 0x7e) ioctl$DRM_IOCTL_GET_MAP(r5, 0xc0286404, &(0x7f0000000300)={&(0x7f0000ffd000/0x3000)=nil, 0x7, 0x0, 0x82, &(0x7f0000ff5000/0x6000)=nil, 0x100000001}) r6 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f0000000040)={0x6, @local, 0x0, 0x0, 'sh\x00', 0x20, 0xfffffffffffff0b5, 0x67}, 0x2c) ioctl$PERF_EVENT_IOC_RESET(r6, 0x2403, 0x2) r8 = syz_open_dev$vcsa(&(0x7f0000000340)='/dev/vcsa#\x00', 0xfffffffffffffffb, 0x2) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r8, 0x28, 0x2, &(0x7f0000000380)=0x10001, 0x8) r9 = fcntl$dupfd(r6, 0x406, r6) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r9, 0x84, 0x12, &(0x7f0000000540)=0x8, 0xffffff3b) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000080)={0x0, 'veth0_to_bridge\x00'}, 0x18) sendfile(r6, r6, &(0x7f00000000c0), 0x6) pselect6(0x40, &(0x7f0000000100)={0x3f, 0xfffffffffffffffc, 0x5, 0x200, 0x401, 0x2, 0x607153fe, 0x100000001}, &(0x7f0000000140)={0x5, 0x1, 0xc53, 0x401, 0x9, 0x2, 0xd75c, 0x100}, &(0x7f0000000180)={0x2197, 0xbc, 0x40, 0x400, 0x3, 0x7}, &(0x7f00000001c0)={0x0, 0x1c9c380}, &(0x7f00000002c0)={&(0x7f0000000280)={0x2}, 0x8}) 17:22:29 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_S_CROP(r0, 0x4014563c, &(0x7f0000000080)={0x6, {0x1f, 0x0, 0x7, 0xfffffffffffffffa}}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_TRY_ENCODER_CMD(r2, 0xc028564e, &(0x7f00000000c0)={0x3, 0x1, [0xbfc, 0x7f6, 0x72, 0x80000000, 0x0, 0x3, 0x100000000000001b]}) sendmsg$nl_xfrm(r1, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000006440)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000085000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0xb8}}, 0x0) 17:22:29 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000440)=""/146) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0xfffffde0) r3 = socket$rxrpc(0x21, 0x2, 0x4000000000000a) ioctl$int_in(r0, 0x5473, &(0x7f0000000340)=0xfffffffffffff001) bind$rxrpc(r3, &(0x7f0000000140)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e22, 0x2, @remote, 0x4}}, 0x24) listen(r3, 0x9) modify_ldt$write(0x1, &(0x7f0000000300)={0x0, 0x20001000, 0xf6a19cc09ebfc357, 0x3, 0x400, 0x9, 0x3f, 0x100000001, 0x10001, 0x7}, 0x10) fstat(0xffffffffffffff9c, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x1ec51da1abe9f22b, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f0000000280)={0x7, 0x0, 0x4, 0x100, {r4, r5/1000+30000}, {0x7, 0xb, 0x1, 0x10001, 0xffffffff, 0x9, "c8c0963d"}, 0x1, 0x2, @offset=0x7, 0x4}) wait4(0x0, 0x0, 0x80000002, 0x0) r6 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x8000, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r6, 0xc0045516, &(0x7f0000000040)=0x5) tkill(r1, 0x2a) ptrace$cont(0x18, r1, 0x0, 0x0) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x31}) getsockopt$IP6T_SO_GET_ENTRIES(r7, 0x29, 0x41, &(0x7f0000000500)=ANY=[@ANYBLOB="7365637572697479000000000000000000000006000000000000000000000200000000000000e1294da536fded81cbe53bdca3a74371909220b97d520f26ab2dec2dffaee2b75b8a1ce780f7f6d2a621edddeec32a53cce7ec92eba46e5c6bb11f15b73a5c65efbb7bb931bceb81f0ea64be35157633cd49b21b47fbf88e57af885b10062bc1b7762271d7fd29"], 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r1, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1f, 0x2200) 17:22:29 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x9, 0x381280) ioctl$KDGETMODE(r1, 0x4b3b, &(0x7f00000000c0)) syz_emit_ethernet(0x211d49, &(0x7f0000000000)={@local, @empty=[0x2], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3005ca, 0x3c, 0x0, @ipv4={[], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff88, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 17:22:29 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r0 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0xf2, 0x58040) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="6d616e676c650000ffffffffffffffe200000000000000009908cb01000000001f00000006000000f0070000f804000080020000e8050000e8050000e8050000200700002007000006000000", @ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="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"], 0x850) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0xffffffffffffffff, 0x44031, 0xffffffffffffffff, 0x0) connect$x25(r0, &(0x7f0000000980)={0x9, @remote={[], 0x1}}, 0x12) ioctl$SG_GET_VERSION_NUM(r0, 0x2282, &(0x7f00000009c0)) 17:22:29 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000440)=""/146) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0xfffffde0) r3 = socket$rxrpc(0x21, 0x2, 0x4000000000000a) ioctl$int_in(r0, 0x5473, &(0x7f0000000340)=0xfffffffffffff001) bind$rxrpc(r3, &(0x7f0000000140)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e22, 0x2, @remote, 0x4}}, 0x24) listen(r3, 0x9) modify_ldt$write(0x1, &(0x7f0000000300)={0x0, 0x20001000, 0xf6a19cc09ebfc357, 0x3, 0x400, 0x9, 0x3f, 0x100000001, 0x10001, 0x7}, 0x10) fstat(0xffffffffffffff9c, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x1ec51da1abe9f22b, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f0000000280)={0x7, 0x0, 0x4, 0x100, {r4, r5/1000+30000}, {0x7, 0xb, 0x1, 0x10001, 0xffffffff, 0x9, "c8c0963d"}, 0x1, 0x2, @offset=0x7, 0x4}) wait4(0x0, 0x0, 0x80000002, 0x0) r6 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x8000, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r6, 0xc0045516, &(0x7f0000000040)=0x5) tkill(r1, 0x2a) ptrace$cont(0x18, r1, 0x0, 0x0) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x31}) getsockopt$IP6T_SO_GET_ENTRIES(r7, 0x29, 0x41, &(0x7f0000000500)=ANY=[@ANYBLOB="7365637572697479000000000000000000000006000000000000000000000200000000000000e1294da536fded81cbe53bdca3a74371909220b97d520f26ab2dec2dffaee2b75b8a1ce780f7f6d2a621edddeec32a53cce7ec92eba46e5c6bb11f15b73a5c65efbb7bb931bceb81f0ea64be35157633cd49b21b47fbf88e57af885b10062bc1b7762271d7fd29"], 0x0) ptrace$cont(0x20, r1, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1f, 0x2200) [ 217.319560][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 217.325743][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 217.398789][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 217.404638][ C0] protocol 88fb is buggy, dev hsr_slave_1 17:22:29 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_S_CROP(r0, 0x4014563c, &(0x7f0000000080)={0x6, {0x1f, 0x0, 0x7, 0xfffffffffffffffa}}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_TRY_ENCODER_CMD(r2, 0xc028564e, &(0x7f00000000c0)={0x3, 0x1, [0xbfc, 0x7f6, 0x72, 0x80000000, 0x0, 0x3, 0x100000000000001b]}) sendmsg$nl_xfrm(r1, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000006440)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000085000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0xb8}}, 0x0) 17:22:29 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000440)=""/146) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0xfffffde0) r3 = socket$rxrpc(0x21, 0x2, 0x4000000000000a) ioctl$int_in(r0, 0x5473, &(0x7f0000000340)=0xfffffffffffff001) bind$rxrpc(r3, &(0x7f0000000140)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e22, 0x2, @remote, 0x4}}, 0x24) listen(r3, 0x9) modify_ldt$write(0x1, &(0x7f0000000300)={0x0, 0x20001000, 0xf6a19cc09ebfc357, 0x3, 0x400, 0x9, 0x3f, 0x100000001, 0x10001, 0x7}, 0x10) fstat(0xffffffffffffff9c, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x1ec51da1abe9f22b, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f0000000280)={0x7, 0x0, 0x4, 0x100, {r4, r5/1000+30000}, {0x7, 0xb, 0x1, 0x10001, 0xffffffff, 0x9, "c8c0963d"}, 0x1, 0x2, @offset=0x7, 0x4}) wait4(0x0, 0x0, 0x80000002, 0x0) r6 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x8000, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r6, 0xc0045516, &(0x7f0000000040)=0x5) tkill(r1, 0x2a) ptrace$cont(0x18, r1, 0x0, 0x0) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x31}) getsockopt$IP6T_SO_GET_ENTRIES(r7, 0x29, 0x41, &(0x7f0000000500)=ANY=[@ANYBLOB="7365637572697479000000000000000000000006000000000000000000000200000000000000e1294da536fded81cbe53bdca3a74371909220b97d520f26ab2dec2dffaee2b75b8a1ce780f7f6d2a621edddeec32a53cce7ec92eba46e5c6bb11f15b73a5c65efbb7bb931bceb81f0ea64be35157633cd49b21b47fbf88e57af885b10062bc1b7762271d7fd29"], 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1f, 0x2200) 17:22:29 executing program 0: r0 = socket$inet(0x2, 0x3, 0x800000000000a) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000004c0)=@nat={'nat\x00', 0x19, 0x1, 0x1c0, [0x200002c0, 0x0, 0x0, 0x200002f0, 0x20000320], 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"]}, 0x238) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f00000000c0)={'filter\x00'}, &(0x7f0000000000)=0x44) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000040)=@nat={'nat\x00', 0x19, 0x0, 0x90, [0x200001c0, 0x0, 0x0, 0x200001f0, 0x20000220], 0x0, 0x0, &(0x7f00000001c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}]}, 0x108) 17:22:29 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x3, 0x4) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x80, @loopback}, 0x1c) write$P9_RCREATE(r1, &(0x7f0000000040)={0x18, 0x73, 0x1, {{0x2, 0x0, 0x5}, 0x3}}, 0x18) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000080)=0x7) sendmmsg(r2, &(0x7f0000000480), 0x2e9, 0xffd8) 17:22:29 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) socket$packet(0x11, 0x3, 0x300) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x15, 0x8080f, 0x3) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x4, 0x4, 0x4, 0xfab}, 0x2c) close(r0) getpeername(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) r2 = dup(r1) semget(0xffffffffffffffff, 0x0, 0x0) semctl$IPC_INFO(0x0, 0x4, 0x3, &(0x7f0000000080)=""/205) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$PPPIOCSFLAGS1(r2, 0x40047459, &(0x7f00000003c0)=0x8000000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600), 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r4, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) r5 = open(&(0x7f0000000480)='./file1\x00', 0xfffffffffffffffe, 0x7e) ioctl$DRM_IOCTL_GET_MAP(r5, 0xc0286404, &(0x7f0000000300)={&(0x7f0000ffd000/0x3000)=nil, 0x7, 0x0, 0x82, &(0x7f0000ff5000/0x6000)=nil, 0x100000001}) r6 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f0000000040)={0x6, @local, 0x0, 0x0, 'sh\x00', 0x20, 0xfffffffffffff0b5, 0x67}, 0x2c) ioctl$PERF_EVENT_IOC_RESET(r6, 0x2403, 0x2) r8 = syz_open_dev$vcsa(&(0x7f0000000340)='/dev/vcsa#\x00', 0xfffffffffffffffb, 0x2) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r8, 0x28, 0x2, &(0x7f0000000380)=0x10001, 0x8) r9 = fcntl$dupfd(r6, 0x406, r6) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r9, 0x84, 0x12, &(0x7f0000000540)=0x8, 0xffffff3b) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000080)={0x0, 'veth0_to_bridge\x00'}, 0x18) sendfile(r6, r6, &(0x7f00000000c0), 0x6) pselect6(0x40, &(0x7f0000000100)={0x3f, 0xfffffffffffffffc, 0x5, 0x200, 0x401, 0x2, 0x607153fe, 0x100000001}, &(0x7f0000000140)={0x5, 0x1, 0xc53, 0x401, 0x9, 0x2, 0xd75c, 0x100}, &(0x7f0000000180)={0x2197, 0xbc, 0x40, 0x400, 0x3, 0x7}, &(0x7f00000001c0)={0x0, 0x1c9c380}, &(0x7f00000002c0)={&(0x7f0000000280)={0x2}, 0x8}) 17:22:30 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000440)=""/146) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0xfffffde0) r3 = socket$rxrpc(0x21, 0x2, 0x4000000000000a) ioctl$int_in(r0, 0x5473, &(0x7f0000000340)=0xfffffffffffff001) bind$rxrpc(r3, &(0x7f0000000140)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e22, 0x2, @remote, 0x4}}, 0x24) listen(r3, 0x9) modify_ldt$write(0x1, &(0x7f0000000300)={0x0, 0x20001000, 0xf6a19cc09ebfc357, 0x3, 0x400, 0x9, 0x3f, 0x100000001, 0x10001, 0x7}, 0x10) fstat(0xffffffffffffff9c, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x1ec51da1abe9f22b, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f0000000280)={0x7, 0x0, 0x4, 0x100, {r4, r5/1000+30000}, {0x7, 0xb, 0x1, 0x10001, 0xffffffff, 0x9, "c8c0963d"}, 0x1, 0x2, @offset=0x7, 0x4}) wait4(0x0, 0x0, 0x80000002, 0x0) r6 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x8000, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r6, 0xc0045516, &(0x7f0000000040)=0x5) tkill(r1, 0x2a) ptrace$cont(0x18, r1, 0x0, 0x0) pipe2(&(0x7f00000001c0), 0x80800) ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x31}) ptrace$cont(0x20, r1, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1f, 0x2200) 17:22:30 executing program 2: syz_mount_image$reiserfs(&(0x7f0000000240)='reiserfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x2f0, 0x0, 0x0, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) utime(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x63c4, 0x3e8}) setsockopt$inet6_int(r0, 0x29, 0xa, &(0x7f0000000000)=0x6, 0x4) write$P9_RREADDIR(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x68) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000040)=0x1) 17:22:30 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000080)={0x3, @vbi}) write$binfmt_script(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x7e) [ 217.968803][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 217.974618][ C0] protocol 88fb is buggy, dev hsr_slave_1 17:22:30 executing program 5: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x5, 0x400) setsockopt$l2tp_PPPOL2TP_SO_SENDSEQ(r0, 0x111, 0x3, 0x1, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) getsockopt$sock_buf(r1, 0x1, 0x38, 0x0, &(0x7f00000000c0)) 17:22:30 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x0, 0x0) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x6, 0xf, 0x3}) ioctl(r0, 0x8000000000009378, &(0x7f00000000c0)="01000000000000001801000004000000fc232ff41cd849832f") ioctl$int_out(r0, 0x5462, &(0x7f0000000000)) 17:22:30 executing program 4: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x400, 0x0) ioctl$PPPIOCDISCONN(r0, 0x7439) r1 = socket$can_bcm(0x1d, 0x2, 0x2) accept4$packet(0xffffffffffffff9c, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000180)=0x14, 0x80800) connect$can_bcm(r1, &(0x7f0000000200)={0x1d, r2}, 0x10) modify_ldt$read(0x0, &(0x7f0000000240)=""/1, 0x1) prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000280)) sendto$rose(r0, &(0x7f00000002c0)="e1680c8d73875275e9ef098ee8bc3e788b886ae928391e37348f1586456d1cc9344c4043f6891bcd59e6620c6d8ae366dd823b9267ec415581997c68818ac4c0ec305bb8210d2d3494c405ba6c48925ab04a5841f985e422441afd0540908b554b9151c265fc3e35fe96cae9695788e0dc2ece8ca2f4aaf9da67ff49394b35e8f591e1843323dfd869f36f3e048024c9ddf35941b50b0b9a7157b287148a32a7c88ee76d74a243e01a3376feb94eaf92b42a6ecabceceec225edb3efbc4bfd83ffc90d6514ae92c10e9157290244a9c1e6e93d566647d4098d827c580e16d503c3b8d01ed7577fd47f668451b51c8483fb6d185579", 0xf5, 0x0, &(0x7f0000000100)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}, 0x1c) io_setup(0xb, &(0x7f00000001c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000080)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000)="0200000093c21faf16da39de706f646800580f02000000003f420f000004000000580f02000000003f420f00000000000000000001000000", 0x38}]) 17:22:30 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'\x00', 0x400}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000140)={0x0, &(0x7f0000000040)}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_all\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r1, 0xc0045540, &(0x7f0000000180)=0xfffffffffffffff5) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$RTC_WIE_OFF(r2, 0x7010) 17:22:30 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000440)=""/146) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0xfffffde0) r3 = socket$rxrpc(0x21, 0x2, 0x4000000000000a) ioctl$int_in(r0, 0x5473, &(0x7f0000000340)=0xfffffffffffff001) bind$rxrpc(r3, &(0x7f0000000140)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e22, 0x2, @remote, 0x4}}, 0x24) listen(r3, 0x9) modify_ldt$write(0x1, &(0x7f0000000300)={0x0, 0x20001000, 0xf6a19cc09ebfc357, 0x3, 0x400, 0x9, 0x3f, 0x100000001, 0x10001, 0x7}, 0x10) fstat(0xffffffffffffff9c, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x1ec51da1abe9f22b, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f0000000280)={0x7, 0x0, 0x4, 0x100, {r4, r5/1000+30000}, {0x7, 0xb, 0x1, 0x10001, 0xffffffff, 0x9, "c8c0963d"}, 0x1, 0x2, @offset=0x7, 0x4}) wait4(0x0, 0x0, 0x80000002, 0x0) r6 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x8000, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r6, 0xc0045516, &(0x7f0000000040)=0x5) tkill(r1, 0x2a) ptrace$cont(0x18, r1, 0x0, 0x0) pipe2(&(0x7f00000001c0), 0x80800) ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x31}) ptrace$cont(0x20, r1, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1f, 0x2200) 17:22:30 executing program 0: socketpair(0xb, 0xe, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f0000000080)=0x1, 0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getresuid(&(0x7f0000000780)=0x0, &(0x7f00000007c0), &(0x7f0000000800)) syz_mount_image$erofs(&(0x7f0000000140)='erofs\x00', &(0x7f0000000180)='./file1\x00', 0xadd, 0x9, &(0x7f0000000680)=[{0xfffffffffffffffd, 0x0, 0x2}, {&(0x7f00000001c0)="d7122f51c710800093be66c2cc5538c1a0ce05c4a14a571e95e94385abcde5feb70ea83ce4932fb083087ede6147d07c04f5047e4a4d09b8f1f81050a302658e464d19d0a01305d6f60e159eedd0643ccbf86c06e8af344df05375b7e3948fd6984d9bf63a9be2b266ae73fa4cd8d5bd666612cc3687f11312ded47710d0ae9af9c27bbd49efb19efb094e691c41ed67344baeec393c456746b98aad0c319013a5242df1eb12f40c8fc26ef7f3fbea0623657fa920ea6e6fb5fd82ce67f6bc46ca07c4308cf2435e642bd6337d259fc5761b4f07988a5dec4fa9d4b7ba5cb01fb02852cf779c99", 0xe7, 0x3}, {&(0x7f00000002c0)="2eea2e4d4aa950c58127f15f91e8da44991181f70383b1e84771560ab2ed9a5f5702b0a4a8462c7cc59cd7a9a6eefb47baec03a3a686a8a3a5d8bc53e86282d814fd3e055f7a8ced4a09e53ae311e99ce9592890b13f50b663ab3105e65bf977ab0451a5fb88863a1a33", 0x6a, 0xa69}, {&(0x7f0000000340)="2983f379ca481ccb3aca97517a9ffc2a8c", 0x11, 0x1a}, {&(0x7f0000000380)="7c573add110f110c8dfaca4cdad10fbec3e57c95df209a56e0fef3fb1670c4db96725847f3cdaab40825b887384e4b5089181134b697961c92573746726814ab062709117b9683a606cbfd4a645aea1849c589b62c700bed66b3d6ff442842b54af5337414692ee3ea083d860d92097eb7cd2e9bbb9006b66d0816c2d06f439e3ae5a8c86ee25f0b10de2ae23e28f44cf529fe97ba3b86ddfa", 0x99}, {&(0x7f0000000440)="fda86b76609b2ade20cbc2b5d87ff0ba30517b810d7976b9708c120fe17b54311cec06aa04548328a6ddd11fd56e5e05eeb3ad3cd3ea6a6376928f8eb5ca42755e821780f7c299073aaef1311f2902d0375e902dd6cbce4a975f325f51e6977c4f31ada56771a2b13bb3ccdace", 0x6d, 0x7}, {&(0x7f00000004c0)="8d5c5997b3bc45eb22b2c12873c3e2f8f13b69e5d4", 0x15, 0xf809}, {&(0x7f0000000500)="d392633d73a8daad062ee518eea981528dd1b7740a9df5e6636183dce46f778e63b92ef7df102938d2fae9f8608378a82d54dc1851d20893915ff7385d67bfc355681f2f708340983f16af48e1d4bfe882f1c86215a6853e66379925eccb2ded", 0x60, 0x7}, {&(0x7f0000000580)="c1f75c43b170c99e7f6b12cf3e1f91daaeefabd2d93374c3bb7df82587ca7075976c92dba0d9e17ace5184160f665c0d1f2610e5831c4b3a51545519044f973d6307afb3f8176faab0c085d2b2d4cd9d417b4f2a99770f27bfc7243f5ea41257981f1b71bcbc3a0237b47e6f732254b21bc2d3bfac798d370d1ff35eedbb21eeb0ebb80fc9a5fccf8455de12bc43e4c12b471b2a6c2dc468dd81787584189f4766d8a6276abcd7356ae3c70c2e858f7415779d7f5fb8ebd40e610f5be738668d067fdfb8beb9f67e899af1b4f844b9e238f795df658d3fa413ff0d53cf136842", 0xe0, 0x100000001}], 0x800000, &(0x7f0000000840)={[], [{@smackfsroot={'smackfsroot', 0x3d, 'vboxnet1.\\&%vboxnet1'}}, {@smackfshat={'smackfshat', 0x3d, 'K'}}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@uid_eq={'uid', 0x3d, r1}}, {@smackfstransmute={'smackfstransmute', 0x3d, ')!'}}]}) mknod$loop(&(0x7f0000000100)='./file1\x00', 0x6003, 0x1) getsockname(0xffffffffffffffff, &(0x7f0000000900)=@l2, &(0x7f0000000980)=0x80) ioctl$BLKGETSIZE(0xffffffffffffffff, 0x127a, &(0x7f00000000c0)) 17:22:30 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) faccessat(r0, &(0x7f0000000040)='./file0\x00', 0xc1, 0x1800) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$rose(r2, 0x104, 0x5, 0x0, &(0x7f00000000c0)=0x2de) 17:22:30 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGLED(0xffffffffffffffff, 0x80404519, &(0x7f0000002080)=""/4096) r0 = socket$inet(0x2b, 0x1, 0x0) ioctl$KVM_PPC_GET_SMMU_INFO(0xffffffffffffffff, 0x8250aea6, &(0x7f0000000240)=""/38) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23}, 0x10) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$inet_mreqsrc(r0, 0x11a, 0x23, 0x0, 0x192) [ 218.395549][ T8139] erofs: read_super, device -> /dev/loop0 [ 218.399365][ T8143] Unknown ioctl 29753 17:22:30 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0xa0a00) sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f00000004c0)={0x20, r1, 0x701, 0x0, 0x0, {}, [@TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_REF={0x8}]}]}, 0x7651}}, 0x0) [ 218.436926][ T8143] Unknown ioctl 29753 [ 218.448310][ T8139] erofs: options -> smackfsroot=vboxnet1.\&%vboxnet1,smackfshat=K,rootcontext=unconfined_u,fscontext=user_u,uid=00000000000000000000,smackfstransmute=)!, 17:22:30 executing program 5: socketpair$unix(0x1, 0x400000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = memfd_create(&(0x7f0000000100)='#em3#/\x00', 0x0) write(r1, &(0x7f0000000840)="88", 0x1) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(0xffffffffffffffff, 0x80045700, &(0x7f0000000140)) r2 = syz_open_dev$cec(&(0x7f0000000240)='/dev/cec#\x00', 0x2, 0x2) ioctl$VIDIOC_G_CROP(r2, 0xc014563b, &(0x7f0000000280)={0x4, {0x3f, 0x5, 0x13a7, 0x8}}) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000006, 0x11, r1, 0x0) r3 = syz_open_dev$radio(&(0x7f00000000c0)='/dev/radio#\x00', 0x3, 0x2) ioctl$KVM_XEN_HVM_CONFIG(r3, 0x4038ae7a, &(0x7f0000000200)={0xfcfa, 0xbef, &(0x7f0000000180)="7241ecc017fdec53b216223ea480d8ef3baa03ea2ea29b3c92371268736aefa369fb8ad7b51f301c896220cb102c3033e78fc48978743972134365a835c8b10b2546a4060c586a4d29cb664e8d6ef59cce025584a8c32e72b419b6b9ba709a2b4e49d60cd20277f929ce62fcb8eda5", &(0x7f0000000880)="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", 0x6f, 0x1000}) fallocate(r0, 0x20, 0x20, 0x7f) memfd_create(&(0x7f0000000040)='#em3#/\x00', 0x1) mincore(&(0x7f0000000000/0x2000)=nil, 0x2000, &(0x7f0000000080)=""/15) 17:22:30 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000440)=""/146) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0xfffffde0) r3 = socket$rxrpc(0x21, 0x2, 0x4000000000000a) ioctl$int_in(r0, 0x5473, &(0x7f0000000340)=0xfffffffffffff001) bind$rxrpc(r3, &(0x7f0000000140)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e22, 0x2, @remote, 0x4}}, 0x24) listen(r3, 0x9) modify_ldt$write(0x1, &(0x7f0000000300)={0x0, 0x20001000, 0xf6a19cc09ebfc357, 0x3, 0x400, 0x9, 0x3f, 0x100000001, 0x10001, 0x7}, 0x10) fstat(0xffffffffffffff9c, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x1ec51da1abe9f22b, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f0000000280)={0x7, 0x0, 0x4, 0x100, {r4, r5/1000+30000}, {0x7, 0xb, 0x1, 0x10001, 0xffffffff, 0x9, "c8c0963d"}, 0x1, 0x2, @offset=0x7, 0x4}) wait4(0x0, 0x0, 0x80000002, 0x0) r6 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x8000, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r6, 0xc0045516, &(0x7f0000000040)=0x5) tkill(r1, 0x2a) ptrace$cont(0x18, r1, 0x0, 0x0) pipe2(&(0x7f00000001c0), 0x80800) ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x31}) ptrace$cont(0x20, r1, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1f, 0x2200) 17:22:30 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000440)=""/146) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0xfffffde0) r3 = socket$rxrpc(0x21, 0x2, 0x4000000000000a) ioctl$int_in(r0, 0x5473, &(0x7f0000000340)=0xfffffffffffff001) bind$rxrpc(r3, &(0x7f0000000140)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e22, 0x2, @remote, 0x4}}, 0x24) listen(r3, 0x9) modify_ldt$write(0x1, &(0x7f0000000300)={0x0, 0x20001000, 0xf6a19cc09ebfc357, 0x3, 0x400, 0x9, 0x3f, 0x100000001, 0x10001, 0x7}, 0x10) fstat(0xffffffffffffff9c, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x1ec51da1abe9f22b, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f0000000280)={0x7, 0x0, 0x4, 0x100, {r4, r5/1000+30000}, {0x7, 0xb, 0x1, 0x10001, 0xffffffff, 0x9, "c8c0963d"}, 0x1, 0x2, @offset=0x7, 0x4}) wait4(0x0, 0x0, 0x80000002, 0x0) r6 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x8000, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r6, 0xc0045516, &(0x7f0000000040)=0x5) tkill(r1, 0x2a) ptrace$cont(0x18, r1, 0x0, 0x0) pipe2(&(0x7f00000001c0), 0x80800) ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x31}) ptrace$cont(0x20, r1, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1f, 0x2200) [ 218.567274][ T8139] erofs: cannot find valid erofs superblock 17:22:30 executing program 1: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000980)}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bpq0\x00', 0x21}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') getdents(r1, &(0x7f0000000040)=""/46, 0x2e) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semget(0xffffffffffffffff, 0x0, 0x0) request_key(&(0x7f0000000000)='cifs.idmap\x00', 0x0, &(0x7f0000000100)='\x00', 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') ioctl(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r1, 0x4020565b, &(0x7f00000000c0)={0x8001007, 0x3, 0x3}) socket$packet(0x11, 0x3, 0x300) 17:22:30 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x5}, 0x1c) recvmmsg(r0, &(0x7f0000001c80)=[{{&(0x7f0000000080)=@ipx, 0x80, &(0x7f0000000140)=[{&(0x7f0000000240)=""/161, 0xa1}, {&(0x7f0000000100)}], 0x2, &(0x7f0000000300)=""/229, 0xe5}, 0x7}, {{&(0x7f0000000400)=@nfc_llcp, 0x80, &(0x7f0000000580)=[{&(0x7f0000000480)=""/222, 0xde}], 0x1, &(0x7f00000005c0)=""/4096, 0x1000}, 0x622}, {{0x0, 0x0, &(0x7f0000001940)=[{&(0x7f00000015c0)=""/123, 0x7b}, {&(0x7f0000001640)=""/28, 0x1c}, {&(0x7f0000001680)=""/10, 0xa}, {&(0x7f00000016c0)=""/200, 0xc8}, {&(0x7f00000017c0)=""/67, 0x43}, {&(0x7f0000001840)=""/10, 0xa}, {&(0x7f0000001880)=""/10, 0xa}, {&(0x7f00000018c0)=""/8, 0x8}, {&(0x7f0000001900)=""/51, 0x33}], 0x9, &(0x7f0000001a00)=""/217, 0xd9}, 0xffff}, {{0x0, 0x0, &(0x7f0000001c40)=[{&(0x7f0000001b00)=""/113, 0x71}, {&(0x7f0000001b80)=""/148, 0x94}], 0x2}, 0xf494}], 0x4, 0x2, &(0x7f0000001d80)={0x77359400}) recvmmsg(r0, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0}}], 0xe, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000001dc0)=0x401, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x4b) syz_emit_ethernet(0x83, &(0x7f0000000180)={@local, @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) shutdown(r0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa0806000108000604002b020000000000f3000002aaaaaaaadd04cd114589950bc000c9d3fdb3aa1dac1414aa"], 0x0) [ 218.718881][ T8149] erofs: read_super, device -> /dev/loop0 [ 218.724833][ T8149] erofs: options -> smackfsroot=vboxnet1.\&%vboxnet1,smackfshat=K,rootcontext=unconfined_u,fscontext=user_u,uid=00000000000000000000,smackfstransmute=)!, 17:22:31 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x101, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000001580)={0x3, 0x1, &(0x7f00000003c0)=""/138, &(0x7f0000000480)=""/4096, &(0x7f0000001480)=""/215, 0x1}) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$unix(0x1, 0x801, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20004014}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)={0x108, r5, 0x120, 0x70bd2d, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0xc, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5d5ae85f}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x200}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8907}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}]}, @TIPC_NLA_NODE={0x44, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x800}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xf4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5e}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3f27}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x10000}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x80000000}]}, @TIPC_NLA_SOCK={0x28, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x10000}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NET={0x5c, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xffffffffffff7fff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xa00}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6a}]}, @TIPC_NLA_NODE={0x4}]}, 0x108}, 0x1, 0x0, 0x0, 0x80}, 0x41) r6 = syz_genetlink_get_family_id$team(&(0x7f0000000100)='team\x00') recvmsg(r3, &(0x7f0000001f00)={&(0x7f0000001940)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, &(0x7f0000001e40)=[{&(0x7f00000019c0)=""/102, 0x66}, {&(0x7f0000001a40)=""/187, 0xbb}, {&(0x7f0000001b00)=""/207, 0xcf}, {&(0x7f0000001c00)=""/20, 0x14}, {&(0x7f0000001c40)=""/133, 0x85}, {&(0x7f0000001d00)=""/48, 0x30}, {&(0x7f0000001d40)=""/51, 0x33}, {&(0x7f0000001d80)=""/17, 0x11}, {&(0x7f0000001dc0)=""/38, 0x26}, {&(0x7f0000001e00)=""/56, 0x38}], 0xa}, 0x1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000023c0)={'tunl0\x00'}) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000002400)={{{@in6=@remote, @in6=@remote}}, {{@in6=@local}}}, &(0x7f0000002500)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000002740)={{{@in6=@empty, @in6=@empty}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, 0x0) r7 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x40100, 0x0) ioctl$CAPI_GET_ERRCODE(r7, 0x80024321, &(0x7f0000000300)) accept$packet(0xffffffffffffffff, &(0x7f0000002880), &(0x7f00000028c0)=0x14) getpeername$packet(0xffffffffffffffff, &(0x7f00000029c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000002a00)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000002a40)={{{@in6=@remote, @in=@local}}, {{@in=@empty}, 0x0, @in=@empty}}, &(0x7f0000002b40)=0xe8) accept$packet(r2, &(0x7f0000002e80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000002ec0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000031c0)={'team0\x00', 0x0}) getsockname$packet(0xffffffffffffffff, &(0x7f0000003200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000003440)={{{@in=@broadcast, @in6=@local}}, {{@in=@initdev}, 0x0, @in=@remote}}, &(0x7f0000003540)=0xe8) getsockname$packet(0xffffffffffffffff, &(0x7f00000037c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000005040)={0x0, 0x0, &(0x7f0000005000)={&(0x7f0000004b00)={0x5c, r6, 0x2, 0x70bd29, 0x25dfdbfd, {}, [{{0x8, 0x1, r8}, {0x40, 0x2, [{0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8}}}]}}]}, 0x5c}}, 0x20000000) bind$unix(r4, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r4, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) connect(r3, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'team_slave_0\x00'}) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, 0x0, &(0x7f0000000180)) [ 218.867464][ T8149] erofs: cannot find valid erofs superblock 17:22:31 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000440)=""/146) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0xfffffde0) r3 = socket$rxrpc(0x21, 0x2, 0x4000000000000a) ioctl$int_in(r0, 0x5473, &(0x7f0000000340)=0xfffffffffffff001) bind$rxrpc(r3, &(0x7f0000000140)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e22, 0x2, @remote, 0x4}}, 0x24) listen(r3, 0x9) modify_ldt$write(0x1, &(0x7f0000000300)={0x0, 0x20001000, 0xf6a19cc09ebfc357, 0x3, 0x400, 0x9, 0x3f, 0x100000001, 0x10001, 0x7}, 0x10) fstat(0xffffffffffffff9c, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x1ec51da1abe9f22b, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f0000000280)={0x7, 0x0, 0x4, 0x100, {r4, r5/1000+30000}, {0x7, 0xb, 0x1, 0x10001, 0xffffffff, 0x9, "c8c0963d"}, 0x1, 0x2, @offset=0x7, 0x4}) wait4(0x0, 0x0, 0x80000002, 0x0) r6 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x8000, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r6, 0xc0045516, &(0x7f0000000040)=0x5) tkill(r1, 0x2a) ptrace$cont(0x18, r1, 0x0, 0x0) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r7, 0x29, 0x41, &(0x7f0000000500)=ANY=[@ANYBLOB="7365637572697479000000000000000000000006000000000000000000000200000000000000e1294da536fded81cbe53bdca3a74371909220b97d520f26ab2dec2dffaee2b75b8a1ce780f7f6d2a621edddeec32a53cce7ec92eba46e5c6bb11f15b73a5c65efbb7bb931bceb81f0ea64be35157633cd49b21b47fbf88e57af885b10062bc1b7762271d7fd29"], 0x0) ptrace$cont(0x20, r1, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1f, 0x2200) 17:22:31 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000440)=""/146) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0xfffffde0) r3 = socket$rxrpc(0x21, 0x2, 0x4000000000000a) ioctl$int_in(r0, 0x5473, &(0x7f0000000340)=0xfffffffffffff001) bind$rxrpc(r3, &(0x7f0000000140)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e22, 0x2, @remote, 0x4}}, 0x24) listen(r3, 0x9) modify_ldt$write(0x1, &(0x7f0000000300)={0x0, 0x20001000, 0xf6a19cc09ebfc357, 0x3, 0x400, 0x9, 0x3f, 0x100000001, 0x10001, 0x7}, 0x10) fstat(0xffffffffffffff9c, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x1ec51da1abe9f22b, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f0000000280)={0x7, 0x0, 0x4, 0x100, {r4, r5/1000+30000}, {0x7, 0xb, 0x1, 0x10001, 0xffffffff, 0x9, "c8c0963d"}, 0x1, 0x2, @offset=0x7, 0x4}) wait4(0x0, 0x0, 0x80000002, 0x0) r6 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x8000, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r6, 0xc0045516, &(0x7f0000000040)=0x5) tkill(r1, 0x2a) ptrace$cont(0x18, r1, 0x0, 0x0) pipe2(&(0x7f00000001c0), 0x80800) ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x31}) ptrace$cont(0x20, r1, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1f, 0x2200) 17:22:31 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000440)=""/146) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0xfffffde0) r3 = socket$rxrpc(0x21, 0x2, 0x4000000000000a) ioctl$int_in(r0, 0x5473, &(0x7f0000000340)=0xfffffffffffff001) bind$rxrpc(r3, &(0x7f0000000140)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e22, 0x2, @remote, 0x4}}, 0x24) listen(r3, 0x9) modify_ldt$write(0x1, &(0x7f0000000300)={0x0, 0x20001000, 0xf6a19cc09ebfc357, 0x3, 0x400, 0x9, 0x3f, 0x100000001, 0x10001, 0x7}, 0x10) fstat(0xffffffffffffff9c, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x1ec51da1abe9f22b, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f0000000280)={0x7, 0x0, 0x4, 0x100, {r4, r5/1000+30000}, {0x7, 0xb, 0x1, 0x10001, 0xffffffff, 0x9, "c8c0963d"}, 0x1, 0x2, @offset=0x7, 0x4}) wait4(0x0, 0x0, 0x80000002, 0x0) r6 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x8000, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r6, 0xc0045516, &(0x7f0000000040)=0x5) tkill(r1, 0x2a) ptrace$cont(0x18, r1, 0x0, 0x0) pipe2(&(0x7f00000001c0), 0x80800) ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x31}) ptrace$cont(0x20, r1, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1f, 0x2200) 17:22:31 executing program 4: munmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000001c0)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) setxattr$security_ima(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='security.ima\x00', &(0x7f0000000180)=@sha1={0x1, "fdb7d163a1eea53f03786535247adbf9177abf99"}, 0x15, 0x1) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000017740)={0x90, r1, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r2}, {0x74, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8}}}]}}]}, 0x90}}, 0x0) mount(&(0x7f0000000d40)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, &(0x7f000000a000)) mount(0x0, 0x0, 0x0, 0x80010, 0x0) 17:22:31 executing program 1: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000980)}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bpq0\x00', 0x21}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') getdents(r1, &(0x7f0000000040)=""/46, 0x2e) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semget(0xffffffffffffffff, 0x0, 0x0) request_key(&(0x7f0000000000)='cifs.idmap\x00', 0x0, &(0x7f0000000100)='\x00', 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') ioctl(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r1, 0x4020565b, &(0x7f00000000c0)={0x8001007, 0x3, 0x3}) socket$packet(0x11, 0x3, 0x300) 17:22:31 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffc000/0x1000)=nil) connect$netlink(r0, &(0x7f0000000000), 0xc) 17:22:31 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = memfd_create(&(0x7f0000000000)='ppp1/^/&vmnet1selfwlan1\x00', 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockname$llc(r0, 0x0, &(0x7f00000004c0)) r2 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) readlinkat(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffffffffc00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffffff7f]}}) ioctl$sock_inet6_SIOCADDRT(r1, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000, 0x77a0100]}, @rand_addr="58c4c4a733d993a894f49491cb15d13e", @loopback, 0x0, 0x0, 0x0, 0x500}) bind$alg(r2, 0x0, 0x0) getsockname$inet6(r1, 0x0, &(0x7f0000000080)) getpeername$packet(r2, 0x0, 0x0) pipe(0x0) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x4, 0x10, r2, 0x0) setsockopt$bt_BT_FLUSHABLE(r2, 0x112, 0x8, 0x0, 0x0) accept$alg(0xffffffffffffffff, 0x0, 0x0) write$UHID_INPUT2(r3, &(0x7f0000000180)={0xc, 0xec, "b8de982649ca38980ad54f843cda374a6d67c4bdda95d183ba475fa86820485ad3ad97c771ef79c754e7b047910c9fd2ea7604c28137e36f4789bb3a049b9526b429762befbe778df921e6060056aba34f0744a3bc2b748d516f172b8958e4be683f528a9989adc86afadd1fe3841e0dc03e01451bea359736bddb1735a527186773c17b42e0f64c0cd334757c9cb4b12eb6968fe26491e4a4749693d0f7b9202013d87db98de538381d737a03f95282bafeccffc6acdf6c71f45f182afe7732d3288f9a3ae1a2629fdedf4d366b9da4a1b80af3661b470445e0dae7e03e186f4976dba0e0e8021c4813eb77"}, 0xf2) 17:22:31 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000440)=""/146) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0xfffffde0) r3 = socket$rxrpc(0x21, 0x2, 0x4000000000000a) ioctl$int_in(r0, 0x5473, &(0x7f0000000340)=0xfffffffffffff001) bind$rxrpc(r3, &(0x7f0000000140)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e22, 0x2, @remote, 0x4}}, 0x24) listen(r3, 0x9) modify_ldt$write(0x1, &(0x7f0000000300)={0x0, 0x20001000, 0xf6a19cc09ebfc357, 0x3, 0x400, 0x9, 0x3f, 0x100000001, 0x10001, 0x7}, 0x10) fstat(0xffffffffffffff9c, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x1ec51da1abe9f22b, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f0000000280)={0x7, 0x0, 0x4, 0x100, {r4, r5/1000+30000}, {0x7, 0xb, 0x1, 0x10001, 0xffffffff, 0x9, "c8c0963d"}, 0x1, 0x2, @offset=0x7, 0x4}) wait4(0x0, 0x0, 0x80000002, 0x0) r6 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x8000, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r6, 0xc0045516, &(0x7f0000000040)=0x5) tkill(r1, 0x2a) ptrace$cont(0x18, r1, 0x0, 0x0) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r7, 0x29, 0x41, &(0x7f0000000500)=ANY=[@ANYBLOB="7365637572697479000000000000000000000006000000000000000000000200000000000000e1294da536fded81cbe53bdca3a74371909220b97d520f26ab2dec2dffaee2b75b8a1ce780f7f6d2a621edddeec32a53cce7ec92eba46e5c6bb11f15b73a5c65efbb7bb931bceb81f0ea64be35157633cd49b21b47fbf88e57af885b10062bc1b7762271d7fd29"], 0x0) ptrace$cont(0x20, r1, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1f, 0x2200) [ 219.398786][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 219.404690][ C1] protocol 88fb is buggy, dev hsr_slave_1 17:22:31 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000440)=""/146) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0xfffffde0) r3 = socket$rxrpc(0x21, 0x2, 0x4000000000000a) ioctl$int_in(r0, 0x5473, &(0x7f0000000340)=0xfffffffffffff001) bind$rxrpc(r3, &(0x7f0000000140)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e22, 0x2, @remote, 0x4}}, 0x24) listen(r3, 0x9) modify_ldt$write(0x1, &(0x7f0000000300)={0x0, 0x20001000, 0xf6a19cc09ebfc357, 0x3, 0x400, 0x9, 0x3f, 0x100000001, 0x10001, 0x7}, 0x10) fstat(0xffffffffffffff9c, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x1ec51da1abe9f22b, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f0000000280)={0x7, 0x0, 0x4, 0x100, {r4, r5/1000+30000}, {0x7, 0xb, 0x1, 0x10001, 0xffffffff, 0x9, "c8c0963d"}, 0x1, 0x2, @offset=0x7, 0x4}) wait4(0x0, 0x0, 0x80000002, 0x0) r6 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x8000, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r6, 0xc0045516, &(0x7f0000000040)=0x5) tkill(r1, 0x2a) ptrace$cont(0x18, r1, 0x0, 0x0) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r7, 0x29, 0x41, &(0x7f0000000500)=ANY=[@ANYBLOB="7365637572697479000000000000000000000006000000000000000000000200000000000000e1294da536fded81cbe53bdca3a74371909220b97d520f26ab2dec2dffaee2b75b8a1ce780f7f6d2a621edddeec32a53cce7ec92eba46e5c6bb11f15b73a5c65efbb7bb931bceb81f0ea64be35157633cd49b21b47fbf88e57af885b10062bc1b7762271d7fd29"], 0x0) ptrace$cont(0x20, r1, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1f, 0x2200) [ 219.478970][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 219.485139][ C0] protocol 88fb is buggy, dev hsr_slave_1 17:22:31 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000440)=""/146) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0xfffffde0) r3 = socket$rxrpc(0x21, 0x2, 0x4000000000000a) ioctl$int_in(r0, 0x5473, &(0x7f0000000340)=0xfffffffffffff001) bind$rxrpc(r3, &(0x7f0000000140)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e22, 0x2, @remote, 0x4}}, 0x24) listen(r3, 0x9) modify_ldt$write(0x1, &(0x7f0000000300)={0x0, 0x20001000, 0xf6a19cc09ebfc357, 0x3, 0x400, 0x9, 0x3f, 0x100000001, 0x10001, 0x7}, 0x10) fstat(0xffffffffffffff9c, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x1ec51da1abe9f22b, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f0000000280)={0x7, 0x0, 0x4, 0x100, {r4, r5/1000+30000}, {0x7, 0xb, 0x1, 0x10001, 0xffffffff, 0x9, "c8c0963d"}, 0x1, 0x2, @offset=0x7, 0x4}) wait4(0x0, 0x0, 0x80000002, 0x0) r6 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x8000, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r6, 0xc0045516, &(0x7f0000000040)=0x5) tkill(r1, 0x2a) ptrace$cont(0x18, r1, 0x0, 0x0) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r7, 0x29, 0x41, &(0x7f0000000500)=ANY=[@ANYBLOB="7365637572697479000000000000000000000006000000000000000000000200000000000000e1294da536fded81cbe53bdca3a74371909220b97d520f26ab2dec2dffaee2b75b8a1ce780f7f6d2a621edddeec32a53cce7ec92eba46e5c6bb11f15b73a5c65efbb7bb931bceb81f0ea64be35157633cd49b21b47fbf88e57af885b10062bc1b7762271d7fd29"], 0x0) ptrace$cont(0x20, r1, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1f, 0x2200) 17:22:31 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000440)=""/146) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0xfffffde0) r3 = socket$rxrpc(0x21, 0x2, 0x4000000000000a) ioctl$int_in(r0, 0x5473, &(0x7f0000000340)=0xfffffffffffff001) bind$rxrpc(r3, &(0x7f0000000140)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e22, 0x2, @remote, 0x4}}, 0x24) listen(r3, 0x9) modify_ldt$write(0x1, &(0x7f0000000300)={0x0, 0x20001000, 0xf6a19cc09ebfc357, 0x3, 0x400, 0x9, 0x3f, 0x100000001, 0x10001, 0x7}, 0x10) fstat(0xffffffffffffff9c, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x1ec51da1abe9f22b, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f0000000280)={0x7, 0x0, 0x4, 0x100, {r4, r5/1000+30000}, {0x7, 0xb, 0x1, 0x10001, 0xffffffff, 0x9, "c8c0963d"}, 0x1, 0x2, @offset=0x7, 0x4}) wait4(0x0, 0x0, 0x80000002, 0x0) r6 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x8000, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r6, 0xc0045516, &(0x7f0000000040)=0x5) tkill(r1, 0x2a) ptrace$cont(0x18, r1, 0x0, 0x0) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r7, 0x29, 0x41, &(0x7f0000000500)=ANY=[@ANYBLOB="7365637572697479000000000000000000000006000000000000000000000200000000000000e1294da536fded81cbe53bdca3a74371909220b97d520f26ab2dec2dffaee2b75b8a1ce780f7f6d2a621edddeec32a53cce7ec92eba46e5c6bb11f15b73a5c65efbb7bb931bceb81f0ea64be35157633cd49b21b47fbf88e57af885b10062bc1b7762271d7fd29"], 0x0) ptrace$cont(0x20, r1, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1f, 0x2200) [ 219.779470][ T8210] netlink: 'syz-executor.4': attribute type 3 has an invalid length. 