[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c.
[   35.208348][   T25] audit: type=1800 audit(1570698445.020:25): pid=7074 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2447 res=0
[   35.248017][   T25] audit: type=1800 audit(1570698445.020:26): pid=7074 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2490 res=0
[   35.268341][   T25] audit: type=1800 audit(1570698445.020:27): pid=7074 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2469 res=0
[....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c.
[....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c.

Debian GNU/Linux 7 syzkaller ttyS0

Warning: Permanently added '10.128.15.220' (ECDSA) to the list of known hosts.
2019/10/10 09:07:34 fuzzer started
2019/10/10 09:07:35 dialing manager at 10.128.0.105:34287
2019/10/10 09:07:35 syscalls: 2523
2019/10/10 09:07:35 code coverage: enabled
2019/10/10 09:07:35 comparison tracing: enabled
2019/10/10 09:07:35 extra coverage: extra coverage is not supported by the kernel
2019/10/10 09:07:35 setuid sandbox: enabled
2019/10/10 09:07:35 namespace sandbox: enabled
2019/10/10 09:07:35 Android sandbox: /sys/fs/selinux/policy does not exist
2019/10/10 09:07:35 fault injection: enabled
2019/10/10 09:07:35 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled
2019/10/10 09:07:35 net packet injection: enabled
2019/10/10 09:07:35 net device setup: enabled
2019/10/10 09:07:35 concurrency sanitizer: enabled
09:07:38 executing program 0:
prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0)
r0 = socket(0x0, 0x0, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, 0x0)
pipe(&(0x7f0000000180)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, 0x0, 0x0)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
socket$inet6(0xa, 0x2, 0x0)
r3 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x2)
r4 = perf_event_open(&(0x7f0000000980)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r4, r3, 0x0)

syzkaller login: [   48.485553][ T7248] IPVS: ftp: loaded support on port[0] = 21
09:07:38 executing program 1:
mkdir(0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x80)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x40}, 0x0, 0x0, 0x0, 0x0, 0x20000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r2, 0x4, 0x42000)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
ioctl$TIOCSISO7816(0xffffffffffffffff, 0xc0285443, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000002300470800000000000000000400000060f1d0b25ecfededda8dec4d301040e02b7fd7d025fe804e6e153a0c04"], 0x14}}, 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
socket$key(0xf, 0x3, 0x2)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e25, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
socket$netlink(0x10, 0x3, 0x0)
rmdir(0x0)
r3 = socket(0x0, 0x0, 0x5)
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$TIOCGPTLCK(0xffffffffffffffff, 0x80045439, &(0x7f00000001c0))
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60)
ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="f800000016001d0300000000000000521700001e0000007f0000000000000033a63a8c2c0000f7ffff81f2571bf5a594f3833a0a6e3618", @ANYPTR64=&(0x7f0000000300)=ANY=[@ANYRES32=r2, @ANYPTR64=&(0x7f0000000280)=ANY=[@ANYRES32=r3, @ANYRESOCT=r3], @ANYRESOCT, @ANYRESOCT, @ANYRESOCT=r5, @ANYBLOB="301e6417529ae384ee91329958ab870c72ddea6bcc9ab6d7243fe834da549fd2ddd54f83e41a16a9a3a7790a5c37861196ccc217c3bdb2fd0020c92e550f5a6b782979c6087abf5977053470e5e288088ffae3e64d91ddeba9ee37e321c896d55d83bb83b68f079707dddcb5e9813f5f5824c8a893c7e51f531a5c011328526f6df2f4fe57bd19b1405836db8a8982ff8c84e2b34d51cb7fd2a8"], @ANYBLOB], 0x3}}, 0x0)
r6 = socket$inet6(0xa, 0x803, 0x3)
getrandom(&(0x7f0000000200)=""/21, 0x15, 0x5)
ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'})

[   48.576363][ T7248] chnl_net:caif_netlink_parms(): no params data found
[   48.623022][ T7248] bridge0: port 1(bridge_slave_0) entered blocking state
[   48.644052][ T7248] bridge0: port 1(bridge_slave_0) entered disabled state
[   48.652367][ T7248] device bridge_slave_0 entered promiscuous mode
[   48.675757][ T7248] bridge0: port 2(bridge_slave_1) entered blocking state
[   48.682895][ T7248] bridge0: port 2(bridge_slave_1) entered disabled state
[   48.694026][ T7248] device bridge_slave_1 entered promiscuous mode
[   48.741086][ T7248] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   48.764971][ T7248] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   48.807362][ T7248] team0: Port device team_slave_0 added
[   48.824337][ T7248] team0: Port device team_slave_1 added
09:07:38 executing program 2:
bpf$PROG_LOAD(0x5, &(0x7f0000903000)={0x1, 0x3, &(0x7f0000519fa8), &(0x7f0000c43000)='syzkaller\x00', 0x0, 0x1000, &(0x7f00001f7000)=""/4096, 0x0, 0x0, [0xffffffc0, 0x2]}, 0x48)

[   48.976397][ T7248] device hsr_slave_0 entered promiscuous mode
[   49.083581][ T7248] device hsr_slave_1 entered promiscuous mode
[   49.131504][ T7248] bridge0: port 2(bridge_slave_1) entered blocking state
[   49.138626][ T7248] bridge0: port 2(bridge_slave_1) entered forwarding state
[   49.143711][ T7251] IPVS: ftp: loaded support on port[0] = 21
[   49.145978][ T7248] bridge0: port 1(bridge_slave_0) entered blocking state
[   49.158860][ T7248] bridge0: port 1(bridge_slave_0) entered forwarding state
[   49.182492][ T7253] IPVS: ftp: loaded support on port[0] = 21
09:07:39 executing program 3:
socket$bt_rfcomm(0x1f, 0x51253494c4300a13, 0x3)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
socket$inet6(0xa, 0x0, 0x7fc)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sched_setaffinity(0x0, 0xffffffffffffffe9, &(0x7f0000000580)=0x5)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x3, 0x5, 0x800000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x3660, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x10000, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x436c7d688a5fceb0)
r2 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f00000005c0)="4acf665ff77df4f20690a5a83bc1a1e6519321db1dc2bf7eee06d978abdfbb33f3bc7025e6befda3c827875946eb75c14639ab6e76811a733653f72afc34e5fce1bed277a8faa02e6da16041b40bab677d6555e94a42b7ac236c8c35d729ac501cf28293c919f2f3ceec4703c892adeac90504aeb3ba485e09bda66d2b96124cabc4d2e653848e2bd909287d0d2c433d72bbd4333cf37f2a8972bba453c776d2c73c61b9fa2153405fc0253992c918682c7018f6a280a9ff312ae4a6996bd9547aed66e72f94342a7d27b9483f7e2e8e3c5bbb89452fd9bb6708ae89ba29", 0xde, 0xfffffffffffffffe)
lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000001d40)={0x0, 0x0, 0x0, 0x0, <r3=>0x0})
getresgid(&(0x7f0000000400), &(0x7f0000000540), &(0x7f00000006c0)=<r4=>0x0)
keyctl$chown(0x4, r2, r3, r4)
socket$inet6(0xa, 0x80001, 0x1ff)
socketpair$unix(0x1, 0x40000000008, 0x0, &(0x7f0000000240)={<r5=>0xffffffffffffffff})
r6 = socket(0xa, 0x3, 0x8)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000800)=<r7=>0x0)
ioctl$sock_FIOSETOWN(r5, 0x8901, &(0x7f0000000440)=r7)
ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x89a2, &(0x7f0000000700)={'bridge0\x00\x00\x02\x00', 0x4})
ioctl$RTC_WKALM_RD(r0, 0x80287010, &(0x7f0000000480))
memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02\x05\x00\x00\x00\xac', 0x0)
write$binfmt_misc(r5, &(0x7f0000000c40)=ANY=[], 0x0)
close(r1)
listen(r6, 0x4)
setsockopt$inet_sctp_SCTP_EVENTS(r6, 0x84, 0xb, &(0x7f0000000740)={0x41, 0x2, 0x80000040, 0x9, 0x1f, 0x7ff, 0x10001, 0x0, 0x7d, 0xfffffffffffffff7, 0xfffffffffffffffd}, 0xfffffffffffffdce)
process_vm_writev(r7, &(0x7f0000000bc0)=[{&(0x7f0000000980)=""/165, 0xa5}, {&(0x7f0000000340)=""/27, 0x1b}, {&(0x7f0000000380)=""/52, 0x34}, {&(0x7f0000000a40)=""/73, 0x49}, {&(0x7f0000000ac0)=""/249, 0xf9}, {&(0x7f0000000780)=""/8, 0x8}], 0x6, &(0x7f0000001d00)=[{&(0x7f0000000c40)=""/4096, 0x1000}, {&(0x7f0000001c40)=""/129, 0x81}], 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040), 0x13f, 0x1}}, 0x20)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$key(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000007c0)=ANY=[@ANYPTR64=&(0x7f0000002000)=ANY=[@ANYBLOB="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"]], 0x8}}, 0xfffffffffffffff9)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="2c0000002000290f0000fa2cdd987700020000009500290000000001acf2fbd06c5362a7e91b166997e147e6e7b66a2839ff51b1972084d278520d9879d932a60a350d16ea190fd8aa31bf97bdd04b174a535481c9bdeca4c22fcf4022b3f89918efd1038836e8a68b21d1ac49720fa33a14565935d81ed51a75b99efdc6f00d0722593ea1d6351261da17942df2a1d02912417624a041545b715043f30a1c64d4fc852b9f38895442ea999fd7a5f9ade2d67f29b1e026d004855558af89075b1222b64624f5783040630b4b856a2843ea76098de2308faf9ae1780e7b251e089e9c0bda8a", @ANYRES32=0x0, @ANYRES32=0x0], 0x2c}}, 0x0)