17:22:32 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, 0x0, 0x0) clock_adjtime(0x0, &(0x7f0000000300)={0x7, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x26}) ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000000)={0x6, 0x9, 0x4}) r2 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$dsp(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, 0x0, 0x0) eventfd2(0x80401, 0x0) ioctl$KVM_SET_VAPIC_ADDR(0xffffffffffffffff, 0x4008ae93, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="2b6d0a8032715b5022fee0e3fd7a23a9a12600a653ec43c195567ba08a3b8b37", 0x20) dup3(0xffffffffffffffff, r0, 0x0) 17:22:32 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000440)=""/146) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0xfffffde0) r3 = socket$rxrpc(0x21, 0x2, 0x4000000000000a) ioctl$int_in(r0, 0x5473, &(0x7f0000000340)=0xfffffffffffff001) bind$rxrpc(r3, &(0x7f0000000140)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e22, 0x2, @remote, 0x4}}, 0x24) listen(r3, 0x9) modify_ldt$write(0x1, &(0x7f0000000300)={0x0, 0x20001000, 0xf6a19cc09ebfc357, 0x3, 0x400, 0x9, 0x3f, 0x100000001, 0x10001, 0x7}, 0x10) fstat(0xffffffffffffff9c, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x1ec51da1abe9f22b, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f0000000280)={0x7, 0x0, 0x4, 0x100, {r4, r5/1000+30000}, {0x7, 0xb, 0x1, 0x10001, 0xffffffff, 0x9, "c8c0963d"}, 0x1, 0x2, @offset=0x7, 0x4}) wait4(0x0, 0x0, 0x80000002, 0x0) r6 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x8000, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r6, 0xc0045516, &(0x7f0000000040)=0x5) tkill(r1, 0x2a) ptrace$cont(0x18, r1, 0x0, 0x0) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r7, 0x29, 0x41, &(0x7f0000000500)=ANY=[@ANYBLOB="7365637572697479000000000000000000000006000000000000000000000200000000000000e1294da536fded81cbe53bdca3a74371909220b97d520f26ab2dec2dffaee2b75b8a1ce780f7f6d2a621edddeec32a53cce7ec92eba46e5c6bb11f15b73a5c65efbb7bb931bceb81f0ea64be35157633cd49b21b47fbf88e57af885b10062bc1b7762271d7fd29"], 0x0) ptrace$cont(0x20, r1, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1f, 0x2200) 17:22:32 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000440)=""/146) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0xfffffde0) r3 = socket$rxrpc(0x21, 0x2, 0x4000000000000a) ioctl$int_in(r0, 0x5473, &(0x7f0000000340)=0xfffffffffffff001) bind$rxrpc(r3, &(0x7f0000000140)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e22, 0x2, @remote, 0x4}}, 0x24) listen(r3, 0x9) modify_ldt$write(0x1, &(0x7f0000000300)={0x0, 0x20001000, 0xf6a19cc09ebfc357, 0x3, 0x400, 0x9, 0x3f, 0x100000001, 0x10001, 0x7}, 0x10) fstat(0xffffffffffffff9c, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x1ec51da1abe9f22b, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f0000000280)={0x7, 0x0, 0x4, 0x100, {r4, r5/1000+30000}, {0x7, 0xb, 0x1, 0x10001, 0xffffffff, 0x9, "c8c0963d"}, 0x1, 0x2, @offset=0x7, 0x4}) wait4(0x0, 0x0, 0x80000002, 0x0) r6 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x8000, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r6, 0xc0045516, &(0x7f0000000040)=0x5) tkill(r1, 0x2a) ptrace$cont(0x18, r1, 0x0, 0x0) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x31}) getsockopt$IP6T_SO_GET_ENTRIES(r7, 0x29, 0x41, &(0x7f0000000500)=ANY=[@ANYBLOB="7365637572697479000000000000000000000006000000000000000000000200000000000000e1294da536fded81cbe53bdca3a74371909220b97d520f26ab2dec2dffaee2b75b8a1ce780f7f6d2a621edddeec32a53cce7ec92eba46e5c6bb11f15b73a5c65efbb7bb931bceb81f0ea64be35157633cd49b21b47fbf88e57af885b10062bc1b7762271d7fd29"], 0x0) ptrace$cont(0x20, r1, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1f, 0x2200) 17:22:32 executing program 1: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000980)}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bpq0\x00', 0x21}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') getdents(r1, &(0x7f0000000040)=""/46, 0x2e) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semget(0xffffffffffffffff, 0x0, 0x0) request_key(&(0x7f0000000000)='cifs.idmap\x00', 0x0, &(0x7f0000000100)='\x00', 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') ioctl(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r1, 0x4020565b, &(0x7f00000000c0)={0x8001007, 0x3, 0x3}) socket$packet(0x11, 0x3, 0x300) 17:22:32 executing program 4: munmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000001c0)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) setxattr$security_ima(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='security.ima\x00', &(0x7f0000000180)=@sha1={0x1, "fdb7d163a1eea53f03786535247adbf9177abf99"}, 0x15, 0x1) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000017740)={0x90, r1, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r2}, {0x74, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8}}}]}}]}, 0x90}}, 0x0) mount(&(0x7f0000000d40)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, &(0x7f000000a000)) mount(0x0, 0x0, 0x0, 0x80010, 0x0) [ 219.999069][ T8212] netlink: 'syz-executor.4': attribute type 3 has an invalid length. 17:22:32 executing program 0: r0 = socket$inet6(0xa, 0x5, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380)='/dev/net/tun\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8927, &(0x7f0000000080)={'bridge0\x00', 0x0}) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000000040)=r2) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000001a80)=""/222, &(0x7f0000000100)=0xde) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'n\x00', 0x1211}) r3 = accept4(r0, 0x0, &(0x7f0000000000), 0x80800) sendmsg$rds(r3, &(0x7f0000001a40)={&(0x7f00000000c0)={0x2, 0x4e21, @local}, 0x10, &(0x7f00000013c0)=[{&(0x7f00000003c0)=""/4096, 0x1000}, {&(0x7f0000000100)}, {&(0x7f0000000180)=""/150, 0x96}, {&(0x7f0000000240)=""/220, 0xdc}, {&(0x7f0000000340)=""/56, 0x38}], 0x5, &(0x7f0000001800)=[@cswp={0x58, 0x114, 0x7, {{0x1, 0x200}, &(0x7f0000001440)=0x3b, &(0x7f0000001480)=0x34, 0x9, 0x2, 0xda, 0x3, 0x4a, 0x1}}, @rdma_dest={0x18, 0x114, 0x2, {0x1000, 0x1b1}}, @fadd={0x58, 0x114, 0x6, {{0x8, 0x4}, &(0x7f00000014c0), &(0x7f0000001500)=0xed94, 0xffffffffffffff80, 0x0, 0x80, 0x9, 0x0, 0x2}}, @rdma_dest={0x18, 0x114, 0x2, {0x1, 0x8}}, @fadd={0x58, 0x114, 0x6, {{0x7, 0x1}, &(0x7f0000001540)=0x1, &(0x7f0000001580), 0x0, 0x9fdf, 0xff, 0x9, 0x2, 0x200}}, @cswp={0x58, 0x114, 0x7, {{0x81, 0x4}, &(0x7f00000015c0), &(0x7f0000001600)=0x4b9f, 0x1f, 0x200000000, 0x3, 0x7f, 0x58, 0x9e4}}, @cswp={0x58, 0x114, 0x7, {{0x2, 0x6}, &(0x7f0000001640)=0x7, &(0x7f0000001680)=0x330e, 0x5, 0x100000001, 0x5, 0x800, 0x10, 0x8}}, @rdma_dest={0x18}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f00000016c0)=""/240, 0xf0}, &(0x7f00000017c0), 0x1}}], 0x230, 0x40}, 0x8c1705257a3f2502) 17:22:32 executing program 2: setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000080), 0x1c) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x131f64) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000040), 0x10000036e) ioctl$UI_DEV_DESTROY(r0, 0x5502) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) fcntl$setstatus(r0, 0x4, 0x10004280b) recvfrom$inet6(r0, &(0x7f00000000c0)=""/202, 0xca, 0x40000062, &(0x7f0000000000)={0xa, 0x4e20, 0x8000, @mcast2, 0x100000001}, 0x1c) 17:22:32 executing program 1: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000980)}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bpq0\x00', 0x21}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') getdents(r1, &(0x7f0000000040)=""/46, 0x2e) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semget(0xffffffffffffffff, 0x0, 0x0) request_key(&(0x7f0000000000)='cifs.idmap\x00', 0x0, &(0x7f0000000100)='\x00', 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') ioctl(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r1, 0x4020565b, &(0x7f00000000c0)={0x8001007, 0x3, 0x3}) socket$packet(0x11, 0x3, 0x300) 17:22:32 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x8000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000080)={0xffffffffffffffff}, 0x2, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(r1, &(0x7f0000000180)={0xa, 0x4, 0xfa00, {r2}}, 0xc) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r3 = socket$inet(0x10, 0x3, 0x0) sendmsg(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="24000000660007011dfffd940101830020200a000900000006000000000000000d00ff7e280000001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47a6268e3406cf055d90f15a3", 0x4c}], 0x1}, 0x0) [ 220.192023][ T8263] IPVS: length: 222 != 24 [ 220.219658][ T8262] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 220.291645][ T8275] IPVS: length: 222 != 24 17:22:32 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000440)=""/146) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0xfffffde0) r3 = socket$rxrpc(0x21, 0x2, 0x4000000000000a) ioctl$int_in(r0, 0x5473, &(0x7f0000000340)=0xfffffffffffff001) bind$rxrpc(r3, &(0x7f0000000140)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e22, 0x2, @remote, 0x4}}, 0x24) listen(r3, 0x9) modify_ldt$write(0x1, &(0x7f0000000300)={0x0, 0x20001000, 0xf6a19cc09ebfc357, 0x3, 0x400, 0x9, 0x3f, 0x100000001, 0x10001, 0x7}, 0x10) fstat(0xffffffffffffff9c, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x1ec51da1abe9f22b, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f0000000280)={0x7, 0x0, 0x4, 0x100, {r4, r5/1000+30000}, {0x7, 0xb, 0x1, 0x10001, 0xffffffff, 0x9, "c8c0963d"}, 0x1, 0x2, @offset=0x7, 0x4}) wait4(0x0, 0x0, 0x80000002, 0x0) r6 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x8000, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r6, 0xc0045516, &(0x7f0000000040)=0x5) tkill(r1, 0x2a) ptrace$cont(0x18, r1, 0x0, 0x0) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x31}) getsockopt$IP6T_SO_GET_ENTRIES(r7, 0x29, 0x41, &(0x7f0000000500)=ANY=[@ANYBLOB="7365637572697479000000000000000000000006000000000000000000000200000000000000e1294da536fded81cbe53bdca3a74371909220b97d520f26ab2dec2dffaee2b75b8a1ce780f7f6d2a621edddeec32a53cce7ec92eba46e5c6bb11f15b73a5c65efbb7bb931bceb81f0ea64be35157633cd49b21b47fbf88e57af885b10062bc1b7762271d7fd29"], 0x0) ptrace$cont(0x20, r1, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1f, 0x2200) 17:22:32 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000440)=""/146) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0xfffffde0) r3 = socket$rxrpc(0x21, 0x2, 0x4000000000000a) ioctl$int_in(r0, 0x5473, &(0x7f0000000340)=0xfffffffffffff001) bind$rxrpc(r3, &(0x7f0000000140)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e22, 0x2, @remote, 0x4}}, 0x24) listen(r3, 0x9) modify_ldt$write(0x1, &(0x7f0000000300)={0x0, 0x20001000, 0xf6a19cc09ebfc357, 0x3, 0x400, 0x9, 0x3f, 0x100000001, 0x10001, 0x7}, 0x10) fstat(0xffffffffffffff9c, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x1ec51da1abe9f22b, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f0000000280)={0x7, 0x0, 0x4, 0x100, {r4, r5/1000+30000}, {0x7, 0xb, 0x1, 0x10001, 0xffffffff, 0x9, "c8c0963d"}, 0x1, 0x2, @offset=0x7, 0x4}) wait4(0x0, 0x0, 0x80000002, 0x0) r6 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x8000, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r6, 0xc0045516, &(0x7f0000000040)=0x5) tkill(r1, 0x2a) ptrace$cont(0x18, r1, 0x0, 0x0) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x31}) getsockopt$IP6T_SO_GET_ENTRIES(r7, 0x29, 0x41, &(0x7f0000000500)=ANY=[@ANYBLOB="7365637572697479000000000000000000000006000000000000000000000200000000000000e1294da536fded81cbe53bdca3a74371909220b97d520f26ab2dec2dffaee2b75b8a1ce780f7f6d2a621edddeec32a53cce7ec92eba46e5c6bb11f15b73a5c65efbb7bb931bceb81f0ea64be35157633cd49b21b47fbf88e57af885b10062bc1b7762271d7fd29"], 0x0) ptrace$cont(0x20, r1, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1f, 0x2200) 17:22:32 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000440)=""/146) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0xfffffde0) r3 = socket$rxrpc(0x21, 0x2, 0x4000000000000a) ioctl$int_in(r0, 0x5473, &(0x7f0000000340)=0xfffffffffffff001) bind$rxrpc(r3, &(0x7f0000000140)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e22, 0x2, @remote, 0x4}}, 0x24) listen(r3, 0x9) modify_ldt$write(0x1, &(0x7f0000000300)={0x0, 0x20001000, 0xf6a19cc09ebfc357, 0x3, 0x400, 0x9, 0x3f, 0x100000001, 0x10001, 0x7}, 0x10) fstat(0xffffffffffffff9c, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x1ec51da1abe9f22b, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f0000000280)={0x7, 0x0, 0x4, 0x100, {r4, r5/1000+30000}, {0x7, 0xb, 0x1, 0x10001, 0xffffffff, 0x9, "c8c0963d"}, 0x1, 0x2, @offset=0x7, 0x4}) wait4(0x0, 0x0, 0x80000002, 0x0) r6 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x8000, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r6, 0xc0045516, &(0x7f0000000040)=0x5) tkill(r1, 0x2a) ptrace$cont(0x18, r1, 0x0, 0x0) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x31}) getsockopt$IP6T_SO_GET_ENTRIES(r7, 0x29, 0x41, &(0x7f0000000500)=ANY=[@ANYBLOB="7365637572697479000000000000000000000006000000000000000000000200000000000000e1294da536fded81cbe53bdca3a74371909220b97d520f26ab2dec2dffaee2b75b8a1ce780f7f6d2a621edddeec32a53cce7ec92eba46e5c6bb11f15b73a5c65efbb7bb931bceb81f0ea64be35157633cd49b21b47fbf88e57af885b10062bc1b7762271d7fd29"], 0x0) ptrace$cont(0x20, r1, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1f, 0x2200) [ 220.345617][ T8278] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 220.416699][ T8287] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 17:22:32 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, 0x0, 0x0) clock_adjtime(0x0, &(0x7f0000000300)={0x7, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x26}) ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000000)={0x6, 0x9, 0x4}) r2 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$dsp(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, 0x0, 0x0) eventfd2(0x80401, 0x0) ioctl$KVM_SET_VAPIC_ADDR(0xffffffffffffffff, 0x4008ae93, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="2b6d0a8032715b5022fee0e3fd7a23a9a12600a653ec43c195567ba08a3b8b37", 0x20) dup3(0xffffffffffffffff, r0, 0x0) 17:22:32 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000440)=""/146) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0xfffffde0) r3 = socket$rxrpc(0x21, 0x2, 0x4000000000000a) ioctl$int_in(r0, 0x5473, &(0x7f0000000340)=0xfffffffffffff001) bind$rxrpc(r3, &(0x7f0000000140)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e22, 0x2, @remote, 0x4}}, 0x24) listen(r3, 0x9) modify_ldt$write(0x1, &(0x7f0000000300)={0x0, 0x20001000, 0xf6a19cc09ebfc357, 0x3, 0x400, 0x9, 0x3f, 0x100000001, 0x10001, 0x7}, 0x10) fstat(0xffffffffffffff9c, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x1ec51da1abe9f22b, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f0000000280)={0x7, 0x0, 0x4, 0x100, {r4, r5/1000+30000}, {0x7, 0xb, 0x1, 0x10001, 0xffffffff, 0x9, "c8c0963d"}, 0x1, 0x2, @offset=0x7, 0x4}) wait4(0x0, 0x0, 0x80000002, 0x0) r6 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x8000, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r6, 0xc0045516, &(0x7f0000000040)=0x5) tkill(r1, 0x2a) ptrace$cont(0x18, r1, 0x0, 0x0) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x31}) getsockopt$IP6T_SO_GET_ENTRIES(r7, 0x29, 0x41, &(0x7f0000000500)=ANY=[@ANYBLOB="7365637572697479000000000000000000000006000000000000000000000200000000000000e1294da536fded81cbe53bdca3a74371909220b97d520f26ab2dec2dffaee2b75b8a1ce780f7f6d2a621edddeec32a53cce7ec92eba46e5c6bb11f15b73a5c65efbb7bb931bceb81f0ea64be35157633cd49b21b47fbf88e57af885b10062bc1b7762271d7fd29"], 0x0) ptrace$cont(0x20, r1, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1f, 0x2200) 17:22:32 executing program 1: r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vfio/vfio\x00', 0x7f, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x48, &(0x7f00000000c0)=[@in6={0xa, 0x4e21, 0x4, @local, 0x7}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e20, 0x4, @loopback, 0x7}]}, &(0x7f0000000140)=0x10) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f0000000300), &(0x7f0000000340)=0x18) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000280)={r1, 0xdc, &(0x7f0000000180)=[@in={0x2, 0x4e23, @local}, @in={0x2, 0x4e20, @rand_addr=0x77}, @in6={0xa, 0x4e21, 0x9f, @rand_addr="467197fb8661eb07e5ee73f6d78862eb", 0x7}, @in6={0xa, 0x4e24, 0xac, @rand_addr="1846c063485ac4c594677fc658d37484", 0x1}, @in={0x2, 0x4e24, @rand_addr=0x1}, @in={0x2, 0x4e24, @local}, @in6={0xa, 0x4e24, 0x8, @mcast1, 0x2}, @in6={0xa, 0x4e23, 0x9, @local, 0x7}, @in={0x2, 0x4e24, @local}, @in6={0xa, 0x4e23, 0x7f, @rand_addr="98b04637f561e59a17a7961b30c25d7b", 0x6}]}, &(0x7f00000002c0)=0x10) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000000080)=0x1000000, 0x4) 17:22:32 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x1, 0x0) r1 = dup(r0) ioctl$KVM_GET_NESTED_STATE(r1, 0xc080aebe, &(0x7f0000005480)={0x0, 0x0, 0x2080}) 17:22:32 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000440)=""/146) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0xfffffde0) r3 = socket$rxrpc(0x21, 0x2, 0x4000000000000a) ioctl$int_in(r0, 0x5473, &(0x7f0000000340)=0xfffffffffffff001) bind$rxrpc(r3, &(0x7f0000000140)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e22, 0x2, @remote, 0x4}}, 0x24) listen(r3, 0x9) modify_ldt$write(0x1, &(0x7f0000000300)={0x0, 0x20001000, 0xf6a19cc09ebfc357, 0x3, 0x400, 0x9, 0x3f, 0x100000001, 0x10001, 0x7}, 0x10) fstat(0xffffffffffffff9c, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x1ec51da1abe9f22b, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f0000000280)={0x7, 0x0, 0x4, 0x100, {r4, r5/1000+30000}, {0x7, 0xb, 0x1, 0x10001, 0xffffffff, 0x9, "c8c0963d"}, 0x1, 0x2, @offset=0x7, 0x4}) wait4(0x0, 0x0, 0x80000002, 0x0) r6 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x8000, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r6, 0xc0045516, &(0x7f0000000040)=0x5) tkill(r1, 0x2a) ptrace$cont(0x18, r1, 0x0, 0x0) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x31}) getsockopt$IP6T_SO_GET_ENTRIES(r7, 0x29, 0x41, &(0x7f0000000500)=ANY=[@ANYBLOB="7365637572697479000000000000000000000006000000000000000000000200000000000000e1294da536fded81cbe53bdca3a74371909220b97d520f26ab2dec2dffaee2b75b8a1ce780f7f6d2a621edddeec32a53cce7ec92eba46e5c6bb11f15b73a5c65efbb7bb931bceb81f0ea64be35157633cd49b21b47fbf88e57af885b10062bc1b7762271d7fd29"], 0x0) ptrace$cont(0x20, r1, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1f, 0x2200) 17:22:33 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x10) r2 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_group_source_req(r2, 0x0, 0x2e, &(0x7f0000000100)={0x1, {{0x2, 0x0, @multicast1}}}, 0x108) r3 = socket$caif_stream(0x25, 0x1, 0x1) vmsplice(r3, &(0x7f0000000380)=[{&(0x7f0000000000)="975db7981604f2993a4f266bef87e3590d13f91d0dfde0610f5f4f89937f40d65a42e36d2fccde3712f5d9164c61252910306af1b76af9483c92d5328a055086489b7cd877fb3e8b1499b28d17524e623832b75e9fed7920530f36e8bedda75a475afb8698c6eb0bdc6fb54ef02f18f47a034784c0e9568613a0310f2c7be57d25724ae5c3dd30ac62e0133eda8f6d4b9023cc4ab11b161e831819bf2628973dab7e7e4673f3899aa15dc6b77bf6218ade00909ec2cd9d255d0a6c525b85c53b58113795f753d7b0e29beeda3ae5ce0ec34102bab94057e944613e610631c4", 0xdf}, {&(0x7f00000002c0)="0cc66c8d045c71d1289f0eb5ca1888194830386a32a10758276e6f0e1e851bb2636bc261248d1fc18915a3757b753e2237b2554ea1c3d7485a0afb75721d42642393e91d3b0ee077b8331f009324228f96a2537f436fecc54ece4f41e4cce60b6e78f06af98f403d46e70e3bdafa3d91804065e00febff233f659bb9b1e417e114cc063b3dc092ea0abc49a9e48d48bb51d20efab27f45692b0046bdd791f0b7b9", 0xa1}, {&(0x7f0000000600)="ad488d6aae8027733b48c67f3710792a5df704355598a45fc8b1b3a50a78bfb5b7ddbaabb22e0a0939e48880ef5c16e152402032cd0b989f4f36d7f4d03deec65457b20e8c3e9776c9c285523c6e05bbdd97ace931a27b45c5cde662424fe1b24e80392f2d4415d937f9538bd248871a634ef5211860956f9b65302fb06360fac7ae61266b270acf75ea1a03104442cb149b4fd8fe62fbba354b35c6b5a103d51957772eefbbd8b8e9bd9d3022c059cea8b07ecebde268db0e6f3c3d62ae3314988e91d4cba4f9463f4348e5717a001817f89d1193565d261a7258f5299644587a4a3b268f2eec7f12bef711fe22c9e69c4c1fe2739e3c89803ed02c28819fed31c4741e7f78626ce6e8c15aa971eb5836e9db639d398577f983e44258af0bb8b67190b6c26cebf2c200e36b03a96639d60aecf093700bb164813f8406872302ec2fafd580bd3ab094c9391f799026444c67f7e41db9ba7cf3ef35d037ff4c36673f78bf280c31e89056f0b2acf46af8d1d19853ef536cac16e378d2d2463b10b405abbbd99356b6fa7965c1ce7231fe2025b8cd78c6adcf0acdfc519807971a7cf7363db33947cac9f98d37816fe15bbe5db9b590f6ed9ca6e15ea9f78e4d5d2b1a81a76dcc9833f49689846e9b1965b69fe7b8423bb318cc5bf5ab5133dc24a536b9262637cbd99c589490a77fe5e61b519395308aa35f9d55231ba4e83f04f57cc3d715939ecfaea2ce66ce7b01e25d1d8ac3edcfb94638ccf430d39adbe4e87627224bac74607237156482bd901ba4b594cf1c5d259cd6d9e1f73709e5a3f969f4f7addd1af03fad3c91561581d5813298dbd6c77a11428481f3a0d87ed38ddad2a564452cf5c5ba6f6de0b02aa92d6b75cd57cc6bfa9944fbfa2a6caa21d58b7d4b81f95da6919f63682ee9288e51d53878c67132a6ecd26e36febc388555d234450c103c7692902038bf9ec274b128e068df2e7e0d97af5bcf8762222fdbf88de6faa5cf2596fa6d30f27ea8b1ac203b9907033c339825c639e8ce96e01417c552e04c0a2903e65f05f093fff1c0f40fb88922f20125d11f4931ab55fe3d9380835109438d1c3a8645dbfeb7e8b4734a81b97d6fac3feadf3115018f9971eef15568e716f98980b265abd3b2f2dc8687ba78a9d28ed2cb2c3ffac7150a65dfdb24fe08dd385bceebe01900f081ef194b6895e9679a2f10d96412f603b39af6501853383361f903df2a648b31b4bd693d70deeabd2678aafcc71cec69e01abe22373a43be2dfa7daffea490a6802bc17c10bc8dabc127d1236af052eb15be00aab9350122c77026f1e7c7250185ed4cb751fec68c3066c86057380cd42ab42ae7097411170e63886208c4f15bf401744b7d3a6752e6080fcc3f772d8e5db757dc152c5eb936acfee795ab19cdb606cce53e198d1c15f7ff38f70d87ae7be8f731c3f2d1ecbcfab208a0b91306145cf64810793ea6ea6e7ae47dd4285ce202361bb84d51b06343c86e4dcc2e67453858a634901cffe2557e2c039887f8572996adaef243826ee7665bd3bedfad315cf9750cafa1687a8e7ee990c95905e5feb2f060fb33b9153dfd77a7df13d860d124b93ee80d7f6c2eee34b2c440701a2ae48b881c534b2f5d8e0e7e85ad070d96af8e3e955fdf9507dc74e60889339fea20b829edd77deb6f63627a7f72276d4757dc8180b013644bf11992c045f88f5fbff21b972abb52ead535410863b5029629f73fd5df0bb0525e828d756e12307f7ec0cd77980de4866c77fb289fbce032efcfa3865f04a6091a34e551e49e22893a11f24e5604aea61737f895d0fc60a3c95f11f170de846c56829003dc43e20ceadd42b648633ce4dbabd6fb7dda08023ecf22bc898549890a01561c630f7b5dfeab87819b4502c9b4841c979878b84c384f36d0e544a83f06b08c7f14deeac4dd7dc615f22f84b414c4c48e8041ba594933aade6ae0f8ff1c2f8ca96fac4a4ec2792225fe0608ede053df8577324ca0b29f0332eee21efa8acd09459ab76ded72d38c4772983b63f2bd8ee7f90b23b935894d135572acfb48c775708225c163986f2fb9b4110d682a1c7e1df1f9b6f89d30d106545134fce79d522d7144cfc0b9603182930d062d025d271d1bef3ef2fc8f7d5a225a34b5a9d6674d14b47ae0dda805a4a82774ccfb02fb0a53698c6f408c10b8db866a77066e70046afab18a8bd2d422097f420cce5e46815ed04457586718aa092f6c4bb11b22038ada915fdf53fc8075c03147709fad70ea191548423dc4149db13c0202ab92a4451360af7efc4108bda13f5a48a76aa085283be10dedf605bcdd9dfe989198edea6244f0740281fc8ece23c06e6afcba10b5e5a2f5f70a3e25e15c8719e3ec667dcf5be34d619147b45dc984555e8be9f3cc1466637e822eafed26ba4d8286e8eddf09d6a9968481cc6aafaa72f0a78849e2f6e61dd7583c38203ffb9cdde1be8d0c249a84264c245184aec20b6522ff347fda7f4ff8f691622915e2a2e866b051bbd95fab257d54d70dc998182455da7481fcd1bd5e28b5b70c7266e68dc24103e3c94b615c233b742d7140ad4777d4ba6c91da82cba7b42eb9d2a18e5bd3b4948f50c21725dfb0b7edb5d8c3ac44c1bf6a0d802f82d95c851cc94c7c56f1910f0ca2505a348b1a194c575339fa4162a1a5b7290f8fedb1e6410d95dcd8aa46e3673526bf50a43f69f8c279a96e8d15c8f26582bf97be0a81d7582ec2c5875fca8c13e44d7c78a68328ab100c367b84df361b94328432778c5d9dd035e2dd9fc7de91f1e42994755d34a13b7e1210062aa73952095474ef61c46accd9fe9917359331b9603ffc5643410d1f4e7b6358f1daacd73a87583b06707e398f14abbdb7a16c4c52db3f692a9d8d079f31cf60bb75740fe8f939d2c6840911608d94d8ff36e59441ec18dcc6c4759d8265abb43abadc677c3262788ca92a58ddff75e818892d4a3bb44e3bc134e7d4feb679eea3d3814c51957f010aeca25eaf2bf958763a4beb2834268283f9e9c44e786144fb9b7be3dd6aed67a183c35ec2aafeac5d523043fbe3b2f731284ddcf4225a081627be8d8ed7faad6ed5447395cb7218f0595244d5bc1734cab31fc8cd70357179e0d4562112911557bf2aadbc9edbc09840e59990738cf018cbb7e5779f8262c803bf9fdfda2f5052fb323acd1700fb696e98ad548a5003be8585d837d5b9aacd1b3626b16a7e22379fc827033ae2e1284cbefa38cccf0d99d0f4d4971bfd9e89cc08cfcbd40aef565158da8a2619bd3fc54b1ea56d7a053c762f7b020816ddbaf61c036b992951fd06c0117b642339c15e55608dc957b4fc3b6b35be00ffa968f3097d423145b064d6178abc6566cbaa7c322d72cfe9570fd484bb8305056eda720b084a51e9de8ff55fd05211b96528c5e7dd3f01a5629413c470a5397eb818ee2cb20ea397e1b004cadc37c8d7ee9766ead6b36d87b29b24ae0820d98d3283fed981c6af189d5093ff9b1fbf01447e1b312e8aad2cab61ae1364a7fd007c664f69f5297e257331266194be21e565cafd297eef841a98481574dca95a2dc8eecef058451395d2da17b3479dbe358436e0ff84a32910014ae2b0d45d7ebec11743e1f07f6a435b6a36a12ab774bbc57d1abdedf95f496723f88cd6ec9b2c4365781755721a5ddccaa642087a9b204c71ecaf7c4368f06d920a260e8ddebd14136d358fe8e5045e247a74fb496abdb74bd4405b59829b704ef1deb6bb8cc522401e8c1b26aba1b0dc18e6e44817dd04a4c0074cf5622eb0a30493e235fdc6f31f042c6310a279320bbe6ca2701a229742463968665cde581598d8c992b1b77ac119b33c6b336e929e3e835d331932046ccee902b5ed319b963a584e138004fde0fafe0e987814ce2f240cd60ea6a95dcf969365d8dc75569c7f0255b7182afc8d888bb755ea31896e8d8909a71c731e214013c6145d475f85f9df81b8d330ae640a362196353f68c174906c73393f5701fddd72640c5a5c27221b19c939d783c83cb99dc829af9c63563259edec9696b2fd266ce0c31d1c614f7f79de3445ed67a71260e7c18a280d5b3229496fbfe561d2686e5bb7f39e2f194f0c174709468454a40b306372f1c1a6cc68ddd54905e78c3c3288a1b0dd260b94e8ed5ff597fbc1c373e61fb42bb663150e47583687527465b92c6756756d77f42ba270c48a8b4bc37b9aac0d432f2c23952ef97d61f7f446250b548a7e6622f9066238870d7678d734549ecbc091f60aab60cce52cc2c7d73e103edaa8e1f395b20f8d5fc24cfc48a1086fbd265b665c391d8e06c163785f3e25dd9cccad1c95a9e3354ef61cfbc1da762cfa98f38595fe40ba18afc99538c1cec2e0a017d5d8376a73b6a5a66bf207f1897f8c8288b6da3baf9fa181f2bba921e2c1f8b2d832dcb41bb58464a3566b807595f83315971d3813b87cce672bb68af8c3d50bbd3090a80831d72943c2e8d89e135dd4d0430681d30c866141419e6b7acb96e94e7db9040919af7effe1ae4ce67d7b8468140e830dab6784aa3d07dbd68c4636dc71a2ed046d4af588034d9f31c67bf0e2733e955f270f5fcba71dfd351c5b340ee3de22f41cbd7f830f6dd1ac0567974c07421d403d2ccd7ec5cd96824f6fc424d940a926c00431ef2ae8e08971e5674e9505cd3225a2098564affee7c8d2bf332fefebd509c8db16b4ca71946f3a0a307ac9c21539bbc506fe76c8a8c791d34cd4a97f44b7f8a9c8a4d139e2910fc523abe7de14d1853b3ad1cae467e01b0c84dd6df265ac2d2a0caa1193536b2f863be1daf82739d6c478696ac9c7d41bf213964ff069c11d860489c2ebc96084499b2aa3c9e75f33d407b626f433fa3a7ff0e90d405857d5c31bdf09c71a162eec1ca86aa69aa0cbaca46cc1726902dfcb04e1f242c9fa130f960b25c866fe9aa26806ba12ace9cf1c5ef65f0593cff59540ee8a859fa6ab6404d7d7807027de020176c0b46cf90449bbb5980e818a2b722b34f5a113d838ed91f1abec4aad05d2da332099e0ad127996a9575037ffdf5c5c79377591bcb0eecd01ff5b0c2af7ffe2c95ee9683600bd223cbf1ffc12d55d0436dd014a23b0339c3a521593695887ddf7347664717abf8106b410148b73035bd6bb753dd61e8284dbda3aa18e3b8268bdfbfbf9270fa5894bcfee3020194c1be4c510471d55d28652e097c360c8a18711d70908188bb3bfc65785cc6a785922d39417808d059ec70fa7b074c07cc236ca24bde0fad8c87ec500eb8913c9061ff85c865b1f046e0210ed36076136f463211a06fb45c87a3b4d961e8b3b0a57d2f8afc244841312df46cffe19f0a3c5d9476f5d922607eda5a243514b06102d7fba7acacd1b77042b6a027f8bfd0e948739b8024c7a5ce32b98cd827991e4e2447d2024062aa39b7de4488816b2f0c1cf9a0f979da11c7c95eaff3478685f05e3c1eb520626b584cd8f0d6c2463a9226546541d3f76f02ef869d1d464032e7d611ea15a3669a269ea6ae73e81faf3c19860a4ed9ae0e0a3e734dac102744e6fb258a9d004c202265954bc635e6a2b49c6e4a7db4902e25cd0fc1b885f5433147530911cc100c2545791003a16db309c050ab1a8e806c93f7092f30f918fcc01a0a3bd8a690d25e4728f595457b89904e8faf184bf31e47dd86dd9b50b2353498bb31283c818cccd04fd385f7f1085a58276c1972277591ac8063b03f9537094afe787c8b567e923cdae6a5e687af32dd6ea60156a98c81c71ec", 0x1000}], 0x3, 0x9) setsockopt$inet_mreq(r0, 0x0, 0x18, &(0x7f0000000280)={@empty=0x1a0, @empty}, 0x8) 17:22:33 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0xfa1, 0x80) write$P9_RFSYNC(r0, &(0x7f00000002c0)={0x7, 0x33, 0x2}, 0x7) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f00000000c0)={0x6, 0x5, 0x1, 0x7, 0x3ff, 0x3, 0x8}, 0xc) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000100)={0x6b6c4a39}, 0x4) renameat(r0, &(0x7f00000001c0)='./file0\x00', r0, &(0x7f0000000200)='./file0\x00') creat(&(0x7f0000000140)='./file0\x00', 0x0) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000040)='./file0\x00', 0xc) r2 = inotify_init() inotify_add_watch(r2, &(0x7f0000000000)='./file0\x00', 0x2000000) inotify_add_watch(r2, &(0x7f0000000180)='./file0\x00', 0x117) r3 = getuid() getitimer(0x0, &(0x7f0000000340)) ioctl$VIDIOC_G_INPUT(r0, 0x80045626, &(0x7f0000000300)) getgroups(0xa, &(0x7f0000000280)=[0xee00, 0xffffffffffffffff, 0xffffffffffffffff, 0xee00, 0xffffffffffffffff, 0x0, 0xee01, 0xffffffffffffffff, 0xee00, 0x0]) fchownat(r0, &(0x7f0000000240)='./file0\x00', r3, r4, 0xc00) lsetxattr$trusted_overlay_opaque(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000003c0)='trusted.overlay.opaque\x00', &(0x7f0000000400)='y\x00', 0x2, 0x1) 17:22:33 executing program 4: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x0, 0x0) getsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000080), &(0x7f00000000c0)=0x8) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8001, 0x2, 0x12, 0x1d, "318a6e0b260d798345299c58a170a626098c820b04ea2b3e28d6fb6792d7f5192cf9be5521b7546b35500fc247c33ec41b45943154494716f654eefa9684c232", "e8e6afc426033fb6b5e018444dc957583020b51716793cf33cd6fd5a0b6d4701", [0x7, 0xff]}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x2c, 0x30, 0x829, 0x0, 0x0, {0x2802, 0x1000000}, [@nested={0x18, 0x0, [@typed={0x12, 0x1, @ipv6=@loopback={0x4000000000000}}]}]}, 0x2c}}, 0x0) ioctl$BLKGETSIZE64(r0, 0x80081272, &(0x7f0000000140)) fcntl$setflags(0xffffffffffffffff, 0x2, 0x1) 17:22:33 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000440)=""/146) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0xfffffde0) r3 = socket$rxrpc(0x21, 0x2, 0x4000000000000a) ioctl$int_in(r0, 0x5473, &(0x7f0000000340)=0xfffffffffffff001) bind$rxrpc(r3, &(0x7f0000000140)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e22, 0x2, @remote, 0x4}}, 0x24) listen(r3, 0x9) modify_ldt$write(0x1, &(0x7f0000000300)={0x0, 0x20001000, 0xf6a19cc09ebfc357, 0x3, 0x400, 0x9, 0x3f, 0x100000001, 0x10001, 0x7}, 0x10) fstat(0xffffffffffffff9c, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x1ec51da1abe9f22b, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f0000000280)={0x7, 0x0, 0x4, 0x100, {r4, r5/1000+30000}, {0x7, 0xb, 0x1, 0x10001, 0xffffffff, 0x9, "c8c0963d"}, 0x1, 0x2, @offset=0x7, 0x4}) wait4(0x0, 0x0, 0x80000002, 0x0) r6 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x8000, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r6, 0xc0045516, &(0x7f0000000040)=0x5) tkill(r1, 0x2a) ptrace$cont(0x18, r1, 0x0, 0x0) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x31}) getsockopt$IP6T_SO_GET_ENTRIES(r7, 0x29, 0x41, &(0x7f0000000500)=ANY=[@ANYBLOB="7365637572697479000000000000000000000006000000000000000000000200000000000000e1294da536fded81cbe53bdca3a74371909220b97d520f26ab2dec2dffaee2b75b8a1ce780f7f6d2a621edddeec32a53cce7ec92eba46e5c6bb11f15b73a5c65efbb7bb931bceb81f0ea64be35157633cd49b21b47fbf88e57af885b10062bc1b7762271d7fd29"], 0x0) ptrace$cont(0x20, r1, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1f, 0x2200) 17:22:33 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) syz_open_pts(r0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BLKBSZSET(r1, 0x40081271, &(0x7f0000000000)=0xffffffffffff8001) syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x2) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) dup3(r2, r0, 0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0) 17:22:33 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, 0x0, 0x0) clock_adjtime(0x0, &(0x7f0000000300)={0x7, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x26}) ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000000)={0x6, 0x9, 0x4}) r2 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$dsp(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, 0x0, 0x0) eventfd2(0x80401, 0x0) ioctl$KVM_SET_VAPIC_ADDR(0xffffffffffffffff, 0x4008ae93, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="2b6d0a8032715b5022fee0e3fd7a23a9a12600a653ec43c195567ba08a3b8b37", 0x20) dup3(0xffffffffffffffff, r0, 0x0) 17:22:33 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x248f60ebb4c88b2, 0x0) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-control\x00', 0x82a4f3d61d82f40, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x8000, 0x0) r2 = syz_open_dev$vcsa(&(0x7f0000000340)='/dev/vcsa#\x00', 0x3, 0x40000) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000480)=0xfe7) ioctl$TIOCLINUX6(r0, 0x541c, &(0x7f0000000580)={0x6, 0xfff}) ioctl$TIOCSETD(r2, 0x5423, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x80, 0x0) r3 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r3) r4 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r4, &(0x7f0000000180)=ANY=[@ANYBLOB="007e03abb1e7bf4e537c18f7a555453c84c57681f6e463b6a66a0200300c0000000000007eb0c8175fe7330c1677cccc3e8db44fdaf76cb2824afc7611b2a7acbe5fd8bdbecbb69a987f1c9a8d2175e547764fa62aa47105004466e82fb315310285a40db818a181a1c7305f11070000"], 0x71) ioctl$KVM_GET_NR_MMU_PAGES(r3, 0xae45, 0xffffffffa10a47d3) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) execve(&(0x7f0000000240)='./bus\x00', &(0x7f00000004c0)=[&(0x7f0000000280)='/dev/vsock\x00', &(0x7f0000000300)='ppp1+\x00', 0x0, &(0x7f0000000380)='vfat\x00', &(0x7f0000000400)='/dev/vsock\x00', &(0x7f0000000440)='/dev/vsock\x00', 0x0], &(0x7f0000000640)=[&(0x7f0000000500)='ppp0^ppp1(wlan1\\\x00', &(0x7f0000000600)='vfat\x00']) unlink(&(0x7f0000001e00)='./bus\x00') ioctl$CAPI_GET_FLAGS(r1, 0x80044323, &(0x7f00000003c0)) sendfile(r4, r4, &(0x7f0000000000), 0x8080fffffffe) mkdir(&(0x7f0000001540)='./file0\x00', 0x0) 17:22:33 executing program 4: syz_mount_image$reiserfs(&(0x7f0000000080)='reiserfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)=ANY=[@ANYBLOB='jloc4,\x00']) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x200000, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000240)) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x810c5701, &(0x7f0000000700)) ioctl$TIOCSPGRP(r0, 0x5410, &(0x7f0000000040)) setsockopt$IP_VS_SO_SET_EDITDEST(r0, 0x0, 0x489, &(0x7f0000000100)={{0x33, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x3, 'ovf\x00', 0x4, 0x9, 0x1d}, {@loopback, 0x4e20, 0x2000, 0x4, 0x4800, 0xfffffffffffffff9}}, 0x44) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f00000006c0)={0x2, 0x5f}) stat(&(0x7f0000000840)='./file0\x00', &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$erofs(&(0x7f0000000180)='erofs\x00', &(0x7f00000001c0)='./file0\x00', 0xfffffffffffffffb, 0x6, &(0x7f0000000500)=[{&(0x7f0000000200)="e384d683a8451eeaf8", 0x9}, {&(0x7f0000000240), 0x0, 0xa2e9}, {&(0x7f0000000280)="3a0b7b0bda1eef0e73878eb7396b8b30f4592f8a22da0dc471a4e8e524e4c3bdcd291f0c69f9207c97e4fa25caaef17d", 0x30, 0x5}, {&(0x7f00000002c0)="9d4ecb3592ad204b0eb6e15c2a8c2944bd8f9894b88a6c376b50490275509b602ef6525475e315d23b2d330cd4827f9b751a36d0f4c0c9235048768c2dd1cf80fcf9d3ef58a3efd2ea27c7d7a41957a4", 0x50, 0x8000}, {&(0x7f0000000980)="4dd5c56e3d0becf3dadcd2b5e95607e807d5fd95d934b2df4b9a478258a2ca64f237f22986b935b47221e184a8f6cb9ec2a0a55bc856fade30b0d91049b02972e1c5afdf9f63445c3a9561075194b9b99b4ad94a52d3d6f101d68d4d56e6e31a8828b0c0e6c99497e3dfdd3a8514e8fbc3b1ab60863e6e3dd1dafdc016ce548ad11f797578eb5bc1ae8784ab072125033bc2967bae920b98327dcbf65ea72aec5926cb90b28f03adfea3e9e45008d6c779e118047d2411495ca4ecece619559b1d79281f6951448a52c0eddd00a1628b5a4ae0863783bc41b2de39043a0a1812f2e2142418cf48f3cd4b57850bd7435f43854c89", 0xf4}, {&(0x7f0000000440)="3739be367541d130370be38cfb4e3015874f738cfde138f3b905dd1ad2d4ad7c066df10c3d3b8da8e97c24e01ef2536c4d80bb385134d50b3eaab9a5a38f1c320f4800c6697323113a194e9b3a2c723cbfbfbb81a628392db709da6d02579800e290d3163d01149f8b02c4061bc094b04d6263d421b1d11fa6a1599ca9c1be2bb3fbb5116e436eac3039fc8f5126ccb59b16b23dc5ba5bc125e97185027d76d5a0", 0xa1, 0xd0}], 0x1000000, &(0x7f00000005c0)={[{@nouser_xattr='nouser_xattr'}], [{@permit_directio='permit_directio'}, {@fowner_gt={'fowner>', r1}}]}) 17:22:33 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000440)=""/146) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0xfffffde0) r3 = socket$rxrpc(0x21, 0x2, 0x4000000000000a) ioctl$int_in(r0, 0x5473, &(0x7f0000000340)=0xfffffffffffff001) bind$rxrpc(r3, &(0x7f0000000140)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e22, 0x2, @remote, 0x4}}, 0x24) listen(r3, 0x9) modify_ldt$write(0x1, &(0x7f0000000300)={0x0, 0x20001000, 0xf6a19cc09ebfc357, 0x3, 0x400, 0x9, 0x3f, 0x100000001, 0x10001, 0x7}, 0x10) fstat(0xffffffffffffff9c, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x1ec51da1abe9f22b, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f0000000280)={0x7, 0x0, 0x4, 0x100, {r4, r5/1000+30000}, {0x7, 0xb, 0x1, 0x10001, 0xffffffff, 0x9, "c8c0963d"}, 0x1, 0x2, @offset=0x7, 0x4}) wait4(0x0, 0x0, 0x80000002, 0x0) r6 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x8000, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r6, 0xc0045516, &(0x7f0000000040)=0x5) tkill(r1, 0x2a) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x31}) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000500)=ANY=[@ANYBLOB="7365637572697479000000000000000000000006000000000000000000000200000000000000e1294da536fded81cbe53bdca3a74371909220b97d520f26ab2dec2dffaee2b75b8a1ce780f7f6d2a621edddeec32a53cce7ec92eba46e5c6bb11f15b73a5c65efbb7bb931bceb81f0ea64be35157633cd49b21b47fbf88e57af885b10062bc1b7762271d7fd29"], 0x0) ptrace$cont(0x20, r1, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1f, 0x2200) 17:22:33 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x8111000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'eq\b\x00', 0x40000000000}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x305) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000240)='/dev/full\x00', 0xaf4f732c838a62b7, 0x0) r2 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x3, 0x20100) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = getpid() syz_open_procfs$namespace(r3, &(0x7f0000000500)='ns/pid_foGr_children') r4 = socket$packet(0x11, 0x3, 0x300) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000780)={{{@in=@multicast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@empty}}, &(0x7f0000000d40)=0xe8) connect(r4, &(0x7f0000000d80)=@can={0x1d, r5}, 0xfffffffffffffc54) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) rename(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='./file0\x00') mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2c67726f75705f69643d76504a0f2526178135f71ee1a0db4e88f00abe9575672d2d0ded8e88b9e8655d44735b4cbae876eb45635ec5172d2ff2e10c0341314ae84e5dbd025891ff14e574c714e5eea2369d56688858e95205248cc3df8c9a6b", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) getsockopt$IP6T_SO_GET_REVISION_TARGET(r2, 0x29, 0x45, &(0x7f0000000400)={'N>TMAP\x00\x03\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1e\xa7\x10\xe4'}, &(0x7f0000000480)=0x1e) read$FUSE(r6, 0x0, 0x0) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000440), 0x10, 0x0, 0x0, &(0x7f0000000900)=ANY=[]}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000015c0)='ns/pid\x00') syz_open_dev$binder(&(0x7f0000001500)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], 0x1) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) execve(&(0x7f0000000040)='./file0\x00', &(0x7f0000000180)=[0x0], &(0x7f00000003c0)) r7 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000280)='io.weight\x00', 0x2, 0x0) write$cgroup_int(r7, &(0x7f0000000540), 0x12) [ 221.202046][ T8346] REISERFS warning (device loop4): super-6502 reiserfs_getopt: unknown mount option "jloc4" [ 221.230137][ T8354] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 221.244708][ T8341] FAT-fs (loop1): error, invalid access to FAT (entry 0x00006500) [ 221.358575][ T8354] FAT-fs (loop1): Filesystem has been set read-only [ 221.359682][ T8346] REISERFS warning (device loop4): super-6502 reiserfs_getopt: unknown mount option "jloc4" [ 221.394696][ T8341] FAT-fs (loop1): error, invalid access to FAT (entry 0x00006500) 17:22:33 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000440)=""/146) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0xfffffde0) r3 = socket$rxrpc(0x21, 0x2, 0x4000000000000a) ioctl$int_in(r0, 0x5473, &(0x7f0000000340)=0xfffffffffffff001) bind$rxrpc(r3, &(0x7f0000000140)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e22, 0x2, @remote, 0x4}}, 0x24) listen(r3, 0x9) modify_ldt$write(0x1, &(0x7f0000000300)={0x0, 0x20001000, 0xf6a19cc09ebfc357, 0x3, 0x400, 0x9, 0x3f, 0x100000001, 0x10001, 0x7}, 0x10) fstat(0xffffffffffffff9c, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x1ec51da1abe9f22b, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f0000000280)={0x7, 0x0, 0x4, 0x100, {r4, r5/1000+30000}, {0x7, 0xb, 0x1, 0x10001, 0xffffffff, 0x9, "c8c0963d"}, 0x1, 0x2, @offset=0x7, 0x4}) wait4(0x0, 0x0, 0x80000002, 0x0) r6 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x8000, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r6, 0xc0045516, &(0x7f0000000040)=0x5) tkill(r1, 0x2a) ptrace$cont(0x18, r1, 0x0, 0x0) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x31}) getsockopt$IP6T_SO_GET_ENTRIES(r7, 0x29, 0x41, &(0x7f0000000500)=ANY=[@ANYBLOB="7365637572697479000000000000000000000006000000000000000000000200000000000000e1294da536fded81cbe53bdca3a74371909220b97d520f26ab2dec2dffaee2b75b8a1ce780f7f6d2a621edddeec32a53cce7ec92eba46e5c6bb11f15b73a5c65efbb7bb931bceb81f0ea64be35157633cd49b21b47fbf88e57af885b10062bc1b7762271d7fd29"], 0x0) ptrace$cont(0x20, r1, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1f, 0x2200) 17:22:33 executing program 2: perf_event_open(&(0x7f0000000280)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff3, 0x0, 0x0, 0xfffffffffffffbff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x11) perf_event_open(&(0x7f0000000300)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x23, &(0x7f0000000280), 0xcc) close(r0) arch_prctl$ARCH_SET_CPUID(0x1012, 0x0) 17:22:33 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x8111000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'eq\b\x00', 0x40000000000}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x305) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000240)='/dev/full\x00', 0xaf4f732c838a62b7, 0x0) r2 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x3, 0x20100) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = getpid() syz_open_procfs$namespace(r3, &(0x7f0000000500)='ns/pid_foGr_children') r4 = socket$packet(0x11, 0x3, 0x300) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000780)={{{@in=@multicast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@empty}}, &(0x7f0000000d40)=0xe8) connect(r4, &(0x7f0000000d80)=@can={0x1d, r5}, 0xfffffffffffffc54) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) rename(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='./file0\x00') mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2c67726f75705f69643d76504a0f2526178135f71ee1a0db4e88f00abe9575672d2d0ded8e88b9e8655d44735b4cbae876eb45635ec5172d2ff2e10c0341314ae84e5dbd025891ff14e574c714e5eea2369d56688858e95205248cc3df8c9a6b", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) getsockopt$IP6T_SO_GET_REVISION_TARGET(r2, 0x29, 0x45, &(0x7f0000000400)={'N>TMAP\x00\x03\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1e\xa7\x10\xe4'}, &(0x7f0000000480)=0x1e) read$FUSE(r6, 0x0, 0x0) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000440), 0x10, 0x0, 0x0, &(0x7f0000000900)=ANY=[]}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000015c0)='ns/pid\x00') syz_open_dev$binder(&(0x7f0000001500)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], 0x1) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) execve(&(0x7f0000000040)='./file0\x00', &(0x7f0000000180)=[0x0], &(0x7f00000003c0)) r7 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000280)='io.weight\x00', 0x2, 0x0) write$cgroup_int(r7, &(0x7f0000000540), 0x12) [ 221.478757][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 221.484658][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 221.525710][ T8373] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 221.559478][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 221.565826][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 221.600197][ T8373] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 0) 17:22:33 executing program 4: socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f000000dff8)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e22, 0x9, @mcast2, 0x7ff}}}, &(0x7f00000000c0)=0x84) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000100)={r2, 0xb9bd}, &(0x7f0000000140)=0x8) close(r1) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10) recvmmsg(r0, &(0x7f0000003bc0)=[{{&(0x7f00000032c0)=@hci, 0x80, &(0x7f00000035c0)=[{&(0x7f0000003440)=""/255, 0xff}], 0x1, &(0x7f0000003600)=""/15, 0xf}}], 0x1, 0x0, &(0x7f0000003c40)) 17:22:34 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="ac353a87674489709f108fba1108b1639fe977e88d882d6097523828d96abed2f9b7b0d7592833b0eb04cfca445c96893958", @ANYRES16=r1, @ANYBLOB="ffff0000000000000000070000000c0002000600020000000000"], 0x20}}, 0x0) 17:22:34 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x248f60ebb4c88b2, 0x0) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-control\x00', 0x82a4f3d61d82f40, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x8000, 0x0) r2 = syz_open_dev$vcsa(&(0x7f0000000340)='/dev/vcsa#\x00', 0x3, 0x40000) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000480)=0xfe7) ioctl$TIOCLINUX6(r0, 0x541c, &(0x7f0000000580)={0x6, 0xfff}) ioctl$TIOCSETD(r2, 0x5423, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x80, 0x0) r3 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r3) r4 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r4, &(0x7f0000000180)=ANY=[@ANYBLOB="007e03abb1e7bf4e537c18f7a555453c84c57681f6e463b6a66a0200300c0000000000007eb0c8175fe7330c1677cccc3e8db44fdaf76cb2824afc7611b2a7acbe5fd8bdbecbb69a987f1c9a8d2175e547764fa62aa47105004466e82fb315310285a40db818a181a1c7305f11070000"], 0x71) ioctl$KVM_GET_NR_MMU_PAGES(r3, 0xae45, 0xffffffffa10a47d3) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) execve(&(0x7f0000000240)='./bus\x00', &(0x7f00000004c0)=[&(0x7f0000000280)='/dev/vsock\x00', &(0x7f0000000300)='ppp1+\x00', 0x0, &(0x7f0000000380)='vfat\x00', &(0x7f0000000400)='/dev/vsock\x00', &(0x7f0000000440)='/dev/vsock\x00', 0x0], &(0x7f0000000640)=[&(0x7f0000000500)='ppp0^ppp1(wlan1\\\x00', &(0x7f0000000600)='vfat\x00']) unlink(&(0x7f0000001e00)='./bus\x00') ioctl$CAPI_GET_FLAGS(r1, 0x80044323, &(0x7f00000003c0)) sendfile(r4, r4, &(0x7f0000000000), 0x8080fffffffe) mkdir(&(0x7f0000001540)='./file0\x00', 0x0) 17:22:34 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000440)=""/146) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0xfffffde0) r3 = socket$rxrpc(0x21, 0x2, 0x4000000000000a) ioctl$int_in(r0, 0x5473, &(0x7f0000000340)=0xfffffffffffff001) bind$rxrpc(r3, &(0x7f0000000140)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e22, 0x2, @remote, 0x4}}, 0x24) listen(r3, 0x9) modify_ldt$write(0x1, &(0x7f0000000300)={0x0, 0x20001000, 0xf6a19cc09ebfc357, 0x3, 0x400, 0x9, 0x3f, 0x100000001, 0x10001, 0x7}, 0x10) fstat(0xffffffffffffff9c, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x1ec51da1abe9f22b, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f0000000280)={0x7, 0x0, 0x4, 0x100, {r4, r5/1000+30000}, {0x7, 0xb, 0x1, 0x10001, 0xffffffff, 0x9, "c8c0963d"}, 0x1, 0x2, @offset=0x7, 0x4}) wait4(0x0, 0x0, 0x80000002, 0x0) r6 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x8000, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r6, 0xc0045516, &(0x7f0000000040)=0x5) tkill(r1, 0x2a) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x31}) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000500)=ANY=[@ANYBLOB="7365637572697479000000000000000000000006000000000000000000000200000000000000e1294da536fded81cbe53bdca3a74371909220b97d520f26ab2dec2dffaee2b75b8a1ce780f7f6d2a621edddeec32a53cce7ec92eba46e5c6bb11f15b73a5c65efbb7bb931bceb81f0ea64be35157633cd49b21b47fbf88e57af885b10062bc1b7762271d7fd29"], 0x0) ptrace$cont(0x20, r1, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1f, 0x2200) 17:22:34 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x8111000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'eq\b\x00', 0x40000000000}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x305) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000240)='/dev/full\x00', 0xaf4f732c838a62b7, 0x0) r2 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x3, 0x20100) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = getpid() syz_open_procfs$namespace(r3, &(0x7f0000000500)='ns/pid_foGr_children') r4 = socket$packet(0x11, 0x3, 0x300) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000780)={{{@in=@multicast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@empty}}, &(0x7f0000000d40)=0xe8) connect(r4, &(0x7f0000000d80)=@can={0x1d, r5}, 0xfffffffffffffc54) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) rename(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='./file0\x00') mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2c67726f75705f69643d76504a0f2526178135f71ee1a0db4e88f00abe9575672d2d0ded8e88b9e8655d44735b4cbae876eb45635ec5172d2ff2e10c0341314ae84e5dbd025891ff14e574c714e5eea2369d56688858e95205248cc3df8c9a6b", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) getsockopt$IP6T_SO_GET_REVISION_TARGET(r2, 0x29, 0x45, &(0x7f0000000400)={'N>TMAP\x00\x03\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1e\xa7\x10\xe4'}, &(0x7f0000000480)=0x1e) read$FUSE(r6, 0x0, 0x0) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000440), 0x10, 0x0, 0x0, &(0x7f0000000900)=ANY=[]}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000015c0)='ns/pid\x00') syz_open_dev$binder(&(0x7f0000001500)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], 0x1) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) execve(&(0x7f0000000040)='./file0\x00', &(0x7f0000000180)=[0x0], &(0x7f00000003c0)) r7 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000280)='io.weight\x00', 0x2, 0x0) write$cgroup_int(r7, &(0x7f0000000540), 0x12) [ 221.889010][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 221.895474][ C0] protocol 88fb is buggy, dev hsr_slave_1 17:22:34 executing program 0: socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000140)="a3", 0x1}], 0x1) ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, 0x0) write(r0, 0x0, 0x0) remap_file_pages(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x8, 0x100000001, 0x48003) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000785000), 0x34a) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)="84", 0x1}], 0x1) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000000)={0x10000, 0x1000000000, 0x1, 0x100, 0x3, 0xa16, 0x4, 0x8, 0x0}, &(0x7f0000000080)=0x20) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f00000000c0)={r2, 0x7ff}, &(0x7f0000000100)=0x8) close(r0) sendmmsg$alg(r1, &(0x7f00000006c0), 0x4924924924926e4, 0x0) 17:22:34 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000440)=""/146) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0xfffffde0) r3 = socket$rxrpc(0x21, 0x2, 0x4000000000000a) ioctl$int_in(r0, 0x5473, &(0x7f0000000340)=0xfffffffffffff001) bind$rxrpc(r3, &(0x7f0000000140)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e22, 0x2, @remote, 0x4}}, 0x24) listen(r3, 0x9) modify_ldt$write(0x1, &(0x7f0000000300)={0x0, 0x20001000, 0xf6a19cc09ebfc357, 0x3, 0x400, 0x9, 0x3f, 0x100000001, 0x10001, 0x7}, 0x10) fstat(0xffffffffffffff9c, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x1ec51da1abe9f22b, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f0000000280)={0x7, 0x0, 0x4, 0x100, {r4, r5/1000+30000}, {0x7, 0xb, 0x1, 0x10001, 0xffffffff, 0x9, "c8c0963d"}, 0x1, 0x2, @offset=0x7, 0x4}) wait4(0x0, 0x0, 0x80000002, 0x0) r6 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x8000, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r6, 0xc0045516, &(0x7f0000000040)=0x5) tkill(r1, 0x2a) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x31}) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000500)=ANY=[@ANYBLOB="7365637572697479000000000000000000000006000000000000000000000200000000000000e1294da536fded81cbe53bdca3a74371909220b97d520f26ab2dec2dffaee2b75b8a1ce780f7f6d2a621edddeec32a53cce7ec92eba46e5c6bb11f15b73a5c65efbb7bb931bceb81f0ea64be35157633cd49b21b47fbf88e57af885b10062bc1b7762271d7fd29"], 0x0) ptrace$cont(0x20, r1, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1f, 0x2200) 17:22:34 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x8111000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'eq\b\x00', 0x40000000000}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x305) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000240)='/dev/full\x00', 0xaf4f732c838a62b7, 0x0) r2 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x3, 0x20100) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = getpid() syz_open_procfs$namespace(r3, &(0x7f0000000500)='ns/pid_foGr_children') r4 = socket$packet(0x11, 0x3, 0x300) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000780)={{{@in=@multicast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@empty}}, &(0x7f0000000d40)=0xe8) connect(r4, &(0x7f0000000d80)=@can={0x1d, r5}, 0xfffffffffffffc54) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) rename(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='./file0\x00') mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2c67726f75705f69643d76504a0f2526178135f71ee1a0db4e88f00abe9575672d2d0ded8e88b9e8655d44735b4cbae876eb45635ec5172d2ff2e10c0341314ae84e5dbd025891ff14e574c714e5eea2369d56688858e95205248cc3df8c9a6b", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) getsockopt$IP6T_SO_GET_REVISION_TARGET(r2, 0x29, 0x45, &(0x7f0000000400)={'N>TMAP\x00\x03\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1e\xa7\x10\xe4'}, &(0x7f0000000480)=0x1e) read$FUSE(r6, 0x0, 0x0) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000440), 0x10, 0x0, 0x0, &(0x7f0000000900)=ANY=[]}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000015c0)='ns/pid\x00') syz_open_dev$binder(&(0x7f0000001500)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], 0x1) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) execve(&(0x7f0000000040)='./file0\x00', &(0x7f0000000180)=[0x0], &(0x7f00000003c0)) r7 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000280)='io.weight\x00', 0x2, 0x0) write$cgroup_int(r7, &(0x7f0000000540), 0x12) 17:22:34 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x248f60ebb4c88b2, 0x0) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-control\x00', 0x82a4f3d61d82f40, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x8000, 0x0) r2 = syz_open_dev$vcsa(&(0x7f0000000340)='/dev/vcsa#\x00', 0x3, 0x40000) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000480)=0xfe7) ioctl$TIOCLINUX6(r0, 0x541c, &(0x7f0000000580)={0x6, 0xfff}) ioctl$TIOCSETD(r2, 0x5423, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x80, 0x0) r3 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r3) r4 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r4, &(0x7f0000000180)=ANY=[@ANYBLOB="007e03abb1e7bf4e537c18f7a555453c84c57681f6e463b6a66a0200300c0000000000007eb0c8175fe7330c1677cccc3e8db44fdaf76cb2824afc7611b2a7acbe5fd8bdbecbb69a987f1c9a8d2175e547764fa62aa47105004466e82fb315310285a40db818a181a1c7305f11070000"], 0x71) ioctl$KVM_GET_NR_MMU_PAGES(r3, 0xae45, 0xffffffffa10a47d3) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) execve(&(0x7f0000000240)='./bus\x00', &(0x7f00000004c0)=[&(0x7f0000000280)='/dev/vsock\x00', &(0x7f0000000300)='ppp1+\x00', 0x0, &(0x7f0000000380)='vfat\x00', &(0x7f0000000400)='/dev/vsock\x00', &(0x7f0000000440)='/dev/vsock\x00', 0x0], &(0x7f0000000640)=[&(0x7f0000000500)='ppp0^ppp1(wlan1\\\x00', &(0x7f0000000600)='vfat\x00']) unlink(&(0x7f0000001e00)='./bus\x00') ioctl$CAPI_GET_FLAGS(r1, 0x80044323, &(0x7f00000003c0)) sendfile(r4, r4, &(0x7f0000000000), 0x8080fffffffe) mkdir(&(0x7f0000001540)='./file0\x00', 0x0) 17:22:34 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000380)='keyring\x00', &(0x7f00000003c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f0000000140)={'syz'}, &(0x7f0000000240)="585ccbc4ed83b836c1a6474914dc5500b66147b3c7218a9169a85e20bdc9e1587a95d3edd362ede65b1e9dcbc2050000000000000042e330897501f9007b6b482550829e022b8753a188748c569f435fb3bae96efb74b50ec93c2db8eae3198a29e5c0cfc60000ce0637ce0080b4ec24c53d86571ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6190fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3d009d308bd73f47725390000000000000000000000000000000000", 0xc3, r0) r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000180)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r2, r1, r2}, &(0x7f0000000700)=""/243, 0xf3, &(0x7f0000000040)={&(0x7f0000000580)={'streebog256-generic\x00\x04\x0f\x00'}}) r3 = syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0xfff, 0x40000) r4 = mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xc, 0x80010, 0xffffffffffffffff, 0x0) r5 = mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x8, 0x4010, 0xffffffffffffffff, 0x1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000500)={0x88, 0x0, &(0x7f0000000400)=[@reply={0x40406301, {0x2, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x18, &(0x7f00000001c0), &(0x7f0000000340)=[0x18, 0x78, 0x58]}}, @free_buffer={0x40086303, r4}, @acquire={0x40046305, 0x1}, @increfs_done={0x40106308, r5, 0x4}, @dead_binder_done={0x40086310, 0x3}, @enter_looper, @enter_looper, @increfs={0x40046304, 0x4}], 0x11, 0x0, &(0x7f00000004c0)="b4d4954e79a9b2af1c6a079992b1dcf473"}) [ 222.109823][ T8405] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 222.151683][ T8414] mmap: syz-executor.0 (8414) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 222.171843][ T8405] FAT-fs (loop1): Filesystem has been set read-only [ 222.198382][ T8402] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 222.273822][ T8402] FAT-fs (loop1): error, invalid access to FAT (entry 0x00006500) [ 222.290785][ T8402] FAT-fs (loop1): error, invalid access to FAT (entry 0x00006500) [ 222.323470][ T8402] FAT-fs (loop1): error, invalid access to FAT (entry 0x00006500) [ 222.413638][ T8401] FAT-fs (loop1): error, invalid access to FAT (entry 0x00006500) 17:22:34 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000380)='keyring\x00', &(0x7f00000003c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f0000000140)={'syz'}, &(0x7f0000000240)="585ccbc4ed83b836c1a6474914dc5500b66147b3c7218a9169a85e20bdc9e1587a95d3edd362ede65b1e9dcbc2050000000000000042e330897501f9007b6b482550829e022b8753a188748c569f435fb3bae96efb74b50ec93c2db8eae3198a29e5c0cfc60000ce0637ce0080b4ec24c53d86571ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6190fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3d009d308bd73f47725390000000000000000000000000000000000", 0xc3, r0) r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000180)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r2, r1, r2}, &(0x7f0000000700)=""/243, 0xf3, &(0x7f0000000040)={&(0x7f0000000580)={'streebog256-generic\x00\x04\x0f\x00'}}) r3 = syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0xfff, 0x40000) r4 = mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xc, 0x80010, 0xffffffffffffffff, 0x0) r5 = mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x8, 0x4010, 0xffffffffffffffff, 0x1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000500)={0x88, 0x0, &(0x7f0000000400)=[@reply={0x40406301, {0x2, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x18, &(0x7f00000001c0), &(0x7f0000000340)=[0x18, 0x78, 0x58]}}, @free_buffer={0x40086303, r4}, @acquire={0x40046305, 0x1}, @increfs_done={0x40106308, r5, 0x4}, @dead_binder_done={0x40086310, 0x3}, @enter_looper, @enter_looper, @increfs={0x40046304, 0x4}], 0x11, 0x0, &(0x7f00000004c0)="b4d4954e79a9b2af1c6a079992b1dcf473"}) 17:22:34 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000440)=""/146) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0xfffffde0) r3 = socket$rxrpc(0x21, 0x2, 0x4000000000000a) ioctl$int_in(r0, 0x5473, &(0x7f0000000340)=0xfffffffffffff001) bind$rxrpc(r3, &(0x7f0000000140)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e22, 0x2, @remote, 0x4}}, 0x24) listen(r3, 0x9) modify_ldt$write(0x1, &(0x7f0000000300)={0x0, 0x20001000, 0xf6a19cc09ebfc357, 0x3, 0x400, 0x9, 0x3f, 0x100000001, 0x10001, 0x7}, 0x10) fstat(0xffffffffffffff9c, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x1ec51da1abe9f22b, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f0000000280)={0x7, 0x0, 0x4, 0x100, {r4, r5/1000+30000}, {0x7, 0xb, 0x1, 0x10001, 0xffffffff, 0x9, "c8c0963d"}, 0x1, 0x2, @offset=0x7, 0x4}) wait4(0x0, 0x0, 0x80000002, 0x0) r6 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x8000, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r6, 0xc0045516, &(0x7f0000000040)=0x5) tkill(r1, 0x2a) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x31}) getsockopt$IP6T_SO_GET_ENTRIES(r7, 0x29, 0x41, &(0x7f0000000500)=ANY=[@ANYBLOB="7365637572697479000000000000000000000006000000000000000000000200000000000000e1294da536fded81cbe53bdca3a74371909220b97d520f26ab2dec2dffaee2b75b8a1ce780f7f6d2a621edddeec32a53cce7ec92eba46e5c6bb11f15b73a5c65efbb7bb931bceb81f0ea64be35157633cd49b21b47fbf88e57af885b10062bc1b7762271d7fd29"], 0x0) ptrace$cont(0x20, r1, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1f, 0x2200) 17:22:34 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000440)=""/146) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0xfffffde0) r3 = socket$rxrpc(0x21, 0x2, 0x4000000000000a) ioctl$int_in(r0, 0x5473, &(0x7f0000000340)=0xfffffffffffff001) bind$rxrpc(r3, &(0x7f0000000140)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e22, 0x2, @remote, 0x4}}, 0x24) listen(r3, 0x9) modify_ldt$write(0x1, &(0x7f0000000300)={0x0, 0x20001000, 0xf6a19cc09ebfc357, 0x3, 0x400, 0x9, 0x3f, 0x100000001, 0x10001, 0x7}, 0x10) fstat(0xffffffffffffff9c, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x1ec51da1abe9f22b, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f0000000280)={0x7, 0x0, 0x4, 0x100, {r4, r5/1000+30000}, {0x7, 0xb, 0x1, 0x10001, 0xffffffff, 0x9, "c8c0963d"}, 0x1, 0x2, @offset=0x7, 0x4}) wait4(0x0, 0x0, 0x80000002, 0x0) r6 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x8000, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r6, 0xc0045516, &(0x7f0000000040)=0x5) tkill(r1, 0x2a) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x31}) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000500)=ANY=[@ANYBLOB="7365637572697479000000000000000000000006000000000000000000000200000000000000e1294da536fded81cbe53bdca3a74371909220b97d520f26ab2dec2dffaee2b75b8a1ce780f7f6d2a621edddeec32a53cce7ec92eba46e5c6bb11f15b73a5c65efbb7bb931bceb81f0ea64be35157633cd49b21b47fbf88e57af885b10062bc1b7762271d7fd29"], 0x0) ptrace$cont(0x20, r1, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1f, 0x2200) 17:22:35 executing program 2: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x1, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000040)={0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000080)=0x24) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f00000000c0)={r3, 0x7, 0xee2}, 0x8) close(r1) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) 17:22:35 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000440)=""/146) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0xfffffde0) r3 = socket$rxrpc(0x21, 0x2, 0x4000000000000a) ioctl$int_in(r0, 0x5473, &(0x7f0000000340)=0xfffffffffffff001) bind$rxrpc(r3, &(0x7f0000000140)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e22, 0x2, @remote, 0x4}}, 0x24) listen(r3, 0x9) modify_ldt$write(0x1, &(0x7f0000000300)={0x0, 0x20001000, 0xf6a19cc09ebfc357, 0x3, 0x400, 0x9, 0x3f, 0x100000001, 0x10001, 0x7}, 0x10) fstat(0xffffffffffffff9c, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x1ec51da1abe9f22b, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f0000000280)={0x7, 0x0, 0x4, 0x100, {r4, r5/1000+30000}, {0x7, 0xb, 0x1, 0x10001, 0xffffffff, 0x9, "c8c0963d"}, 0x1, 0x2, @offset=0x7, 0x4}) wait4(0x0, 0x0, 0x80000002, 0x0) r6 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x8000, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r6, 0xc0045516, &(0x7f0000000040)=0x5) tkill(r1, 0x2a) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x31}) getsockopt$IP6T_SO_GET_ENTRIES(r7, 0x29, 0x41, &(0x7f0000000500)=ANY=[@ANYBLOB="7365637572697479000000000000000000000006000000000000000000000200000000000000e1294da536fded81cbe53bdca3a74371909220b97d520f26ab2dec2dffaee2b75b8a1ce780f7f6d2a621edddeec32a53cce7ec92eba46e5c6bb11f15b73a5c65efbb7bb931bceb81f0ea64be35157633cd49b21b47fbf88e57af885b10062bc1b7762271d7fd29"], 0x0) ptrace$cont(0x20, r1, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1f, 0x2200) 17:22:35 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000440)=""/146) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0xfffffde0) r3 = socket$rxrpc(0x21, 0x2, 0x4000000000000a) ioctl$int_in(r0, 0x5473, &(0x7f0000000340)=0xfffffffffffff001) bind$rxrpc(r3, &(0x7f0000000140)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e22, 0x2, @remote, 0x4}}, 0x24) listen(r3, 0x9) modify_ldt$write(0x1, &(0x7f0000000300)={0x0, 0x20001000, 0xf6a19cc09ebfc357, 0x3, 0x400, 0x9, 0x3f, 0x100000001, 0x10001, 0x7}, 0x10) fstat(0xffffffffffffff9c, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x1ec51da1abe9f22b, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f0000000280)={0x7, 0x0, 0x4, 0x100, {r4, r5/1000+30000}, {0x7, 0xb, 0x1, 0x10001, 0xffffffff, 0x9, "c8c0963d"}, 0x1, 0x2, @offset=0x7, 0x4}) wait4(0x0, 0x0, 0x80000002, 0x0) r6 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x8000, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r6, 0xc0045516, &(0x7f0000000040)=0x5) tkill(r1, 0x2a) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x31}) getsockopt$IP6T_SO_GET_ENTRIES(r7, 0x29, 0x41, &(0x7f0000000500)=ANY=[@ANYBLOB="7365637572697479000000000000000000000006000000000000000000000200000000000000e1294da536fded81cbe53bdca3a74371909220b97d520f26ab2dec2dffaee2b75b8a1ce780f7f6d2a621edddeec32a53cce7ec92eba46e5c6bb11f15b73a5c65efbb7bb931bceb81f0ea64be35157633cd49b21b47fbf88e57af885b10062bc1b7762271d7fd29"], 0x0) ptrace$cont(0x20, r1, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1f, 0x2200) 17:22:35 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x805, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = dup3(r1, r0, 0x80000) write$FUSE_OPEN(r2, &(0x7f0000000340)={0x20, 0xfffffffffffffffe, 0x3, {0x0, 0x6}}, 0x20) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x200, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000540)={0x40000000006c0a, 0x3, 0x3ff, 0x6, 0x4}) futex(&(0x7f0000000080)=0x2, 0xf, 0x2, &(0x7f0000000380)={0x0, 0x989680}, &(0x7f00000003c0)=0x2, 0x0) flistxattr(r3, &(0x7f0000000400)=""/168, 0xfffffffffffffcc0) fremovexattr(r3, &(0x7f0000000640)=ANY=[@ANYBLOB="6f73322e706f72743100122beaa0dbae53b926bfdc7231b94d9642ee7a73eb2ed95ad13ce8cdc1085d74f0e476ff209c0afded468b9bf6ad4eecb96299266a4724797b6581ce2bded3f4d0ec6855d67ac1147181834480c313b51fa265f813f000ad66910dd9ef71ebe1eb37d7d9f3b730cd744bab03b3c2e7b1d8957d633f006cec156c89accd950be5242d082359b9a884c39076b80e4c47bc75935663dbd4c64fbc7fe07cbb0ab3cc5adae999b293c44f8f121f638b42b69c55a81425a0e1e1b8649fe76880b86b967295c30000000000000000"]) unshare(0x40000000) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000580)='/dev/null\x00', 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net\x00\x00\x00\x00\x00\x00\x00\a/expire_nodest_conn\x00', 0x2, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r2, 0x29, 0x1, &(0x7f0000000040), 0x4) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r3, 0xc0a85320, &(0x7f0000000280)={{0x1, 0x9}, 'port0\x00', 0x21, 0x0, 0x2, 0x2, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x33}) read(r1, &(0x7f0000000740)=""/216, 0xd8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getdents64(r4, &(0x7f00000000c0)=""/11, 0xeb) [ 222.964129][ T8460] QAT: Invalid ioctl 17:22:35 executing program 0: socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000140)="a3", 0x1}], 0x1) ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, 0x0) write(r0, 0x0, 0x0) remap_file_pages(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x8, 0x100000001, 0x48003) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000785000), 0x34a) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)="84", 0x1}], 0x1) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000000)={0x10000, 0x1000000000, 0x1, 0x100, 0x3, 0xa16, 0x4, 0x8, 0x0}, &(0x7f0000000080)=0x20) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f00000000c0)={r2, 0x7ff}, &(0x7f0000000100)=0x8) close(r0) sendmmsg$alg(r1, &(0x7f00000006c0), 0x4924924924926e4, 0x0) 17:22:35 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000440)=""/146) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0xfffffde0) r3 = socket$rxrpc(0x21, 0x2, 0x4000000000000a) ioctl$int_in(r0, 0x5473, &(0x7f0000000340)=0xfffffffffffff001) bind$rxrpc(r3, &(0x7f0000000140)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e22, 0x2, @remote, 0x4}}, 0x24) listen(r3, 0x9) modify_ldt$write(0x1, &(0x7f0000000300)={0x0, 0x20001000, 0xf6a19cc09ebfc357, 0x3, 0x400, 0x9, 0x3f, 0x100000001, 0x10001, 0x7}, 0x10) fstat(0xffffffffffffff9c, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x1ec51da1abe9f22b, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f0000000280)={0x7, 0x0, 0x4, 0x100, {r4, r5/1000+30000}, {0x7, 0xb, 0x1, 0x10001, 0xffffffff, 0x9, "c8c0963d"}, 0x1, 0x2, @offset=0x7, 0x4}) wait4(0x0, 0x0, 0x80000002, 0x0) r6 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x8000, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r6, 0xc0045516, &(0x7f0000000040)=0x5) tkill(r1, 0x2a) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x31}) getsockopt$IP6T_SO_GET_ENTRIES(r7, 0x29, 0x41, &(0x7f0000000500)=ANY=[@ANYBLOB="7365637572697479000000000000000000000006000000000000000000000200000000000000e1294da536fded81cbe53bdca3a74371909220b97d520f26ab2dec2dffaee2b75b8a1ce780f7f6d2a621edddeec32a53cce7ec92eba46e5c6bb11f15b73a5c65efbb7bb931bceb81f0ea64be35157633cd49b21b47fbf88e57af885b10062bc1b7762271d7fd29"], 0x0) ptrace$cont(0x20, r1, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1f, 0x2200) 17:22:35 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000440)=""/146) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0xfffffde0) r3 = socket$rxrpc(0x21, 0x2, 0x4000000000000a) ioctl$int_in(r0, 0x5473, &(0x7f0000000340)=0xfffffffffffff001) bind$rxrpc(r3, &(0x7f0000000140)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e22, 0x2, @remote, 0x4}}, 0x24) listen(r3, 0x9) modify_ldt$write(0x1, &(0x7f0000000300)={0x0, 0x20001000, 0xf6a19cc09ebfc357, 0x3, 0x400, 0x9, 0x3f, 0x100000001, 0x10001, 0x7}, 0x10) fstat(0xffffffffffffff9c, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x1ec51da1abe9f22b, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f0000000280)={0x7, 0x0, 0x4, 0x100, {r4, r5/1000+30000}, {0x7, 0xb, 0x1, 0x10001, 0xffffffff, 0x9, "c8c0963d"}, 0x1, 0x2, @offset=0x7, 0x4}) wait4(0x0, 0x0, 0x80000002, 0x0) r6 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x8000, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r6, 0xc0045516, &(0x7f0000000040)=0x5) tkill(r1, 0x2a) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x31}) getsockopt$IP6T_SO_GET_ENTRIES(r7, 0x29, 0x41, &(0x7f0000000500)=ANY=[@ANYBLOB="7365637572697479000000000000000000000006000000000000000000000200000000000000e1294da536fded81cbe53bdca3a74371909220b97d520f26ab2dec2dffaee2b75b8a1ce780f7f6d2a621edddeec32a53cce7ec92eba46e5c6bb11f15b73a5c65efbb7bb931bceb81f0ea64be35157633cd49b21b47fbf88e57af885b10062bc1b7762271d7fd29"], 0x0) ptrace$cont(0x20, r1, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1f, 0x2200) [ 223.033594][ T8453] IPVS: ftp: loaded support on port[0] = 21 17:22:35 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000440)=""/146) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0xfffffde0) r3 = socket$rxrpc(0x21, 0x2, 0x4000000000000a) ioctl$int_in(r0, 0x5473, &(0x7f0000000340)=0xfffffffffffff001) bind$rxrpc(r3, &(0x7f0000000140)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e22, 0x2, @remote, 0x4}}, 0x24) listen(r3, 0x9) modify_ldt$write(0x1, &(0x7f0000000300)={0x0, 0x20001000, 0xf6a19cc09ebfc357, 0x3, 0x400, 0x9, 0x3f, 0x100000001, 0x10001, 0x7}, 0x10) fstat(0xffffffffffffff9c, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x1ec51da1abe9f22b, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f0000000280)={0x7, 0x0, 0x4, 0x100, {r4, r5/1000+30000}, {0x7, 0xb, 0x1, 0x10001, 0xffffffff, 0x9, "c8c0963d"}, 0x1, 0x2, @offset=0x7, 0x4}) wait4(0x0, 0x0, 0x80000002, 0x0) r6 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x8000, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r6, 0xc0045516, &(0x7f0000000040)=0x5) tkill(r1, 0x2a) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x31}) getsockopt$IP6T_SO_GET_ENTRIES(r7, 0x29, 0x41, &(0x7f0000000500)=ANY=[@ANYBLOB="7365637572697479000000000000000000000006000000000000000000000200000000000000e1294da536fded81cbe53bdca3a74371909220b97d520f26ab2dec2dffaee2b75b8a1ce780f7f6d2a621edddeec32a53cce7ec92eba46e5c6bb11f15b73a5c65efbb7bb931bceb81f0ea64be35157633cd49b21b47fbf88e57af885b10062bc1b7762271d7fd29"], 0x0) ptrace$cont(0x20, r1, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1f, 0x2200) 17:22:35 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000440)=""/146) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0xfffffde0) r3 = socket$rxrpc(0x21, 0x2, 0x4000000000000a) ioctl$int_in(r0, 0x5473, &(0x7f0000000340)=0xfffffffffffff001) bind$rxrpc(r3, &(0x7f0000000140)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e22, 0x2, @remote, 0x4}}, 0x24) listen(r3, 0x9) modify_ldt$write(0x1, &(0x7f0000000300)={0x0, 0x20001000, 0xf6a19cc09ebfc357, 0x3, 0x400, 0x9, 0x3f, 0x100000001, 0x10001, 0x7}, 0x10) fstat(0xffffffffffffff9c, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x1ec51da1abe9f22b, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f0000000280)={0x7, 0x0, 0x4, 0x100, {r4, r5/1000+30000}, {0x7, 0xb, 0x1, 0x10001, 0xffffffff, 0x9, "c8c0963d"}, 0x1, 0x2, @offset=0x7, 0x4}) wait4(0x0, 0x0, 0x80000002, 0x0) r6 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x8000, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r6, 0xc0045516, &(0x7f0000000040)=0x5) tkill(r1, 0x2a) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x31}) getsockopt$IP6T_SO_GET_ENTRIES(r7, 0x29, 0x41, &(0x7f0000000500)=ANY=[@ANYBLOB="7365637572697479000000000000000000000006000000000000000000000200000000000000e1294da536fded81cbe53bdca3a74371909220b97d520f26ab2dec2dffaee2b75b8a1ce780f7f6d2a621edddeec32a53cce7ec92eba46e5c6bb11f15b73a5c65efbb7bb931bceb81f0ea64be35157633cd49b21b47fbf88e57af885b10062bc1b7762271d7fd29"], 0x0) ptrace$cont(0x20, r1, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1f, 0x2200) 17:22:35 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000440)=""/146) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0xfffffde0) r3 = socket$rxrpc(0x21, 0x2, 0x4000000000000a) ioctl$int_in(r0, 0x5473, &(0x7f0000000340)=0xfffffffffffff001) bind$rxrpc(r3, &(0x7f0000000140)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e22, 0x2, @remote, 0x4}}, 0x24) listen(r3, 0x9) modify_ldt$write(0x1, &(0x7f0000000300)={0x0, 0x20001000, 0xf6a19cc09ebfc357, 0x3, 0x400, 0x9, 0x3f, 0x100000001, 0x10001, 0x7}, 0x10) fstat(0xffffffffffffff9c, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x1ec51da1abe9f22b, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f0000000280)={0x7, 0x0, 0x4, 0x100, {r4, r5/1000+30000}, {0x7, 0xb, 0x1, 0x10001, 0xffffffff, 0x9, "c8c0963d"}, 0x1, 0x2, @offset=0x7, 0x4}) wait4(0x0, 0x0, 0x80000002, 0x0) r6 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x8000, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r6, 0xc0045516, &(0x7f0000000040)=0x5) tkill(r1, 0x2a) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x31}) getsockopt$IP6T_SO_GET_ENTRIES(r7, 0x29, 0x41, &(0x7f0000000500)=ANY=[@ANYBLOB="7365637572697479000000000000000000000006000000000000000000000200000000000000e1294da536fded81cbe53bdca3a74371909220b97d520f26ab2dec2dffaee2b75b8a1ce780f7f6d2a621edddeec32a53cce7ec92eba46e5c6bb11f15b73a5c65efbb7bb931bceb81f0ea64be35157633cd49b21b47fbf88e57af885b10062bc1b7762271d7fd29"], 0x0) ptrace$cont(0x20, r1, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1f, 0x2200) 17:22:35 executing program 2: socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000140)="a3", 0x1}], 0x1) ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, 0x0) write(r0, 0x0, 0x0) remap_file_pages(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x8, 0x100000001, 0x48003) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000785000), 0x34a) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000040)="84", 0x1}], 0x1) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000000)={0x10000, 0x1000000000, 0x1, 0x100, 0x3, 0xa16, 0x4, 0x8, 0x0}, &(0x7f0000000080)=0x20) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f00000000c0)={r2, 0x7ff}, &(0x7f0000000100)=0x8) close(r0) sendmmsg$alg(r1, &(0x7f00000006c0), 0x4924924924926e4, 0x0) 17:22:35 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000440)=""/146) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0xfffffde0) r3 = socket$rxrpc(0x21, 0x2, 0x4000000000000a) ioctl$int_in(r0, 0x5473, &(0x7f0000000340)=0xfffffffffffff001) bind$rxrpc(r3, &(0x7f0000000140)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e22, 0x2, @remote, 0x4}}, 0x24) listen(r3, 0x9) modify_ldt$write(0x1, &(0x7f0000000300)={0x0, 0x20001000, 0xf6a19cc09ebfc357, 0x3, 0x400, 0x9, 0x3f, 0x100000001, 0x10001, 0x7}, 0x10) fstat(0xffffffffffffff9c, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x1ec51da1abe9f22b, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f0000000280)={0x7, 0x0, 0x4, 0x100, {r4, r5/1000+30000}, {0x7, 0xb, 0x1, 0x10001, 0xffffffff, 0x9, "c8c0963d"}, 0x1, 0x2, @offset=0x7, 0x4}) wait4(0x0, 0x0, 0x80000002, 0x0) r6 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x8000, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r6, 0xc0045516, &(0x7f0000000040)=0x5) tkill(r1, 0x2a) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x31}) getsockopt$IP6T_SO_GET_ENTRIES(r7, 0x29, 0x41, &(0x7f0000000500)=ANY=[@ANYBLOB="7365637572697479000000000000000000000006000000000000000000000200000000000000e1294da536fded81cbe53bdca3a74371909220b97d520f26ab2dec2dffaee2b75b8a1ce780f7f6d2a621edddeec32a53cce7ec92eba46e5c6bb11f15b73a5c65efbb7bb931bceb81f0ea64be35157633cd49b21b47fbf88e57af885b10062bc1b7762271d7fd29"], 0x0) ptrace$cont(0x20, r1, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1f, 0x2200) 17:22:35 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000440)=""/146) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0xfffffde0) r3 = socket$rxrpc(0x21, 0x2, 0x4000000000000a) ioctl$int_in(r0, 0x5473, &(0x7f0000000340)=0xfffffffffffff001) bind$rxrpc(r3, &(0x7f0000000140)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e22, 0x2, @remote, 0x4}}, 0x24) listen(r3, 0x9) modify_ldt$write(0x1, &(0x7f0000000300)={0x0, 0x20001000, 0xf6a19cc09ebfc357, 0x3, 0x400, 0x9, 0x3f, 0x100000001, 0x10001, 0x7}, 0x10) fstat(0xffffffffffffff9c, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x1ec51da1abe9f22b, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f0000000280)={0x7, 0x0, 0x4, 0x100, {r4, r5/1000+30000}, {0x7, 0xb, 0x1, 0x10001, 0xffffffff, 0x9, "c8c0963d"}, 0x1, 0x2, @offset=0x7, 0x4}) wait4(0x0, 0x0, 0x80000002, 0x0) r6 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x8000, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r6, 0xc0045516, &(0x7f0000000040)=0x5) ptrace$cont(0x18, r1, 0x0, 0x0) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x31}) getsockopt$IP6T_SO_GET_ENTRIES(r7, 0x29, 0x41, &(0x7f0000000500)=ANY=[@ANYBLOB="7365637572697479000000000000000000000006000000000000000000000200000000000000e1294da536fded81cbe53bdca3a74371909220b97d520f26ab2dec2dffaee2b75b8a1ce780f7f6d2a621edddeec32a53cce7ec92eba46e5c6bb11f15b73a5c65efbb7bb931bceb81f0ea64be35157633cd49b21b47fbf88e57af885b10062bc1b7762271d7fd29"], 0x0) ptrace$cont(0x20, r1, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1f, 0x2200) 17:22:36 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000440)=""/146) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0xfffffde0) r3 = socket$rxrpc(0x21, 0x2, 0x4000000000000a) ioctl$int_in(r0, 0x5473, &(0x7f0000000340)=0xfffffffffffff001) bind$rxrpc(r3, &(0x7f0000000140)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e22, 0x2, @remote, 0x4}}, 0x24) listen(r3, 0x9) modify_ldt$write(0x1, &(0x7f0000000300)={0x0, 0x20001000, 0xf6a19cc09ebfc357, 0x3, 0x400, 0x9, 0x3f, 0x100000001, 0x10001, 0x7}, 0x10) fstat(0xffffffffffffff9c, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x1ec51da1abe9f22b, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f0000000280)={0x7, 0x0, 0x4, 0x100, {r4, r5/1000+30000}, {0x7, 0xb, 0x1, 0x10001, 0xffffffff, 0x9, "c8c0963d"}, 0x1, 0x2, @offset=0x7, 0x4}) wait4(0x0, 0x0, 0x80000002, 0x0) r6 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x8000, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r6, 0xc0045516, &(0x7f0000000040)=0x5) tkill(r1, 0x2a) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x31}) getsockopt$IP6T_SO_GET_ENTRIES(r7, 0x29, 0x41, &(0x7f0000000500)=ANY=[@ANYBLOB="7365637572697479000000000000000000000006000000000000000000000200000000000000e1294da536fded81cbe53bdca3a74371909220b97d520f26ab2dec2dffaee2b75b8a1ce780f7f6d2a621edddeec32a53cce7ec92eba46e5c6bb11f15b73a5c65efbb7bb931bceb81f0ea64be35157633cd49b21b47fbf88e57af885b10062bc1b7762271d7fd29"], 0x0) ptrace$cont(0x20, r1, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1f, 0x2200) 17:22:36 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000440)=""/146) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0xfffffde0) r3 = socket$rxrpc(0x21, 0x2, 0x4000000000000a) ioctl$int_in(r0, 