[   49.292006][ T7248] 8021q: adding VLAN 0 to HW filter on device bond0
[   49.385712][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   49.394516][   T17] bridge0: port 1(bridge_slave_0) entered disabled state
[   49.413923][   T17] bridge0: port 2(bridge_slave_1) entered disabled state
[   49.434738][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
[   49.458106][ T7248] 8021q: adding VLAN 0 to HW filter on device team0
[   49.500474][ T2846] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   49.523982][ T2846] bridge0: port 1(bridge_slave_0) entered blocking state
[   49.531073][ T2846] bridge0: port 1(bridge_slave_0) entered forwarding state
[   49.572479][ T7251] chnl_net:caif_netlink_parms(): no params data found
[   49.589656][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   49.604684][   T17] bridge0: port 2(bridge_slave_1) entered blocking state
[   49.611783][   T17] bridge0: port 2(bridge_slave_1) entered forwarding state
09:07:39 executing program 4:
socket(0x11, 0x0, 0x0)
dup(0xffffffffffffffff)
ioctl$VIDIOC_LOG_STATUS(0xffffffffffffffff, 0x5646, 0x0)
syz_open_dev$radio(0x0, 0x0, 0x2)
creat(&(0x7f00000000c0)='./file0\x00', 0x0)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00')
r0 = gettid()
tkill(r0, 0x3c)
chdir(0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f00000003c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
msync(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x94331c6b254b5f04)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r6, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
sendto$inet(r6, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000040)='vegas\x00', 0x6)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x25}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r7)
r8 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x25}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x252, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x8]}, 0x48)
sendto$inet(r6, &(0x7f00000012c0)=' ', 0x64c8, 0x3, 0x0, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYRESOCT=r4, @ANYRES32, @ANYRES32=0x0, @ANYPTR64, @ANYRES32], 0x5}}, 0x0)

[   49.671725][ T7253] chnl_net:caif_netlink_parms(): no params data found
[   49.689122][ T7248] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   49.714743][ T7248] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   49.739575][ T2846] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   49.766294][ T2846] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   49.785784][ T2846] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   49.796257][ T2846] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   49.814806][ T2846] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   49.833960][ T2846] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   49.846171][ T2846] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   49.855676][ T2846] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   49.882043][ T7248] 8021q: adding VLAN 0 to HW filter on device batadv0
[   49.900539][ T7261] IPVS: ftp: loaded support on port[0] = 21
[   49.927334][ T2846] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   49.944467][ T2846] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   49.980003][ T7251] bridge0: port 1(bridge_slave_0) entered blocking state
[   49.999428][ T7251] bridge0: port 1(bridge_slave_0) entered disabled state
[   50.023398][ T7251] device bridge_slave_0 entered promiscuous mode
[   50.060229][ T7251] bridge0: port 2(bridge_slave_1) entered blocking state
[   50.067866][ T7251] bridge0: port 2(bridge_slave_1) entered disabled state
[   50.076403][ T7251] device bridge_slave_1 entered promiscuous mode
[   50.093309][ T7253] bridge0: port 1(bridge_slave_0) entered blocking state
[   50.100406][ T7253] bridge0: port 1(bridge_slave_0) entered disabled state
[   50.109061][ T7253] device bridge_slave_0 entered promiscuous mode
[   50.133046][ T7264] IPVS: ftp: loaded support on port[0] = 21
[   50.146500][ T7253] bridge0: port 2(bridge_slave_1) entered blocking state
[   50.157617][ T7253] bridge0: port 2(bridge_slave_1) entered disabled state
[   50.170431][ T7253] device bridge_slave_1 entered promiscuous mode
[   50.230792][ T7251] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   50.267217][ T7253] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
09:07:40 executing program 5:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={<r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe80, 0x0, &(0x7f00000000c0)="b9ff0300000d698cb89e40f086dd01000005a4004000ffa377fbac141414e9", 0x0, 0x100}, 0x28)