0x5473, &(0x7f0000000340)=0xfffffffffffff001) bind$rxrpc(r3, &(0x7f0000000140)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e22, 0x2, @remote, 0x4}}, 0x24) listen(r3, 0x9) modify_ldt$write(0x1, &(0x7f0000000300)={0x0, 0x20001000, 0xf6a19cc09ebfc357, 0x3, 0x400, 0x9, 0x3f, 0x100000001, 0x10001, 0x7}, 0x10) fstat(0xffffffffffffff9c, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x1ec51da1abe9f22b, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f0000000280)={0x7, 0x0, 0x4, 0x100, {r4, r5/1000+30000}, {0x7, 0xb, 0x1, 0x10001, 0xffffffff, 0x9, "c8c0963d"}, 0x1, 0x2, @offset=0x7, 0x4}) wait4(0x0, 0x0, 0x80000002, 0x0) r6 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x8000, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r6, 0xc0045516, &(0x7f0000000040)=0x5) ptrace$cont(0x18, r1, 0x0, 0x0) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x31}) getsockopt$IP6T_SO_GET_ENTRIES(r7, 0x29, 0x41, &(0x7f0000000500)=ANY=[@ANYBLOB="7365637572697479000000000000000000000006000000000000000000000200000000000000e1294da536fded81cbe53bdca3a74371909220b97d520f26ab2dec2dffaee2b75b8a1ce780f7f6d2a621edddeec32a53cce7ec92eba46e5c6bb11f15b73a5c65efbb7bb931bceb81f0ea64be35157633cd49b21b47fbf88e57af885b10062bc1b7762271d7fd29"], 0x0) ptrace$cont(0x20, r1, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1f, 0x2200) [ 224.305354][ T8453] IPVS: ftp: loaded support on port[0] = 21 [ 224.345069][ T8506] QAT: Invalid ioctl 17:22:36 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x400001, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r2, 0xc0045540, &(0x7f0000000300)=0xfffffffffffffff8) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200)='/dev/hwrng\x00', 0x10000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r2, 0x40bc5311, &(0x7f0000000240)={0x3, 0x0, 'client1\x00', 0x2, "eee0f1e7c344793d", "689954edcee92a0d6a3e8293d0d78e499e1f6b58eb333111f72b1bd707d4207a", 0x8, 0x200}) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0x7, &(0x7f0000000100)={0x3f, 0xcb86, 0x1, 0xfffffffffffffff8}, 0x10) ioctl$IOC_PR_RELEASE(r2, 0x401070ca, &(0x7f0000000140)={0x100000003, 0xffffff7f}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) r6 = open(&(0x7f0000000040)='./file0\x00', 0x800, 0x20) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000080)='/\xc5\x00'}, 0x30) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x5) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$VT_WAITACTIVE(r5, 0x5607) dup3(r4, r1, 0x0) ioctl$TUNSETPERSIST(r6, 0x400454cb, 0x0) 17:22:36 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) r1 = accept(r0, &(0x7f0000000100)=@caif, &(0x7f0000000000)=0x80) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000080)=0x3, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f00000000c0)=[{0x4000000028, 0x0, 0x0, 0xfffff038}, {0x40000080000006}]}, 0x10) r2 = socket$inet(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000004fc8)={0x0, 0x0, 0x0}, 0x0) 17:22:36 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000440)=""/146) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0xfffffde0) r3 = socket$rxrpc(0x21, 0x2, 0x4000000000000a) ioctl$int_in(r0, 0x5473, &(0x7f0000000340)=0xfffffffffffff001) bind$rxrpc(r3, &(0x7f0000000140)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e22, 0x2, @remote, 0x4}}, 0x24) listen(r3, 0x9) modify_ldt$write(0x1, &(0x7f0000000300)={0x0, 0x20001000, 0xf6a19cc09ebfc357, 0x3, 0x400, 0x9, 0x3f, 0x100000001, 0x10001, 0x7}, 0x10) fstat(0xffffffffffffff9c, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x1ec51da1abe9f22b, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f0000000280)={0x7, 0x0, 0x4, 0x100, {r4, r5/1000+30000}, {0x7, 0xb, 0x1, 0x10001, 0xffffffff, 0x9, "c8c0963d"}, 0x1, 0x2, @offset=0x7, 0x4}) wait4(0x0, 0x0, 0x80000002, 0x0) r6 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x8000, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r6, 0xc0045516, &(0x7f0000000040)=0x5) ptrace$cont(0x18, r1, 0x0, 0x0) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x31}) getsockopt$IP6T_SO_GET_ENTRIES(r7, 0x29, 0x41, &(0x7f0000000500)=ANY=[@ANYBLOB="7365637572697479000000000000000000000006000000000000000000000200000000000000e1294da536fded81cbe53bdca3a74371909220b97d520f26ab2dec2dffaee2b75b8a1ce780f7f6d2a621edddeec32a53cce7ec92eba46e5c6bb11f15b73a5c65efbb7bb931bceb81f0ea64be35157633cd49b21b47fbf88e57af885b10062bc1b7762271d7fd29"], 0x0) ptrace$cont(0x20, r1, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1f, 0x2200) 17:22:36 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000440)=""/146) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0xfffffde0) r3 = socket$rxrpc(0x21, 0x2, 0x4000000000000a) ioctl$int_in(r0, 0x5473, &(0x7f0000000340)=0xfffffffffffff001) bind$rxrpc(r3, &(0x7f0000000140)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e22, 0x2, @remote, 0x4}}, 0x24) listen(r3, 0x9) modify_ldt$write(0x1, &(0x7f0000000300)={0x0, 0x20001000, 0xf6a19cc09ebfc357, 0x3, 0x400, 0x9, 0x3f, 0x100000001, 0x10001, 0x7}, 0x10) fstat(0xffffffffffffff9c, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x1ec51da1abe9f22b, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f0000000280)={0x7, 0x0, 0x4, 0x100, {r4, r5/1000+30000}, {0x7, 0xb, 0x1, 0x10001, 0xffffffff, 0x9, "c8c0963d"}, 0x1, 0x2, @offset=0x7, 0x4}) wait4(0x0, 0x0, 0x80000002, 0x0) r6 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x8000, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r6, 0xc0045516, &(0x7f0000000040)=0x5) ptrace$cont(0x18, r1, 0x0, 0x0) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x31}) getsockopt$IP6T_SO_GET_ENTRIES(r7, 0x29, 0x41, &(0x7f0000000500)=ANY=[@ANYBLOB="7365637572697479000000000000000000000006000000000000000000000200000000000000e1294da536fded81cbe53bdca3a74371909220b97d520f26ab2dec2dffaee2b75b8a1ce780f7f6d2a621edddeec32a53cce7ec92eba46e5c6bb11f15b73a5c65efbb7bb931bceb81f0ea64be35157633cd49b21b47fbf88e57af885b10062bc1b7762271d7fd29"], 0x0) ptrace$cont(0x20, r1, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1f, 0x2200) 17:22:36 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x805, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = dup3(r1, r0, 0x80000) write$FUSE_OPEN(r2, &(0x7f0000000340)={0x20, 0xfffffffffffffffe, 0x3, {0x0, 0x6}}, 0x20) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x200, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000540)={0x40000000006c0a, 0x3, 0x3ff, 0x6, 0x4}) futex(&(0x7f0000000080)=0x2, 0xf, 0x2, &(0x7f0000000380)={0x0, 0x989680}, &(0x7f00000003c0)=0x2, 0x0) flistxattr(r3, &(0x7f0000000400)=""/168, 0xfffffffffffffcc0) fremovexattr(r3, &(0x7f0000000640)=ANY=[@ANYBLOB="6f73322e706f72743100122beaa0dbae53b926bfdc7231b94d9642ee7a73eb2ed95ad13ce8cdc1085d74f0e476ff209c0afded468b9bf6ad4eecb96299266a4724797b6581ce2bded3f4d0ec6855d67ac1147181834480c313b51fa265f813f000ad66910dd9ef71ebe1eb37d7d9f3b730cd744bab03b3c2e7b1d8957d633f006cec156c89accd950be5242d082359b9a884c39076b80e4c47bc75935663dbd4c64fbc7fe07cbb0ab3cc5adae999b293c44f8f121f638b42b69c55a81425a0e1e1b8649fe76880b86b967295c30000000000000000"]) unshare(0x40000000) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000580)='/dev/null\x00', 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net\x00\x00\x00\x00\x00\x00\x00\a/expire_nodest_conn\x00', 0x2, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r2, 0x29, 0x1, &(0x7f0000000040), 0x4) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r3, 0xc0a85320, &(0x7f0000000280)={{0x1, 0x9}, 'port0\x00', 0x21, 0x0, 0x2, 0x2, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x33}) read(r1, &(0x7f0000000740)=""/216, 0xd8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getdents64(r4, &(0x7f00000000c0)=""/11, 0xeb) 17:22:36 executing program 2: r0 = socket(0x1000000000000010, 0x80802, 0x0) write(r0, &(0x7f0000000040)="2400000032001f02ff07f4f9002304000a04f511080001000201009f0800028001000000", 0x24) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0xc000, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000140)={0x0, 0x80000, r1}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000180)={0x0, 0x80000, r0}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)={0x0, r2, 0x7}) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffff9c, 0xc008640a, &(0x7f00000000c0)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000100)={r3, r4}) 17:22:36 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000440)=""/146) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0xfffffde0) r3 = socket$rxrpc(0x21, 0x2, 0x4000000000000a) ioctl$int_in(r0, 0x5473, &(0x7f0000000340)=0xfffffffffffff001) bind$rxrpc(r3, &(0x7f0000000140)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e22, 0x2, @remote, 0x4}}, 0x24) listen(r3, 0x9) modify_ldt$write(0x1, &(0x7f0000000300)={0x0, 0x20001000, 0xf6a19cc09ebfc357, 0x3, 0x400, 0x9, 0x3f, 0x100000001, 0x10001, 0x7}, 0x10) fstat(0xffffffffffffff9c, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x1ec51da1abe9f22b, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f0000000280)={0x7, 0x0, 0x4, 0x100, {r4, r5/1000+30000}, {0x7, 0xb, 0x1, 0x10001, 0xffffffff, 0x9, "c8c0963d"}, 0x1, 0x2, @offset=0x7, 0x4}) wait4(0x0, 0x0, 0x80000002, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x8000, 0x0) tkill(r1, 0x2a) ptrace$cont(0x18, r1, 0x0, 0x0) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x31}) getsockopt$IP6T_SO_GET_ENTRIES(r6, 0x29, 0x41, &(0x7f0000000500)=ANY=[@ANYBLOB="7365637572697479000000000000000000000006000000000000000000000200000000000000e1294da536fded81cbe53bdca3a74371909220b97d520f26ab2dec2dffaee2b75b8a1ce780f7f6d2a621edddeec32a53cce7ec92eba46e5c6bb11f15b73a5c65efbb7bb931bceb81f0ea64be35157633cd49b21b47fbf88e57af885b10062bc1b7762271d7fd29"], 0x0) ptrace$cont(0x20, r1, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1f, 0x2200) [ 224.520777][ C0] net_ratelimit: 16 callbacks suppressed [ 224.520786][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 224.532273][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 224.549820][ T8519] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/l1tf.html for details. 17:22:36 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x805, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = dup3(r1, r0, 0x80000) write$FUSE_OPEN(r2, &(0x7f0000000340)={0x20, 0xfffffffffffffffe, 0x3, {0x0, 0x6}}, 0x20) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x200, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000540)={0x40000000006c0a, 0x3, 0x3ff, 0x6, 0x4}) futex(&(0x7f0000000080)=0x2, 0xf, 0x2, &(0x7f0000000380)={0x0, 0x989680}, &(0x7f00000003c0)=0x2, 0x0) flistxattr(r3, &(0x7f0000000400)=""/168, 0xfffffffffffffcc0) fremovexattr(r3, &(0x7f0000000640)=ANY=[@ANYBLOB="6f73322e706f72743100122beaa0dbae53b926bfdc7231b94d9642ee7a73eb2ed95ad13ce8cdc1085d74f0e476ff209c0afded468b9bf6ad4eecb96299266a4724797b6581ce2bded3f4d0ec6855d67ac1147181834480c313b51fa265f813f000ad66910dd9ef71ebe1eb37d7d9f3b730cd744bab03b3c2e7b1d8957d633f006cec156c89accd950be5242d082359b9a884c39076b80e4c47bc75935663dbd4c64fbc7fe07cbb0ab3cc5adae999b293c44f8f121f638b42b69c55a81425a0e1e1b8649fe76880b86b967295c30000000000000000"]) unshare(0x40000000) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000580)='/dev/null\x00', 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net\x00\x00\x00\x00\x00\x00\x00\a/expire_nodest_conn\x00', 0x2, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r2, 0x29, 0x1, &(0x7f0000000040), 0x4) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r3, 0xc0a85320, &(0x7f0000000280)={{0x1, 0x9}, 'port0\x00', 0x21, 0x0, 0x2, 0x2, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x33}) read(r1, &(0x7f0000000740)=""/216, 0xd8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getdents64(r4, &(0x7f00000000c0)=""/11, 0xeb) 17:22:36 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000440)=""/146) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0xfffffde0) r3 = socket$rxrpc(0x21, 0x2, 0x4000000000000a) ioctl$int_in(r0, 0x5473, &(0x7f0000000340)=0xfffffffffffff001) bind$rxrpc(r3, &(0x7f0000000140)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e22, 0x2, @remote, 0x4}}, 0x24) listen(r3, 0x9) modify_ldt$write(0x1, &(0x7f0000000300)={0x0, 0x20001000, 0xf6a19cc09ebfc357, 0x3, 0x400, 0x9, 0x3f, 0x100000001, 0x10001, 0x7}, 0x10) fstat(0xffffffffffffff9c, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x1ec51da1abe9f22b, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f0000000280)={0x7, 0x0, 0x4, 0x100, {r4, r5/1000+30000}, {0x7, 0xb, 0x1, 0x10001, 0xffffffff, 0x9, "c8c0963d"}, 0x1, 0x2, @offset=0x7, 0x4}) wait4(0x0, 0x0, 0x80000002, 0x0) r6 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x8000, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r6, 0xc0045516, &(0x7f0000000040)=0x5) ptrace$cont(0x18, r1, 0x0, 0x0) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x31}) getsockopt$IP6T_SO_GET_ENTRIES(r7, 0x29, 0x41, &(0x7f0000000500)=ANY=[@ANYBLOB="7365637572697479000000000000000000000006000000000000000000000200000000000000e1294da536fded81cbe53bdca3a74371909220b97d520f26ab2dec2dffaee2b75b8a1ce780f7f6d2a621edddeec32a53cce7ec92eba46e5c6bb11f15b73a5c65efbb7bb931bceb81f0ea64be35157633cd49b21b47fbf88e57af885b10062bc1b7762271d7fd29"], 0x0) ptrace$cont(0x20, r1, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1f, 0x2200) [ 224.755180][ T8538] QAT: Invalid ioctl 17:22:37 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000440)=""/146) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0xfffffde0) r3 = socket$rxrpc(0x21, 0x2, 0x4000000000000a) ioctl$int_in(r0, 0x5473, &(0x7f0000000340)=0xfffffffffffff001) bind$rxrpc(r3, &(0x7f0000000140)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e22, 0x2, @remote, 0x4}}, 0x24) listen(r3, 0x9) modify_ldt$write(0x1, &(0x7f0000000300)={0x0, 0x20001000, 0xf6a19cc09ebfc357, 0x3, 0x400, 0x9, 0x3f, 0x100000001, 0x10001, 0x7}, 0x10) fstat(0xffffffffffffff9c, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x1ec51da1abe9f22b, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f0000000280)={0x7, 0x0, 0x4, 0x100, {r4, r5/1000+30000}, {0x7, 0xb, 0x1, 0x10001, 0xffffffff, 0x9, "c8c0963d"}, 0x1, 0x2, @offset=0x7, 0x4}) wait4(0x0, 0x0, 0x80000002, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x8000, 0x0) tkill(r1, 0x2a) ptrace$cont(0x18, r1, 0x0, 0x0) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x31}) getsockopt$IP6T_SO_GET_ENTRIES(r6, 0x29, 0x41, &(0x7f0000000500)=ANY=[@ANYBLOB="7365637572697479000000000000000000000006000000000000000000000200000000000000e1294da536fded81cbe53bdca3a74371909220b97d520f26ab2dec2dffaee2b75b8a1ce780f7f6d2a621edddeec32a53cce7ec92eba46e5c6bb11f15b73a5c65efbb7bb931bceb81f0ea64be35157633cd49b21b47fbf88e57af885b10062bc1b7762271d7fd29"], 0x0) ptrace$cont(0x20, r1, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1f, 0x2200) [ 224.784904][ T8528] IPVS: ftp: loaded support on port[0] = 21 [ 224.807412][ T8534] IPVS: ftp: loaded support on port[0] = 21 17:22:37 executing program 4: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) fstatfs(r0, &(0x7f0000000140)=""/186) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) read$eventfd(r1, &(0x7f0000000040), 0x8) r2 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r2, 0xffffffffffffffb9, &(0x7f00000000c0)) ioctl$VT_RESIZEX(r1, 0x560a, &(0x7f0000000080)={0x9, 0x8, 0x4, 0x1, 0x4, 0x1}) ioctl$GIO_SCRNMAP(r1, 0x4b40, &(0x7f0000000280)=""/243) [ 224.855829][ T8543] QAT: Invalid ioctl 17:22:37 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_tables_matches\x00') r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_SET(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="040026bd7000fcdbdf250f000000180002947a7e69507a0e873f09cc0f007541d29f82043800000200ff07000004000400e7ff000001000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4000800}, 0x40000) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") mknod(&(0x7f0000000040)='./file0\x00', 0x220, 0xfffffffc) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x6c000000, 0x1, &(0x7f0000000240)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c97f13", 0x12, 0x400}], 0x0, 0xfcfdffff00000000) 17:22:37 executing program 1: socket$unix(0x1, 0x1, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@loopback, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@mcast2}}, &(0x7f00000001c0)=0xe8) getgroups(0x3, &(0x7f0000000200)=[0xffffffffffffffff, 0xee01, 0x0]) ioctl$PPPIOCGFLAGS1(r1, 0x8004745a, &(0x7f00000003c0)) write$FUSE_ATTR(r1, &(0x7f0000000240)={0x78, 0x0, 0x8, {0xff, 0x9, 0x0, {0x2, 0x5, 0x0, 0x5, 0x6, 0x5, 0x1, 0x2, 0x1, 0x3, 0x9, r2, r3, 0x2, 0x1}}}, 0x78) r4 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r4, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@broadcast, @in, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x2b}, 0x0, @in, 0x0, 0x4}}, 0xe8) sendmmsg(r4, &(0x7f0000005fc0), 0x800000000000059, 0x0) [ 225.218978][ T8560] MINIX-fs: mounting unchecked file system, running fsck is recommended 17:22:37 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000440)=""/146) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0xfffffde0) r3 = socket$rxrpc(0x21, 0x2, 0x4000000000000a) ioctl$int_in(r0, 0x5473, &(0x7f0000000340)=0xfffffffffffff001) bind$rxrpc(r3, &(0x7f0000000140)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e22, 0x2, @remote, 0x4}}, 0x24) listen(r3, 0x9) modify_ldt$write(0x1, &(0x7f0000000300)={0x0, 0x20001000, 0xf6a19cc09ebfc357, 0x3, 0x400, 0x9, 0x3f, 0x100000001, 0x10001, 0x7}, 0x10) fstat(0xffffffffffffff9c, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x1ec51da1abe9f22b, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f0000000280)={0x7, 0x0, 0x4, 0x100, {r4, r5/1000+30000}, {0x7, 0xb, 0x1, 0x10001, 0xffffffff, 0x9, "c8c0963d"}, 0x1, 0x2, @offset=0x7, 0x4}) wait4(0x0, 0x0, 0x80000002, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x8000, 0x0) tkill(r1, 0x2a) ptrace$cont(0x18, r1, 0x0, 0x0) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x31}) getsockopt$IP6T_SO_GET_ENTRIES(r6, 0x29, 0x41, &(0x7f0000000500)=ANY=[@ANYBLOB="7365637572697479000000000000000000000006000000000000000000000200000000000000e1294da536fded81cbe53bdca3a74371909220b97d520f26ab2dec2dffaee2b75b8a1ce780f7f6d2a621edddeec32a53cce7ec92eba46e5c6bb11f15b73a5c65efbb7bb931bceb81f0ea64be35157633cd49b21b47fbf88e57af885b10062bc1b7762271d7fd29"], 0x0) ptrace$cont(0x20, r1, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1f, 0x2200) 17:22:37 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000440)=""/146) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0xfffffde0) r3 = socket$rxrpc(0x21, 0x2, 0x4000000000000a) ioctl$int_in(r0, 0x5473, &(0x7f0000000340)=0xfffffffffffff001) bind$rxrpc(r3, &(0x7f0000000140)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e22, 0x2, @remote, 0x4}}, 0x24) listen(r3, 0x9) modify_ldt$write(0x1, &(0x7f0000000300)={0x0, 0x20001000, 0xf6a19cc09ebfc357, 0x3, 0x400, 0x9, 0x3f, 0x100000001, 0x10001, 0x7}, 0x10) fstat(0xffffffffffffff9c, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x1ec51da1abe9f22b, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f0000000280)={0x7, 0x0, 0x4, 0x100, {r4, r5/1000+30000}, {0x7, 0xb, 0x1, 0x10001, 0xffffffff, 0x9, "c8c0963d"}, 0x1, 0x2, @offset=0x7, 0x4}) wait4(0x0, 0x0, 0x80000002, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000040)=0x5) tkill(r1, 0x2a) ptrace$cont(0x18, r1, 0x0, 0x0) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x31}) getsockopt$IP6T_SO_GET_ENTRIES(r6, 0x29, 0x41, &(0x7f0000000500)=ANY=[@ANYBLOB="7365637572697479000000000000000000000006000000000000000000000200000000000000e1294da536fded81cbe53bdca3a74371909220b97d520f26ab2dec2dffaee2b75b8a1ce780f7f6d2a621edddeec32a53cce7ec92eba46e5c6bb11f15b73a5c65efbb7bb931bceb81f0ea64be35157633cd49b21b47fbf88e57af885b10062bc1b7762271d7fd29"], 0x0) ptrace$cont(0x20, r1, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1f, 0x2200) 17:22:37 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_tables_matches\x00') r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_SET(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="040026bd7000fcdbdf250f000000180002947a7e69507a0e873f09cc0f007541d29f82043800000200ff07000004000400e7ff000001000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4000800}, 0x40000) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") mknod(&(0x7f0000000040)='./file0\x00', 0x220, 0xfffffffc) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x6c000000, 0x1, &(0x7f0000000240)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c97f13", 0x12, 0x400}], 0x0, 0xfcfdffff00000000) [ 225.638775][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 225.644611][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 225.682981][ T7717] minix_free_inode: bit 1 already cleared [ 225.718754][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 225.724566][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 225.894424][ T8580] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 225.949127][ T7717] minix_free_inode: bit 1 already cleared 17:22:38 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x805, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = dup3(r1, r0, 0x80000) write$FUSE_OPEN(r2, &(0x7f0000000340)={0x20, 0xfffffffffffffffe, 0x3, {0x0, 0x6}}, 0x20) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x200, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000540)={0x40000000006c0a, 0x3, 0x3ff, 0x6, 0x4}) futex(&(0x7f0000000080)=0x2, 0xf, 0x2, &(0x7f0000000380)={0x0, 0x989680}, &(0x7f00000003c0)=0x2, 0x0) flistxattr(r3, &(0x7f0000000400)=""/168, 0xfffffffffffffcc0) fremovexattr(r3, &(0x7f0000000640)=ANY=[@ANYBLOB="6f73322e706f72743100122beaa0dbae53b926bfdc7231b94d9642ee7a73eb2ed95ad13ce8cdc1085d74f0e476ff209c0afded468b9bf6ad4eecb96299266a4724797b6581ce2bded3f4d0ec6855d67ac1147181834480c313b51fa265f813f000ad66910dd9ef71ebe1eb37d7d9f3b730cd744bab03b3c2e7b1d8957d633f006cec156c89accd950be5242d082359b9a884c39076b80e4c47bc75935663dbd4c64fbc7fe07cbb0ab3cc5adae999b293c44f8f121f638b42b69c55a81425a0e1e1b8649fe76880b86b967295c30000000000000000"]) unshare(0x40000000) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000580)='/dev/null\x00', 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net\x00\x00\x00\x00\x00\x00\x00\a/expire_nodest_conn\x00', 0x2, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r2, 0x29, 0x1, &(0x7f0000000040), 0x4) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r3, 0xc0a85320, &(0x7f0000000280)={{0x1, 0x9}, 'port0\x00', 0x21, 0x0, 0x2, 0x2, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x33}) read(r1, &(0x7f0000000740)=""/216, 0xd8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getdents64(r4, &(0x7f00000000c0)=""/11, 0xeb) 17:22:38 executing program 1: socket$unix(0x1, 0x1, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@loopback, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@mcast2}}, &(0x7f00000001c0)=0xe8) getgroups(0x3, &(0x7f0000000200)=[0xffffffffffffffff, 0xee01, 0x0]) ioctl$PPPIOCGFLAGS1(r1, 0x8004745a, &(0x7f00000003c0)) write$FUSE_ATTR(r1, &(0x7f0000000240)={0x78, 0x0, 0x8, {0xff, 0x9, 0x0, {0x2, 0x5, 0x0, 0x5, 0x6, 0x5, 0x1, 0x2, 0x1, 0x3, 0x9, r2, r3, 0x2, 0x1}}}, 0x78) r4 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r4, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@broadcast, @in, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x2b}, 0x0, @in, 0x0, 0x4}}, 0xe8) sendmmsg(r4, &(0x7f0000005fc0), 0x800000000000059, 0x0) 17:22:38 executing program 4: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) fstatfs(r0, &(0x7f0000000140)=""/186) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) read$eventfd(r1, &(0x7f0000000040), 0x8) r2 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r2, 0xffffffffffffffb9, &(0x7f00000000c0)) ioctl$VT_RESIZEX(r1, 0x560a, &(0x7f0000000080)={0x9, 0x8, 0x4, 0x1, 0x4, 0x1}) ioctl$GIO_SCRNMAP(r1, 0x4b40, &(0x7f0000000280)=""/243) [ 226.038770][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 226.044639][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 226.211393][ T8592] QAT: Invalid ioctl [ 226.278811][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 226.284787][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 226.424394][ T8590] IPVS: ftp: loaded support on port[0] = 21 17:22:40 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) socket(0x3, 0x807, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000001c00)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="63960c81f6ea3a67aceaf6cca68cf18bff2da75f09000000a20788b9859d3c0ff9a56a58c83bf802000000323fe9705ab727aaf6e42001161c5c1d220c73846fbc9d4003d549819a541d99ecd7004feaa1db0cd7463f43d68cc81dff23bc82000000000000"]) r1 = syz_open_dev$radio(&(0x7f0000000240)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) stat(&(0x7f0000001800)='./file0\x00', &(0x7f0000001840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000018c0)={{{@in6, @in6=@ipv4={[], [], @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@empty}}, &(0x7f00000019c0)=0xe8) getresuid(&(0x7f0000001a00), &(0x7f0000001a40), &(0x7f0000001a80)=0x0) syz_mount_image$hfsplus(&(0x7f0000000280)='hfsplus\x00', &(0x7f00000002c0)='./file0\x00', 0x1000, 0x7, &(0x7f0000001740)=[{&(0x7f0000000340)="abb1187921c7278693add2f80a1797dd1981c40af8542fd55010b5d34cd3efd8491f3e401da33a768bb696f4a7fa3104f4a0c00f4880acdced9b8177a9936e", 0x3f, 0x100}, {&(0x7f0000000480)="f279cbeaf8ed038cbdf83da1b9552af214ee17966ac5fbb262dc5e237c059db381d0d2d0b8d12a25aa0ecbbf82f32df16117add51a375482b4c1a22f724b71f953cc31ee5cbd07618cbda4c29daaa1c0c49d51f8a0fd822a91fc967e4c43336f62e694e086d0129b5ad4bd501364f16c28f9defab015af0615d58d27319e5bf8df9f2e0ab90021e78df135352bebb78d52f1b0f4b7da7fe4d463accdb8fe95a416c6b7e7193d7d43666f2f4b8be1b6bb08a555692439f7949648b382dd932ce514ac70cff9301ba93f890d408685497c8637da3638e69eb607bd9b7bcab165bc9ea40cea5a65c8e4e7fa49acc6fbee72ad0decffd1a4848b2a30eca5a75300d3830bd5f379cbde7fa109ab850bf83195a45d81647ca9c9f8ff017c4bb8a5b3ad32c0d0a855c0472dd6f846907f3ac50f36fdd560f96dcb9f6e742b37bff966389f1b8e9d3c275bfc5294a0dbcc0092eef0911e6cb2484363f2f93b73854b341f3949795ce249adfae9cb00b48e7697a3aae0663d3140bc4e6c61a5d923dd92572df9434c0bd633e76fec6e5e3d21823b89db6627789476b443d8dcccdd9b0c73115cd14e3c546fac74c4b572f8a5dbfdd60e7825c9a9d7f07473158b319d213488779f8f9eca30c503ad06ecbf2118b48a68474ca9f59a7f5cc5a151a08713438ed327902ce8046d42b862ca474d183a9b653cf9fb50efad9fc8b19ba4c039cfde7b7cb9e52a639df7a1f039ecdf4bbfaae14855b7700a8a30ba83cd4d327fc44277568b7b1486e27ac30b759fe87b03bee8941c7c4598904c14396433bab050c6cdf17c5b2b72c03f2f8373b76cd653d421933830aa148f128926f059b1898567bb7b1659b5d5015b309af5c8af3d490e51dfe321ddfc10d748ef7cba2b2a19747db01f0f5b66665c372028cc50cef36fdace5d836058e7a9121be1aaae1ad508bbc9c2e57ff50371e89a79777e5bd0116354714bbf7f00a80a4301b52c153ee46aeffef6dc4531c432c329f022094a2d67724fa44ed0469a91d5388b1b1af854b973004ccbdd287192facc3c571565343fc8de6babcdd8d1ef861ac8ddf12f01534d55377893551ccf143c7d5a7b427533e4a0f2dcbff9e6aa24cecd19c45f6c1bb14285d21949133efa095397ae05fb1dad8f721aca8ea0153fd62604a41aa7cad2ef82442a808b96c1ff60222c5e5eb3cdc220dfb69df02bd42bc7b83f595eaa140c030f2ab699bd0f31e88a462ee3e91ff8bf22add402d77c529a7b5d7009dff934a4690bd2091dd86eb77f3a601649deaa8cdafbd4db876fe02132896e0ffe780b85df5daa7c4aede8e23d9d0b6726277c0b28e3e8fcad5b1fc5ac9e941a8abf36bbf9b968cca8bfd1784dd0bf1e4aa7213fb22ab1936a0be707827a364471b37d25d7363f3209ef12590d57a3d3bae0eb95c27f20004d5ed86749cb26c1068e0533da57419d86617fc0a4dac83d797816ff0e6908c9325b45d99e8f04b914c2826b23a2c2a7ed96e4efe5ce4fc8b3675a381f51760fb48f9a9066da3dd922aed97876870d4602e086233f3e407fe4c4cd3f71f1c9483c3165bf99f10ad9da6cb2ed847dad3fe064c10a1278e93ba7ffcb7d0d9a5b711c8a5c63684e89a539759b0c460427980d4d1b3a167f1b589efc75793cfa58e742820c2868d0012e07c539d5ff9a3a045ffb274cf8865e90a236a9b69a6f6f34a23a469a6bc205c6e23d8031e0293f1996a224cf03f5ace5f96de114b70a91b1bb2579fca266443dcf69b77ca51987e9b493d838d676e91112ce37de7dbfdf514eeb9ac174e35f5f9d7dc66b8ac5f0089ac7d657c319dc891678dac4b3db004ce08817acd5e2bf322d776ff244402d3a8d5c4b68e3e9bc6b2b6367d13b693d537c2522ff09de22083bb3b3251548c3080a81ccf2a6cc0f7da1011985454f59fccd1da963156e4093cc39fb46d3c70e995c79aec03bdc663dbe7b5f8fac7d645863ae31dbcf71e404ecea859e9657ad996b25ddf4126d4aa652c8e7b5d7d4a43dd7e47420df3027e62b8d7ebaa3bc85eea842e22e55c62eb4fbcae6198b9c8b65d88ac2df8c51e508a5af3ab9e050082c43d323d1e099a6eee6dbfda3dfb52c1795e93da02c73ff8bdf2e114b1f8913ae892adcf837037c8e1b7af691777af40f5994b40bc24485e78a1e53163b283b293f36cdd75e7f4a86861989ef4f73c19e64b98d82f5583367494d33d47e1ba7a90bb200647c950109da4eb6211df5d398467563cee21a2d2e1fa9883e077b9c46438f7f2f57adb2dde9274876a536481067e2e815bdcc8d160ba635f4dd86ede05d4ddd4d3eddacb90ce3380aafdb9140f4a2534d4f40957b0041e683316f2551ef489e17a91e3a976b4723a5f00d67622906b644cf50466c552c405e3de41ba71d5e07b35f20af0baaf9cdf0ab6d05c21f0d027c205fa00921aeb76a9639db6bca9a95d558758d8d08712c48543bc125b7a0378b1f6a3edf6381e744a8074d3a64b124531f47cc9d8854a74e4677705631955344c939318454554ff52cb27e530b80e1ad9120d5281e34d4ed85aa5ddd6385d0389a63462cc3074b69198e8c584088889077a23d2dd52b61eade0fcc63ce84aea2cac1d2d17391ca5c3aa5df872b1fad3945cb2b40fc568806fee7cdea31dd50f312b60c4f5aaf93d33c963fe3d83d39ac2e9956a48ee66ae8cfddd3ce6874f9b230fe10d9307bd67c4add161e9c400a36370cacc1de671222ed6ec3a2771147a8f6cc27754b1f6d39edb31571e3f5f85c10dfcde86e6eb186ad96e0e9c4c7c21c229fb37c44a640a0b8b906623ccecd3e58869d5e84813d63e8fa923f1afc7565473c7a79778e0fc39f01d52d4b95944af86a1191a84a37bf194d45241ed8d10483462df72b060f4b0bcc66199814c3a80bf8ee2c4e3a6edb92b71757ddcd606dfe76287ad758edb53e8ed7a0b18756b1d240522c08c0ab2b1f45a522427d28b503772e1d5be7778174f2be568eab7de6a64750ee4b6a2342d72eb4391ce02a6f7ecbb3b65e506dc32f39100c21feb5ae735c3c9369e39ee246fe34a39d65c02f046201a0f1c1bae8047787de8068d876473207eb27e79cf3721e755d93ff0fed50643acb6b67a6199e8ab50631f7409f56a8a9109d9496126f36c47d53cc0ab5299ef5d98fa3628e0c9b773e36a21401facf58c05f7db0ef7c49fafb058f1c1d7eee019e9f6b056fd20d4c8187b9131f8381d4e6c19a33ffd00664fe3301d9639a3fd666bde9a874a334f46383258c31243351d8f1f8f7bab9118e86279b90e408ab0110da06a404156e23e2f273a3b8e38c0331eb04a042f100b38e40e812761c1020b5adf00453336c7f09d366d147fcd014b6720335bdf9e548efebe1f0461fd7cba4439a6050f55581bfb9fe8dbb9053f3d1ea333ef36e8c177492f1374f12b989009bb54db870d256752b25f538d1428fd6cb53ac99f8d0da56632e0ba3381a037b7df244d79852a6a07c413854b87ca43622f36ea4016c74e7e481eb525562f803bf3068d2a8af199cbb8d78394f7f4283c0fa8b316ce069dfb22f5445ff0ba9893b36fafbcd9368963c0fc553292ab0e005b28ef3de95afc492cf6109ebaaf61f062ed420b3e67748f32c5ee942682845d56e6f560b841eb92a4542aed0d8b0967e3199b074c073cb54f4d9e96aa60a8691186a8dffa7ad3dde67d8eaf45e067bbffbc74043c62dfe23d5320be02da2c800e5af1da079919ee1a56b548d2ac73fbd814e41895ffee103af8afb3f0d041adeb176f2080dad5f8d1a6c8c32b8cecb29d8e87c81452dc8fbe9a3098f64e591c146e16cfd15f599f353dbf9afff5febbd43d4218bb6276901e015b1ea88084ee5a1351b054d8bc381a6b1b7206c3203878fb79dde117895e599305eaf92f661e75e12aed1dc52b6017cbc7c9c502033457be390a8f3bee9488ba69c7707f6d071d8296d1a43f1fc964cfd16b863f51b47accc2d7d949ce0bbd36eb7b294bb94b49c4043577764cb14fee288883742b7e837fd7cf282c2545b3f463d7d299810132f2116f96ebb795a711258d76c44aaf297883c9b4c2934f6f2875c6bc944c716f2fb9847a8c461fffd38cd4bb7945fb1a959535295dc14c46dd69088df02b838b43c075318e5257c949393a7401ddf2083b68c602bef9fd230d24f1836eabacfca1ad97d34d36db10e5fbf1ab01a9381c59a15d87d1ec800c49bd7c9c3b5d1eef300cd06d4a5124bf2273489b62c4be946f12a71870c45c10e62410a133d1d36c582252af5860a871de84317399292173416828127527edcf7b48dbe2b26ec87f214db6183492118542fdeb67b8374c3b5afc2bfc1e46d3ecfa1b5925d9a180fb551cd99f27b8062a626c41aaa987bc41c6fe9f370131f588d373208cabb02b274696a5c5b627584af84454826b2d3460e2aeeaa6205f88920c43b82874d4a5c818a67d24a10bb0358fc720762e94bf5ea13ae7fbff0b88e5ee77b3673fd69ce200065d7714e065a061ca768387581e9d264b0c7c7e33a1a567dfe3ab2c7aff88b10b6330e69cd07ab1ac7ad1eb2aab5970a5e9faa32f742e41940ecbc781b7831e33a8e6a1c006e6b182802910373533c348a2d05b6a9c2d5ee66428dd00bfd6038fa371ee7995f2d9a95fad9de67f61f42036a57bd82f32b2678a7fdca53d8f9a0149876c145d2b7f1638d1e17e42f5b13a09188ec4b022d061966bfca6815f9d1b50f4b846514ef86c122c56021a7c6532fdf1188611a9205d556110c80d9d7cb40c64627159c140ad38228fe017d9504125e1a44aa012b4cfc4d3ef723ac707b45319b5f9b4586367d9e78a395f728ae08fb6f2bcc8f7110ae07c2f69de8362e6b25e38a05b670e66fb3782be5a0cb9df2e89ac6a946a0439ad0014889b00be85e1f83403eab2cae546b7e5cba4780c7ab025c4260c08e078590f2e5c89db0305107640c32f47bb165f8811b2ac4d28436d06a7fe06e45fba00805493c278f4487a3122a333d556995a7606cf18eb4ec992527beb9ca327db2cce493ae3111f8bf373ec56f9053ea4028c2914c19720e7992b73fc1096d8fba2743f005d730291a75379a373d29628fd0930ab3af0724423c1c914673773091d45fe397e72aeb7e25651c107e03d51d0ee9a324b4f05a4c6818c4030d50a2c9ffa91485f492706595a73c5dff30090377d0b3bbd95b333b0615099d6ae63cc8da3990b24a48f547fa77f08e72b5352a58a03dbbba571f21db3903e293eea2ee3a6f7ade5a0a36f94d4a104b59cbe68bc182d58e97dbf992c1247cc95e706831dcb8c9b83bd2e89af6131846b8bc010ee8793ddbb3b15faf10f71d9a90dbf6e7d9f5eae94bc4385ca81e71d9e68bec64d97d86330e8c400c4f864c4589ba54a3486e10657c9f6a20a78ff5c565e4f92bd17e8f49463b6f986a6a360853aa94d7fda1dd0a7dfdad9ce4aeb8ad2d2296914b2bb643410cbb561f2be05d0d2c90a51da19e0814e7015c6123b6f0740d0d2b6ab3c7d9b62a2e56d5e3e7103ba57c7d1ad93d7b1d5505f2c3295d96bbfeb42fe7168e43e1073302ed82f33e8a054a70c24139c9b5aa1042868b7a1d8cf0a85e8e3b5b38799e78d45983d80a20788b8c3b652017928598e567034f9ff79dc225163870f8735f1c941492f51276a5c734cab9a681fe12212b2e20c0c14f94ed06a97f4dc1e0e9dae30a22dfa8b8c86b08d1de172511e11c85929bfdd40b774baa5f05db8bb5e8b620f76ec8b77a2a25bc652106373ef6eb5f908fc4f872380fbf22a428", 0x1000, 0xd30}, {&(0x7f0000000380)="6d6a8a1eb6472cfa768d77fd779c2a8404108d5818cba1dc01347d07638e26f329c39e979567ded286945e68495e1eb376c2370589932cbc008127831fdd8023f2c0d90ffe62f8eaafea66959b52786425e5a540", 0x54, 0xfffffffffffffffe}, {&(0x7f0000001480)="03eb66034ab9dc72d71c65740a21a83988ba3168ec941a03ccf5e8d0d9ed4d5f18d2ee95bd827dbe71d24263651c9e3a7693560ef6959a76df89d408ecd200fd2c065df09967c1cf2bbe658be4c4b23c51eff44280a83f047e7480dc314e274037be2ba88b5cc8403a32980ad631d55afab0525eeef3c4a90e99d17d3003f8bf957e90c3ae658519dae33695ebe2046b07b9218361b6e63f3bb09e123889ad840c582269da69eb77eb5c", 0xaa, 0x4}, {&(0x7f0000001540)="31a872557b52035c91fadd5a259d6f1a122c067aece98343021666155ddc9c793d75b1df8e9c1c1dc9756a1293e3e5b58fe8d9071a0aa615ef0fcc262129b678e543651c1d91579e48a8345a4755d0cba4a523f8fde3461db6a3559cc8b34662b118889adc0408291a5d722f6040d41ae6c75df891b1bba1d40ad0d2364e71160947fca2e8ec30854a896d91bbf2812287cefb8a74af", 0x96, 0xb}, {&(0x7f0000001600)="c3c25ca4c94fd85d6f9f6dbee6b2342f8f7af98df06a813d472a2bed74d4b3bb544a1c51e9eb039b73ab3682ab8b583205d1cae97b2f29c9252c5715166bfb0f35752e85d47cbd8ad35695b280f696611a30c74b95819fe6bcafb1", 0x5b, 0x5}, {&(0x7f0000001680)="b757e1136bc5ad3d4e04b1e964603ee971dd5e4d311a82a3dcf9dfb7396cef1da451244cee5eceb8fe1c36554a6431b7a0d79cf4bd2254086c56722372aaae0120e8c63caecf6dd45417939e14a52e39b0d0a63c489ecb421ec1d144cc6cf528aa338655fb12bf92a4891ad017d588a4424c38739a6f07ede4068dc98a3239993e1f30973b4ece910a51fab96e4f962c39bd7bf8eb927e353857f7508dd49aebf3e12fb45b9a0b49", 0xa8, 0x1}], 0x0, &(0x7f0000001ac0)={[{@umask={'umask', 0x3d, 0x8}}, {@barrier='barrier'}, {@gid={'gid', 0x3d, r2}}, {@barrier='barrier'}], [{@uid_lt={'uid<', r3}}, {@appraise_type='appraise_type=imasig'}, {@func={'func', 0x3d, 'CREDS_CHECK'}}, {@euid_lt={'euid<', r4}}, {@subj_role={'subj_role', 0x3d, ']trusted}:'}}, {@fsuuid={'fsuuid', 0x3d, {[0x37, 0x7d, 0x77, 0x66, 0x77, 0x65, 0x31, 0x34], 0x2d, [0x9937668600cd1ec2, 0x36, 0x77], 0x2d, [0x62, 0x65, 0x76, 0x34], 0x2d, [0x0, 0x63, 0x39, 0x77], 0x2d, [0x65, 0x38, 0x77, 0x35, 0x3f, 0x61, 0x61]}}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}]}) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video1\x00', 0x2, 0x0) write(r6, &(0x7f0000000340), 0x10000014c) ioctl$DRM_IOCTL_MODESET_CTL(r5, 0x40086408, &(0x7f00000001c0)={0x81, 0x8}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x20000148}, 0x0, &(0x7f0000000140)={0x1b9}, &(0x7f0000000200)={0x0, r7+30000000}, 0x0) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) lstat(0x0, 0x0) read$FUSE(r0, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_G_CROP(r5, 0xc038563b, &(0x7f0000001bc0)={0x0, 0x0, {0x8000, 0x8, 0x100000000}}) 17:22:40 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000440)=""/146) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0xfffffde0) r3 = socket$rxrpc(0x21, 0x2, 0x4000000000000a) ioctl$int_in(r0, 0x5473, &(0x7f0000000340)=0xfffffffffffff001) bind$rxrpc(r3, &(0x7f0000000140)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e22, 0x2, @remote, 0x4}}, 0x24) listen(r3, 0x9) modify_ldt$write(0x1, &(0x7f0000000300)={0x0, 0x20001000, 0xf6a19cc09ebfc357, 0x3, 0x400, 0x9, 0x3f, 0x100000001, 0x10001, 0x7}, 0x10) fstat(0xffffffffffffff9c, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x1ec51da1abe9f22b, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f0000000280)={0x7, 0x0, 0x4, 0x100, {r4, r5/1000+30000}, {0x7, 0xb, 0x1, 0x10001, 0xffffffff, 0x9, "c8c0963d"}, 0x1, 0x2, @offset=0x7, 0x4}) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000040)=0x5) tkill(r1, 0x2a) ptrace$cont(0x18, r1, 0x0, 0x0) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x31}) getsockopt$IP6T_SO_GET_ENTRIES(r6, 0x29, 0x41, &(0x7f0000000500)=ANY=[@ANYBLOB="7365637572697479000000000000000000000006000000000000000000000200000000000000e1294da536fded81cbe53bdca3a74371909220b97d520f26ab2dec2dffaee2b75b8a1ce780f7f6d2a621edddeec32a53cce7ec92eba46e5c6bb11f15b73a5c65efbb7bb931bceb81f0ea64be35157633cd49b21b47fbf88e57af885b10062bc1b7762271d7fd29"], 0x0) ptrace$cont(0x20, r1, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1f, 0x2200) 17:22:40 executing program 4: creat(&(0x7f0000000080)='./file0\x00', 0x0) mount$bpf(0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='uid=', @ANYPTR64=&(0x7f00000001c0)=ANY=[]]) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, &(0x7f00000002c0)) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_tcp(&(0x7f0000000040)='127.0.0.1\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x20000, &(0x7f0000000300)={'trans=tcp,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@version_9p2000='version=9p2000'}], [{@uid_lt={'uid<', r0}}, {@dont_appraise='dont_appraise'}, {@subj_user={'subj_user', 0x3d, '*^keyringcgroup(GPL\xcemd5sumsecurityposix_acl_access'}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}]}}) 17:22:40 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000440)=""/146) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0xfffffde0) r3 = socket$rxrpc(0x21, 0x2, 0x4000000000000a) ioctl$int_in(r0, 0x5473, &(0x7f0000000340)=0xfffffffffffff001) bind$rxrpc(r3, &(0x7f0000000140)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e22, 0x2, @remote, 0x4}}, 0x24) listen(r3, 0x9) modify_ldt$write(0x1, &(0x7f0000000300)={0x0, 0x20001000, 0xf6a19cc09ebfc357, 0x3, 0x400, 0x9, 0x3f, 0x100000001, 0x10001, 0x7}, 0x10) fstat(0xffffffffffffff9c, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x1ec51da1abe9f22b, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f0000000280)={0x7, 0x0, 0x4, 0x100, {r4, r5/1000+30000}, {0x7, 0xb, 0x1, 0x10001, 0xffffffff, 0x9, "c8c0963d"}, 0x1, 0x2, @offset=0x7, 0x4}) wait4(0x0, 0x0, 0x80000002, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000040)=0x5) tkill(r1, 0x2a) ptrace$cont(0x18, r1, 0x0, 0x0) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x31}) getsockopt$IP6T_SO_GET_ENTRIES(r6, 0x29, 0x41, &(0x7f0000000500)=ANY=[@ANYBLOB="7365637572697479000000000000000000000006000000000000000000000200000000000000e1294da536fded81cbe53bdca3a74371909220b97d520f26ab2dec2dffaee2b75b8a1ce780f7f6d2a621edddeec32a53cce7ec92eba46e5c6bb11f15b73a5c65efbb7bb931bceb81f0ea64be35157633cd49b21b47fbf88e57af885b10062bc1b7762271d7fd29"], 0x0) ptrace$cont(0x20, r1, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1f, 0x2200) 17:22:40 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x805, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = dup3(r1, r0, 0x80000) write$FUSE_OPEN(r2, &(0x7f0000000340)={0x20, 0xfffffffffffffffe, 0x3, {0x0, 0x6}}, 0x20) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x200, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000540)={0x40000000006c0a, 0x3, 0x3ff, 0x6, 0x4}) futex(&(0x7f0000000080)=0x2, 0xf, 0x2, &(0x7f0000000380)={0x0, 0x989680}, &(0x7f00000003c0)=0x2, 0x0) flistxattr(r3, &(0x7f0000000400)=""/168, 0xfffffffffffffcc0) fremovexattr(r3, &(0x7f0000000640)=ANY=[@ANYBLOB="6f73322e706f72743100122beaa0dbae53b926bfdc7231b94d9642ee7a73eb2ed95ad13ce8cdc1085d74f0e476ff209c0afded468b9bf6ad4eecb96299266a4724797b6581ce2bded3f4d0ec6855d67ac1147181834480c313b51fa265f813f000ad66910dd9ef71ebe1eb37d7d9f3b730cd744bab03b3c2e7b1d8957d633f006cec156c89accd950be5242d082359b9a884c39076b80e4c47bc75935663dbd4c64fbc7fe07cbb0ab3cc5adae999b293c44f8f121f638b42b69c55a81425a0e1e1b8649fe76880b86b967295c30000000000000000"]) unshare(0x40000000) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000580)='/dev/null\x00', 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net\x00\x00\x00\x00\x00\x00\x00\a/expire_nodest_conn\x00', 0x2, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r2, 0x29, 0x1, &(0x7f0000000040), 0x4) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r3, 0xc0a85320, &(0x7f0000000280)={{0x1, 0x9}, 'port0\x00', 0x21, 0x0, 0x2, 0x2, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x33}) read(r1, &(0x7f0000000740)=""/216, 0xd8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getdents64(r4, &(0x7f00000000c0)=""/11, 0xeb) 17:22:40 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000440)=""/146) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0xfffffde0) r3 = socket$rxrpc(0x21, 0x2, 0x4000000000000a) ioctl$int_in(r0, 0x5473, &(0x7f0000000340)=0xfffffffffffff001) bind$rxrpc(r3, &(0x7f0000000140)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e22, 0x2, @remote, 0x4}}, 0x24) listen(r3, 0x9) modify_ldt$write(0x1, &(0x7f0000000300)={0x0, 0x20001000, 0xf6a19cc09ebfc357, 0x3, 0x400, 0x9, 0x3f, 0x100000001, 0x10001, 0x7}, 0x10) fstat(0xffffffffffffff9c, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x1ec51da1abe9f22b, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f0000000280)={0x7, 0x0, 0x4, 0x100, {r4, r5/1000+30000}, {0x7, 0xb, 0x1, 0x10001, 0xffffffff, 0x9, "c8c0963d"}, 0x1, 0x2, @offset=0x7, 0x4}) wait4(0x0, 0x0, 0x80000002, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000040)=0x5) tkill(r1, 0x2a) ptrace$cont(0x18, r1, 0x0, 0x0) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x31}) getsockopt$IP6T_SO_GET_ENTRIES(r6, 0x29, 0x41, &(0x7f0000000500)=ANY=[@ANYBLOB="7365637572697479000000000000000000000006000000000000000000000200000000000000e1294da536fded81cbe53bdca3a74371909220b97d520f26ab2dec2dffaee2b75b8a1ce780f7f6d2a621edddeec32a53cce7ec92eba46e5c6bb11f15b73a5c65efbb7bb931bceb81f0ea64be35157633cd49b21b47fbf88e57af885b10062bc1b7762271d7fd29"], 0x0) ptrace$cont(0x20, r1, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1f, 0x2200) 17:22:40 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000440)=""/146) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0xfffffde0) r3 = socket$rxrpc(0x21, 0x2, 0x4000000000000a) ioctl$int_in(r0, 0x5473, &(0x7f0000000340)=0xfffffffffffff001) bind$rxrpc(r3, &(0x7f0000000140)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e22, 0x2, @remote, 0x4}}, 0x24) listen(r3, 0x9) modify_ldt$write(0x1, &(0x7f0000000300)={0x0, 0x20001000, 0xf6a19cc09ebfc357, 0x3, 0x400, 0x9, 0x3f, 0x100000001, 0x10001, 0x7}, 0x10) fstat(0xffffffffffffff9c, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x1ec51da1abe9f22b, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f0000000280)={0x7, 0x0, 0x4, 0x100, {r4, r5/1000+30000}, {0x7, 0xb, 0x1, 0x10001, 0xffffffff, 0x9, "c8c0963d"}, 0x1, 0x2, @offset=0x7, 0x4}) wait4(0x0, 0x0, 0x80000002, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000040)=0x5) tkill(r1, 0x2a) ptrace$cont(0x18, r1, 0x0, 0x0) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x31}) getsockopt$IP6T_SO_GET_ENTRIES(r6, 0x29, 0x41, &(0x7f0000000500)=ANY=[@ANYBLOB="7365637572697479000000000000000000000006000000000000000000000200000000000000e1294da536fded81cbe53bdca3a74371909220b97d520f26ab2dec2dffaee2b75b8a1ce780f7f6d2a621edddeec32a53cce7ec92eba46e5c6bb11f15b73a5c65efbb7bb931bceb81f0ea64be35157633cd49b21b47fbf88e57af885b10062bc1b7762271d7fd29"], 0x0) ptrace$cont(0x20, r1, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1f, 0x2200) [ 228.273198][ T8598] tmpfs: Bad value 'À' for mount option 'uid' [ 228.354178][ T8614] QAT: Invalid ioctl [ 228.374173][ T8612] hfsplus: unable to parse mount options 17:22:40 executing program 0: r0 = socket(0x11, 0xa, 0x0) setsockopt$packet_buf(r0, 0x107, 0x9, &(0x7f00000003c0), 0x0) [ 228.425602][ T8616] tmpfs: Bad value 'À' for mount option 'uid' [ 228.450906][ T8600] IPVS: ftp: loaded support on port[0] = 21 17:22:40 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000440)=""/146) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0xfffffde0) r3 = socket$rxrpc(0x21, 0x2, 0x4000000000000a) ioctl$int_in(r0, 0x5473, &(0x7f0000000340)=0xfffffffffffff001) bind$rxrpc(r3, &(0x7f0000000140)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e22, 0x2, @remote, 0x4}}, 0x24) listen(r3, 0x9) modify_ldt$write(0x1, &(0x7f0000000300)={0x0, 0x20001000, 0xf6a19cc09ebfc357, 0x3, 0x400, 0x9, 0x3f, 0x100000001, 0x10001, 0x7}, 0x10) fstat(0xffffffffffffff9c, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x1ec51da1abe9f22b, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f0000000280)={0x7, 0x0, 0x4, 0x100, {r4, r5/1000+30000}, {0x7, 0xb, 0x1, 0x10001, 0xffffffff, 0x9, "c8c0963d"}, 0x1, 0x2, @offset=0x7, 0x4}) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000040)=0x5) tkill(r1, 0x2a) ptrace$cont(0x18, r1, 0x0, 0x0) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x31}) getsockopt$IP6T_SO_GET_ENTRIES(r6, 0x29, 0x41, &(0x7f0000000500)=ANY=[@ANYBLOB="7365637572697479000000000000000000000006000000000000000000000200000000000000e1294da536fded81cbe53bdca3a74371909220b97d520f26ab2dec2dffaee2b75b8a1ce780f7f6d2a621edddeec32a53cce7ec92eba46e5c6bb11f15b73a5c65efbb7bb931bceb81f0ea64be35157633cd49b21b47fbf88e57af885b10062bc1b7762271d7fd29"], 0x0) ptrace$cont(0x20, r1, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1f, 0x2200) 17:22:40 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000440)=""/146) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0xfffffde0) r3 = socket$rxrpc(0x21, 0x2, 0x4000000000000a) ioctl$int_in(r0, 0x5473, &(0x7f0000000340)=0xfffffffffffff001) bind$rxrpc(r3, &(0x7f0000000140)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e22, 0x2, @remote, 0x4}}, 0x24) listen(r3, 0x9) modify_ldt$write(0x1, &(0x7f0000000300)={0x0, 0x20001000, 0xf6a19cc09ebfc357, 0x3, 0x400, 0x9, 0x3f, 0x100000001, 0x10001, 0x7}, 0x10) fstat(0xffffffffffffff9c, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x1ec51da1abe9f22b, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f0000000280)={0x7, 0x0, 0x4, 0x100, {r4, r5/1000+30000}, {0x7, 0xb, 0x1, 0x10001, 0xffffffff, 0x9, "c8c0963d"}, 0x1, 0x2, @offset=0x7, 0x4}) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000040)=0x5) tkill(r1, 0x2a) ptrace$cont(0x18, r1, 0x0, 0x0) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x31}) getsockopt$IP6T_SO_GET_ENTRIES(r6, 0x29, 0x41, &(0x7f0000000500)=ANY=[@ANYBLOB="7365637572697479000000000000000000000006000000000000000000000200000000000000e1294da536fded81cbe53bdca3a74371909220b97d520f26ab2dec2dffaee2b75b8a1ce780f7f6d2a621edddeec32a53cce7ec92eba46e5c6bb11f15b73a5c65efbb7bb931bceb81f0ea64be35157633cd49b21b47fbf88e57af885b10062bc1b7762271d7fd29"], 0x0) ptrace$cont(0x20, r1, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1f, 0x2200) 17:22:40 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000240)=[{&(0x7f0000000080)="800000001000000019000300e60100006c000000000000002000000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) lsetxattr$security_capability(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='security.capability\x00', &(0x7f0000000180)=@v2={0x2000000, [{0x81, 0x1ff}, {0x4, 0x1000}]}, 0x14, 0x1) [ 228.873437][ T8638] EXT4-fs (loop0): Invalid log block size: 32 17:22:41 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000440)=""/146) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0xfffffde0) r3 = socket$rxrpc(0x21, 0x2, 0x4000000000000a) ioctl$int_in(r0, 0x5473, &(0x7f0000000340)=0xfffffffffffff001) bind$rxrpc(r3, &(0x7f0000000140)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e22, 0x2, @remote, 0x4}}, 0x24) listen(r3, 0x9) modify_ldt$write(0x1, &(0x7f0000000300)={0x0, 0x20001000, 0xf6a19cc09ebfc357, 0x3, 0x400, 0x9, 0x3f, 0x100000001, 0x10001, 0x7}, 0x10) fstat(0xffffffffffffff9c, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x1ec51da1abe9f22b, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f0000000280)={0x7, 0x0, 0x4, 0x100, {r4, r5/1000+30000}, {0x7, 0xb, 0x1, 0x10001, 0xffffffff, 0x9, "c8c0963d"}, 0x1, 0x2, @offset=0x7, 0x4}) wait4(0x0, 0x0, 0x80000002, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000040)=0x5) tkill(r1, 0x2a) ptrace$cont(0x18, r1, 0x0, 0x0) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x31}) getsockopt$IP6T_SO_GET_ENTRIES(r6, 0x29, 0x41, &(0x7f0000000500)=ANY=[@ANYBLOB="7365637572697479000000000000000000000006000000000000000000000200000000000000e1294da536fded81cbe53bdca3a74371909220b97d520f26ab2dec2dffaee2b75b8a1ce780f7f6d2a621edddeec32a53cce7ec92eba46e5c6bb11f15b73a5c65efbb7bb931bceb81f0ea64be35157633cd49b21b47fbf88e57af885b10062bc1b7762271d7fd29"], 0x0) ptrace$cont(0x20, r1, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1f, 0x2200) [ 229.125414][ T8628] hfsplus: unable to parse mount options [ 229.160951][ T8643] EXT4-fs (loop0): Invalid log block size: 32 17:22:41 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() recvmmsg(r0, &(0x7f0000000140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000002, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) sigaltstack(&(0x7f0000ffc000/0x1000)=nil, 0x0) tkill(r2, 0x3c) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) 17:22:41 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) r2 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x11, 0x400000) ioctl$TCSETSF(r2, 0x5404, &(0x7f00000000c0)={0x650, 0x200, 0xff, 0x568, 0x0, 0x6, 0x5, 0x5, 0x1, 0x7, 0x2, 0x1}) ioctl$KVM_ASSIGN_SET_MSIX_NR(r0, 0x4008ae73, &(0x7f0000000180)={0xa622, 0x3}) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x4, @remote, 0x4}, 0x1c) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000001c, 0x0) ioctl$UDMABUF_CREATE_LIST(r2, 0x40087543, &(0x7f00000001c0)=ANY=[@ANYBLOB="0000000002000000", @ANYRES32=r2, @ANYBLOB, @ANYRES32=r2, @ANYBLOB="000000000020000000000000008000f0ffffffff"]) 17:22:41 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000440)=""/146) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0xfffffde0) r3 = socket$rxrpc(0x21, 0x2, 0x4000000000000a) ioctl$int_in(r0, 0x5473, &(0x7f0000000340)=0xfffffffffffff001) bind$rxrpc(r3, &(0x7f0000000140)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e22, 0x2, @remote, 0x4}}, 0x24) listen(r3, 0x9) modify_ldt$write(0x1, &(0x7f0000000300)={0x0, 0x20001000, 0xf6a19cc09ebfc357, 0x3, 0x400, 0x9, 0x3f, 0x100000001, 0x10001, 0x7}, 0x10) fstat(0xffffffffffffff9c, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x1ec51da1abe9f22b, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f0000000280)={0x7, 0x0, 0x4, 0x100, {r4, r5/1000+30000}, {0x7, 0xb, 0x1, 0x10001, 0xffffffff, 0x9, "c8c0963d"}, 0x1, 0x2, @offset=0x7, 0x4}) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000040)=0x5) tkill(r1, 0x2a) ptrace$cont(0x18, r1, 0x0, 0x0) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x31}) getsockopt$IP6T_SO_GET_ENTRIES(r6, 0x29, 0x41, &(0x7f0000000500)=ANY=[@ANYBLOB="7365637572697479000000000000000000000006000000000000000000000200000000000000e1294da536fded81cbe53bdca3a74371909220b97d520f26ab2dec2dffaee2b75b8a1ce780f7f6d2a621edddeec32a53cce7ec92eba46e5c6bb11f15b73a5c65efbb7bb931bceb81f0ea64be35157633cd49b21b47fbf88e57af885b10062bc1b7762271d7fd29"], 0x0) ptrace$cont(0x20, r1, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1f, 0x2200) 17:22:41 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000440)=""/146) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0xfffffde0) r3 = socket$rxrpc(0x21, 0x2, 0x4000000000000a) ioctl$int_in(r0, 0x5473, &(0x7f0000000340)=0xfffffffffffff001) bind$rxrpc(r3, &(0x7f0000000140)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e22, 0x2, @remote, 0x4}}, 0x24) listen(r3, 0x9) modify_ldt$write(0x1, &(0x7f0000000300)={0x0, 0x20001000, 0xf6a19cc09ebfc357, 0x3, 0x400, 0x9, 0x3f, 0x100000001, 0x10001, 0x7}, 0x10) fstat(0xffffffffffffff9c, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x1ec51da1abe9f22b, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f0000000280)={0x7, 0x0, 0x4, 0x100, {r4, r5/1000+30000}, {0x7, 0xb, 0x1, 0x10001, 0xffffffff, 0x9, "c8c0963d"}, 0x1, 0x2, @offset=0x7, 0x4}) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000040)=0x5) tkill(r1, 0x2a) ptrace$cont(0x18, r1, 0x0, 0x0) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x31}) getsockopt$IP6T_SO_GET_ENTRIES(r6, 0x29, 0x41, &(0x7f0000000500)=ANY=[@ANYBLOB="7365637572697479000000000000000000000006000000000000000000000200000000000000e1294da536fded81cbe53bdca3a74371909220b97d520f26ab2dec2dffaee2b75b8a1ce780f7f6d2a621edddeec32a53cce7ec92eba46e5c6bb11f15b73a5c65efbb7bb931bceb81f0ea64be35157633cd49b21b47fbf88e57af885b10062bc1b7762271d7fd29"], 0x0) ptrace$cont(0x20, r1, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1f, 0x2200) 17:22:41 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000440)=""/146) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0xfffffde0) r3 = socket$rxrpc(0x21, 0x2, 0x4000000000000a) ioctl$int_in(r0, 0x5473, &(0x7f0000000340)=0xfffffffffffff001) bind$rxrpc(r3, &(0x7f0000000140)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e22, 0x2, @remote, 0x4}}, 0x24) listen(r3, 0x9) modify_ldt$write(0x1, &(0x7f0000000300)={0x0, 0x20001000, 0xf6a19cc09ebfc357, 0x3, 0x400, 0x9, 0x3f, 0x100000001, 0x10001, 0x7}, 0x10) fstat(0xffffffffffffff9c, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x1ec51da1abe9f22b, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f0000000280)={0x7, 0x0, 0x4, 0x100, {r4, r5/1000+30000}, {0x7, 0xb, 0x1, 0x10001, 0xffffffff, 0x9, "c8c0963d"}, 0x1, 0x2, @offset=0x7, 0x4}) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000040)=0x5) tkill(r1, 0x2a) ptrace$cont(0x18, r1, 0x0, 0x0) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x31}) getsockopt$IP6T_SO_GET_ENTRIES(r6, 0x29, 0x41, &(0x7f0000000500)=ANY=[@ANYBLOB="7365637572697479000000000000000000000006000000000000000000000200000000000000e1294da536fded81cbe53bdca3a74371909220b97d520f26ab2dec2dffaee2b75b8a1ce780f7f6d2a621edddeec32a53cce7ec92eba46e5c6bb11f15b73a5c65efbb7bb931bceb81f0ea64be35157633cd49b21b47fbf88e57af885b10062bc1b7762271d7fd29"], 0x0) ptrace$cont(0x20, r1, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1f, 0x2200) [ 229.799323][ C1] net_ratelimit: 16 callbacks suppressed [ 229.799365][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 229.810938][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 229.879530][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 229.885727][ C0] protocol 88fb is buggy, dev hsr_slave_1 17:22:42 executing program 5: r0 = semget$private(0x0, 0x3, 0x100) semctl$SETVAL(r0, 0x3, 0x10, &(0x7f00000005c0)=0x2) r1 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bf, @time}) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000640)='/dev/rfkill\x00', 0x2000, 0x0) ioctl$SCSI_IOCTL_PROBE_HOST(r2, 0x5385, &(0x7f0000000680)={0x8, ""/8}) socketpair(0x7, 0x0, 0x800, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0x40a85321, &(0x7f0000000100)) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc0bc5351, &(0x7f0000000300)) r4 = gettid() pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f0000000500)={0x1, 0x0, &(0x7f0000000380)=""/101, &(0x7f0000000400)=""/240, &(0x7f0000000280)=""/22, 0x7000}) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0)=0x0) setsockopt$netrom_NETROM_N2(r3, 0x103, 0x3, &(0x7f0000000540)=0xf67e, 0x4) clock_gettime(0x0, &(0x7f0000000580)) timer_settime(r7, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(r4, 0x1000000000013) accept4$llc(r5, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000000600)=0x10, 0x800) 17:22:42 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x2c) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000200)='/dev/cachefiles\x00', 0x111000, 0x0) ioctl$UI_SET_PROPBIT(r1, 0x4004556e, 0xf) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000280)='/dev/rtc0\x00', 0x0, 0x0) pwrite64(r2, &(0x7f00000000c0)="2c37c992d1d114f2496d159312145c0e89b0dc0098870b2a8a510a23b97007036603b6a2b7503615fda755c8946afb0ff13dc261758842b78510f4f2e6f9028a918000b019fcf0f4ee37fb8a469bf74dff4fcc13519c712c1d728d6520c7b39533ac90d4b7eabdc8d37b6fd47689277bb98cd93ab3ca743c559f83803adb5c2b022afbc9291d99d50f8782ac805f17181e1ec59d2bd422e3247ba93cbe537b37fcfefb19de9c6df66534ec922c1df8a3f3efb54023a79df5e8c76280d9246f24ad358017439211575196ff6db3818747102288ff457cc5fb729803a31b0437780e209bae435b40a86502a8d0b1bfebc26b615d", 0xf3, 0x0) setsockopt$inet_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f0000000240), 0x4) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r2, 0x8008ae9d, &(0x7f00000001c0)=""/32) ioctl$KDDISABIO(r2, 0x4b37) ioctl$SG_EMULATED_HOST(r2, 0x2203, &(0x7f0000000080)) time(&(0x7f00000002c0)) signalfd4(r0, &(0x7f0000000040)={0x62}, 0x8, 0x80000) 17:22:42 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000440)=""/146) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0xfffffde0) r3 = socket$rxrpc(0x21, 0x2, 0x4000000000000a) ioctl$int_in(r0, 0x5473, &(0x7f0000000340)=0xfffffffffffff001) bind$rxrpc(r3, &(0x7f0000000140)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e22, 0x2, @remote, 0x4}}, 0x24) listen(r3, 0x9) modify_ldt$write(0x1, &(0x7f0000000300)={0x0, 0x20001000, 0xf6a19cc09ebfc357, 0x3, 0x400, 0x9, 0x3f, 0x100000001, 0x10001, 0x7}, 0x10) fstat(0xffffffffffffff9c, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x1ec51da1abe9f22b, 0x0) clock_gettime(0x0, &(0x7f0000000240)) wait4(0x0, 0x0, 0x80000002, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000040)=0x5) tkill(r1, 0x2a) ptrace$cont(0x18, r1, 0x0, 0x0) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x31}) getsockopt$IP6T_SO_GET_ENTRIES(r4, 0x29, 0x41, &(0x7f0000000500)=ANY=[@ANYBLOB="7365637572697479000000000000000000000006000000000000000000000200000000000000e1294da536fded81cbe53bdca3a74371909220b97d520f26ab2dec2dffaee2b75b8a1ce780f7f6d2a621edddeec32a53cce7ec92eba46e5c6bb11f15b73a5c65efbb7bb931bceb81f0ea64be35157633cd49b21b47fbf88e57af885b10062bc1b7762271d7fd29"], 0x0) ptrace$cont(0x20, r1, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1f, 0x2200) 17:22:42 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x8d0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0xc208ae62, &(0x7f0000000080)={0x43}) 17:22:42 executing program 1: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x90) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000080)={0x21, 0x3, 0x0, {0x3}}, 0x21) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000480)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000300)=0xfffffffffffffffe) preadv(r1, &(0x7f00000003c0)=[{&(0x7f00000006c0)=""/4096, 0x1000}], 0x1, 0x0) r2 = getpgid(0xffffffffffffffff) fcntl$setownex(r1, 0xf, &(0x7f0000000000)={0x0, r2}) r3 = syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x3, 0x2) setsockopt$netrom_NETROM_T4(r3, 0x103, 0x6, &(0x7f0000000100)=0x9, 0x4) 17:22:42 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000440)=""/146) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0xfffffde0) r3 = socket$rxrpc(0x21, 0x2, 0x4000000000000a) ioctl$int_in(r0, 0x5473, &(0x7f0000000340)=0xfffffffffffff001) bind$rxrpc(r3, &(0x7f0000000140)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e22, 0x2, @remote, 0x4}}, 0x24) listen(r3, 0x9) modify_ldt$write(0x1, &(0x7f0000000300)={0x0, 0x20001000, 0xf6a19cc09ebfc357, 0x3, 0x400, 0x9, 0x3f, 0x100000001, 0x10001, 0x7}, 0x10) fstat(0xffffffffffffff9c, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x1ec51da1abe9f22b, 0x0) clock_gettime(0x0, &(0x7f0000000240)) wait4(0x0, 0x0, 0x80000002, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000040)=0x5) tkill(r1, 0x2a) ptrace$cont(0x18, r1, 0x0, 0x0) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x31}) getsockopt$IP6T_SO_GET_ENTRIES(r4, 0x29, 0x41, &(0x7f0000000500)=ANY=[@ANYBLOB="7365637572697479000000000000000000000006000000000000000000000200000000000000e1294da536fded81cbe53bdca3a74371909220b97d520f26ab2dec2dffaee2b75b8a1ce780f7f6d2a621edddeec32a53cce7ec92eba46e5c6bb11f15b73a5c65efbb7bb931bceb81f0ea64be35157633cd49b21b47fbf88e57af885b10062bc1b7762271d7fd29"], 0x0) ptrace$cont(0x20, r1, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1f, 0x2200) 17:22:42 executing program 0: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$clear(0x7, r0) ioctl(0xffffffffffffffff, 0x100000c912, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpgid(0x0) msgget(0xffffffffffffffff, 0x0) clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000040)=@generic={0xa, "c87f25bceb2a052b1d37ee8927b7826570c8eefbc3d2b79a5a0d77e540e7cdfd1f06c96b2335f4aabc45fa1ad1070f48193a6a1d05e7747159d29b1448cc7523d5b413f0cdd9911615657d610af4973b70fc8aedaf14ea5b78563684dfb0de26d66521c6548074de6c69dffc6e980b88608c4b67e6a5fd6f5fe3097e6095"}, 0xfffffffffffffd72) tkill(r1, 0x10) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3e}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r1, 0x0, 0x0) [ 230.198774][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 230.204593][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 230.448823][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 230.454649][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 230.518768][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 230.524597][ C1] protocol 88fb is buggy, dev hsr_slave_1 17:22:44 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4004e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0xfffffffffffffe84, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000100)="0204", 0x2) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0) read$eventfd(r2, &(0x7f0000000040), 0x8) ioctl$int_in(r2, 0x800000c004500a, &(0x7f0000000100)) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='veth1\x00\x00\x00\x00\xff\xff\xff\xff\xff\xef\x00', 0xdd) 17:22:44 executing program 4: prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000000)) move_pages(0x0, 0x1, &(0x7f00000001c0)=[&(0x7f0000002000/0x2000)=nil], &(0x7f0000000200)=[0x7], 0xfffffffffffffffd, 0x800000) 17:22:44 executing program 1: r0 = syz_open_dev$mouse(&(0x7f0000000180)='/dev/input/mouse#\x00', 0x3, 0x4a302) ioctl$TCXONC(r0, 0x540a, 0xffffffff) ioctl$BLKROGET(r0, 0x125e, &(0x7f0000000640)) r1 = socket$inet(0x10, 0x3, 0xc) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cachefiles\x00', 0x800, 0x0) sendmsg$alg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="b8ec69608a8466098547c24c57659e0d4f5612ddf7c97c1d74d4cf7974a9f7d9022676a51b11bbce3b6f8182874f700309f77a9a321ccd5af5e2b3e10dbadca30330bea85b21be86053033193e7dd03b83d17fb11d1551c53653ead20f872997a2e576cb9663b1c01f", 0x69}, {&(0x7f0000000280)="5945f284bd983ea42902ccfd5c4e9b61b09c5c20273a447db0e4679ea9040b48530c62cb6721e43227496ee5ee55ac67abfb4a2551d2f521675ab27cbf8e44384249e2060edfab9d761ef4804deb", 0x4e}, {&(0x7f0000000300)="206f3184d14e6691334ee8f7cfdbebefd77c1bf5d7160c041eaf3ad8f33abbcceaf489abb391b989e3e6a2c77469abef7461430b01967c8c82cd4f04bde4921f07fa5b8936fa0e32e02fa1aeb765a5dbb80ca18714b63a31b9a7", 0x5a}, {&(0x7f0000000380)="af36241e2d02a5f3711b2c42cad410983717b13233438e72ac0fc23b67e9440f30a7eb7678a0ec71eff14c52520b8aa3e691403e618652467ce2b7156c36721cdd4de99e2740be7adc4ebb0a5115539ec18e4ac326369a8f8b53be351e7c5ab0a16d89deb7c6eba8d9a29572eb060948ce1a7d0e457f3dbbd0dc5dab78d651d3c381904174e97e84a12d71b7c025300ab4bade936ded1d93f4e8ce72911c89d64574265b36c13f15f3daa59820df5e93fea093eeb34ef3fcb73b6387643c66fefebf379a142d48793be96442ae30", 0xce}], 0x4, &(0x7f00000004c0)=[@assoc={0x18}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18}, @iv={0xa0, 0x117, 0x2, 0x86, "2b55e2cbc5aafd10e19b27278f4f3e278b4c463a0458a2f1149266bac5551b39cf6582dd8f4cd9184a19790ffdc654f3020548d4a807e87ce5ee47cf7814e7695861f7f5e07229f8b4311571a24ce646b7e7c1732cf668d4d37a39ca71d2f3b982a71a73bba606671d1ff17e356935b387ab7796d157d4183827c6ea23173638429d285d1134"}, @op={0x18}], 0x100, 0x4048000}, 0x4000000) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000170a070c1dfffd946fa2830020200a0003000200001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0x40045542, &(0x7f0000000600)=0x2) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000740)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) ioctl$KVM_DEASSIGN_PCI_DEVICE(r0, 0x4040ae72, &(0x7f00000006c0)={0x6dfb2c62, 0x2, 0xffffffffffff9124, 0x1, 0xa48}) getsockopt$IPT_SO_GET_ENTRIES(r1, 0x0, 0x41, &(0x7f0000000040)=ANY=[@ANYBLOB="7261770000000000000000000000000000000000230000000000000000000000a5000000dcf39fbacb9a9089553a8471d467eb4164f149e8390cec7f7e1b5ea8231d939598e0fb936fb329bf7647ed6786b31d7f483e9077b74b1b5e0e76e872a3f74121f2ac0a36690d16b72fed19eddf3807132e072101ebde461348909493dfc178e5edfcf530ed7d062fe44cab3db12d8363d3573d908108ffe86d19bd68045a2ef5283169995bd37c0dd9db3be18088b9a8669454185ad78b925a946c444be8127e92a95edf7821a8e2e1b236476ae9d63ffd8a359552cb9a667b4f2dab6233d2279d86ef3f87a21fb0a5ca"], &(0x7f0000000140)=0xc9) socket$inet6_udplite(0xa, 0x2, 0x88) 17:22:44 executing program 5: r0 = socket$inet(0x2, 0x20000000c, 0x7f) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, 0x0, 0x289) 17:22:44 executing program 0: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$clear(0x7, r0) ioctl(0xffffffffffffffff, 0x100000c912, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpgid(0x0) msgget(0xffffffffffffffff, 0x0) clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000040)=@generic={0xa, "c87f25bceb2a052b1d37ee8927b7826570c8eefbc3d2b79a5a0d77e540e7cdfd1f06c96b2335f4aabc45fa1ad1070f48193a6a1d05e7747159d29b1448cc7523d5b413f0cdd9911615657d610af4973b70fc8aedaf14ea5b78563684dfb0de26d66521c6548074de6c69dffc6e980b88608c4b67e6a5fd6f5fe3097e6095"}, 0xfffffffffffffd72) tkill(r1, 0x10) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3e}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r1, 0x0, 0x0) 17:22:44 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000440)=""/146) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0xfffffde0) r3 = socket$rxrpc(0x21, 0x2, 0x4000000000000a) ioctl$int_in(r0, 0x5473, &(0x7f0000000340)=0xfffffffffffff001) bind$rxrpc(r3, &(0x7f0000000140)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e22, 0x2, @remote, 0x4}}, 0x24) listen(r3, 0x9) modify_ldt$write(0x1, &(0x7f0000000300)={0x0, 0x20001000, 0xf6a19cc09ebfc357, 0x3, 0x400, 0x9, 0x3f, 0x100000001, 0x10001, 0x7}, 0x10) fstat(0xffffffffffffff9c, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x1ec51da1abe9f22b, 0x0) clock_gettime(0x0, &(0x7f0000000240)) wait4(0x0, 0x0, 0x80000002, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000040)=0x5) tkill(r1, 0x2a) ptrace$cont(0x18, r1, 0x0, 0x0) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x31}) getsockopt$IP6T_SO_GET_ENTRIES(r4, 0x29, 0x41, &(0x7f0000000500)=ANY=[@ANYBLOB="7365637572697479000000000000000000000006000000000000000000000200000000000000e1294da536fded81cbe53bdca3a74371909220b97d520f26ab2dec2dffaee2b75b8a1ce780f7f6d2a621edddeec32a53cce7ec92eba46e5c6bb11f15b73a5c65efbb7bb931bceb81f0ea64be35157633cd49b21b47fbf88e57af885b10062bc1b7762271d7fd29"], 0x0) ptrace$cont(0x20, r1, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1f, 0x2200) 17:22:44 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = socket$inet6(0xa, 0x80003, 0x1) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x0, 0x0, @mcast2}, 0x1c) recvmmsg(r1, &(0x7f0000000040)=[{{&(0x7f0000007f80)=@alg, 0x80, 0x0}}], 0x400000000000040, 0x10122, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r2, 0xc10c5541, &(0x7f0000000280)={0x1, 0x8, 0x80000001, 0x0, 0x0, [], [], [], 0x10001, 0x9}) [ 232.605230][ T8728] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 232.633711][ T8733] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. 17:22:44 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) clock_nanosleep(0x0, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) listen(r0, 0x7) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f0000000240)=0x828e) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = accept4(r0, 0x0, 0x0, 0x800) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) lsetxattr$security_smack_entry(&(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) close(r3) 17:22:45 executing program 1: r0 = syz_open_dev$mice(&(0x7f00000001c0)='/dev/input/mice\x00', 0x0, 0x202) fstat(0xffffffffffffff9c, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f) ioctl$TUNSETGROUP(r0, 0x400454ce, r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NET_SET(r2, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002880)=ANY=[@ANYBLOB="3f2200de", @ANYRES16=0x0, @ANYBLOB="210100000000000000000f000000100007000c0003000000000000000000"], 0x24}}, 0x0) r3 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$revoke(0x3, r3) 17:22:45 executing program 5: r0 = socket$inet(0x10, 0x203, 0xc) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x400, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') openat$full(0xffffffffffffff9c, &(0x7f0000000200)='/dev/full\x00', 0x2, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x531546fbc9107e1d}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x28, r2, 0x100, 0x70bd28, 0x25dfdbfb, {{}, 0x0, 0x410c, 0x0, {0xc, 0x14, 'syz1\x00'}}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x40000) sendmsg(r0, &(0x7f000001d000)={0x0, 0x0, &(0x7f0000024000)=[{&(0x7f0000000100)="24000000100007031dff22946fa2830020200a0009000300004085687f0000000400ff7e28000000120a43ba5d806055b6fdd80b40000000090003000029ec2400020cd37e99d69cda45a95e", 0x4c}], 0x1}, 0xfffffffffffffffd) 17:22:45 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$KVM_PPC_GET_SMMU_INFO(r1, 0x8250aea6, 0x0) 17:22:45 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000440)=""/146) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0xfffffde0) r3 = socket$rxrpc(0x21, 0x2, 0x4000000000000a) ioctl$int_in(r0, 0x5473, &(0x7f0000000340)=0xfffffffffffff001) bind$rxrpc(r3, &(0x7f0000000140)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e22, 0x2, @remote, 0x4}}, 0x24) listen(r3, 0x9) modify_ldt$write(0x1, &(0x7f0000000300)={0x0, 0x20001000, 0xf6a19cc09ebfc357, 0x3, 0x400, 0x9, 0x3f, 0x100000001, 0x10001, 0x7}, 0x10) fstat(0xffffffffffffff9c, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x1ec51da1abe9f22b, 0x0) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f0000000280)={0x7, 0x0, 0x4, 0x100, {}, {0x7, 0xb, 0x1, 0x10001, 0xffffffff, 0x9, "c8c0963d"}, 0x1, 0x2, @offset=0x7, 0x4}) wait4(0x0, 0x0, 0x80000002, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000040)=0x5) tkill(r1, 0x2a) ptrace$cont(0x18, r1, 0x0, 0x0) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x31}) getsockopt$IP6T_SO_GET_ENTRIES(r4, 0x29, 0x41, &(0x7f0000000500)=ANY=[@ANYBLOB="7365637572697479000000000000000000000006000000000000000000000200000000000000e1294da536fded81cbe53bdca3a74371909220b97d520f26ab2dec2dffaee2b75b8a1ce780f7f6d2a621edddeec32a53cce7ec92eba46e5c6bb11f15b73a5c65efbb7bb931bceb81f0ea64be35157633cd49b21b47fbf88e57af885b10062bc1b7762271d7fd29"], 0x0) ptrace$cont(0x20, r1, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1f, 0x2200) 17:22:45 executing program 2: r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000001c0)={@mcast2, 0xffffffffffffff4b, 0x0, 0x800000000fb, 0xfffffffffffffe, 0x40000000}, 0x144) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000040), &(0x7f0000000080)=0x4) socket$inet_udplite(0x2, 0x2, 0x88) socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000200)={{0xa, 0x4e23, 0x2, @ipv4={[], [], @remote}, 0x6}, {0xa, 0x4e22, 0x0, @local, 0x100}, 0x3, [0x4, 0x0, 0xad5f, 0x6, 0x4, 0x20, 0x2, 0x9]}, 0x5c) r1 = syz_open_dev$amidi(&(0x7f00000000c0)='/dev/amidi#\x00', 0x1, 0x40200) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f0000000180)={0x9c0000, 0x100, 0x101, [], &(0x7f0000000100)={0x9a091a, 0x1, [], @ptr=0x339}}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@local, 0x800, 0x0, 0xff, 0x0, 0x0, 0xfc}, 0x20) 17:22:45 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='tmpfs\x00', 0x0, 0x0) r1 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r1) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) symlink(&(0x7f0000000040)='./file0/f.le.\x00', &(0x7f0000000140)='.//ile0\x00') mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='trusted.overlay.opaque\x00', 0x0, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r1, 0xc0945662, &(0x7f0000000340)={0xfffffffffffffff8, 0x0, [], {0x0, @bt={0x10000, 0xac0, 0x1, 0x1, 0x62, 0x4, 0x600000000, 0x3, 0xa3e5, 0x60, 0xeb0e, 0x8000, 0x1ff, 0x8001, 0x0, 0x10}}}) mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c65302c6c6f1c3eff0a69723d2e5366696c65302c776f726b6469723d2e2f66696c6531"]) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r2, &(0x7f0000000240)='.//ile0\x00', r2, &(0x7f00000007c0)='./file0/f.le.\x00') 17:22:45 executing program 5: r0 = syz_open_dev$sndpcmc(&(0x7f0000000140)='/dev/snd/pcmC#D#c\x00', 0x5, 0x80002) write$FUSE_LSEEK(r0, &(0x7f0000000080)={0x18, 0x0, 0x4, {0x6c50}}, 0x18) clock_nanosleep(0x85ce78b8d85be36d, 0x0, &(0x7f0000000040), 0x0) accept4$tipc(r0, &(0x7f00000000c0)=@name, &(0x7f0000000100)=0x10, 0x80000) 17:22:45 executing program 1: socketpair(0x2, 0xb, 0x200, &(0x7f0000001c40)) r0 = timerfd_create(0x7, 0xfffffffefffffffd) pipe2(&(0x7f0000001600)={0xffffffffffffffff}, 0x7c363afdbd493f3e) connect$x25(r1, &(0x7f0000001640)={0x9, @remote={[], 0x2}}, 0x12) timerfd_settime(r0, 0x0, &(0x7f000000b000)={{0x0, 0x1c9c380}, {0x800010000}}, 0x0) symlink(&(0x7f0000001740)='./file0\x00', &(0x7f0000001780)='./file0\x00') getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001440)={{{@in=@initdev, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@local}}, &(0x7f0000001540)=0xe8) ioctl$EVIOCGPROP(r1, 0x80404509, &(0x7f0000001680)=""/191) syz_mount_image$hfsplus(&(0x7f0000000000)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x10001, 0x5, &(0x7f00000013c0)=[{&(0x7f0000000080)="79b45109b93de5c07c111f269812e6afcdcec4ce703a7c63883455e8e007e332d595dd0093a6f8c6c949f18e1d92e07089a4204d8349a4fffa3e7baa2fb0ae6732a38a6ddf46ed2bc422945cf63a874d7550112b3ddb6a2fee464b4f7c114701be7b030e22d988b91086825f9058285ffa", 0x71, 0x4}, {&(0x7f0000000100)="b0740aa421c9637c0b0d3219ab14e1d5ebb502c9d687f60efa29162b63d84b39c956c307eec25053bf36334538615cd1da0319855d4c9e370dc96b6629f15ac3f3ac71e16a25919bd6d3064b98c3c4e86794fecda95f319e31df3ee0b35baa615cf0d9e9cb6fcb2048f98712f44416a8fbcc06f33811373de436b19ce096ea727384ffec254620e06197480d49b456ed9b38b5e8bcffb684ef33d12f7b4eba13ba71c05c16a7ed70e64736e5989547bcd5cf8620824782326081f710d2bb437fb509d094aece37aa4984b434ebf18674ba7702081361146fde95c4", 0xdb, 0xeb}, {&(0x7f0000000200)="f3b20a9ed6e039e76b3a65a0c59f8c3e05666da1f55accfbd6a6cbf503c91ac2471c0924c65c02bcccf1bce713d478656fbd375c09680cdedeb049b42b1f21f009e9f8ee7c35525f2fd8013c6ae0046ecd12f17f7db50ef353e3741cff46916c65e79e083ffa4c83493528b9e52d75da4df0502ca4f7cae917fc0c2e04eab39e02432e634b896f9cf222b32e31aa5cf41fac735b4d2714c97d47e9b08ccda2a71ada4da9d431287a30b8677fae1cac8654630bbf3f48b508784541b7c3abe632599bcb53b710835ff8f3ed8011cfe47edf86f383cafa1f497d3a0c28c1c9a71a60062d8324ba9e1104cb13ebba5f27eca4bc9b", 0xf3, 0x5}, {&(0x7f0000000300)="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", 0x1000, 0xdcdc}, {&(0x7f0000001300)="e4dbd936bae524143b6abb7f31880087f6357ed6556e8f4f0a965b4886191f8a385e80d35bae8f0f9261b3d0e1c185a979eadaa1501eff46f974c83b6d1f2f88db43912d5f0fbf591115a3ea17b25717bd2a5d8b7de2b00fdc2b24e1217c03678488bf085c4b0665ba1a8455cdcad00b0fba29e54791a03dace9dff89bc65c40123b59e64f65d5", 0x87, 0x59}], 0x2, &(0x7f0000001580)={[], [{@dont_measure='dont_measure'}, {@fowner_lt={'fowner<', r2}}, {@mask={'mask', 0x3d, '^MAY_APPEND'}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}]}) fstat(r0, &(0x7f0000001d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$msdos(&(0x7f00000017c0)='msdos\x00', &(0x7f0000001800)='./file0\x00', 0x101, 0x8, &(0x7f0000001b80)=[{&(0x7f0000001840)="12ce970e5db78679d5a764bd121df3dbf1c5115f900d7f6123a880286ed222d1edb141b17e8474e45b72cdd5ef0c2bbf3f1e33633629874e1b5c1a22b241b685d48a7f6825e0907e95c99445ffdc888ad04c0adf973a4710cc1bfe5b92", 0x5d, 0x1f}, {&(0x7f00000018c0)="640ca357619106", 0x7, 0x5}, {&(0x7f0000001900)="165e298cda3d661503fc67a242b9bd8a030235dacbc5681ba4dc0121cc782753dd1a54bb1bfeb7bcbb553e491adee8c21e8fc480648b708215ac41", 0x3b, 0x5}, {&(0x7f0000001940)="92ad8c64a181a854aaeb90f99d4d1828a405f94e98181d18c302c1fe5b50c4c150ef04bac3458eb54561326cbd0bb35c390ba0d0000dc942c94483f9747226d60db7ebf121f9be9cc2f76cd4beeb1f42dec8b80b0bf7b86d99f7776a1bd230688d450c23eb26d6dd", 0x68, 0x2}, {&(0x7f00000019c0)="e9fece883dd4cb9ad08315b4757cb6830c8d5cd74430", 0x16}, {&(0x7f0000001a00)="059c558d24a8c53c5edbcca2a75c3fc7", 0x10, 0x1f7}, {&(0x7f0000001a40)="29b437bb99d4efbb707101f5f12f39c54e6ad00158b1db2c0bdeb97a33a76b28624ebd8808c531999631843a6a4cf976b6cc4863c7623775dea385f8ca0b62906d186f40", 0x44, 0x9}, {&(0x7f0000001ac0)="cbda57c9d25e3f55fc72f6a5ec7b1a4263149b4dad3a8e63b464d205fad670eff892c95c9b2ca977b66004ac07420eec979a8c4501fc105ec91d3f6d8b1da79f55da76f877f29c9e3ad111b6c2600033a08e200c715de3281fbf804eb627289c47c8fd366b3fc241b1814224a173d3773a8fcb1c0e189285e19b68bfbfea837f50b134f5bdbd662abd735f645fd975bd75ce6826f60769b8ff7d363530da961170ea3434799f15c88e084f8bf1acbbb95b90a4c4", 0xffffffffffffffa8, 0x8}], 0x400, &(0x7f0000001e40)={[{@dots='dots'}, {@fat=@errors_continue='errors=continue'}, {@dots='dots'}, {@fat=@gid={'gid', 0x3d, r3}}, {@dots='dots'}, {@fat=@flush='flush'}, {@fat=@nfs='nfs'}, {@fat=@sys_immutable='sys_immutable'}, {@fat=@errors_remount='errors=remount-ro'}, {@fat=@fmask={'fmask', 0x3d, 0x6}}], [{@func={'func', 0x3d, 'POLICY_CHECK'}}, {@measure='measure'}, {@smackfshat={'smackfshat', 0x3d, 'vboxnet0vboxnet1-'}}]}) 17:22:45 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x7b, 0x20000) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/pfkey\x00', 0x1, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ubi_ctrl\x00', 0x80000, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vga_arbiter\x00', 0x280200, 0x0) r0 = syz_open_dev$vbi(&(0x7f00000002c0)='/dev/vbi#\x00', 0x2, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x7) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b4000000000000003d000100000000000fa00000000000009500000000000000ca17ba4bfb097f463f0de6513d379a8006e7a56d3ad0aa45bd9f42f0d115a3f01da0d5b2a7c082413fe92fda6e986a9c623cff23e439083d0e4fa681fba5b6690c45f258278eb91a38c1fd0d3172928f31a167bed89b58c670321d2907e52a298b25dd4e81c03869c631fd5fc4e902df54f5667d7eb1d1cf263c343478033c6b484f16a36e72672cff84373e37f525b319a1b1dfdea7077203a56094ebd6c12945522695d2ad0f"], &(0x7f0000000000)='\x00\x00\x00j\xff\xff\x9b\xff\xff\xf1s\x94\x9f\xaa!\xccQ\xd7\xa9\xcc\r1\xc2\a\x8f\xf8Ov\xbd\xd2\xef\xb2\xad\x1bd/\x10\xfebn\xdc#\xee\xfcl3w\x9d\xc3\xc7\f:\x98R\x9b?