[   50.289809][ T7253] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   50.317060][ T7251] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   50.370114][ T7253] team0: Port device team_slave_0 added
[   50.380378][ T7251] team0: Port device team_slave_0 added
[   50.404337][ T7253] team0: Port device team_slave_1 added
[   50.411060][ T7251] team0: Port device team_slave_1 added
[   50.436038][    C1] hrtimer: interrupt took 29426 ns
[   50.546487][ T7251] device hsr_slave_0 entered promiscuous mode
[   50.593533][ T7251] device hsr_slave_1 entered promiscuous mode
[   50.633452][ T7251] debugfs: Directory 'hsr0' with parent '/' already present!
[   50.735875][ T7253] device hsr_slave_0 entered promiscuous mode
[   50.813479][ T7253] device hsr_slave_1 entered promiscuous mode
[   50.883356][ T7253] debugfs: Directory 'hsr0' with parent '/' already present!
[   50.907472][ T7261] chnl_net:caif_netlink_parms(): no params data found
[   50.939066][ T7275] IPVS: ftp: loaded support on port[0] = 21
[   50.966603][ T7264] chnl_net:caif_netlink_parms(): no params data found
[   51.027138][ T7261] bridge0: port 1(bridge_slave_0) entered blocking state
[   51.034314][ T7261] bridge0: port 1(bridge_slave_0) entered disabled state
[   51.042194][ T7261] device bridge_slave_0 entered promiscuous mode
[   51.077822][ T7261] bridge0: port 2(bridge_slave_1) entered blocking state
[   51.085148][ T7261] bridge0: port 2(bridge_slave_1) entered disabled state
[   51.097025][ T7261] device bridge_slave_1 entered promiscuous mode
[   51.123591][ T7264] bridge0: port 1(bridge_slave_0) entered blocking state
[   51.130717][ T7264] bridge0: port 1(bridge_slave_0) entered disabled state
[   51.139766][ T7264] device bridge_slave_0 entered promiscuous mode
[   51.177621][ T7251] 8021q: adding VLAN 0 to HW filter on device bond0
[   51.188925][ T7264] bridge0: port 2(bridge_slave_1) entered blocking state
[   51.197267][ T7264] bridge0: port 2(bridge_slave_1) entered disabled state
[   51.205719][ T7264] device bridge_slave_1 entered promiscuous mode
09:07:41 executing program 0:
prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0)
r0 = socket(0x0, 0x0, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, 0x0)
pipe(&(0x7f0000000180)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, 0x0, 0x0)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
socket$inet6(0xa, 0x2, 0x0)
r3 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x2)
r4 = perf_event_open(&(0x7f0000000980)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r4, r3, 0x0)

[   51.242715][ T7264] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   51.254418][ T7264] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   51.265481][ T7261] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   51.289373][ T7251] 8021q: adding VLAN 0 to HW filter on device team0
[   51.315148][ T7256] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   51.329184][ T7256] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   51.350787][ T7261] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   51.369226][ T7253] 8021q: adding VLAN 0 to HW filter on device bond0
[   51.394244][ T2846] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   51.402954][ T2846] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   51.412450][ T2846] bridge0: port 1(bridge_slave_0) entered blocking state
[   51.419575][ T2846] bridge0: port 1(bridge_slave_0) entered forwarding state
[   51.435488][ T7264] team0: Port device team_slave_0 added
[   51.442740][ T2846] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   51.465803][ T7264] team0: Port device team_slave_1 added
[   51.474673][ T7261] team0: Port device team_slave_0 added
[   51.481442][ T7261] team0: Port device team_slave_1 added
[   51.500438][ T3513] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   51.509547][ T3513] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   51.522732][ T3513] bridge0: port 2(bridge_slave_1) entered blocking state
[   51.529989][ T3513] bridge0: port 2(bridge_slave_1) entered forwarding state
[   51.550233][ T7275] chnl_net:caif_netlink_parms(): no params data found
[   51.567479][ T7253] 8021q: adding VLAN 0 to HW filter on device team0
[   51.626177][ T7264] device hsr_slave_0 entered promiscuous mode
[   51.673795][ T7264] device hsr_slave_1 entered promiscuous mode
[   51.713689][ T7264] debugfs: Directory 'hsr0' with parent '/' already present!
[   51.722978][ T2846] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   51.730700][ T2846] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   51.738662][ T2846] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   51.780805][ T7256] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   51.790353][ T7256] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   51.799399][ T7256] bridge0: port 1(bridge_slave_0) entered blocking state
[   51.806942][ T7256] bridge0: port 1(bridge_slave_0) entered forwarding state
[   51.815400][ T7256] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   51.825257][ T7256] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   51.834143][ T7256] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   51.842821][ T7256] bridge0: port 2(bridge_slave_1) entered blocking state
[   51.849936][ T7256] bridge0: port 2(bridge_slave_1) entered forwarding state
[   51.859081][ T7256] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   51.868415][ T7256] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   51.877439][ T7256] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   51.886998][ T7256] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   51.896080][ T7256] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   51.906963][ T7256] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   51.915284][ T7256] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   51.924150][ T7256] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   51.975698][ T7261] device hsr_slave_0 entered promiscuous mode
[   52.013655][ T7261] device hsr_slave_1 entered promiscuous mode
[   52.053246][ T7261] debugfs: Directory 'hsr0' with parent '/' already present!
[   52.065554][ T3513] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   52.074279][ T3513] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   52.082751][ T3513] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   52.091961][ T3513] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   52.101086][ T3513] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   52.109832][ T3513] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   52.119765][ T3513] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   52.136399][ T7251] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
09:07:41 executing program 0:
prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0)
r0 = socket(0x0, 0x0, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, 0x0)
pipe(&(0x7f0000000180)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, 0x0, 0x0)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
socket$inet6(0xa, 0x2, 0x0)
r3 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x2)
r4 = perf_event_open(&(0x7f0000000980)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r4, r3, 0x0)