\xcfDl\x93Krp\xa1Z\x11H_\x89C\xa3#N\x9dHM\x17\xa6^\x80\xed\xd2\x02=U`rw\xcbtTEP\xbd\xb4\xaf\x93\x97\xea@\xb1\xa4\xe4\xe7Y\xa1\xcf,', 0x5, 0x410, &(0x7f00000000c0)=""/195}, 0x48) 17:22:45 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000440)=""/146) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0xfffffde0) r3 = socket$rxrpc(0x21, 0x2, 0x4000000000000a) ioctl$int_in(r0, 0x5473, &(0x7f0000000340)=0xfffffffffffff001) bind$rxrpc(r3, &(0x7f0000000140)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e22, 0x2, @remote, 0x4}}, 0x24) listen(r3, 0x9) modify_ldt$write(0x1, &(0x7f0000000300)={0x0, 0x20001000, 0xf6a19cc09ebfc357, 0x3, 0x400, 0x9, 0x3f, 0x100000001, 0x10001, 0x7}, 0x10) fstat(0xffffffffffffff9c, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x1ec51da1abe9f22b, 0x0) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f0000000280)={0x7, 0x0, 0x4, 0x100, {}, {0x7, 0xb, 0x1, 0x10001, 0xffffffff, 0x9, "c8c0963d"}, 0x1, 0x2, @offset=0x7, 0x4}) wait4(0x0, 0x0, 0x80000002, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000040)=0x5) tkill(r1, 0x2a) ptrace$cont(0x18, r1, 0x0, 0x0) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x31}) getsockopt$IP6T_SO_GET_ENTRIES(r4, 0x29, 0x41, &(0x7f0000000500)=ANY=[@ANYBLOB="7365637572697479000000000000000000000006000000000000000000000200000000000000e1294da536fded81cbe53bdca3a74371909220b97d520f26ab2dec2dffaee2b75b8a1ce780f7f6d2a621edddeec32a53cce7ec92eba46e5c6bb11f15b73a5c65efbb7bb931bceb81f0ea64be35157633cd49b21b47fbf88e57af885b10062bc1b7762271d7fd29"], 0x0) ptrace$cont(0x20, r1, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1f, 0x2200) [ 233.331543][ T8769] overlayfs: unrecognized mount option "lo>ÿ [ 233.331543][ T8769] ir=.Sfile0" or missing value 17:22:45 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, 0x0, &(0x7f0000000000)) [ 233.444142][ T8786] overlayfs: unrecognized mount option "lo>ÿ [ 233.444142][ T8786] ir=.Sfile0" or missing value 17:22:45 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000440)=""/146) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0xfffffde0) r3 = socket$rxrpc(0x21, 0x2, 0x4000000000000a) ioctl$int_in(r0, 0x5473, &(0x7f0000000340)=0xfffffffffffff001) bind$rxrpc(r3, &(0x7f0000000140)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e22, 0x2, @remote, 0x4}}, 0x24) listen(r3, 0x9) modify_ldt$write(0x1, &(0x7f0000000300)={0x0, 0x20001000, 0xf6a19cc09ebfc357, 0x3, 0x400, 0x9, 0x3f, 0x100000001, 0x10001, 0x7}, 0x10) fstat(0xffffffffffffff9c, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x1ec51da1abe9f22b, 0x0) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f0000000280)={0x7, 0x0, 0x4, 0x100, {}, {0x7, 0xb, 0x1, 0x10001, 0xffffffff, 0x9, "c8c0963d"}, 0x1, 0x2, @offset=0x7, 0x4}) wait4(0x0, 0x0, 0x80000002, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000040)=0x5) tkill(r1, 0x2a) ptrace$cont(0x18, r1, 0x0, 0x0) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x31}) getsockopt$IP6T_SO_GET_ENTRIES(r4, 0x29, 0x41, &(0x7f0000000500)=ANY=[@ANYBLOB="7365637572697479000000000000000000000006000000000000000000000200000000000000e1294da536fded81cbe53bdca3a74371909220b97d520f26ab2dec2dffaee2b75b8a1ce780f7f6d2a621edddeec32a53cce7ec92eba46e5c6bb11f15b73a5c65efbb7bb931bceb81f0ea64be35157633cd49b21b47fbf88e57af885b10062bc1b7762271d7fd29"], 0x0) ptrace$cont(0x20, r1, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1f, 0x2200) 17:22:45 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000440)=""/146) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0xfffffde0) r3 = socket$rxrpc(0x21, 0x2, 0x4000000000000a) ioctl$int_in(r0, 0x5473, &(0x7f0000000340)=0xfffffffffffff001) bind$rxrpc(r3, &(0x7f0000000140)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e22, 0x2, @remote, 0x4}}, 0x24) listen(r3, 0x9) modify_ldt$write(0x1, &(0x7f0000000300)={0x0, 0x20001000, 0xf6a19cc09ebfc357, 0x3, 0x400, 0x9, 0x3f, 0x100000001, 0x10001, 0x7}, 0x10) fstat(0xffffffffffffff9c, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x1ec51da1abe9f22b, 0x0) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f0000000280)={0x7, 0x0, 0x4, 0x100, {}, {0x7, 0xb, 0x1, 0x10001, 0xffffffff, 0x9, "c8c0963d"}, 0x1, 0x2, @offset=0x7, 0x4}) wait4(0x0, 0x0, 0x80000002, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000040)=0x5) tkill(r1, 0x2a) ptrace$cont(0x18, r1, 0x0, 0x0) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x31}) getsockopt$IP6T_SO_GET_ENTRIES(r4, 0x29, 0x41, &(0x7f0000000500)=ANY=[@ANYBLOB="7365637572697479000000000000000000000006000000000000000000000200000000000000e1294da536fded81cbe53bdca3a74371909220b97d520f26ab2dec2dffaee2b75b8a1ce780f7f6d2a621edddeec32a53cce7ec92eba46e5c6bb11f15b73a5c65efbb7bb931bceb81f0ea64be35157633cd49b21b47fbf88e57af885b10062bc1b7762271d7fd29"], 0x0) ptrace$cont(0x20, r1, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1f, 0x2200) 17:22:45 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2902001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x117, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x9, @dev={0xfe, 0x80, [], 0xc}, 0x9}, {0xa, 0x4e23, 0xf6, @mcast1, 0x2}, r1, 0x996}}, 0x48) rt_sigtimedwait(&(0x7f0000000040), 0x0, &(0x7f0000000180)={0x0, 0x1c9c380}, 0x8) r2 = getpid() rt_tgsigqueueinfo(r2, r2, 0x37, &(0x7f0000000100)) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f00000003c0)={{0xa, 0x4e20, 0x8, @local, 0xe3}, {0xa, 0x4e20, 0x100000001, @rand_addr="c79e2704a1b423548bf675f89c0ec97d", 0x83fb}, 0x100000000, [0x7, 0x2, 0x955, 0x3, 0xffff, 0x6, 0x5]}, 0x5c) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000280)={0x0, 0xdc8}, &(0x7f00000002c0)=0x8) prctl$PR_CAPBSET_READ(0x17, 0x14) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000300)={r3, 0x1, 0x3, 0x4, 0xfffffffffffff001, 0x80000000}, 0x14) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000340)={0x8, 0xa, 0x0, 0x400, r3}, &(0x7f0000000380)=0x10) ptrace(0x10, r2) 17:22:45 executing program 4: setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000100)=0x71f0541, 0x2) bind$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x200200, 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, 0x0) syz_open_dev$swradio(0x0, 0x1, 0x2) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f00000008c0)={0x0, @in6={{0xa, 0x4e20, 0xdc6, @remote, 0x7fff}}}, &(0x7f0000000980)=0x84) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) socket$can_bcm(0x1d, 0x2, 0x2) r3 = syz_open_dev$sndpcmp(0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r3, 0xc0bc5310, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000080)={0x0}) sendto$rose(r3, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_GET_LAPIC(r2, 0x8400ae8e, 0x0) ioctl$DRM_IOCTL_SWITCH_CTX(r3, 0x40086424, &(0x7f0000000180)={r4, 0x3}) dup2(r3, r2) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sloppy_tcp\x00', 0x2, 0x0) sendmsg$key(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)={0x2, 0xb, 0x8000, 0x3, 0x19, 0x0, 0x70bd2d, 0x25dfdbfd, [@sadb_x_kmaddress={0x5, 0x19, 0x0, @in={0x2, 0x4e22, @empty}, @in={0x2, 0x4e21, @local}}, @sadb_x_nat_t_port={0x1, 0x16, 0x4e21}, @sadb_lifetime={0x4, 0x7, 0x8, 0x0, 0x1, 0x8000}, @sadb_x_filter={0x5, 0x1a, @in=@multicast1, @in6=@local, 0x9, 0x14, 0x14}, @sadb_key={0x8, 0x0, 0x1b8, 0x0, "b641955e82d54c7cf5833e1d42783bf17bf19f1df8576c5229a8353ae9b97417885af2c18b5fae2258774b36b7a925230b1821445e2d8a"}]}, 0xc8}}, 0x40) ioctl$CAPI_GET_SERIAL(r5, 0xc0044308, 0x0) ioctl$KVM_GET_PIT(r0, 0xc048ae65, &(0x7f0000000300)) socketpair(0xfffffffffffffffb, 0x0, 0x0, &(0x7f0000000140)) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x12, 0x3, 0x4, 0x3}, 0x2c) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000240)={r6, &(0x7f0000000100), 0x0}, 0x18) 17:22:45 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0xb, &(0x7f0000000140)=0xffffffffffffffff, 0x3c7) setsockopt$sock_int(r1, 0x1, 0x4000000200000002, &(0x7f0000000040)=0x3ff, 0x4ae) bind$inet6(r1, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) getresuid(&(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)=0x0) mount$9p_xen(&(0x7f0000000200)='hugetlb.2MB.usage_in_bytes\x00', &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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", @ANYRESHEX=r3, @ANYBLOB=',cache=mmap,aname=,,posixacl,access=any,dont_appraise,defcontext=staff_u,dont_measure,smackfsfloor=cgroup/\\,\x00']) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f00000000c0)={0x0, 0x95a0, 0x2, 0x101, 0x20, 0xfff}, &(0x7f0000000180)=0x14) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f00000001c0)=@sack_info={r4, 0x6, 0x3ff}, 0xc) getsockopt$inet6_buf(r1, 0x29, 0x6, &(0x7f0000c86000), &(0x7f0000000000)=0x284ea92c5e2cf055) openat$vim2m(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/video35\x00', 0x2, 0x0) 17:22:46 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000440)=""/146) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0xfffffde0) r3 = socket$rxrpc(0x21, 0x2, 0x4000000000000a) ioctl$int_in(r0, 0x5473, &(0x7f0000000340)=0xfffffffffffff001) bind$rxrpc(r3, &(0x7f0000000140)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e22, 0x2, @remote, 0x4}}, 0x24) listen(r3, 0x9) modify_ldt$write(0x1, &(0x7f0000000300)={0x0, 0x20001000, 0xf6a19cc09ebfc357, 0x3, 0x400, 0x9, 0x3f, 0x100000001, 0x10001, 0x7}, 0x10) fstat(0xffffffffffffff9c, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f0000000280)={0x7, 0x0, 0x4, 0x100, {r4, r5/1000+30000}, {0x7, 0xb, 0x1, 0x10001, 0xffffffff, 0x9, "c8c0963d"}, 0x1, 0x2, @offset=0x7, 0x4}) wait4(0x0, 0x0, 0x80000002, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000040)=0x5) tkill(r1, 0x2a) ptrace$cont(0x18, r1, 0x0, 0x0) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x31}) getsockopt$IP6T_SO_GET_ENTRIES(r6, 0x29, 0x41, &(0x7f0000000500)=ANY=[@ANYBLOB="7365637572697479000000000000000000000006000000000000000000000200000000000000e1294da536fded81cbe53bdca3a74371909220b97d520f26ab2dec2dffaee2b75b8a1ce780f7f6d2a621edddeec32a53cce7ec92eba46e5c6bb11f15b73a5c65efbb7bb931bceb81f0ea64be35157633cd49b21b47fbf88e57af885b10062bc1b7762271d7fd29"], 0x0) ptrace$cont(0x20, r1, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1f, 0x2200) 17:22:46 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000440)=""/146) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0xfffffde0) r3 = socket$rxrpc(0x21, 0x2, 0x4000000000000a) ioctl$int_in(r0, 0x5473, &(0x7f0000000340)=0xfffffffffffff001) bind$rxrpc(r3, &(0x7f0000000140)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e22, 0x2, @remote, 0x4}}, 0x24) listen(r3, 0x9) modify_ldt$write(0x1, &(0x7f0000000300)={0x0, 0x20001000, 0xf6a19cc09ebfc357, 0x3, 0x400, 0x9, 0x3f, 0x100000001, 0x10001, 0x7}, 0x10) fstat(0xffffffffffffff9c, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x1ec51da1abe9f22b, 0x0) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f0000000280)={0x7, 0x0, 0x4, 0x100, {}, {0x7, 0xb, 0x1, 0x10001, 0xffffffff, 0x9, "c8c0963d"}, 0x1, 0x2, @offset=0x7, 0x4}) wait4(0x0, 0x0, 0x80000002, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000040)=0x5) tkill(r1, 0x2a) ptrace$cont(0x18, r1, 0x0, 0x0) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x31}) getsockopt$IP6T_SO_GET_ENTRIES(r4, 0x29, 0x41, &(0x7f0000000500)=ANY=[@ANYBLOB="7365637572697479000000000000000000000006000000000000000000000200000000000000e1294da536fded81cbe53bdca3a74371909220b97d520f26ab2dec2dffaee2b75b8a1ce780f7f6d2a621edddeec32a53cce7ec92eba46e5c6bb11f15b73a5c65efbb7bb931bceb81f0ea64be35157633cd49b21b47fbf88e57af885b10062bc1b7762271d7fd29"], 0x0) ptrace$cont(0x20, r1, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1f, 0x2200) 17:22:46 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) setsockopt$IP_VS_SO_SET_DELDEST(0xffffffffffffffff, 0x0, 0x488, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, 0x0, &(0x7f00002bdffc)) mprotect(&(0x7f00002bd000/0x1000)=nil, 0x1000, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)='veth1\x00\x00\x00\x00\xff\xff\xff\xff\xff\xef\x00', 0xb) r1 = dup2(r0, r0) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x1}}, 0x44801) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000380), 0xfdf5) sendto$inet(r0, &(0x7f0000000000), 0xfffffdef, 0xc0, 0x0, 0x0) mincore(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80046601, &(0x7f0000000300)) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000003c0), &(0x7f00000002c0)=0x1000000da) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socket$packet(0x11, 0x0, 0x300) r3 = socket$inet6(0xa, 0x3, 0x84) connect$inet6(r3, &(0x7f0000000080), 0x1c) syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f0000000040)=0x1, 0x4) sendmmsg(r3, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 17:22:46 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) ioctl$RTC_IRQP_SET(r0, 0x4008700c, 0x1976) close(r0) ioctl(r0, 0x0, &(0x7f00000000c0)="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") 17:22:46 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f0000000080)={'gre0\x00', {0x2, 0x4e21, @remote}}) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev}, 0x10) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x2, 0x2) syz_open_dev$usb(0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000340)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x44000) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept$alg(0xffffffffffffffff, 0x0, 0x0) fallocate(r1, 0x0, 0x0, 0xa6ba0) setxattr$security_ima(0x0, 0x0, 0x0, 0x0, 0x0) io_setup(0x1000000000008, &(0x7f0000000600)=0x0) io_submit(r2, 0x653, &(0x7f0000000540)=[&(0x7f00000000c0)={0x804000000000000, 0xf4ffffff, 0x8, 0x1, 0x0, r1, &(0x7f0000000000), 0x377140be6b5ef4c7, 0xc00}]) 17:22:46 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000440)=""/146) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0xfffffde0) r3 = socket$rxrpc(0x21, 0x2, 0x4000000000000a) ioctl$int_in(r0, 0x5473, &(0x7f0000000340)=0xfffffffffffff001) bind$rxrpc(r3, &(0x7f0000000140)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e22, 0x2, @remote, 0x4}}, 0x24) listen(r3, 0x9) modify_ldt$write(0x1, &(0x7f0000000300)={0x0, 0x20001000, 0xf6a19cc09ebfc357, 0x3, 0x400, 0x9, 0x3f, 0x100000001, 0x10001, 0x7}, 0x10) fstat(0xffffffffffffff9c, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f0000000280)={0x7, 0x0, 0x4, 0x100, {r4, r5/1000+30000}, {0x7, 0xb, 0x1, 0x10001, 0xffffffff, 0x9, "c8c0963d"}, 0x1, 0x2, @offset=0x7, 0x4}) wait4(0x0, 0x0, 0x80000002, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000040)=0x5) tkill(r1, 0x2a) ptrace$cont(0x18, r1, 0x0, 0x0) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x31}) getsockopt$IP6T_SO_GET_ENTRIES(r6, 0x29, 0x41, &(0x7f0000000500)=ANY=[@ANYBLOB="7365637572697479000000000000000000000006000000000000000000000200000000000000e1294da536fded81cbe53bdca3a74371909220b97d520f26ab2dec2dffaee2b75b8a1ce780f7f6d2a621edddeec32a53cce7ec92eba46e5c6bb11f15b73a5c65efbb7bb931bceb81f0ea64be35157633cd49b21b47fbf88e57af885b10062bc1b7762271d7fd29"], 0x0) ptrace$cont(0x20, r1, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1f, 0x2200) 17:22:46 executing program 5: r0 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x6011, r0, 0x0) r1 = getpid() fcntl$setownex(r0, 0xf, &(0x7f0000000000)={0x1, r1}) r2 = perf_event_open(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}}, 0x0, 0x0, r0, 0xb) dup3(r0, r2, 0x0) 17:22:46 executing program 4: setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000100)=0x71f0541, 0x2) bind$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x200200, 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, 0x0) syz_open_dev$swradio(0x0, 0x1, 0x2) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f00000008c0)={0x0, @in6={{0xa, 0x4e20, 0xdc6, @remote, 0x7fff}}}, &(0x7f0000000980)=0x84) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) socket$can_bcm(0x1d, 0x2, 0x2) r3 = syz_open_dev$sndpcmp(0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r3, 0xc0bc5310, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000080)={0x0}) sendto$rose(r3, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_GET_LAPIC(r2, 0x8400ae8e, 0x0) ioctl$DRM_IOCTL_SWITCH_CTX(r3, 0x40086424, &(0x7f0000000180)={r4, 0x3}) dup2(r3, r2) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sloppy_tcp\x00', 0x2, 0x0) sendmsg$key(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)={0x2, 0xb, 0x8000, 0x3, 0x19, 0x0, 0x70bd2d, 0x25dfdbfd, [@sadb_x_kmaddress={0x5, 0x19, 0x0, @in={0x2, 0x4e22, @empty}, @in={0x2, 0x4e21, @local}}, @sadb_x_nat_t_port={0x1, 0x16, 0x4e21}, @sadb_lifetime={0x4, 0x7, 0x8, 0x0, 0x1, 0x8000}, @sadb_x_filter={0x5, 0x1a, @in=@multicast1, @in6=@local, 0x9, 0x14, 0x14}, @sadb_key={0x8, 0x0, 0x1b8, 0x0, "b641955e82d54c7cf5833e1d42783bf17bf19f1df8576c5229a8353ae9b97417885af2c18b5fae2258774b36b7a925230b1821445e2d8a"}]}, 0xc8}}, 0x40) ioctl$CAPI_GET_SERIAL(r5, 0xc0044308, 0x0) ioctl$KVM_GET_PIT(r0, 0xc048ae65, &(0x7f0000000300)) socketpair(0xfffffffffffffffb, 0x0, 0x0, &(0x7f0000000140)) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x12, 0x3, 0x4, 0x3}, 0x2c) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000240)={r6, &(0x7f0000000100), 0x0}, 0x18) 17:22:46 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000440)=""/146) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0xfffffde0) r3 = socket$rxrpc(0x21, 0x2, 0x4000000000000a) ioctl$int_in(r0, 0x5473, &(0x7f0000000340)=0xfffffffffffff001) bind$rxrpc(r3, &(0x7f0000000140)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e22, 0x2, @remote, 0x4}}, 0x24) listen(r3, 0x9) modify_ldt$write(0x1, &(0x7f0000000300)={0x0, 0x20001000, 0xf6a19cc09ebfc357, 0x3, 0x400, 0x9, 0x3f, 0x100000001, 0x10001, 0x7}, 0x10) fstat(0xffffffffffffff9c, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f0000000280)={0x7, 0x0, 0x4, 0x100, {r4, r5/1000+30000}, {0x7, 0xb, 0x1, 0x10001, 0xffffffff, 0x9, "c8c0963d"}, 0x1, 0x2, @offset=0x7, 0x4}) wait4(0x0, 0x0, 0x80000002, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000040)=0x5) tkill(r1, 0x2a) ptrace$cont(0x18, r1, 0x0, 0x0) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x31}) getsockopt$IP6T_SO_GET_ENTRIES(r6, 0x29, 0x41, &(0x7f0000000500)=ANY=[@ANYBLOB="7365637572697479000000000000000000000006000000000000000000000200000000000000e1294da536fded81cbe53bdca3a74371909220b97d520f26ab2dec2dffaee2b75b8a1ce780f7f6d2a621edddeec32a53cce7ec92eba46e5c6bb11f15b73a5c65efbb7bb931bceb81f0ea64be35157633cd49b21b47fbf88e57af885b10062bc1b7762271d7fd29"], 0x0) ptrace$cont(0x20, r1, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1f, 0x2200) 17:22:47 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x1, 0x101200) write$USERIO_CMD_SEND_INTERRUPT(r1, &(0x7f0000000080)={0x2, 0xcc}, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x2, 0x0) write$binfmt_elf32(r2, &(0x7f0000000500)=ANY=[@ANYBLOB="7f454c460000000000000000000000000000000000000000000000003800000000000000000000000000200000000000000000002b906d8febd9c15000000008000000000000000000000000000000000000000000000000"], 0x58) ioctl$TUNGETFILTER(r1, 0x801054db, &(0x7f0000000100)=""/28) ioctl$FICLONE(r0, 0x40049409, r2) ioctl$int_in(r2, 0x8000008010500c, &(0x7f00000004c0)) ioctl$LOOP_SET_BLOCK_SIZE(r2, 0x4c09, 0x3) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f00000000c0)=0x7, 0x4) 17:22:47 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000440)=""/146) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0xfffffde0) r3 = socket$rxrpc(0x21, 0x2, 0x4000000000000a) ioctl$int_in(r0, 0x5473, &(0x7f0000000340)=0xfffffffffffff001) bind$rxrpc(r3, &(0x7f0000000140)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e22, 0x2, @remote, 0x4}}, 0x24) listen(r3, 0x9) modify_ldt$write(0x1, &(0x7f0000000300)={0x0, 0x20001000, 0xf6a19cc09ebfc357, 0x3, 0x400, 0x9, 0x3f, 0x100000001, 0x10001, 0x7}, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x1ec51da1abe9f22b, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f0000000280)={0x7, 0x0, 0x4, 0x100, {r4, r5/1000+30000}, {0x7, 0xb, 0x1, 0x10001, 0xffffffff, 0x9, "c8c0963d"}, 0x1, 0x2, @offset=0x7, 0x4}) wait4(0x0, 0x0, 0x80000002, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000040)=0x5) tkill(r1, 0x2a) ptrace$cont(0x18, r1, 0x0, 0x0) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x31}) getsockopt$IP6T_SO_GET_ENTRIES(r6, 0x29, 0x41, &(0x7f0000000500)=ANY=[@ANYBLOB="7365637572697479000000000000000000000006000000000000000000000200000000000000e1294da536fded81cbe53bdca3a74371909220b97d520f26ab2dec2dffaee2b75b8a1ce780f7f6d2a621edddeec32a53cce7ec92eba46e5c6bb11f15b73a5c65efbb7bb931bceb81f0ea64be35157633cd49b21b47fbf88e57af885b10062bc1b7762271d7fd29"], 0x0) ptrace$cont(0x20, r1, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1f, 0x2200) 17:22:47 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2e0000002500817ee45ae087185082cf1124b0eba06ec400002339e00586f9835b3f0016914879008cd90080e230", 0x2e}], 0x1}, 0x0) 17:22:47 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x10, &(0x7f000018effc)=0x1c, 0x4) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r1, 0x0) connect$unix(r0, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.events\x00', 0x0, 0x0) ioctl$KVM_GET_IRQCHIP(r2, 0xc208ae62, &(0x7f00000000c0)) accept4$unix(r1, 0x0, 0x0, 0x0) [ 234.793601][ T8872] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.5'. [ 234.919015][ C0] net_ratelimit: 26 callbacks suppressed [ 234.919069][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 234.931040][ C0] protocol 88fb is buggy, dev hsr_slave_1 17:22:47 executing program 5: r0 = syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0xfffc, 0x40) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl(r0, 0x8, 0x0) 17:22:47 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0xd) write$binfmt_elf32(r0, 0x0, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x4000) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r1, 0xc0305615, &(0x7f0000000080)={0x0, {0x1, 0x80000001}}) 17:22:47 executing program 1: r0 = socket$kcm(0x2, 0x7, 0x73) bind(r0, &(0x7f0000000180)=@in={0x2, 0x0, @remote}, 0x80) r1 = socket$kcm(0x2, 0x2, 0x73) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x41, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x88000}, 0xc, &(0x7f0000000080)={&(0x7f0000000200)=@gettaction={0x168, 0x32, 0x300, 0x70bd28, 0x25dfdbfc, {}, [@action_gd=@TCA_ACT_TAB={0x2c, 0x1, [{0x14, 0x1f, @TCA_ACT_KIND={0xc, 0x1, 'vlan\x00'}}, {0x14, 0xa, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x44, 0x1, [{0x10, 0xf, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0x10, 0x1d, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0x10, 0x13, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0x10, 0x16, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}]}, @action_gd=@TCA_ACT_TAB={0x7c, 0x1, [{0x10, 0x1c, @TCA_ACT_INDEX={0x8, 0x3, 0x1f}}, {0x10, 0x1a, @TCA_ACT_INDEX={0x8}}, {0x10, 0x18, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0x10, 0x11, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0x10, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0x14, 0x17, @TCA_ACT_KIND={0xc, 0x1, 'vlan\x00'}}, {0x14, 0x17, @TCA_ACT_KIND={0xc, 0x1, 'gact\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x20, @TCA_ACT_INDEX={0x8}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_gd=@TCA_ACT_TAB={0x24, 0x1, [{0x10, 0x19, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0x10, 0x6, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}]}, @action_gd=@TCA_ACT_TAB={0x24, 0x1, [{0x10, 0x4, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0x10, 0x9, @TCA_ACT_INDEX={0x8, 0x3, 0x100}}]}]}, 0x168}, 0x1, 0x0, 0x0, 0x800}, 0x811) bind$inet(r1, &(0x7f0000000100)={0x2, 0x0, @empty}, 0x10) 17:22:47 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f0000000080)={'gre0\x00', {0x2, 0x4e21, @remote}}) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev}, 0x10) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x2, 0x2) syz_open_dev$usb(0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000340)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x44000) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept$alg(0xffffffffffffffff, 0x0, 0x0) fallocate(r1, 0x0, 0x0, 0xa6ba0) setxattr$security_ima(0x0, 0x0, 0x0, 0x0, 0x0) io_setup(0x1000000000008, &(0x7f0000000600)=0x0) io_submit(r2, 0x653, &(0x7f0000000540)=[&(0x7f00000000c0)={0x804000000000000, 0xf4ffffff, 0x8, 0x1, 0x0, r1, &(0x7f0000000000), 0x377140be6b5ef4c7, 0xc00}]) 17:22:47 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000440)=""/146) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0xfffffde0) r3 = socket$rxrpc(0x21, 0x2, 0x4000000000000a) ioctl$int_in(r0, 0x5473, &(0x7f0000000340)=0xfffffffffffff001) bind$rxrpc(r3, &(0x7f0000000140)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e22, 0x2, @remote, 0x4}}, 0x24) listen(r3, 0x9) modify_ldt$write(0x1, &(0x7f0000000300)={0x0, 0x20001000, 0xf6a19cc09ebfc357, 0x3, 0x400, 0x9, 0x3f, 0x100000001, 0x10001, 0x7}, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x1ec51da1abe9f22b, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f0000000280)={0x7, 0x0, 0x4, 0x100, {r4, r5/1000+30000}, {0x7, 0xb, 0x1, 0x10001, 0xffffffff, 0x9, "c8c0963d"}, 0x1, 0x2, @offset=0x7, 0x4}) wait4(0x0, 0x0, 0x80000002, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000040)=0x5) tkill(r1, 0x2a) ptrace$cont(0x18, r1, 0x0, 0x0) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x31}) getsockopt$IP6T_SO_GET_ENTRIES(r6, 0x29, 0x41, &(0x7f0000000500)=ANY=[@ANYBLOB="7365637572697479000000000000000000000006000000000000000000000200000000000000e1294da536fded81cbe53bdca3a74371909220b97d520f26ab2dec2dffaee2b75b8a1ce780f7f6d2a621edddeec32a53cce7ec92eba46e5c6bb11f15b73a5c65efbb7bb931bceb81f0ea64be35157633cd49b21b47fbf88e57af885b10062bc1b7762271d7fd29"], 0x0) ptrace$cont(0x20, r1, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1f, 0x2200) 17:22:47 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="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"]}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200aa0802000000000000000000000105000600200000000a00000000000000000500e50000070000001f000000000000250000000000000200010000000000000000020000627c05000500000000000a00000000000000ff1700000000000000000000000001170000000000000000"], 0x80}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x400000000000117, 0xf000000) 17:22:47 executing program 5: socketpair$unix(0x1, 0x400000001, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)}], 0x1, 0xfffffffffffffffd) 17:22:47 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0xd) write$binfmt_elf32(r0, 0x0, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x4000) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r1, 0xc0305615, &(0x7f0000000080)={0x0, {0x1, 0x80000001}}) 17:22:47 executing program 4: syz_emit_ethernet(0x22, &(0x7f0000000080)={@local, @remote, [{[], {0x8100, 0x816, 0x0, 0x100000000}}], {@can={0xc, {{0x4, 0x6, 0x5729, 0x1}, 0x8, 0x3, 0x0, 0x0, "552d628aa8aca884"}}}}, 0x0) 17:22:47 executing program 4: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = dup(r0) ioctl$sock_ax25_SIOCDELRT(r1, 0x890c, &(0x7f0000000080)={@netrom, @bcast, 0x0, [@netrom, @netrom, @rose, @rose, @bcast, @rose, @null, @default]}) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f00000001c0)={0x0, 0x5}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000240)={r2, 0x5, 0x3, 0x9}, &(0x7f0000000280)=0x10) connect$tipc(r1, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x43, 0x2, 0x4}}, 0x10) accept4$nfc_llcp(r0, &(0x7f0000000100), &(0x7f0000000180)=0x60, 0x80800) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x4, 0xffffffffffffff6d, 0x3ff, 0xfffffffffffffffb, 0x493, 0x101, 0x100000001, 0x80000000, 0x0, 0x1, 0x4, 0x7, 0x8001, 0x4, 0xbea3], 0x100004, 0x50}) ioctl$VIDIOC_SUBDEV_G_SELECTION(r1, 0xc040563d, &(0x7f0000000000)={0x1, 0x0, 0x103, 0x4, {0x6, 0xd0, 0x80000000}}) gettid() 17:22:47 executing program 5: r0 = syz_open_dev$mice(&(0x7f0000000440)='/dev/input/mice\x00', 0x0, 0x0) accept4$llc(r0, 0x0, &(0x7f0000000700), 0x80000) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xffffffffffffffff}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='/gro<#\xfbW\xe6\xc6\x0f\x1fKE\xb7M\x99\x9a\x9a\x8c,\xe1[&\xe5\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ}\xb7\xf3\xfe\xf6\xe0.+\xe3\x89\xde\x139E\xa3\x85\xbd\x81\xe9\xbd\xee\xee\x03\x00\x00\x00\x00\x00\x00\x00[T\aE\xdfK\x1d\xeeH;\x15v$\xc5\xbcq\x9a\t\x9ej5\t\x00\x00\x009\x8c4', 0x2761, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0xda4fff08) r2 = perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0x20, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x40000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_dccp_buf(r1, 0x21, 0xf, &(0x7f0000000340)=""/194, &(0x7f00000000c0)=0xc2) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000200)=[@in={0x2, 0x4e22, @loopback}, @in6={0xa, 0x4e21, 0x9d43, @mcast1, 0x101}, @in6={0xa, 0x4e24, 0x80, @ipv4={[], [], @empty}, 0x7}, @in6={0xa, 0x4e23, 0x5, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xe}}], 0x74) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r1, 0x84, 0x1c, &(0x7f0000000040), &(0x7f0000000080)=0x4) write$binfmt_aout(r2, &(0x7f0000000500)={{0x10b, 0x40000000, 0x2, 0x22d, 0x1aa, 0x1ff, 0x308, 0x9}, "234e367a5b1de647206170ab2d778150c971f0ab8d0ac2de2aadcbbe8a60acb63c11100cf12a24abc4cbf4733410958fd24196b8bdfc337cfdf87cc2572cb7ff4287d35733b94d1864eace9a8906ac49f1ec716e3e93359490a4c21a74fe0a4fb4ae2be64a87"}, 0x86) openat$cgroup_type(r0, &(0x7f00000005c0)='cgroup.type\x00', 0x2, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(r1, 0x8934, &(0x7f0000000140)={'sit0\x00', 0x1}) ioctl$EVIOCSABS2F(r1, 0x401845ef, &(0x7f0000000280)={0x1, 0x7f, 0xda, 0xffffffff, 0x2, 0x100}) ioctl$VIDIOC_S_OUTPUT(r1, 0xc004562f, &(0x7f0000000000)=0x3) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x4000000000000000) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x660c, 0x0) ioctl$RTC_AIE_ON(r1, 0x7001) 17:22:47 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, 0x0, 0x80000001fff, 0x0) write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x1, &(0x7f00000001c0)=[&(0x7f0000f9a000/0x5000)=nil], 0x0, 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$BLKDISCARD(r0, 0x1277, &(0x7f0000000400)=0x200) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000080)={r0, 0x50}, 0x10) request_key(&(0x7f00000000c0)='rxrpc_s\x00', &(0x7f0000000480)={'syz', 0x1}, &(0x7f0000000500)='/dev/video#\x00', 0xfffffffffffffffb) add_key(&(0x7f0000000600)='encrypted\x00', &(0x7f0000000640)={'syz', 0x3}, &(0x7f0000000680)="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", 0x1000, 0xfffffffffffffffd) add_key(&(0x7f0000001f00)='syzkaller\x00', &(0x7f0000001ec0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff9) add_key(&(0x7f00000017c0)='ceph\x00', &(0x7f0000001800)={'syz', 0x3}, &(0x7f0000001840)="096d0d704b6257b0e804467a8401acc424e714754f03b9929425792afbb9dcbdeae88676e8c85a5908134d4def5d9c5ee92690bd360f98998fe77e323789e65576215c144aad0162ba4a9c2c72a9ea1697c6ea65e34c1033ef1d4ee7ac946072021d3c1e078975a56b87eb2665478343aeac10ea2dd532a9fe63bb80b6e271a2b43bec9c194f7e678b00845099c6945df5a3de4f7c2aa04c5e1282ebd431de", 0x9f, 0xffffffffffffffff) r2 = add_key(&(0x7f0000001bc0)='pkcs7_test\x00', &(0x7f0000001c00)={'syz', 0x2}, &(0x7f0000001c40)="2abd496ec8b8f5264af59949fd38573c179791a3be685fdaeaa8eb0729e60fa03c2f38d6a61669f91724e4362dff53a702cf365f93eff52efff99b4a9aa9cd3eec4e08c6eb34e16aa88bb8e4e507e09ae9b34fb6a12f1ee272a1cda60a552df40a017a9a7c19", 0x66, 0xfffffffffffffffa) rt_sigpending(&(0x7f0000000100), 0x8) add_key$keyring(0x0, 0x0, 0x0, 0x0, r2) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0x5111, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000004c0)={0x1000000a, 0xfffbffffffffffff, 0x1, 0xffffffffffffffff}) pipe(&(0x7f0000000180)) mmap(&(0x7f0000bfe000/0x400000)=nil, 0x400000, 0x6, 0x811, r3, 0x0) 17:22:47 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x8001, 0x0) openat$cgroup_subtree(r0, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) ioctl$RTC_UIE_ON(r0, 0x7003) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000240)) sendmsg$kcm(r1, &(0x7f0000001540)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000080)="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", 0xfb}], 0x1}, 0x0) 17:22:48 executing program 4: write$FUSE_STATFS(0xffffffffffffffff, &(0x7f0000000180)={0x60}, 0x60) ioctl$KVM_IRQ_LINE(0xffffffffffffffff, 0x4008ae61, &(0x7f0000000500)={0x81}) ioctl$VT_WAITACTIVE(0xffffffffffffffff, 0x5607) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f000000a000)=[{&(0x7f000000a000)=@abs, 0x6e, &(0x7f000000d000)}], 0x1, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000002740)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) sendmmsg(r1, &(0x7f0000007e00), 0x136a88c8311572c, 0x3f00) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000400)=0x4, 0x4) ioctl$VHOST_SET_VRING_ENDIAN(0xffffffffffffffff, 0x4008af13, &(0x7f0000000080)) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040), 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(0xffffffffffffff9c, 0x4008af21, &(0x7f00000002c0)={0x3}) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, 0x0) inotify_rm_watch(0xffffffffffffffff, 0x0) fcntl$setflags(r2, 0x2, 0x1) ioctl$SG_GET_REQUEST_TABLE(0xffffffffffffffff, 0x227d, 0x0) 17:22:48 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000440)=""/146) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0xfffffde0) r3 = socket$rxrpc(0x21, 0x2, 0x4000000000000a) ioctl$int_in(r0, 0x5473, &(0x7f0000000340)=0xfffffffffffff001) bind$rxrpc(r3, &(0x7f0000000140)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e22, 0x2, @remote, 0x4}}, 0x24) listen(r3, 0x9) modify_ldt$write(0x1, &(0x7f0000000300)={0x0, 0x20001000, 0xf6a19cc09ebfc357, 0x3, 0x400, 0x9, 0x3f, 0x100000001, 0x10001, 0x7}, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x1ec51da1abe9f22b, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f0000000280)={0x7, 0x0, 0x4, 0x100, {r4, r5/1000+30000}, {0x7, 0xb, 0x1, 0x10001, 0xffffffff, 0x9, "c8c0963d"}, 0x1, 0x2, @offset=0x7, 0x4}) wait4(0x0, 0x0, 0x80000002, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000040)=0x5) tkill(r1, 0x2a) ptrace$cont(0x18, r1, 0x0, 0x0) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x31}) getsockopt$IP6T_SO_GET_ENTRIES(r6, 0x29, 0x41, &(0x7f0000000500)=ANY=[@ANYBLOB="7365637572697479000000000000000000000006000000000000000000000200000000000000e1294da536fded81cbe53bdca3a74371909220b97d520f26ab2dec2dffaee2b75b8a1ce780f7f6d2a621edddeec32a53cce7ec92eba46e5c6bb11f15b73a5c65efbb7bb931bceb81f0ea64be35157633cd49b21b47fbf88e57af885b10062bc1b7762271d7fd29"], 0x0) ptrace$cont(0x20, r1, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1f, 0x2200) [ 235.779270][ T8926] encrypted_key: insufficient parameters specified [ 235.836396][ T8932] netlink: 215 bytes leftover after parsing attributes in process `syz-executor.1'. [ 236.039529][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 236.045787][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 236.119386][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 236.125883][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 236.448828][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 236.454657][ C0] protocol 88fb is buggy, dev hsr_slave_1 17:22:48 executing program 2: clone(0x100002102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x80000000001, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0x0) write$binfmt_misc(r0, &(0x7f00000000c0)=ANY=[], 0x7fffffff) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) recvfrom(r1, &(0x7f0000000240)=""/184, 0xfffffe4c, 0x10100, 0x0, 0xfffffffffffffcff) 17:22:48 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000440)=""/146) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0xfffffde0) r3 = socket$rxrpc(0x21, 0x2, 0x4000000000000a) ioctl$int_in(r0, 0x5473, &(0x7f0000000340)=0xfffffffffffff001) bind$rxrpc(r3, &(0x7f0000000140)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e22, 0x2, @remote, 0x4}}, 0x24) listen(r3, 0x9) modify_ldt$write(0x1, &(0x7f0000000300)={0x0, 0x20001000, 0xf6a19cc09ebfc357, 0x3, 0x400, 0x9, 0x3f, 0x100000001, 0x10001, 0x7}, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x1ec51da1abe9f22b, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f0000000280)={0x7, 0x0, 0x4, 0x100, {r4, r5/1000+30000}, {0x7, 0xb, 0x1, 0x10001, 0xffffffff, 0x9, "c8c0963d"}, 0x1, 0x2, @offset=0x7, 0x4}) wait4(0x0, 0x0, 0x80000002, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000040)=0x5) tkill(r1, 0x2a) ptrace$cont(0x18, r1, 0x0, 0x0) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x31}) getsockopt$IP6T_SO_GET_ENTRIES(r6, 0x29, 0x41, &(0x7f0000000500)=ANY=[@ANYBLOB="7365637572697479000000000000000000000006000000000000000000000200000000000000e1294da536fded81cbe53bdca3a74371909220b97d520f26ab2dec2dffaee2b75b8a1ce780f7f6d2a621edddeec32a53cce7ec92eba46e5c6bb11f15b73a5c65efbb7bb931bceb81f0ea64be35157633cd49b21b47fbf88e57af885b10062bc1b7762271d7fd29"], 0x0) ptrace$cont(0x20, r1, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1f, 0x2200) 17:22:48 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000440)=""/146) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0xfffffde0) r3 = socket$rxrpc(0x21, 0x2, 0x4000000000000a) ioctl$int_in(r0, 0x5473, &(0x7f0000000340)=0xfffffffffffff001) bind$rxrpc(r3, &(0x7f0000000140)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e22, 0x2, @remote, 0x4}}, 0x24) listen(r3, 0x9) fstat(0xffffffffffffff9c, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x1ec51da1abe9f22b, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f0000000280)={0x7, 0x0, 0x4, 0x100, {r4, r5/1000+30000}, {0x7, 0xb, 0x1, 0x10001, 0xffffffff, 0x9, "c8c0963d"}, 0x1, 0x2, @offset=0x7, 0x4}) wait4(0x0, 0x0, 0x80000002, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000040)=0x5) tkill(r1, 0x2a) ptrace$cont(0x18, r1, 0x0, 0x0) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x31}) getsockopt$IP6T_SO_GET_ENTRIES(r6, 0x29, 0x41, &(0x7f0000000500)=ANY=[@ANYBLOB="7365637572697479000000000000000000000006000000000000000000000200000000000000e1294da536fded81cbe53bdca3a74371909220b97d520f26ab2dec2dffaee2b75b8a1ce780f7f6d2a621edddeec32a53cce7ec92eba46e5c6bb11f15b73a5c65efbb7bb931bceb81f0ea64be35157633cd49b21b47fbf88e57af885b10062bc1b7762271d7fd29"], 0x0) ptrace$cont(0x20, r1, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1f, 0x2200) 17:22:48 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000440)=""/146) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0xfffffde0) r3 = socket$rxrpc(0x21, 0x2, 0x4000000000000a) ioctl$int_in(r0, 0x5473, &(0x7f0000000340)=0xfffffffffffff001) bind$rxrpc(r3, &(0x7f0000000140)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e22, 0x2, @remote, 0x4}}, 0x24) listen(r3, 0x9) fstat(0xffffffffffffff9c, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x1ec51da1abe9f22b, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f0000000280)={0x7, 0x0, 0x4, 0x100, {r4, r5/1000+30000}, {0x7, 0xb, 0x1, 0x10001, 0xffffffff, 0x9, "c8c0963d"}, 0x1, 0x2, @offset=0x7, 0x4}) wait4(0x0, 0x0, 0x80000002, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000040)=0x5) tkill(r1, 0x2a) ptrace$cont(0x18, r1, 0x0, 0x0) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x31}) getsockopt$IP6T_SO_GET_ENTRIES(r6, 0x29, 0x41, &(0x7f0000000500)=ANY=[@ANYBLOB="7365637572697479000000000000000000000006000000000000000000000200000000000000e1294da536fded81cbe53bdca3a74371909220b97d520f26ab2dec2dffaee2b75b8a1ce780f7f6d2a621edddeec32a53cce7ec92eba46e5c6bb11f15b73a5c65efbb7bb931bceb81f0ea64be35157633cd49b21b47fbf88e57af885b10062bc1b7762271d7fd29"], 0x0) ptrace$cont(0x20, r1, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1f, 0x2200) [ 236.602661][ T8937] encrypted_key: insufficient parameters specified 17:22:48 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x80, 0x0) ioctl$EVIOCSCLOCKID(r1, 0x400445a0, &(0x7f00000000c0)=0x9) fcntl$getown(r1, 0x9) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000100)=0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x5, 0x6, 0xfffffffffffffffe, 0x0, r2}) 17:22:48 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r0) 17:22:48 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000440)=""/146) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0xfffffde0) r3 = socket$rxrpc(0x21, 0x2, 0x4000000000000a) ioctl$int_in(r0, 0x5473, &(0x7f0000000340)=0xfffffffffffff001) bind$rxrpc(r3, &(0x7f0000000140)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e22, 0x2, @remote, 0x4}}, 0x24) listen(r3, 0x9) fstat(0xffffffffffffff9c, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x1ec51da1abe9f22b, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f0000000280)={0x7, 0x0, 0x4, 0x100, {r4, r5/1000+30000}, {0x7, 0xb, 0x1, 0x10001, 0xffffffff, 0x9, "c8c0963d"}, 0x1, 0x2, @offset=0x7, 0x4}) wait4(0x0, 0x0, 0x80000002, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000040)=0x5) tkill(r1, 0x2a) ptrace$cont(0x18, r1, 0x0, 0x0) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x31}) getsockopt$IP6T_SO_GET_ENTRIES(r6, 0x29, 0x41, &(0x7f0000000500)=ANY=[@ANYBLOB="7365637572697479000000000000000000000006000000000000000000000200000000000000e1294da536fded81cbe53bdca3a74371909220b97d520f26ab2dec2dffaee2b75b8a1ce780f7f6d2a621edddeec32a53cce7ec92eba46e5c6bb11f15b73a5c65efbb7bb931bceb81f0ea64be35157633cd49b21b47fbf88e57af885b10062bc1b7762271d7fd29"], 0x0) ptrace$cont(0x20, r1, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1f, 0x2200) [ 236.678803][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 236.678881][ C0] protocol 88fb is buggy, dev hsr_slave_1 17:22:49 executing program 5: accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x80800) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x4e22, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x1f}}}, 0x1c) close(r1) close(0xffffffffffffffff) 17:22:49 executing program 0: r0 = accept(0xffffffffffffffff, &(0x7f0000000000)=@nfc_llcp, &(0x7f0000000080)=0x80) clone(0x802182001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000140), 0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f0000000380)={0x48, 0x6, 0x0, {0x6, 0x2, 0x1f, 0x0, 'posix_acl_accesswlan0\'security-'}}, 0x48) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000005800)={{{@in6=@dev, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @local}}}}, &(0x7f0000005900)=0xe8) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0xaf4) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x24, &(0x7f0000001000)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d030100000000009500000000000000712600000000000035060000ff000000bf25000000000000070500000e0000000f65000000000000bf5400000000000007040000040000003d4301000000000095000000000000006154000000000000bf250000000000000f65000000000000070500000e000000bf5400000000000007040000040000003d43010000000000950000000000000061540000000000006b25000000000000070500000e0000000f6500000000000007050000040000000f65000000000000bf5400000000000007040000040000003d3201000000000095000000000000004d54000000000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], r1}, 0x48) syz_open_dev$midi(&(0x7f0000000340)='/dev/midi#\x00', 0x0, 0x200000) exit(0xb0ffffff00000008) bind$netlink(0xffffffffffffffff, &(0x7f0000000180), 0xc) r2 = request_key(&(0x7f00000000c0)='pkcs7_test\x00', &(0x7f0000000200)={'syz'}, &(0x7f0000000240)='GPL\x00', 0xffffffffffffffff) keyctl$instantiate(0xc, r2, &(0x7f0000000280)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'GPL\x00'}, 0x2b, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000440)={0x0, 0x0, 0xffffffffffffffff}, &(0x7f00000004c0)=0x8) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f00000006c0)={0xa6, 0x29, 0x1, {0x4, [{{0x0, 0x2, 0x7}, 0x7, 0x1, 0x7, './file0'}, {{0x18, 0x3, 0x7}, 0x8, 0xffffffffffff0001, 0x7, './file0'}, {{0x4, 0x3, 0x3}, 0x6fed, 0x101, 0x7, './file0'}, {{0x1, 0x2, 0x8}, 0x101, 0x100000001, 0x7, './file0'}, {{0x40}, 0x4a0d, 0x5, 0x7, './file0'}]}}, 0xa6) connect$inet6(0xffffffffffffffff, &(0x7f0000000100), 0x1c) sendmsg$IPVS_CMD_FLUSH(r0, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x44000040}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x14, 0x0, 0x0, 0x0, 0x25dfdbfe}, 0x14}}, 0x0) 17:22:49 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x17, &(0x7f0000000800), 0x3b) 17:22:49 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xf7d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCGSOFTCAR(r0, 0x5419, &(0x7f00000000c0)) 17:22:49 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000440)=""/146) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0xfffffde0) r3 = socket$rxrpc(0x21, 0x2, 0x4000000000000a) ioctl$int_in(r0, 0x5473, &(0x7f0000000340)=0xfffffffffffff001) bind$rxrpc(r3, &(0x7f0000000140)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e22, 0x2, @remote, 0x4}}, 0x24) modify_ldt$write(0x1, &(0x7f0000000300)={0x0, 0x20001000, 0xf6a19cc09ebfc357, 0x3, 0x400, 0x9, 0x3f, 0x100000001, 0x10001, 0x7}, 0x10) fstat(0xffffffffffffff9c, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x1ec51da1abe9f22b, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f0000000280)={0x7, 0x0, 0x4, 0x100, {r4, r5/1000+30000}, {0x7, 0xb, 0x1, 0x10001, 0xffffffff, 0x9, "c8c0963d"}, 0x1, 0x2, @offset=0x7, 0x4}) wait4(0x0, 0x0, 0x80000002, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000040)=0x5) tkill(r1, 0x2a) ptrace$cont(0x18, r1, 0x0, 0x0) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x31}) getsockopt$IP6T_SO_GET_ENTRIES(r6, 0x29, 0x41, &(0x7f0000000500)=ANY=[@ANYBLOB="7365637572697479000000000000000000000006000000000000000000000200000000000000e1294da536fded81cbe53bdca3a74371909220b97d520f26ab2dec2dffaee2b75b8a1ce780f7f6d2a621edddeec32a53cce7ec92eba46e5c6bb11f15b73a5c65efbb7bb931bceb81f0ea64be35157633cd49b21b47fbf88e57af885b10062bc1b7762271d7fd29"], 0x0) ptrace$cont(0x20, r1, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1f, 0x2200) 17:22:49 executing program 2: syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) socket$packet(0x11, 0x0, 0x300) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text32={0x20, &(0x7f00000002c0)="b9ec090000b808000000ba000000000f300fc76b07dc920080000067260fc7ac0b000f3808580026660f3880a100400000c4c2659f5d0d0fc7af0e000000660f01c80f01cf", 0x45}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$VIDIOC_TRY_ENCODER_CMD(0xffffffffffffffff, 0xc028564e, 0x0) 17:22:49 executing program 5: r0 = open(0x0, 0x0, 0x0) open$dir(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, 0x0) kexec_load(0x5050ca01000000, 0x10, &(0x7f0000000180)=[{&(0x7f00000001c0), 0x2, 0x9e945000, 0x3e0000}], 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000040)) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4008af14, &(0x7f0000000140)={0x0, 0xfac}) setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000003c0)={{{@in=@empty, @in6=@mcast2, 0x4e20, 0x0, 0x0, 0x7, 0xa, 0x80, 0x80, 0x7f}, {0x0, 0x0, 0x3, 0x0, 0xc18b, 0x0, 0x1000, 0x2}, {0x6, 0x0, 0x0, 0x101}, 0x0, 0x6e6bb1, 0x1, 0x1, 0x0, 0x1}, {{@in=@broadcast, 0x4d5}, 0xa, @in=@multicast1, 0x0, 0x3, 0x0, 0x0, 0x1, 0xfffffffffffffc01}}, 0xe8) syz_open_dev$admmidi(&(0x7f00000001c0)='/dev/admmidi#\x00', 0x0, 0x80000) socket$inet_udplite(0x2, 0x2, 0x88) 17:22:49 executing program 4: r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f00000000c0)={0x0, "8ef27bc3d1276ddf7262eabadf7ee28eec4d44cb5c7e5f0b4ee3c34ae96c0a2326b7275b8e5bd02fbeb05da410f362597fdf2f608cfabd5a70b6f4857ee90ad07e2b688402147c3799cd86d66d3dd0ae09386bdbe24e0c5d3d6043cc86883e1212ce1ab8b1441fd8"}, 0x70, 0x800) 17:22:49 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) perf_event_open(&(0x7f0000000580)={0x2, 0x70, 0x5c61, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000000)) 17:22:49 executing program 1: recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) open(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x3, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x2000006) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) 17:22:49 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000440)=""/146) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0xfffffde0) r3 = socket$rxrpc(0x21, 0x2, 0x4000000000000a) ioctl$int_in(r0, 0x5473, &(0x7f0000000340)=0xfffffffffffff001) bind$rxrpc(r3, &(0x7f0000000140)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e22, 0x2, @remote, 0x4}}, 0x24) modify_ldt$write(0x1, &(0x7f0000000300)={0x0, 0x20001000, 0xf6a19cc09ebfc357, 0x3, 0x400, 0x9, 0x3f, 0x100000001, 0x10001, 0x7}, 0x10) fstat(0xffffffffffffff9c, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x1ec51da1abe9f22b, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f0000000280)={0x7, 0x0, 0x4, 0x100, {r4, r5/1000+30000}, {0x7, 0xb, 0x1, 0x10001, 0xffffffff, 0x9, "c8c0963d"}, 0x1, 0x2, @offset=0x7, 0x4}) wait4(0x0, 0x0, 0x80000002, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000040)=0x5) tkill(r1, 0x2a) ptrace$cont(0x18, r1, 0x0, 0x0) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x31}) getsockopt$IP6T_SO_GET_ENTRIES(r6, 0x29, 0x41, &(0x7f0000000500)=ANY=[@ANYBLOB="7365637572697479000000000000000000000006000000000000000000000200000000000000e1294da536fded81cbe53bdca3a74371909220b97d520f26ab2dec2dffaee2b75b8a1ce780f7f6d2a621edddeec32a53cce7ec92eba46e5c6bb11f15b73a5c65efbb7bb931bceb81f0ea64be35157633cd49b21b47fbf88e57af885b10062bc1b7762271d7fd29"], 0x0) ptrace$cont(0x20, r1, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1f, 0x2200) 17:22:49 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000440)=""/146) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0xfffffde0) r3 = socket$rxrpc(0x21, 0x2, 0x4000000000000a) ioctl$int_in(r0, 0x5473, &(0x7f0000000340)=0xfffffffffffff001) bind$rxrpc(r3, &(0x7f0000000140)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e22, 0x2, @remote, 0x4}}, 0x24) modify_ldt$write(0x1, &(0x7f0000000300)={0x0, 0x20001000, 0xf6a19cc09ebfc357, 0x3, 0x400, 0x9, 0x3f, 0x100000001, 0x10001, 0x7}, 0x10) fstat(0xffffffffffffff9c, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x1ec51da1abe9f22b, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f0000000280)={0x7, 0x0, 0x4, 0x100, {r4, r5/1000+30000}, {0x7, 0xb, 0x1, 0x10001, 0xffffffff, 0x9, "c8c0963d"}, 0x1, 0x2, @offset=0x7, 0x4}) wait4(0x0, 0x0, 0x80000002, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000040)=0x5) tkill(r1, 0x2a) ptrace$cont(0x18, r1, 0x0, 0x0) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x31}) getsockopt$IP6T_SO_GET_ENTRIES(r6, 0x29, 0x41, &(0x7f0000000500)=ANY=[@ANYBLOB="7365637572697479000000000000000000000006000000000000000000000200000000000000e1294da536fded81cbe53bdca3a74371909220b97d520f26ab2dec2dffaee2b75b8a1ce780f7f6d2a621edddeec32a53cce7ec92eba46e5c6bb11f15b73a5c65efbb7bb931bceb81f0ea64be35157633cd49b21b47fbf88e57af885b10062bc1b7762271d7fd29"], 0x0) ptrace$cont(0x20, r1, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1f, 0x2200) 17:22:49 executing program 1: syz_execute_func(&(0x7f0000000280)="3666440f50f564ff0941c366440f56c9c4c27d794e0066420fe2e3f347aac442019dccd3196f") mknod(&(0x7f0000000140)='./file1\x00', 0x0, 0x0) clone(0x3102001ff6, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000380)='qnx4\x00', 0x0, 0x0) r0 = semget$private(0x0, 0x5, 0x0) semop(r0, &(0x7f0000000040)=[{0x1, 0x7ff, 0x1000}, {0x3}], 0x2) 17:22:49 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xf7d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000540)='./file0\x00', &(0x7f0000000800)='devtmpfs\x00', 0x0, 0x0) 17:22:50 executing program 1: clone(0x100002102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x80000000001, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x400, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0x0) write$binfmt_misc(r0, &(0x7f00000000c0)=ANY=[], 0x7fffffff) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) recvfrom(r1, &(0x7f0000000240)=""/184, 0xfffffe4c, 0x10100, 0x0, 0xfffffffffffffcff) getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, &(0x7f00000001c0)={'nat\x00'}, 0x0) 17:22:50 executing program 5: syz_mount_image$hfs(&(0x7f0000000180)='hfs\x00', &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 17:22:50 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r2) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fsetxattr(r3, &(0x7f00000001c0)=@known='user.syz\x00', &(0x7f00000016c0)='-{vmnet1[cpuset\'wlan0${system$\x00', 0x40, 0x0) fremovexattr(r3, &(0x7f00000000c0)=@known='user.syz\x00') [ 237.999660][ T9060] hfs: can't find a HFS filesystem on dev loop5 17:22:50 executing program 2: r0 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f00000000c0)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x13) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x0, 0x11011, r0, 0x0) io_setup(0x4, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000300)='/dev/rtc\x00', 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000002c0)={r1, r1, 0x0, 0x2}, 0x10) ioctl$sock_inet_tcp_SIOCATMARK(r1, 0x7003, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000000040)=""/116, 0xfffffc5b}], 0x1, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 17:22:50 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xf, 0x4, 0x4, 0x9}, 0x11) close(r0) gettid() 17:22:50 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text32={0x20, &(0x7f00000002c0)="b9ec090000b808000000ba000000000f300fc76b07dc920080000067260fc7ac0b000f3808580026660f3880a100400000c4c2659f5d0d0fc7af0e000000660f01c80f01cf", 0x45}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 17:22:50 executing program 3: syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000000440)=""/146) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0xfffffde0) r2 = socket$rxrpc(0x21, 0x2, 0x4000000000000a) bind$rxrpc(r2, &(0x7f0000000140)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e22, 0x2, @remote, 0x4}}, 0x24) listen(r2, 0x9) modify_ldt$write(0x1, &(0x7f0000000300)={0x0, 0x20001000, 0xf6a19cc09ebfc357, 0x3, 0x400, 0x9, 0x3f, 0x100000001, 0x10001, 0x7}, 0x10) fstat(0xffffffffffffff9c, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x1ec51da1abe9f22b, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000280)={0x7, 0x0, 0x4, 0x100, {r3, r4/1000+30000}, {0x7, 0xb, 0x1, 0x10001, 0xffffffff, 0x9, "c8c0963d"}, 0x1, 0x2, @offset=0x7, 0x4}) wait4(0x0, 0x0, 0x80000002, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000040)=0x5) tkill(r0, 0x2a) ptrace$cont(0x18, r0, 0x0, 0x0) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x31}) getsockopt$IP6T_SO_GET_ENTRIES(r5, 0x29, 0x41, &(0x7f0000000500)=ANY=[@ANYBLOB="7365637572697479000000000000000000000006000000000000000000000200000000000000e1294da536fded81cbe53bdca3a74371909220b97d520f26ab2dec2dffaee2b75b8a1ce780f7f6d2a621edddeec32a53cce7ec92eba46e5c6bb11f15b73a5c65efbb7bb931bceb81f0ea64be35157633cd49b21b47fbf88e57af885b10062bc1b7762271d7fd29"], 0x0) ptrace$cont(0x20, r0, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1f, 0x2200) [ 238.110654][ T9060] hfs: can't find a HFS filesystem on dev loop5 17:22:50 executing program 5: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$cgroup_ro(r0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x9) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x200004) sendfile(r1, r2, 0x0, 0x8000fffffffe) 17:22:50 executing program 3: syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000000440)=""/146) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0xfffffde0) r2 = socket$rxrpc(0x21, 0x2, 0x4000000000000a) bind$rxrpc(r2, &(0x7f0000000140)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e22, 0x2, @remote, 0x4}}, 0x24) listen(r2, 0x9) modify_ldt$write(0x1, &(0x7f0000000300)={0x0, 0x20001000, 0xf6a19cc09ebfc357, 0x3, 0x400, 0x9, 0x3f, 0x100000001, 0x10001, 0x7}, 0x10) fstat(0xffffffffffffff9c, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x1ec51da1abe9f22b, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000280)={0x7, 0x0, 0x4, 0x100, {r3, r4/1000+30000}, {0x7, 0xb, 0x1, 0x10001, 0xffffffff, 0x9, "c8c0963d"}, 0x1, 0x2, @offset=0x7, 0x4}) wait4(0x0, 0x0, 0x80000002, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000040)=0x5) tkill(r0, 0x2a) ptrace$cont(0x18, r0, 0x0, 0x0) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x31}) getsockopt$IP6T_SO_GET_ENTRIES(r5, 0x29, 0x41, &(0x7f0000000500)=ANY=[@ANYBLOB="7365637572697479000000000000000000000006000000000000000000000200000000000000e1294da536fded81cbe53bdca3a74371909220b97d520f26ab2dec2dffaee2b75b8a1ce780f7f6d2a621edddeec32a53cce7ec92eba46e5c6bb11f15b73a5c65efbb7bb931bceb81f0ea64be35157633cd49b21b47fbf88e57af885b10062bc1b7762271d7fd29"], 0x0) ptrace$cont(0x20, r0, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1f, 0x2200) 17:22:50 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r1, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], 0xfc}}, 0x0) 17:22:50 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x1b, &(0x7f0000000200)={@remote={0xfe, 0x7}}, 0x20) [ 238.413281][ T9099] netlink: 232 bytes leftover after parsing attributes in process `syz-executor.0'. 17:22:50 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x1b, &(0x7f0000000200)={@remote={0xfe, 0x7}}, 0x20) [ 238.658202][ T9110] netlink: 232 bytes leftover after parsing attributes in process `syz-executor.0'. 17:22:51 executing program 1: r0 = socket$inet(0x2, 0x3, 0x19) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x23, &(0x7f0000000000)={{{@in=@multicast2, @in=@multicast1}}, {{@in6}, 0x0, @in6=@loopback}}, 0xe8) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000003c0)={@multicast2, @local, 0x0, 0x1, [@broadcast]}, 0x14) setsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000380)={@multicast2, @local}, 0xc) 17:22:51 executing program 3: syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000000440)=""/146) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0xfffffde0) bind$rxrpc(0xffffffffffffffff, &(0x7f0000000140)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e22, 0x2, @remote, 0x4}}, 0x24) listen(0xffffffffffffffff, 0x9) modify_ldt$write(0x1, &(0x7f0000000300)={0x0, 0x20001000, 0xf6a19cc09ebfc357, 0x3, 0x400, 0x9, 0x3f, 0x100000001, 0x10001, 0x7}, 0x10) fstat(0xffffffffffffff9c, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x1ec51da1abe9f22b, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000280)={0x7, 0x0, 0x4, 0x100, {r2, r3/1000+30000}, {0x7, 0xb, 0x1, 0x10001, 0xffffffff, 0x9, "c8c0963d"}, 0x1, 0x2, @offset=0x7, 0x4}) wait4(0x0, 0x0, 0x80000002, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000040)=0x5) tkill(r0, 0x2a) ptrace$cont(0x18, r0, 0x0, 0x0) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x31}) getsockopt$IP6T_SO_GET_ENTRIES(r4, 0x29, 0x41, &(0x7f0000000500)=ANY=[@ANYBLOB="7365637572697479000000000000000000000006000000000000000000000200000000000000e1294da536fded81cbe53bdca3a74371909220b97d520f26ab2dec2dffaee2b75b8a1ce780f7f6d2a621edddeec32a53cce7ec92eba46e5c6bb11f15b73a5c65efbb7bb931bceb81f0ea64be35157633cd49b21b47fbf88e57af885b10062bc1b7762271d7fd29"], 0x0) ptrace$cont(0x20, r0, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1f, 0x2200) 17:22:51 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text32={0x20, &(0x7f00000002c0)="b9ec090000b808000000ba000000000f300fc76b07dc920080000067260fc7ac0b000f3808580026660f3880a100400000c4c2659f5d0d0fc7af0e000000660f01c80f01cf", 0x45}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 17:22:51 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x1b, &(0x7f0000000200)={@remote={0xfe, 0x7}}, 0x20) 17:22:51 executing program 0: clone(0x100002102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x80000000001, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0x0) write$binfmt_misc(r0, &(0x7f00000000c0)=ANY=[], 0x7fffffff) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) recvfrom(r1, &(0x7f0000000240)=""/184, 0xfffffe4c, 0x10100, 0x0, 0xfffffffffffffcff) getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, &(0x7f00000001c0)={'nat\x00'}, 0x0) 17:22:51 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x1b, &(0x7f0000000200)={@remote={0xfe, 0x7}}, 0x20) 17:22:51 executing program 3: syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000000440)=""/146) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0xfffffde0) bind$rxrpc(0xffffffffffffffff, &(0x7f0000000140)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e22, 0x2, @remote, 0x4}}, 0x24) listen(0xffffffffffffffff, 0x9) modify_ldt$write(0x1, &(0x7f0000000300)={0x0, 0x20001000, 0xf6a19cc09ebfc357, 0x3, 0x400, 0x9, 0x3f, 0x100000001, 0x10001, 0x7}, 0x10) fstat(0xffffffffffffff9c, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x1ec51da1abe9f22b, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000280)={0x7, 0x0, 0x4, 0x100, {r2, r3/1000+30000}, {0x7, 0xb, 0x1, 0x10001, 0xffffffff, 0x9, "c8c0963d"}, 0x1, 0x2, @offset=0x7, 0x4}) wait4(0x0, 0x0, 0x80000002, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000040)=0x5) tkill(r0, 0x2a) ptrace$cont(0x18, r0, 0x0, 0x0) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x31}) getsockopt$IP6T_SO_GET_ENTRIES(r4, 0x29, 0x41, &(0x7f0000000500)=ANY=[@ANYBLOB="7365637572697479000000000000000000000006000000000000000000000200000000000000e1294da536fded81cbe53bdca3a74371909220b97d520f26ab2dec2dffaee2b75b8a1ce780f7f6d2a621edddeec32a53cce7ec92eba46e5c6bb11f15b73a5c65efbb7bb931bceb81f0ea64be35157633cd49b21b47fbf88e57af885b10062bc1b7762271d7fd29"], 0x0) ptrace$cont(0x20, r0, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1f, 0x2200) 17:22:51 executing program 5: 17:22:51 executing program 1: 17:22:51 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x1b, &(0x7f0000000200)={@remote={0xfe, 0x7}}, 0x20) 17:22:51 executing program 1: 17:22:51 executing program 5: 17:22:51 executing program 3: syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000000440)=""/146) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0xfffffde0) bind$rxrpc(0xffffffffffffffff, &(0x7f0000000140)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e22, 0x2, @remote, 0x4}}, 0x24) listen(0xffffffffffffffff, 0x9) modify_ldt$write(0x1, &(0x7f0000000300)={0x0, 0x20001000, 0xf6a19cc09ebfc357, 0x3, 0x400, 0x9, 0x3f, 0x100000001, 0x10001, 0x7}, 0x10) fstat(0xffffffffffffff9c, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x1ec51da1abe9f22b, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000280)={0x7, 0x0, 0x4, 0x100, {r2, r3/1000+30000}, {0x7, 0xb, 0x1, 0x10001, 0xffffffff, 0x9, "c8c0963d"}, 0x1, 0x2, @offset=0x7, 0x4}) wait4(0x0, 0x0, 0x80000002, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000040)=0x5) tkill(r0, 0x2a) ptrace$cont(0x18, r0, 0x0, 0x0) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x31}) getsockopt$IP6T_SO_GET_ENTRIES(r4, 0x29, 0x41, &(0x7f0000000500)=ANY=[@ANYBLOB="7365637572697479000000000000000000000006000000000000000000000200000000000000e1294da536fded81cbe53bdca3a74371909220b97d520f26ab2dec2dffaee2b75b8a1ce780f7f6d2a621edddeec32a53cce7ec92eba46e5c6bb11f15b73a5c65efbb7bb931bceb81f0ea64be35157633cd49b21b47fbf88e57af885b10062bc1b7762271d7fd29"], 0x0) ptrace$cont(0x20, r0, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1f, 0x2200) 17:22:51 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x1b, &(0x7f0000000200)={@remote={0xfe, 0x7}}, 0x20) 17:22:51 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text32={0x20, &(0x7f00000002c0)="b9ec090000b808000000ba000000000f300fc76b07dc920080000067260fc7ac0b000f3808580026660f3880a100400000c4c2659f5d0d0fc7af0e000000660f01c80f01cf", 0x45}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 17:22:51 executing program 1: 17:22:52 executing program 0: 17:22:52 executing program 5: 17:22:52 executing program 3: syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000000440)=""/146) r2 = socket$rxrpc(0x21, 0x2, 0x4000000000000a) bind$rxrpc(r2, &(0x7f0000000140)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e22, 0x2, @remote, 0x4}}, 0x24) listen(r2, 0x9) modify_ldt$write(0x1, &(0x7f0000000300)={0x0, 0x20001000, 0xf6a19cc09ebfc357, 0x3, 0x400, 0x9, 0x3f, 0x100000001, 0x10001, 0x7}, 0x10) fstat(0xffffffffffffff9c, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x1ec51da1abe9f22b, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000280)={0x7, 0x0, 0x4, 0x100, {r3, r4/1000+30000}, {0x7, 0xb, 0x1, 0x10001, 0xffffffff, 0x9, "c8c0963d"}, 0x1, 0x2, @offset=0x7, 0x4}) wait4(0x0, 0x0, 0x80000002, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000040)=0x5) tkill(r0, 0x2a) ptrace$cont(0x18, r0, 0x0, 0x0) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x31}) getsockopt$IP6T_SO_GET_ENTRIES(r5, 0x29, 0x41, &(0x7f0000000500)=ANY=[@ANYBLOB="7365637572697479000000000000000000000006000000000000000000000200000000000000e1294da536fded81cbe53bdca3a74371909220b97d520f26ab2dec2dffaee2b75b8a1ce780f7f6d2a621edddeec32a53cce7ec92eba46e5c6bb11f15b73a5c65efbb7bb931bceb81f0ea64be35157633cd49b21b47fbf88e57af885b10062bc1b7762271d7fd29"], 0x0) ptrace$cont(0x20, r0, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1f, 0x2200) 17:22:52 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x1b, &(0x7f0000000200)={@remote={0xfe, 0x7}}, 0x20) 17:22:52 executing program 1: 17:22:52 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text32={0x20, &(0x7f00000002c0)="b9ec090000b808000000ba000000000f300fc76b07dc920080000067260fc7ac0b000f3808580026660f3880a100400000c4c2659f5d0d0fc7af0e000000660f01c80f01cf", 0x45}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 17:22:52 executing program 1: 17:22:52 executing program 5: 17:22:52 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f000014f000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x1b, &(0x7f0000000200)={@remote={0xfe, 0x7}}, 0x20) 17:22:52 executing program 3: syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000000440)=""/146) r2 = socket$rxrpc(0x21, 0x2, 0x4000000000000a) bind$rxrpc(r2, &(0x7f0000000140)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e22, 0x2, @remote, 0x4}}, 0x24) listen(r2, 0x9) modify_ldt$write(0x1, &(0x7f0000000300)={0x0, 0x20001000, 0xf6a19cc09ebfc357, 0x3, 0x400, 0x9, 0x3f, 0x100000001, 0x10001, 0x7}, 0x10) fstat(0xffffffffffffff9c, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x1ec51da1abe9f22b, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000280)={0x7, 0x0, 0x4, 0x100, {r3, r4/1000+30000}, {0x7, 0xb, 0x1, 0x10001, 0xffffffff, 0x9, "c8c0963d"}, 0x1, 0x2, @offset=0x7, 0x4}) wait4(0x0, 0x0, 0x80000002, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000040)=0x5) tkill(r0, 0x2a) ptrace$cont(0x18, r0, 0x0, 0x0) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x31}) getsockopt$IP6T_SO_GET_ENTRIES(r5, 0x29, 0x41, &(0x7f0000000500)=ANY=[@ANYBLOB="7365637572697479000000000000000000000006000000000000000000000200000000000000e1294da536fded81cbe53bdca3a74371909220b97d520f26ab2dec2dffaee2b75b8a1ce780f7f6d2a621edddeec32a53cce7ec92eba46e5c6bb11f15b73a5c65efbb7bb931bceb81f0ea64be35157633cd49b21b47fbf88e57af885b10062bc1b7762271d7fd29"], 0x0) ptrace$cont(0x20, r0, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1f, 0x2200) 17:22:52 executing program 1: 17:22:52 executing program 5: 17:22:52 executing program 0: 17:22:52 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f000014f000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x1b, &(0x7f0000000200)={@remote={0xfe, 0x7}}, 0x20) 17:22:52 executing program 4: 17:22:52 executing program 5: [ 240.198765][ C1] net_ratelimit: 17 callbacks suppressed [ 240.198773][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 240.210339][ C1] protocol 88fb is buggy, dev hsr_slave_1 17:22:52 executing program 1: [ 240.278774][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 240.284631][ C0] protocol 88fb is buggy, dev hsr_slave_1 17:22:52 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f000014f000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x1b, &(0x7f0000000200)={@remote={0xfe, 0x7}}, 0x20) 17:22:52 executing program 0: 17:22:52 executing program 5: 17:22:52 executing program 4: 17:22:52 executing program 3: syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000000440)=""/146) r2 = socket$rxrpc(0x21, 0x2, 0x4000000000000a) bind$rxrpc(r2, &(0x7f0000000140)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e22, 0x2, @remote, 0x4}}, 0x24) listen(r2, 0x9) modify_ldt$write(0x1, &(0x7f0000000300)={0x0, 0x20001000, 0xf6a19cc09ebfc357, 0x3, 0x400, 0x9, 0x3f, 0x100000001, 0x10001, 0x7}, 0x10) fstat(0xffffffffffffff9c, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x1ec51da1abe9f22b, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000280)={0x7, 0x0, 0x4, 0x100, {r3, r4/1000+30000}, {0x7, 0xb, 0x1, 0x10001, 0xffffffff, 0x9, "c8c0963d"}, 0x1, 0x2, @offset=0x7, 0x4}) wait4(0x0, 0x0, 0x80000002, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000040)=0x5) tkill(r0, 0x2a) ptrace$cont(0x18, r0, 0x0, 0x0) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x31}) getsockopt$IP6T_SO_GET_ENTRIES(r5, 0x29, 0x41, &(0x7f0000000500)=ANY=[@ANYBLOB="7365637572697479000000000000000000000006000000000000000000000200000000000000e1294da536fded81cbe53bdca3a74371909220b97d520f26ab2dec2dffaee2b75b8a1ce780f7f6d2a621edddeec32a53cce7ec92eba46e5c6bb11f15b73a5c65efbb7bb931bceb81f0ea64be35157633cd49b21b47fbf88e57af885b10062bc1b7762271d7fd29"], 0x0) ptrace$cont(0x20, r0, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1f, 0x2200) 17:22:52 executing program 1: 17:22:52 executing program 0: 17:22:52 executing program 4: 17:22:52 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x1b, &(0x7f0000000200)={@remote={0xfe, 0x7}}, 0x20) 17:22:52 executing program 5: 17:22:52 executing program 1: [ 240.598781][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 240.604597][ C0] protocol 88fb is buggy, dev hsr_slave_1 17:22:52 executing program 4: 17:22:53 executing program 0: 17:22:53 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x1b, &(0x7f0000000200)={@remote={0xfe, 0x7}}, 0x20) 17:22:53 executing program 3: syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0xfffffde0) r2 = socket$rxrpc(0x21, 0x2, 0x4000000000000a) bind$rxrpc(r2, &(0x7f0000000140)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e22, 0x2, @remote, 0x4}}, 0x24) listen(r2, 0x9) modify_ldt$write(0x1, &(0x7f0000000300)={0x0, 0x20001000, 0xf6a19cc09ebfc357, 0x3, 0x400, 0x9, 0x3f, 0x100000001, 0x10001, 0x7}, 0x10) fstat(0xffffffffffffff9c, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x1ec51da1abe9f22b, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000280)={0x7, 0x0, 0x4, 0x100, {r3, r4/1000+30000}, {0x7, 0xb, 0x1, 0x10001, 0xffffffff, 0x9, "c8c0963d"}, 0x1, 0x2, @offset=0x7, 0x4}) wait4(0x0, 0x0, 0x80000002, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000040)=0x5) tkill(r0, 0x2a) ptrace$cont(0x18, r0, 0x0, 0x0) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x31}) getsockopt$IP6T_SO_GET_ENTRIES(r5, 0x29, 0x41, &(0x7f0000000500)=ANY=[@ANYBLOB="7365637572697479000000000000000000000006000000000000000000000200000000000000e1294da536fded81cbe53bdca3a74371909220b97d520f26ab2dec2dffaee2b75b8a1ce780f7f6d2a621edddeec32a53cce7ec92eba46e5c6bb11f15b73a5c65efbb7bb931bceb81f0ea64be35157633cd49b21b47fbf88e57af885b10062bc1b7762271d7fd29"], 0x0) ptrace$cont(0x20, r0, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1f, 0x2200) 17:22:53 executing program 0: 17:22:53 executing program 5: 17:22:53 executing program 1: [ 240.838784][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 240.844644][ C0] protocol 88fb is buggy, dev hsr_slave_1 17:22:53 executing program 4: [ 240.919427][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 240.925260][ C1] protocol 88fb is buggy, dev hsr_slave_1 17:22:53 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x1b, &(0x7f0000000200)={@remote={0xfe, 0x7}}, 0x20) 17:22:53 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xf7d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7ffffffe}]}) 17:22:53 executing program 1: r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vfio/vfio\x00', 0x0, 0x0) ioctl$KVM_GET_CPUID2(r0, 0x3b65, 0x0) 17:22:53 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='cgroup\x00', 0x0, 0x0) recvfrom$unix(r0, &(0x7f00000001c0)=""/196, 0xc4, 0x0, 0x0, 0x0) rt_sigsuspend(0x0, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') r2 = openat$cgroup_procs(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000040), 0x12) 17:22:53 executing program 4: r0 = socket(0x10, 0x80002, 0x0) rename(0x0, 0x0) sendto$inet(r0, &(0x7f0000000000)="60da44a1e7c3eaff", 0x8, 0xffffffffffffffff, 0x0, 0x0) 17:22:53 executing program 3: syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0xfffffde0) r2 = socket$rxrpc(0x21, 0x2, 0x4000000000000a) bind$rxrpc(r2, &(0x7f0000000140)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e22, 0x2, @remote, 0x4}}, 0x24) listen(r2, 0x9) modify_ldt$write(0x1, &(0x7f0000000300)={0x0, 0x20001000, 0xf6a19cc09ebfc357, 0x3, 0x400, 0x9, 0x3f, 0x100000001, 0x10001, 0x7}, 0x10) fstat(0xffffffffffffff9c, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x1ec51da1abe9f22b, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000280)={0x7, 0x0, 0x4, 0x100, {r3, r4/1000+30000}, {0x7, 0xb, 0x1, 0x10001, 0xffffffff, 0x9, "c8c0963d"}, 0x1, 0x2, @offset=0x7, 0x4}) wait4(0x0, 0x0, 0x80000002, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000040)=0x5) tkill(r0, 0x2a) ptrace$cont(0x18, r0, 0x0, 0x0) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x31}) getsockopt$IP6T_SO_GET_ENTRIES(r5, 0x29, 0x41, &(0x7f0000000500)=ANY=[@ANYBLOB="7365637572697479000000000000000000000006000000000000000000000200000000000000e1294da536fded81cbe53bdca3a74371909220b97d520f26ab2dec2dffaee2b75b8a1ce780f7f6d2a621edddeec32a53cce7ec92eba46e5c6bb11f15b73a5c65efbb7bb931bceb81f0ea64be35157633cd49b21b47fbf88e57af885b10062bc1b7762271d7fd29"], 0x0) ptrace$cont(0x20, r0, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1f, 0x2200) 17:22:53 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f000014f000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000200)={@remote={0xfe, 0x7}}, 0x20) 17:22:53 executing program 4: mknod(&(0x7f0000000140)='./file1\x00', 0x0, 0x0) clone(0x3102001ff6, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000380)='qnx4\x00', 0x0, 0x0) r0 = semget$private(0x0, 0x5, 0x0) semop(r0, &(0x7f0000000040)=[{0x1, 0x7ff, 0x1000}, {0x3}], 0x2) [ 241.214083][ T9268] BUG: assuming atomic context at kernel/seccomp.c:271 17:22:53 executing program 1: syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0xfffffde0) r2 = socket$rxrpc(0x21, 0x2, 0x4000000000000a) bind$rxrpc(r2, &(0x7f0000000140)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e22, 0x2, @remote, 0x4}}, 0x24) listen(r2, 0x9) modify_ldt$write(0x1, &(0x7f0000000300)={0x0, 0x20001000, 0xf6a19cc09ebfc357, 0x3, 0x400, 0x9, 0x3f, 0x100000001, 0x10001, 0x7}, 0x10) fstat(0xffffffffffffff9c, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x1ec51da1abe9f22b, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000280)={0x7, 0x0, 0x4, 0x100, {r3, r4/1000+30000}, {0x7, 0xb, 0x1, 0x10001, 0xffffffff, 0x9, "c8c0963d"}, 0x1, 0x2, @offset=0x7, 0x4}) wait4(0x0, 0x0, 0x80000002, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000040)=0x5) tkill(r0, 0x2a) ptrace$cont(0x18, r0, 0x0, 0x0) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x31}) getsockopt$IP6T_SO_GET_ENTRIES(r5, 0x29, 0x41, &(0x7f0000000500)=ANY=[@ANYBLOB="7365637572697479000000000000000000000006000000000000000000000200000000000000e1294da536fded81cbe53bdca3a74371909220b97d520f26ab2dec2dffaee2b75b8a1ce780f7f6d2a621edddeec32a53cce7ec92eba46e5c6bb11f15b73a5c65efbb7bb931bceb81f0ea64be35157633cd49b21b47fbf88e57af885b10062bc1b7762271d7fd29"], 0x0) ptrace$cont(0x20, r0, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1f, 0x2200) [ 241.255117][ T9268] in_atomic(): 0, irqs_disabled(): 0, pid: 9268, name: syz-executor.5 [ 241.318993][ T9268] no locks held by syz-executor.5/9268. [ 241.327632][ T9268] CPU: 0 PID: 9268 Comm: syz-executor.5 Not tainted 5.0.0-rc7-next-20190220 #39 [ 241.336670][ T9268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 241.346750][ T9268] Call Trace: [ 241.350134][ T9268] dump_stack+0x172/0x1f0 [ 241.354533][ T9268] __cant_sleep.cold+0xa3/0xbb [ 241.359362][ T9268] __seccomp_filter+0x12b/0x12b0 [ 241.364327][ T9268] ? seccomp_notify_release+0x280/0x280 [ 241.369895][ T9268] ? _raw_spin_unlock_irq+0x5e/0x90 [ 241.375102][ T9268] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 241.381362][ T9268] ? do_seccomp+0x389/0x2250 [ 241.386041][ T9268] ? lock_downgrade+0x880/0x880 [ 241.390914][ T9268] ? __seccomp_filter+0x12b0/0x12b0 [ 241.396193][ T9268] ? kasan_check_read+0x11/0x20 [ 241.401122][ T9268] ? _copy_to_user+0xc9/0x120 [ 241.405821][ T9268] __secure_computing+0x101/0x360 [ 241.410910][ T9268] syscall_trace_enter+0x5bf/0xe10 17:22:53 executing program 3: syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0xfffffde0) r2 = socket$rxrpc(0x21, 0x2, 0x4000000000000a) bind$rxrpc(r2, &(0x7f0000000140)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e22, 0x2, @remote, 0x4}}, 0x24) listen(r2, 0x9) modify_ldt$write(0x1, &(0x7f0000000300)={0x0, 0x20001000, 0xf6a19cc09ebfc357, 0x3, 0x400, 0x9, 0x3f, 0x100000001, 0x10001, 0x7}, 0x10) fstat(0xffffffffffffff9c, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x1ec51da1abe9f22b, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000280)={0x7, 0x0, 0x4, 0x100, {r3, r4/1000+30000}, {0x7, 0xb, 0x1, 0x10001, 0xffffffff, 0x9, "c8c0963d"}, 0x1, 0x2, @offset=0x7, 0x4}) wait4(0x0, 0x0, 0x80000002, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000040)=0x5) tkill(r0, 0x2a) ptrace$cont(0x18, r0, 0x0, 0x0) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x31}) getsockopt$IP6T_SO_GET_ENTRIES(r5, 0x29, 0x41, &(0x7f0000000500)=ANY=[@ANYBLOB="7365637572697479000000000000000000000006000000000000000000000200000000000000e1294da536fded81cbe53bdca3a74371909220b97d520f26ab2dec2dffaee2b75b8a1ce780f7f6d2a621edddeec32a53cce7ec92eba46e5c6bb11f15b73a5c65efbb7bb931bceb81f0ea64be35157633cd49b21b47fbf88e57af885b10062bc1b7762271d7fd29"], 0x0) ptrace$cont(0x20, r0, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1f, 0x2200) [ 241.416038][ T9268] ? trace_event_raw_event_sys_exit+0x290/0x290 [ 241.422297][ T9268] ? lockdep_hardirqs_on+0x418/0x5d0 [ 241.427675][ T9268] ? trace_hardirqs_on+0x67/0x230 [ 241.432719][ T9268] do_syscall_64+0x479/0x610 [ 241.437338][ T9268] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 241.443233][ T9268] RIP: 0033:0x45ac8a [ 241.447131][ T9268] Code: 25 18 00 00 00 00 74 01 f0 48 0f b1 3d df ba 5f 00 48 39 c2 75 da f3 c3 0f 1f 84 00 00 00 00 00 48 63 ff b8 e4 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 06 f3 c3 0f 1f 40 00 48 c7 c2 d4 ff ff ff f7 17:22:53 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f000014f000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000200)={@remote={0xfe, 0x7}}, 0x20) 17:22:53 executing program 3: syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGMTSLOTS(0xffffffffffffffff, 0x8040450a, &(0x7f0000000440)=""/146) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0xfffffde0) r1 = socket$rxrpc(0x21, 0x2, 0x4000000000000a) bind$rxrpc(r1, &(0x7f0000000140)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e22, 0x2, @remote, 0x4}}, 0x24) listen(r1, 0x9) modify_ldt$write(0x1, &(0x7f0000000300)={0x0, 0x20001000, 0xf6a19cc09ebfc357, 0x3, 0x400, 0x9, 0x3f, 0x100000001, 0x10001, 0x7}, 0x10) fstat(0xffffffffffffff9c, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x1ec51da1abe9f22b, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000280)={0x7, 0x0, 0x4, 0x100, {r2, r3/1000+30000}, {0x7, 0xb, 0x1, 0x10001, 0xffffffff, 0x9, "c8c0963d"}, 0x1, 0x2, @offset=0x7, 0x4}) wait4(0x0, 0x0, 0x80000002, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000040)=0x5) tkill(r0, 0x2a) ptrace$cont(0x18, r0, 0x0, 0x0) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x31}) getsockopt$IP6T_SO_GET_ENTRIES(r4, 0x29, 0x41, &(0x7f0000000500)=ANY=[@ANYBLOB="7365637572697479000000000000000000000006000000000000000000000200000000000000e1294da536fded81cbe53bdca3a74371909220b97d520f26ab2dec2dffaee2b75b8a1ce780f7f6d2a621edddeec32a53cce7ec92eba46e5c6bb11f15b73a5c65efbb7bb931bceb81f0ea64be35157633cd49b21b47fbf88e57af885b10062bc1b7762271d7fd29"], 0x0) ptrace$cont(0x20, r0, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1f, 0x2200) 17:22:53 executing program 4: syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0xfffffde0) r2 = socket$rxrpc(0x21, 0x2, 0x4000000000000a) bind$rxrpc(r2, &(0x7f0000000140)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e22, 0x2, @remote, 0x4}}, 0x24) listen(r2, 0x9) modify_ldt$write(0x1, &(0x7f0000000300)={0x0, 0x20001000, 0xf6a19cc09ebfc357, 0x3, 0x400, 0x9, 0x3f, 0x100000001, 0x10001, 0x7}, 0x10) fstat(0xffffffffffffff9c, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x1ec51da1abe9f22b, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000280)={0x7, 0x0, 0x4, 0x100, {r3, r4/1000+30000}, {0x7, 0xb, 0x1, 0x10001, 0xffffffff, 0x9, "c8c0963d"}, 0x1, 0x2, @offset=0x7, 0x4}) wait4(0x0, 0x0, 0x80000002, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000040)=0x5) tkill(r0, 0x2a) ptrace$cont(0x18, r0, 0x0, 0x0) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x31}) getsockopt$IP6T_SO_GET_ENTRIES(r5, 0x29, 0x41, &(0x7f0000000500)=ANY=[@ANYBLOB="7365637572697479000000000000000000000006000000000000000000000200000000000000e1294da536fded81cbe53bdca3a74371909220b97d520f26ab2dec2dffaee2b75b8a1ce780f7f6d2a621edddeec32a53cce7ec92eba46e5c6bb11f15b73a5c65efbb7bb931bceb81f0ea64be35157633cd49b21b47fbf88e57af885b10062bc1b7762271d7fd29"], 0x0) ptrace$cont(0x20, r0, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1f, 0x2200) [ 241.466740][ T9268] RSP: 002b:00007fcbb0a4ec58 EFLAGS: 00000246 ORIG_RAX: 00000000000000e4 [ 241.475169][ T9268] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 000000000045ac8a [ 241.483153][ T9268] RDX: 00000000000214d0 RSI: 00007fcbb0a4ec60 RDI: 0000000000000001 [ 241.491136][ T9268] RBP: 000000000073bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 241.499115][ T9268] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 241.507096][ T9268] R13: 00000000004c4861 R14: 00000000004d8050 R15: 00000000ffffffff 17:22:54 executing program 5: syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000000440)=""/146) r2 = socket$rxrpc(0x21, 0x2, 0x4000000000000a) bind$rxrpc(r2, &(0x7f0000000140)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e22, 0x2, @remote, 0x4}}, 0x24) listen(r2, 0x9) modify_ldt$write(0x1, &(0x7f0000000300)={0x0, 0x20001000, 0xf6a19cc09ebfc357, 0x3, 0x400, 0x9, 0x3f, 0x100000001, 0x10001, 0x7}, 0x10) fstat(0xffffffffffffff9c, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x1ec51da1abe9f22b, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000280)={0x7, 0x0, 0x4, 0x100, {r3, r4/1000+30000}, {0x7, 0xb, 0x1, 0x10001, 0xffffffff, 0x9, "c8c0963d"}, 0x1, 0x2, @offset=0x7, 0x4}) wait4(0x0, 0x0, 0x80000002, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000040)=0x5) tkill(r0, 0x2a) ptrace$cont(0x18, r0, 0x0, 0x0) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x31}) getsockopt$IP6T_SO_GET_ENTRIES(r5, 0x29, 0x41, &(0x7f0000000500)=ANY=[@ANYBLOB="7365637572697479000000000000000000000006000000000000000000000200000000000000e1294da536fded81cbe53bdca3a74371909220b97d520f26ab2dec2dffaee2b75b8a1ce780f7f6d2a621edddeec32a53cce7ec92eba46e5c6bb11f15b73a5c65efbb7bb931bceb81f0ea64be35157633cd49b21b47fbf88e57af885b10062bc1b7762271d7fd29"], 0x0) ptrace$cont(0x20, r0, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1f, 0x2200) 17:22:54 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f000014f000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000200)={@remote={0xfe, 0x7}}, 0x20) 17:22:54 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000440)=""/146) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0xfffffde0) r3 = socket$rxrpc(0x21, 0x2, 0x4000000000000a) ioctl$int_in(r0, 0x5473, &(0x7f0000000340)=0xfffffffffffff001) bind$rxrpc(r3, &(0x7f0000000140)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e22, 0x2, @remote, 0x4}}, 0x24) modify_ldt$write(0x1, &(0x7f0000000300)={0x0, 0x20001000, 0xf6a19cc09ebfc357, 0x3, 0x400, 0x9, 0x3f, 0x100000001, 0x10001, 0x7}, 0x10) fstat(0xffffffffffffff9c, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x1ec51da1abe9f22b, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f0000000280)={0x7, 0x0, 0x4, 0x100, {r4, r5/1000+30000}, {0x7, 0xb, 0x1, 0x10001, 0xffffffff, 0x9, "c8c0963d"}, 0x1, 0x2, @offset=0x7, 0x4}) wait4(0x0, 0x0, 0x80000002, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000040)=0x5) tkill(r1, 0x2a) ptrace$cont(0x18, r1, 0x0, 0x0) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x31}) getsockopt$IP6T_SO_GET_ENTRIES(r6, 0x29, 0x41, &(0x7f0000000500)=ANY=[@ANYBLOB="7365637572697479000000000000000000000006000000000000000000000200000000000000e1294da536fded81cbe53bdca3a74371909220b97d520f26ab2dec2dffaee2b75b8a1ce780f7f6d2a621edddeec32a53cce7ec92eba46e5c6bb11f15b73a5c65efbb7bb931bceb81f0ea64be35157633cd49b21b47fbf88e57af885b10062bc1b7762271d7fd29"], 0x0) ptrace$cont(0x20, r1, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1f, 0x2200) 17:22:54 executing program 3: syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGMTSLOTS(0xffffffffffffffff, 0x8040450a, &(0x7f0000000440)=""/146) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0xfffffde0) r1 = socket$rxrpc(0x21, 0x2, 0x4000000000000a) bind$rxrpc(r1, &(0x7f0000000140)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e22, 0x2, @remote, 0x4}}, 0x24) listen(r1, 0x9) modify_ldt$write(0x1, &(0x7f0000000300)={0x0, 0x20001000, 0xf6a19cc09ebfc357, 0x3, 0x400, 0x9, 0x3f, 0x100000001, 0x10001, 0x7}, 0x10) fstat(0xffffffffffffff9c, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x1ec51da1abe9f22b, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000280)={0x7, 0x0, 0x4, 0x100, {r2, r3/1000+30000}, {0x7, 0xb, 0x1, 0x10001, 0xffffffff, 0x9, "c8c0963d"}, 0x1, 0x2, @offset=0x7, 0x4}) wait4(0x0, 0x0, 0x80000002, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000040)=0x5) tkill(r0, 0x2a) ptrace$cont(0x18, r0, 0x0, 0x0) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x31}) getsockopt$IP6T_SO_GET_ENTRIES(r4, 0x29, 0x41, &(0x7f0000000500)=ANY=[@ANYBLOB="7365637572697479000000000000000000000006000000000000000000000200000000000000e1294da536fded81cbe53bdca3a74371909220b97d520f26ab2dec2dffaee2b75b8a1ce780f7f6d2a621edddeec32a53cce7ec92eba46e5c6bb11f15b73a5c65efbb7bb931bceb81f0ea64be35157633cd49b21b47fbf88e57af885b10062bc1b7762271d7fd29"], 0x0) ptrace$cont(0x20, r0, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1f, 0x2200) 17:22:54 executing program 1: syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGMTSLOTS(0xffffffffffffffff, 0x8040450a, &(0x7f0000000440)=""/146) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0xfffffde0) r1 = socket$rxrpc(0x21, 0x2, 0x4000000000000a) bind$rxrpc(r1, &(0x7f0000000140)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e22, 0x2, @remote, 0x4}}, 0x24) listen(r1, 0x9) modify_ldt$write(0x1, &(0x7f0000000300)={0x0, 0x20001000, 0xf6a19cc09ebfc357, 0x3, 0x400, 0x9, 0x3f, 0x100000001, 0x10001, 0x7}, 0x10) fstat(0xffffffffffffff9c, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x1ec51da1abe9f22b, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000280)={0x7, 0x0, 0x4, 0x100, {r2, r3/1000+30000}, {0x7, 0xb, 0x1, 0x10001, 0xffffffff, 0x9, "c8c0963d"}, 0x1, 0x2, @offset=0x7, 0x4}) wait4(0x0, 0x0, 0x80000002, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000040)=0x5) tkill(r0, 0x2a) ptrace$cont(0x18, r0, 0x0, 0x0) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x31}) getsockopt$IP6T_SO_GET_ENTRIES(r4, 0x29, 0x41, &(0x7f0000000500)=ANY=[@ANYBLOB="7365637572697479000000000000000000000006000000000000000000000200000000000000e1294da536fded81cbe53bdca3a74371909220b97d520f26ab2dec2dffaee2b75b8a1ce780f7f6d2a621edddeec32a53cce7ec92eba46e5c6bb11f15b73a5c65efbb7bb931bceb81f0ea64be35157633cd49b21b47fbf88e57af885b10062bc1b7762271d7fd29"], 0x0) ptrace$cont(0x20, r0, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1f, 0x2200) 17:22:54 executing program 4: syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000000440)=""/146) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0xfffffde0) r2 = socket$rxrpc(0x21, 0x2, 0x4000000000000a) bind$rxrpc(r2, &(0x7f0000000140)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e22, 0x2, @remote, 0x4}}, 0x24) listen(r2, 0x9) modify_ldt$write(0x1, &(0x7f0000000300)={0x0, 0x20001000, 0xf6a19cc09ebfc357, 0x3, 0x400, 0x9, 0x3f, 0x100000001, 0x10001, 0x7}, 0x10) fstat(0xffffffffffffff9c, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x1ec51da1abe9f22b, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000280)={0x7, 0x0, 0x4, 0x100, {r3, r4/1000+30000}, {0x7, 0xb, 0x1, 0x10001, 0xffffffff, 0x9, "c8c0963d"}, 0x1, 0x2, @offset=0x7, 0x4}) wait4(0x0, 0x0, 0x80000002, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000040)=0x5) tkill(r0, 0x2a) ptrace$cont(0x18, r0, 0x0, 0x0) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x31}) getsockopt$IP6T_SO_GET_ENTRIES(r5, 0x29, 0x41, &(0x7f0000000500)=ANY=[@ANYBLOB="7365637572697479000000000000000000000006000000000000000000000200000000000000e1294da536fded81cbe53bdca3a74371909220b97d520f26ab2dec2dffaee2b75b8a1ce780f7f6d2a621edddeec32a53cce7ec92eba46e5c6bb11f15b73a5c65efbb7bb931bceb81f0ea64be35157633cd49b21b47fbf88e57af885b10062bc1b7762271d7fd29"], 0x0) ptrace$cont(0x20, r0, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1f, 0x2200) 17:22:54 executing program 5: syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000000440)=""/146) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0xfffffde0) r2 = socket$rxrpc(0x21, 0x2, 0x4000000000000a) bind$rxrpc(r2, &(0x7f0000000140)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e22, 0x2, @remote, 0x4}}, 0x24) listen(r2, 0x9) modify_ldt$write(0x1, &(0x7f0000000300)={0x0, 0x20001000, 0xf6a19cc09ebfc357, 0x3, 0x400, 0x9, 0x3f, 0x100000001, 0x10001, 0x7}, 0x10) fstat(0xffffffffffffff9c, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x1ec51da1abe9f22b, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000280)={0x7, 0x0, 0x4, 0x100, {r3, r4/1000+30000}, {0x7, 0xb, 0x1, 0x10001, 0xffffffff, 0x9, "c8c0963d"}, 0x1, 0x2, @offset=0x7, 0x4}) wait4(0x0, 0x0, 0x80000002, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000040)=0x5) tkill(r0, 0x2a) ptrace$cont(0x18, r0, 0x0, 0x0) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x31}) getsockopt$IP6T_SO_GET_ENTRIES(r5, 0x29, 0x41, &(0x7f0000000500)=ANY=[@ANYBLOB="7365637572697479000000000000000000000006000000000000000000000200000000000000e1294da536fded81cbe53bdca3a74371909220b97d520f26ab2dec2dffaee2b75b8a1ce780f7f6d2a621edddeec32a53cce7ec92eba46e5c6bb11f15b73a5c65efbb7bb931bceb81f0ea64be35157633cd49b21b47fbf88e57af885b10062bc1b7762271d7fd29"], 0x0) ptrace$cont(0x20, r0, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1f, 0x2200) 17:22:54 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f000014f000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000200)={@remote={0xfe, 0x7}}, 0x20) 17:22:54 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f000014f000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000200)={@remote={0xfe, 0x7}}, 0x20) 17:22:54 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000440)=""/146) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0xfffffde0) r3 = socket$rxrpc(0x21, 0x2, 0x4000000000000a) ioctl$int_in(r0, 0x5473, &(0x7f0000000340)=0xfffffffffffff001) bind$rxrpc(r3, &(0x7f0000000140)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e22, 0x2, @remote, 0x4}}, 0x24) modify_ldt$write(0x1, &(0x7f0000000300)={0x0, 0x20001000, 0xf6a19cc09ebfc357, 0x3, 0x400, 0x9, 0x3f, 0x100000001, 0x10001, 0x7}, 0x10) fstat(0xffffffffffffff9c, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x1ec51da1abe9f22b, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f0000000280)={0x7, 0x0, 0x4, 0x100, {r4, r5/1000+30000}, {0x7, 0xb, 0x1, 0x10001, 0xffffffff, 0x9, "c8c0963d"}, 0x1, 0x2, @offset=0x7, 0x4}) wait4(0x0, 0x0, 0x80000002, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000040)=0x5) tkill(r1, 0x2a) ptrace$cont(0x18, r1, 0x0, 0x0) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x31}) getsockopt$IP6T_SO_GET_ENTRIES(r6, 0x29, 0x41, &(0x7f0000000500)=ANY=[@ANYBLOB="7365637572697479000000000000000000000006000000000000000000000200000000000000e1294da536fded81cbe53bdca3a74371909220b97d520f26ab2dec2dffaee2b75b8a1ce780f7f6d2a621edddeec32a53cce7ec92eba46e5c6bb11f15b73a5c65efbb7bb931bceb81f0ea64be35157633cd49b21b47fbf88e57af885b10062bc1b7762271d7fd29"], 0x0) ptrace$cont(0x20, r1, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1f, 0x2200) 17:22:54 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f000014f000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000200)={@remote={0xfe, 0x7}}, 0x20) 17:22:54 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000440)=""/146) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0xfffffde0) r3 = socket$rxrpc(0x21, 0x2, 0x4000000000000a) ioctl$int_in(r0, 0x5473, &(0x7f0000000340)=0xfffffffffffff001) bind$rxrpc(r3, &(0x7f0000000140)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e22, 0x2, @remote, 0x4}}, 0x24) listen(r3, 0x9) fstat(0xffffffffffffff9c, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x1ec51da1abe9f22b, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f0000000280)={0x7, 0x0, 0x4, 0x100, {r4, r5/1000+30000}, {0x7, 0xb, 0x1, 0x10001, 0xffffffff, 0x9, "c8c0963d"}, 0x1, 0x2, @offset=0x7, 0x4}) wait4(0x0, 0x0, 0x80000002, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000040)=0x5) tkill(r1, 0x2a) ptrace$cont(0x18, r1, 0x0, 0x0) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x31}) getsockopt$IP6T_SO_GET_ENTRIES(r6, 0x29, 0x41, &(0x7f0000000500)=ANY=[@ANYBLOB="7365637572697479000000000000000000000006000000000000000000000200000000000000e1294da536fded81cbe53bdca3a74371909220b97d520f26ab2dec2dffaee2b75b8a1ce780f7f6d2a621edddeec32a53cce7ec92eba46e5c6bb11f15b73a5c65efbb7bb931bceb81f0ea64be35157633cd49b21b47fbf88e57af885b10062bc1b7762271d7fd29"], 0x0) ptrace$cont(0x20, r1, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1f, 0x2200) 17:22:54 executing program 1: r0 = syz_open_dev$mice(&(0x7f0000000440)='/dev/input/mice\x00', 0x0, 0x0) accept4$llc(r0, 0x0, &(0x7f0000000700), 0x80000) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xffffffffffffffff}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='/gro<#\xfbW\xe6\xc6\x0f\x1fKE\xb7M\x99\x9a\x9a\x8c,\xe1[&\xe5\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ}\xb7\xf3\xfe\xf6\xe0.+\xe3\x89\xde\x139E\xa3\x85\xbd\x81\xe9\xbd\xee\xee\x03\x00\x00\x00\x00\x00\x00\x00[T\aE\xdfK\x1d\xeeH;\x15v$\xc5\xbcq\x9a\t\x9ej5\t\x00\x00\x009\x8c4', 0x2761, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0xda4fff08) r2 = perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0x20, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x40000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_dccp_buf(r1, 0x21, 0xf, &(0x7f0000000340)=""/194, &(0x7f00000000c0)=0xc2) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000200)=[@in={0x2, 0x4e22, @loopback}, @in6={0xa, 0x4e21, 0x9d43, @mcast1, 0x101}, @in6={0xa, 0x4e24, 0x80, @ipv4={[], [], @empty}, 0x7}, @in6={0xa, 0x4e23, 0x5, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xe}}], 0x74) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r1, 0x84, 0x1c, &(0x7f0000000040), &(0x7f0000000080)=0x4) write$binfmt_aout(r2, &(0x7f0000000500)={{0x10b, 0x40000000, 0x2, 0x22d, 0x1aa, 0x1ff, 0x308, 0x9}, "234e367a5b1de647206170ab2d778150c971f0ab8d0ac2de2aadcbbe8a60acb63c11100cf12a24abc4cbf4733410958fd24196b8bdfc337cfdf87cc2572cb7ff4287d35733b94d1864eace9a8906ac49f1ec716e3e93359490a4c21a74fe0a4fb4ae2be64a87"}, 0x86) openat$cgroup_type(r0, &(0x7f00000005c0)='cgroup.type\x00', 0x2, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(r1, 0x8934, &(0x7f0000000140)={'sit0\x00', 0x1}) ioctl$EVIOCSABS2F(r1, 0x401845ef, &(0x7f0000000280)={0x1, 0x7f, 0xda, 0xffffffff, 0x2, 0x100}) ioctl$VIDIOC_S_OUTPUT(r1, 0xc004562f, &(0x7f0000000000)=0x3) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x4000000000000000) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x660c, 0x0) ioctl$RTC_AIE_ON(r1, 0x7001) 17:22:54 executing program 3: syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGMTSLOTS(0xffffffffffffffff, 0x8040450a, &(0x7f0000000440)=""/146) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0xfffffde0) r1 = socket$rxrpc(0x21, 0x2, 0x4000000000000a) bind$rxrpc(r1, &(0x7f0000000140)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e22, 0x2, @remote, 0x4}}, 0x24) listen(r1, 0x9) modify_ldt$write(0x1, &(0x7f0000000300)={0x0, 0x20001000, 0xf6a19cc09ebfc357, 0x3, 0x400, 0x9, 0x3f, 0x100000001, 0x10001, 0x7}, 0x10) fstat(0xffffffffffffff9c, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x1ec51da1abe9f22b, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000280)={0x7, 0x0, 0x4, 0x100, {r2, r3/1000+30000}, {0x7, 0xb, 0x1, 0x10001, 0xffffffff, 0x9, "c8c0963d"}, 0x1, 0x2, @offset=0x7, 0x4}) wait4(0x0, 0x0, 0x80000002, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000040)=0x5) tkill(r0, 0x2a) ptrace$cont(0x18, r0, 0x0, 0x0) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x31}) getsockopt$IP6T_SO_GET_ENTRIES(r4, 0x29, 0x41, &(0x7f0000000500)=ANY=[@ANYBLOB="7365637572697479000000000000000000000006000000000000000000000200000000000000e1294da536fded81cbe53bdca3a74371909220b97d520f26ab2dec2dffaee2b75b8a1ce780f7f6d2a621edddeec32a53cce7ec92eba46e5c6bb11f15b73a5c65efbb7bb931bceb81f0ea64be35157633cd49b21b47fbf88e57af885b10062bc1b7762271d7fd29"], 0x0) ptrace$cont(0x20, r0, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1f, 0x2200) 17:22:54 executing program 5: syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000000440)=""/146) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0xfffffde0) r2 = socket$rxrpc(0x21, 0x2, 0x4000000000000a) bind$rxrpc(r2, &(0x7f0000000140)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e22, 0x2, @remote, 0x4}}, 0x24) listen(r2, 0x9) modify_ldt$write(0x1, &(0x7f0000000300)={0x0, 0x20001000, 0xf6a19cc09ebfc357, 0x3, 0x400, 0x9, 0x3f, 0x100000001, 0x10001, 0x7}, 0x10) fstat(0xffffffffffffff9c, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x1ec51da1abe9f22b, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000280)={0x7, 0x0, 0x4, 0x100, {r3, r4/1000+30000}, {0x7, 0xb, 0x1, 0x10001, 0xffffffff, 0x9, "c8c0963d"}, 0x1, 0x2, @offset=0x7, 0x4}) wait4(0x0, 0x0, 0x80000002, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000040)=0x5) tkill(r0, 0x2a) ptrace$cont(0x18, r0, 0x0, 0x0) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x31}) getsockopt$IP6T_SO_GET_ENTRIES(r5, 0x29, 0x41, &(0x7f0000000500)=ANY=[@ANYBLOB="7365637572697479000000000000000000000006000000000000000000000200000000000000e1294da536fded81cbe53bdca3a74371909220b97d520f26ab2dec2dffaee2b75b8a1ce780f7f6d2a621edddeec32a53cce7ec92eba46e5c6bb11f15b73a5c65efbb7bb931bceb81f0ea64be35157633cd49b21b47fbf88e57af885b10062bc1b7762271d7fd29"], 0x0) ptrace$cont(0x20, r0, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1f, 0x2200) 17:22:54 executing program 2: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f000014f000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000200)={@remote={0xfe, 0x7}}, 0x20) 17:22:54 executing program 4: syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGMTSLOTS(0xffffffffffffffff, 0x8040450a, &(0x7f0000000440)=""/146) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0xfffffde0) r1 = socket$rxrpc(0x21, 0x2, 0x4000000000000a) bind$rxrpc(r1, &(0x7f0000000140)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e22, 0x2, @remote, 0x4}}, 0x24) listen(r1, 0x9) modify_ldt$write(0x1, &(0x7f0000000300)={0x0, 0x20001000, 0xf6a19cc09ebfc357, 0x3, 0x400, 0x9, 0x3f, 0x100000001, 0x10001, 0x7}, 0x10) fstat(0xffffffffffffff9c, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x1ec51da1abe9f22b, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000280)={0x7, 0x0, 0x4, 0x100, {r2, r3/1000+30000}, {0x7, 0xb, 0x1, 0x10001, 0xffffffff, 0x9, "c8c0963d"}, 0x1, 0x2, @offset=0x7, 0x4}) wait4(0x0, 0x0, 0x80000002, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000040)=0x5) tkill(r0, 0x2a) ptrace$cont(0x18, r0, 0x0, 0x0) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x31}) getsockopt$IP6T_SO_GET_ENTRIES(r4, 0x29, 0x41, &(0x7f0000000500)=ANY=[@ANYBLOB="7365637572697479000000000000000000000006000000000000000000000200000000000000e1294da536fded81cbe53bdca3a74371909220b97d520f26ab2dec2dffaee2b75b8a1ce780f7f6d2a621edddeec32a53cce7ec92eba46e5c6bb11f15b73a5c65efbb7bb931bceb81f0ea64be35157633cd49b21b47fbf88e57af885b10062bc1b7762271d7fd29"], 0x0) ptrace$cont(0x20, r0, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1f, 0x2200) 17:22:54 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000440)=""/146) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0xfffffde0) r3 = socket$rxrpc(0x21, 0x2, 0x4000000000000a) ioctl$int_in(r0, 0x5473, &(0x7f0000000340)=0xfffffffffffff001) bind$rxrpc(r3, &(0x7f0000000140)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e22, 0x2, @remote, 0x4}}, 0x24) listen(r3, 0x9) fstat(0xffffffffffffff9c, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x1ec51da1abe9f22b, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f0000000280)={0x7, 0x0, 0x4, 0x100, {r4, r5/1000+30000}, {0x7, 0xb, 0x1, 0x10001, 0xffffffff, 0x9, "c8c0963d"}, 0x1, 0x2, @offset=0x7, 0x4}) wait4(0x0, 0x0, 0x80000002, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000040)=0x5) tkill(r1, 0x2a) ptrace$cont(0x18, r1, 0x0, 0x0) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x31}) getsockopt$IP6T_SO_GET_ENTRIES(r6, 0x29, 0x41, &(0x7f0000000500)=ANY=[@ANYBLOB="7365637572697479000000000000000000000006000000000000000000000200000000000000e1294da536fded81cbe53bdca3a74371909220b97d520f26ab2dec2dffaee2b75b8a1ce780f7f6d2a621edddeec32a53cce7ec92eba46e5c6bb11f15b73a5c65efbb7bb931bceb81f0ea64be35157633cd49b21b47fbf88e57af885b10062bc1b7762271d7fd29"], 0x0) ptrace$cont(0x20, r1, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1f, 0x2200) 17:22:55 executing program 3: syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000000440)=""/146) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0xfffffde0) r2 = socket$rxrpc(0x21, 0x2, 0x4000000000000a) bind$rxrpc(r2, &(0x7f0000000140)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e22, 0x2, @remote, 0x4}}, 0x24) listen(r2, 0x9) modify_ldt$write(0x1, &(0x7f0000000300)={0x0, 0x20001000, 0xf6a19cc09ebfc357, 0x3, 0x400, 0x9, 0x3f, 0x100000001, 0x10001, 0x7}, 0x10) fstat(0xffffffffffffff9c, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x1ec51da1abe9f22b, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000280)={0x7, 0x0, 0x4, 0x100, {r3, r4/1000+30000}, {0x7, 0xb, 0x1, 0x10001, 0xffffffff, 0x9, "c8c0963d"}, 0x1, 0x2, @offset=0x7, 0x4}) wait4(0x0, 0x0, 0x80000002, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000040)=0x5) tkill(r0, 0x2a) ptrace$cont(0x18, r0, 0x0, 0x0) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x31}) getsockopt$IP6T_SO_GET_ENTRIES(r5, 0x29, 0x41, &(0x7f0000000500)=ANY=[@ANYBLOB="7365637572697479000000000000000000000006000000000000000000000200000000000000e1294da536fded81cbe53bdca3a74371909220b97d520f26ab2dec2dffaee2b75b8a1ce780f7f6d2a621edddeec32a53cce7ec92eba46e5c6bb11f15b73a5c65efbb7bb931bceb81f0ea64be35157633cd49b21b47fbf88e57af885b10062bc1b7762271d7fd29"], 0x0) ptrace$cont(0x20, r0, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1f, 0x2200) 17:22:55 executing program 2: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f000014f000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000200)={@remote={0xfe, 0x7}}, 0x20) 17:22:55 executing program 5: syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000000440)=""/146) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0xfffffde0) r2 = socket$rxrpc(0x21, 0x2, 0x4000000000000a) bind$rxrpc(r2, &(0x7f0000000140)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e22, 0x2, @remote, 0x4}}, 0x24) listen(r2, 0x9) modify_ldt$write(0x1, &(0x7f0000000300)={0x0, 0x20001000, 0xf6a19cc09ebfc357, 0x3, 0x400, 0x9, 0x3f, 0x100000001, 0x10001, 0x7}, 0x10) fstat(0xffffffffffffff9c, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x1ec51da1abe9f22b, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000280)={0x7, 0x0, 0x4, 0x100, {r3, r4/1000+30000}, {0x7, 0xb, 0x1, 0x10001, 0xffffffff, 0x9, "c8c0963d"}, 0x1, 0x2, @offset=0x7, 0x4}) wait4(0x0, 0x0, 0x80000002, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000040)=0x5) tkill(r0, 0x2a) ptrace$cont(0x18, r0, 0x0, 0x0) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x31}) getsockopt$IP6T_SO_GET_ENTRIES(r5, 0x29, 0x41, &(0x7f0000000500)=ANY=[@ANYBLOB="7365637572697479000000000000000000000006000000000000000000000200000000000000e1294da536fded81cbe53bdca3a74371909220b97d520f26ab2dec2dffaee2b75b8a1ce780f7f6d2a621edddeec32a53cce7ec92eba46e5c6bb11f15b73a5c65efbb7bb931bceb81f0ea64be35157633cd49b21b47fbf88e57af885b10062bc1b7762271d7fd29"], 0x0) ptrace$cont(0x20, r0, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1f, 0x2200) 17:22:55 executing program 3: syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000000440)=""/146) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0xfffffde0) r2 = socket$rxrpc(0x21, 0x2, 0x4000000000000a) bind$rxrpc(r2, &(0x7f0000000140)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e22, 0x2, @remote, 0x4}}, 0x24) listen(r2, 0x9) modify_ldt$write(0x1, &(0x7f0000000300)={0x0, 0x20001000, 0xf6a19cc09ebfc357, 0x3, 0x400, 0x9, 0x3f, 0x100000001, 0x10001, 0x7}, 0x10) fstat(0xffffffffffffff9c, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x1ec51da1abe9f22b, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000280)={0x7, 0x0, 0x4, 0x100, {r3, r4/1000+30000}, {0x7, 0xb, 0x1, 0x10001, 0xffffffff, 0x9, "c8c0963d"}, 0x1, 0x2, @offset=0x7, 0x4}) wait4(0x0, 0x0, 0x80000002, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000040)=0x5) tkill(r0, 0x2a) ptrace$cont(0x18, r0, 0x0, 0x0) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x31}) getsockopt$IP6T_SO_GET_ENTRIES(r5, 0x29, 0x41, &(0x7f0000000500)=ANY=[@ANYBLOB="7365637572697479000000000000000000000006000000000000000000000200000000000000e1294da536fded81cbe53bdca3a74371909220b97d520f26ab2dec2dffaee2b75b8a1ce780f7f6d2a621edddeec32a53cce7ec92eba46e5c6bb11f15b73a5c65efbb7bb931bceb81f0ea64be35157633cd49b21b47fbf88e57af885b10062bc1b7762271d7fd29"], 0x0) ptrace$cont(0x20, r0, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1f, 0x2200) 17:22:55 executing program 3: syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000000440)=""/146) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0xfffffde0) r2 = socket$rxrpc(0x21, 0x2, 0x4000000000000a) bind$rxrpc(r2, &(0x7f0000000140)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e22, 0x2, @remote, 0x4}}, 0x24) listen(r2, 0x9) modify_ldt$write(0x1, &(0x7f0000000300)={0x0, 0x20001000, 0xf6a19cc09ebfc357, 0x3, 0x400, 0x9, 0x3f, 0x100000001, 0x10001, 0x7}, 0x10) fstat(0xffffffffffffff9c, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x1ec51da1abe9f22b, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000280)={0x7, 0x0, 0x4, 0x100, {r3, r4/1000+30000}, {0x7, 0xb, 0x1, 0x10001, 0xffffffff, 0x9, "c8c0963d"}, 0x1, 0x2, @offset=0x7, 0x4}) wait4(0x0, 0x0, 0x80000002, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000040)=0x5) tkill(r0, 0x2a) ptrace$cont(0x18, r0, 0x0, 0x0) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x31}) getsockopt$IP6T_SO_GET_ENTRIES(r5, 0x29, 0x41, &(0x7f0000000500)=ANY=[@ANYBLOB="7365637572697479000000000000000000000006000000000000000000000200000000000000e1294da536fded81cbe53bdca3a74371909220b97d520f26ab2dec2dffaee2b75b8a1ce780f7f6d2a621edddeec32a53cce7ec92eba46e5c6bb11f15b73a5c65efbb7bb931bceb81f0ea64be35157633cd49b21b47fbf88e57af885b10062bc1b7762271d7fd29"], 0x0) ptrace$cont(0x20, r0, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1f, 0x2200) 17:22:55 executing program 2: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f000014f000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000200)={@remote={0xfe, 0x7}}, 0x20) 17:22:55 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000440)=""/146) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0xfffffde0) r3 = socket$rxrpc(0x21, 0x2, 0x4000000000000a) ioctl$int_in(r0, 0x5473, &(0x7f0000000340)=0xfffffffffffff001) bind$rxrpc(r3, &(0x7f0000000140)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e22, 0x2, @remote, 0x4}}, 0x24) listen(r3, 0x9) modify_ldt$write(0x1, &(0x7f0000000300)={0x0, 0x20001000, 0xf6a19cc09ebfc357, 0x3, 0x400, 0x9, 0x3f, 0x100000001, 0x10001, 0x7}, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x1ec51da1abe9f22b, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f0000000280)={0x7, 0x0, 0x4, 0x100, {r4, r5/1000+30000}, {0x7, 0xb, 0x1, 0x10001, 0xffffffff, 0x9, "c8c0963d"}, 0x1, 0x2, @offset=0x7, 0x4}) wait4(0x0, 0x0, 0x80000002, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000040)=0x5) tkill(r1, 0x2a) ptrace$cont(0x18, r1, 0x0, 0x0) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x31}) getsockopt$IP6T_SO_GET_ENTRIES(r6, 0x29, 0x41, &(0x7f0000000500)=ANY=[@ANYBLOB="7365637572697479000000000000000000000006000000000000000000000200000000000000e1294da536fded81cbe53bdca3a74371909220b97d520f26ab2dec2dffaee2b75b8a1ce780f7f6d2a621edddeec32a53cce7ec92eba46e5c6bb11f15b73a5c65efbb7bb931bceb81f0ea64be35157633cd49b21b47fbf88e57af885b10062bc1b7762271d7fd29"], 0x0) ptrace$cont(0x20, r1, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1f, 0x2200) 17:22:55 executing program 4: syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGMTSLOTS(0xffffffffffffffff, 0x8040450a, &(0x7f0000000440)=""/146) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0xfffffde0) r1 = socket$rxrpc(0x21, 0x2, 0x4000000000000a) bind$rxrpc(r1, &(0x7f0000000140)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e22, 0x2, @remote, 0x4}}, 0x24) listen(r1, 0x9) modify_ldt$write(0x1, &(0x7f0000000300)={0x0, 0x20001000, 0xf6a19cc09ebfc357, 0x3, 0x400, 0x9, 0x3f, 0x100000001, 0x10001, 0x7}, 0x10) fstat(0xffffffffffffff9c, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x1ec51da1abe9f22b, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000280)={0x7, 0x0, 0x4, 0x100, {r2, r3/1000+30000}, {0x7, 0xb, 0x1, 0x10001, 0xffffffff, 0x9, "c8c0963d"}, 0x1, 0x2, @offset=0x7, 0x4}) wait4(0x0, 0x0, 0x80000002, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000040)=0x5) tkill(r0, 0x2a) ptrace$cont(0x18, r0, 0x0, 0x0) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x31}) getsockopt$IP6T_SO_GET_ENTRIES(r4, 0x29, 0x41, &(0x7f0000000500)=ANY=[@ANYBLOB="7365637572697479000000000000000000000006000000000000000000000200000000000000e1294da536fded81cbe53bdca3a74371909220b97d520f26ab2dec2dffaee2b75b8a1ce780f7f6d2a621edddeec32a53cce7ec92eba46e5c6bb11f15b73a5c65efbb7bb931bceb81f0ea64be35157633cd49b21b47fbf88e57af885b10062bc1b7762271d7fd29"], 0x0) ptrace$cont(0x20, r0, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1f, 0x2200) 17:22:55 executing program 5: syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGMTSLOTS(0xffffffffffffffff, 0x8040450a, &(0x7f0000000440)=""/146) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0xfffffde0) r1 = socket$rxrpc(0x21, 0x2, 0x4000000000000a) bind$rxrpc(r1, &(0x7f0000000140)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e22, 0x2, @remote, 0x4}}, 0x24) listen(r1, 0x9) modify_ldt$write(0x1, &(0x7f0000000300)={0x0, 0x20001000, 0xf6a19cc09ebfc357, 0x3, 0x400, 0x9, 0x3f, 0x100000001, 0x10001, 0x7}, 0x10) fstat(0xffffffffffffff9c, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x1ec51da1abe9f22b, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000280)={0x7, 0x0, 0x4, 0x100, {r2, r3/1000+30000}, {0x7, 0xb, 0x1, 0x10001, 0xffffffff, 0x9, "c8c0963d"}, 0x1, 0x2, @offset=0x7, 0x4}) wait4(0x0, 0x0, 0x80000002, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000040)=0x5) tkill(r0, 0x2a) ptrace$cont(0x18, r0, 0x0, 0x0) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x31}) getsockopt$IP6T_SO_GET_ENTRIES(r4, 0x29, 0x41, &(0x7f0000000500)=ANY=[@ANYBLOB="7365637572697479000000000000000000000006000000000000000000000200000000000000e1294da536fded81cbe53bdca3a74371909220b97d520f26ab2dec2dffaee2b75b8a1ce780f7f6d2a621edddeec32a53cce7ec92eba46e5c6bb11f15b73a5c65efbb7bb931bceb81f0ea64be35157633cd49b21b47fbf88e57af885b10062bc1b7762271d7fd29"], 0x0) ptrace$cont(0x20, r0, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1f, 0x2200) 17:22:55 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f000014f000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000200)={@remote={0xfe, 0x7}}, 0x20) 17:22:55 executing program 3: syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, &(0x7f0000000440)=""/146) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0xfffffde0) r1 = socket$rxrpc(0x21, 0x2, 0x4000000000000a) bind$rxrpc(r1, &(0x7f0000000140)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e22, 0x2, @remote, 0x4}}, 0x24) listen(r1, 0x9) modify_ldt$write(0x1, &(0x7f0000000300)={0x0, 0x20001000, 0xf6a19cc09ebfc357, 0x3, 0x400, 0x9, 0x3f, 0x100000001, 0x10001, 0x7}, 0x10) fstat(0xffffffffffffff9c, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x1ec51da1abe9f22b, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000280)={0x7, 0x0, 0x4, 0x100, {r2, r3/1000+30000}, {0x7, 0xb, 0x1, 0x10001, 0xffffffff, 0x9, "c8c0963d"}, 0x1, 0x2, @offset=0x7, 0x4}) wait4(0x0, 0x0, 0x80000002, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000040)=0x5) tkill(0x0, 0x2a) ptrace$cont(0x18, 0x0, 0x0, 0x0) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x31}) getsockopt$IP6T_SO_GET_ENTRIES(r4, 0x29, 0x41, &(0x7f0000000500)=ANY=[@ANYBLOB="7365637572697479000000000000000000000006000000000000000000000200000000000000e1294da536fded81cbe53bdca3a74371909220b97d520f26ab2dec2dffaee2b75b8a1ce780f7f6d2a621edddeec32a53cce7ec92eba46e5c6bb11f15b73a5c65efbb7bb931bceb81f0ea64be35157633cd49b21b47fbf88e57af885b10062bc1b7762271d7fd29"], 0x0) ptrace$cont(0x20, 0x0, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1f, 0x2200) 17:22:55 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000440)=""/146) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0xfffffde0) r3 = socket$rxrpc(0x21, 0x2, 0x4000000000000a) ioctl$int_in(r0, 0x5473, &(0x7f0000000340)=0xfffffffffffff001) bind$rxrpc(r3, &(0x7f0000000140)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e22, 0x2, @remote, 0x4}}, 0x24) listen(r3, 0x9) fstat(0xffffffffffffff9c, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x1ec51da1abe9f22b, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f0000000280)={0x7, 0x0, 0x4, 0x100, {r4, r5/1000+30000}, {0x7, 0xb, 0x1, 0x10001, 0xffffffff, 0x9, "c8c0963d"}, 0x1, 0x2, @offset=0x7, 0x4}) wait4(0x0, 0x0, 0x80000002, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000040)=0x5) tkill(r1, 0x2a) ptrace$cont(0x18, r1, 0x0, 0x0) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x31}) getsockopt$IP6T_SO_GET_ENTRIES(r6, 0x29, 0x41, &(0x7f0000000500)=ANY=[@ANYBLOB="7365637572697479000000000000000000000006000000000000000000000200000000000000e1294da536fded81cbe53bdca3a74371909220b97d520f26ab2dec2dffaee2b75b8a1ce780f7f6d2a621edddeec32a53cce7ec92eba46e5c6bb11f15b73a5c65efbb7bb931bceb81f0ea64be35157633cd49b21b47fbf88e57af885b10062bc1b7762271d7fd29"], 0x0) ptrace$cont(0x20, r1, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1f, 0x2200) 17:22:55 executing program 4: syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGMTSLOTS(0xffffffffffffffff, 0x8040450a, &(0x7f0000000440)=""/146) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0xfffffde0) r1 = socket$rxrpc(0x21, 0x2, 0x4000000000000a) bind$rxrpc(r1, &(0x7f0000000140)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e22, 0x2, @remote, 0x4}}, 0x24) listen(r1, 0x9) modify_ldt$write(0x1, &(0x7f0000000300)={0x0, 0x20001000, 0xf6a19cc09ebfc357, 0x3, 0x400, 0x9, 0x3f, 0x100000001, 0x10001, 0x7}, 0x10) fstat(0xffffffffffffff9c, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x1ec51da1abe9f22b, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000280)={0x7, 0x0, 0x4, 0x100, {r2, r3/1000+30000}, {0x7, 0xb, 0x1, 0x10001, 0xffffffff, 0x9, "c8c0963d"}, 0x1, 0x2, @offset=0x7, 0x4}) wait4(0x0, 0x0, 0x80000002, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000040)=0x5) tkill(r0, 0x2a) ptrace$cont(0x18, r0, 0x0, 0x0) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x31}) getsockopt$IP6T_SO_GET_ENTRIES(r4, 0x29, 0x41, &(0x7f0000000500)=ANY=[@ANYBLOB="7365637572697479000000000000000000000006000000000000000000000200000000000000e1294da536fded81cbe53bdca3a74371909220b97d520f26ab2dec2dffaee2b75b8a1ce780f7f6d2a621edddeec32a53cce7ec92eba46e5c6bb11f15b73a5c65efbb7bb931bceb81f0ea64be35157633cd49b21b47fbf88e57af885b10062bc1b7762271d7fd29"], 0x0) ptrace$cont(0x20, r0, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1f, 0x2200) 17:22:55 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f000014f000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000200)={@remote={0xfe, 0x7}}, 0x20) 17:22:55 executing program 5: bind$inet6(0xffffffffffffffff, &(0x7f0000f61fe4)={0xa, 0x4e20}, 0x1c) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000d1c000)=0x6, 0x4) bind$inet6(r0, &(0x7f0000f67fe4)={0xa, 0x4e20}, 0x1c) r1 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x6, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000040)={{{@in=@broadcast, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@empty}}, &(0x7f0000000140)=0xe8) bind$xdp(r1, &(0x7f0000000200)={0x2c, 0x0, r2, 0x3, 0xffffffffffffff9c}, 0x10) dup2(r0, 0xffffffffffffffff) 17:22:56 executing program 3: syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, &(0x7f0000000440)=""/146) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0xfffffde0) r1 = socket$rxrpc(0x21, 0x2, 0x4000000000000a) bind$rxrpc(r1, &(0x7f0000000140)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e22, 0x2, @remote, 0x4}}, 0x24) listen(r1, 0x9) modify_ldt$write(0x1, &(0x7f0000000300)={0x0, 0x20001000, 0xf6a19cc09ebfc357, 0x3, 0x400, 0x9, 0x3f, 0x100000001, 0x10001, 0x7}, 0x10) fstat(0xffffffffffffff9c, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x1ec51da1abe9f22b, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000280)={0x7, 0x0, 0x4, 0x100, {r2, r3/1000+30000}, {0x7, 0xb, 0x1, 0x10001, 0xffffffff, 0x9, "c8c0963d"}, 0x1, 0x2, @offset=0x7, 0x4}) wait4(0x0, 0x0, 0x80000002, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000040)=0x5) tkill(0x0, 0x2a) ptrace$cont(0x18, 0x0, 0x0, 0x0) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x31}) getsockopt$IP6T_SO_GET_ENTRIES(r4, 0x29, 0x41, &(0x7f0000000500)=ANY=[@ANYBLOB="7365637572697479000000000000000000000006000000000000000000000200000000000000e1294da536fded81cbe53bdca3a74371909220b97d520f26ab2dec2dffaee2b75b8a1ce780f7f6d2a621edddeec32a53cce7ec92eba46e5c6bb11f15b73a5c65efbb7bb931bceb81f0ea64be35157633cd49b21b47fbf88e57af885b10062bc1b7762271d7fd29"], 0x0) ptrace$cont(0x20, 0x0, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1f, 0x2200) 17:22:56 executing program 0: sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0xa000000000000005) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgrp(0xffffffffffffffff) ioprio_get$pid(0x3, r0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x80, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0x7, &(0x7f00000001c0)={0x46, 0x0, 0x5, 0x8001}, 0x10) setpriority(0x0, r0, 0x10000) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1) getsockopt$bt_BT_SNDMTU(r2, 0x112, 0xc, &(0x7f0000000100)=0x6, 0x0) sched_getscheduler(r0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, &(0x7f0000000280)) readlink(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)=""/16, 0x10) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000040)={0x1001, &(0x7f0000000000), 0x2, 0xffffffffffffffff, 0x1}) setxattr$security_capability(&(0x7f0000000600)='./file0\x00', 0x0, &(0x7f0000000780)=@v2={0x2000000, [{0xe24}, {0x2}]}, 0x14, 0x0) write$selinux_attr(r2, &(0x7f00000000c0)='system_u:object_r:tpm_device_t:s0\x00', 0x22) pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f0000000580)='./file0\x00') clone(0x40300000, 0x0, 0xfffffffffffffffe, &(0x7f0000000240), 0xffffffffffffffff) execve(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)=[&(0x7f00000004c0)='/\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='security.capability\xf6', &(0x7f0000000440)='security.capability\x00'], &(0x7f0000000ac0)) 17:22:56 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f000014f000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000200)={@remote={0xfe, 0x7}}, 0x20) 17:22:56 executing program 1: r0 = getpgrp(0x0) gettid() r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/\x02roup.stap\x00', 0x2761, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000000)={r2, &(0x7f0000000140)}, 0xfffffffffffffc5d) write$cgroup_pid(r2, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x10, r1, 0x1) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000080)=ANY=[@ANYBLOB="00ffffffff"]) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0xc0c0583b, 0x20000001) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40042409, 0x80000) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) write$UHID_CREATE(0xffffffffffffffff, 0x0, 0x0) mkdir(0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000040)={0x0, 0x97, 0x4, [0xffffffffffff360c, 0x3, 0x0, 0x81]}, &(0x7f0000000140)=0x10) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xffffffffffffffff}, 0x0, 0x8) rt_tgsigqueueinfo(r0, 0x0, 0x7, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000006000)={0x7fffffff}, 0x8, 0x0) accept4$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, &(0x7f0000000200)=0x1c, 0x800) 17:22:56 executing program 5: perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2}, 0xfeda) r1 = socket(0x1e, 0x805, 0x0) socketpair$unix(0x1, 0x1000000005, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "02000009000000000000c0000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f020039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0) r3 = gettid() r4 = dup3(r2, r0, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) tkill(r3, 0x401104000000016) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, 0x0, 0x0) delete_module(0x0, 0xa00) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) fcntl$dupfd(0xffffffffffffffff, 0x0, r5) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) 17:22:56 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="500000001300110300000000750000000889c1b5635ae79354b565550fbb2500000021049e1837bac492d50d1ca0e1874e02113a7133d2816160ed54a98d865494a6c436b55c31cd3fec3bc3db7cc0fee2d1faa3faccbf2e5b6ba6e686eb9788876188a893ef95638d8b50e8dd7148bcb914c8d858359b6258b48f3fc2964730ea", @ANYRES32=0x0, @ANYBLOB="000000000000000008000d00000000001400280076657468305f746f5f7465616d000000140003007465616d5f736c6176655f3100000000"], 0x25f}}, 0x0) dup2(r0, r0) 17:22:56 executing program 3: syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, &(0x7f0000000440)=""/146) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0xfffffde0) r1 = socket$rxrpc(0x21, 0x2, 0x4000000000000a) bind$rxrpc(r1, &(0x7f0000000140)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e22, 0x2, @remote, 0x4}}, 0x24) listen(r1, 0x9) modify_ldt$write(0x1, &(0x7f0000000300)={0x0, 0x20001000, 0xf6a19cc09ebfc357, 0x3, 0x400, 0x9, 0x3f, 0x100000001, 0x10001, 0x7}, 0x10) fstat(0xffffffffffffff9c, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x1ec51da1abe9f22b, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000280)={0x7, 0x0, 0x4, 0x100, {r2, r3/1000+30000}, {0x7, 0xb, 0x1, 0x10001, 0xffffffff, 0x9, "c8c0963d"}, 0x1, 0x2, @offset=0x7, 0x4}) wait4(0x0, 0x0, 0x80000002, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000040)=0x5) tkill(0x0, 0x2a) ptrace$cont(0x18, 0x0, 0x0, 0x0) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x31}) getsockopt$IP6T_SO_GET_ENTRIES(r4, 0x29, 0x41, &(0x7f0000000500)=ANY=[@ANYBLOB="7365637572697479000000000000000000000006000000000000000000000200000000000000e1294da536fded81cbe53bdca3a74371909220b97d520f26ab2dec2dffaee2b75b8a1ce780f7f6d2a621edddeec32a53cce7ec92eba46e5c6bb11f15b73a5c65efbb7bb931bceb81f0ea64be35157633cd49b21b47fbf88e57af885b10062bc1b7762271d7fd29"], 0x0) ptrace$cont(0x20, 0x0, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1f, 0x2200) 17:22:56 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000000)="0adc1f023c123f3188a070") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x1b, &(0x7f0000000200)={@remote={0xfe, 0x7}}, 0x20) [ 244.100241][ T9453] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.4'. 17:22:56 executing program 3: syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) r0 = gettid() perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000000440)=""/146) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0xfffffde0) r2 = socket$rxrpc(0x21, 0x2, 0x4000000000000a) bind$rxrpc(r2, &(0x7f0000000140)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e22, 0x2, @remote, 0x4}}, 0x24) listen(r2, 0x9) modify_ldt$write(0x1, &(0x7f0000000300)={0x0, 0x20001000, 0xf6a19cc09ebfc357, 0x3, 0x400, 0x9, 0x3f, 0x100000001, 0x10001, 0x7}, 0x10) fstat(0xffffffffffffff9c, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x1ec51da1abe9f22b, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000280)={0x7, 0x0, 0x4, 0x100, {r3, r4/1000+30000}, {0x7, 0xb, 0x1, 0x10001, 0xffffffff, 0x9, "c8c0963d"}, 0x1, 0x2, @offset=0x7, 0x4}) wait4(0x0, 0x0, 0x80000002, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000040)=0x5) tkill(r0, 0x2a) ptrace$cont(0x18, r0, 0x0, 0x0) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x31}) getsockopt$IP6T_SO_GET_ENTRIES(r5, 0x29, 0x41, &(0x7f0000000500)=ANY=[@ANYBLOB="7365637572697479000000000000000000000006000000000000000000000200000000000000e1294da536fded81cbe53bdca3a74371909220b97d520f26ab2dec2dffaee2b75b8a1ce780f7f6d2a621edddeec32a53cce7ec92eba46e5c6bb11f15b73a5c65efbb7bb931bceb81f0ea64be35157633cd49b21b47fbf88e57af885b10062bc1b7762271d7fd29"], 0x0) ptrace$cont(0x20, r0, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1f, 0x2200) [ 244.185215][ T9453] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.4'. 17:22:56 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000000)="0adc1f023c123f3188a070") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x1b, &(0x7f0000000200)={@remote={0xfe, 0x7}}, 0x20) 17:22:56 executing program 4: syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, &(0x7f0000000440)=""/146) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0xfffffde0) r1 = socket$rxrpc(0x21, 0x2, 0x4000000000000a) bind$rxrpc(r1, &(0x7f0000000140)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e22, 0x2, @remote, 0x4}}, 0x24) listen(r1, 0x9) modify_ldt$write(0x1, &(0x7f0000000300)={0x0, 0x20001000, 0xf6a19cc09ebfc357, 0x3, 0x400, 0x9, 0x3f, 0x100000001, 0x10001, 0x7}, 0x10) fstat(0xffffffffffffff9c, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x1ec51da1abe9f22b, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000280)={0x7, 0x0, 0x4, 0x100, {r2, r3/1000+30000}, {0x7, 0xb, 0x1, 0x10001, 0xffffffff, 0x9, "c8c0963d"}, 0x1, 0x2, @offset=0x7, 0x4}) wait4(0x0, 0x0, 0x80000002, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000040)=0x5) tkill(0x0, 0x2a) ptrace$cont(0x18, 0x0, 0x0, 0x0) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x31}) getsockopt$IP6T_SO_GET_ENTRIES(r4, 0x29, 0x41, &(0x7f0000000500)=ANY=[@ANYBLOB="7365637572697479000000000000000000000006000000000000000000000200000000000000e1294da536fded81cbe53bdca3a74371909220b97d520f26ab2dec2dffaee2b75b8a1ce780f7f6d2a621edddeec32a53cce7ec92eba46e5c6bb11f15b73a5c65efbb7bb931bceb81f0ea64be35157633cd49b21b47fbf88e57af885b10062bc1b7762271d7fd29"], 0x0) ptrace$cont(0x20, 0x0, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1f, 0x2200) 17:22:56 executing program 5: perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2}, 0xfeda) r1 = socket(0x1e, 0x805, 0x0) socketpair$unix(0x1, 0x1000000005, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "02000009000000000000c0000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f020039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0) r3 = gettid() r4 = dup3(r2, r0, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) tkill(r3, 0x401104000000016) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, 0x0, 0x0) delete_module(0x0, 0xa00) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) fcntl$dupfd(0xffffffffffffffff, 0x0, r5) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) 17:22:56 executing program 1: r0 = getpgrp(0x0) gettid() r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/\x02roup.stap\x00', 0x2761, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000000)={r2, &(0x7f0000000140)}, 0xfffffffffffffc5d) write$cgroup_pid(r2, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x10, r1, 0x1) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000080)=ANY=[@ANYBLOB="00ffffffff"]) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0xc0c0583b, 0x20000001) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40042409, 0x80000) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) write$UHID_CREATE(0xffffffffffffffff, 0x0, 0x0) mkdir(0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000040)={0x0, 0x97, 0x4, [0xffffffffffff360c, 0x3, 0x0, 0x81]}, &(0x7f0000000140)=0x10) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xffffffffffffffff}, 0x0, 0x8) rt_tgsigqueueinfo(r0, 0x0, 0x7, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000006000)={0x7fffffff}, 0x8, 0x0) accept4$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, &(0x7f0000000200)=0x1c, 0x800) [ 244.583140][ T9445] IPVS: ftp: loaded support on port[0] = 21 [ 244.912915][ T9495] IPVS: ftp: loaded support on port[0] = 21 [ 245.320095][ C0] net_ratelimit: 24 callbacks suppressed [ 245.320119][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 245.332372][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 246.438762][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 246.444582][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 246.519261][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 246.525389][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 246.839308][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 246.845440][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 247.079647][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 247.085930][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 250.598755][ C1] net_ratelimit: 16 callbacks suppressed [ 250.598764][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 250.610247][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 250.679389][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 250.685559][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 250.998807][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 251.004607][ C0] protocol 88fb is buggy, dev hsr_slave_1