[   52.148581][ T7251] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   52.164954][ T7275] bridge0: port 1(bridge_slave_0) entered blocking state
[   52.175281][ T7275] bridge0: port 1(bridge_slave_0) entered disabled state
[   52.197517][ T7275] device bridge_slave_0 entered promiscuous mode
[   52.226684][ T7253] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   52.237242][ T7253] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   52.253195][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   52.261811][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   52.271531][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   52.281120][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   52.289976][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   52.298413][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   52.308274][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   52.316249][ T7275] bridge0: port 2(bridge_slave_1) entered blocking state
[   52.323954][ T7275] bridge0: port 2(bridge_slave_1) entered disabled state
[   52.332619][ T7275] device bridge_slave_1 entered promiscuous mode
[   52.376391][ T7251] 8021q: adding VLAN 0 to HW filter on device batadv0
[   52.397352][ T7275] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   52.409578][ T7253] 8021q: adding VLAN 0 to HW filter on device batadv0
[   52.424731][ T7275] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   52.464538][ T7261] 8021q: adding VLAN 0 to HW filter on device bond0
[   52.489773][ T7264] 8021q: adding VLAN 0 to HW filter on device bond0
[   52.500554][ T7275] team0: Port device team_slave_0 added
[   52.516271][ T7261] 8021q: adding VLAN 0 to HW filter on device team0
[   52.536097][ T7275] team0: Port device team_slave_1 added
[   52.543139][ T3513] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   52.551355][ T3513] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   52.564439][ T7264] 8021q: adding VLAN 0 to HW filter on device team0
[   52.587896][ T7261] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   52.598368][ T7261] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   52.648221][ T7300] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   52.667656][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   52.697173][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   52.705366][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   52.716716][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   52.725619][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   52.732657][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   52.741051][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   52.750106][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   52.758939][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   52.766021][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   52.774271][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   52.783928][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   52.793658][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   52.802851][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   52.812453][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   52.821548][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   52.830540][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   52.839439][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   52.848476][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   52.857372][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
09:07:42 executing program 2:
bpf$PROG_LOAD(0x5, &(0x7f0000903000)={0x1, 0x3, &(0x7f0000519fa8), &(0x7f0000c43000)='syzkaller\x00', 0x0, 0x1000, &(0x7f00001f7000)=""/4096, 0x0, 0x0, [0xffffffc0, 0x2]}, 0x48)

[   52.916221][ T7275] device hsr_slave_0 entered promiscuous mode
[   52.956182][ T7275] device hsr_slave_1 entered promiscuous mode
[   52.998089][ T7275] debugfs: Directory 'hsr0' with parent '/' already present!
09:07:42 executing program 0:
prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0)
r0 = socket(0x0, 0x0, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, 0x0)
pipe(&(0x7f0000000180)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, 0x0, 0x0)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
socket$inet6(0xa, 0x2, 0x0)
r3 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x2)
r4 = perf_event_open(&(0x7f0000000980)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r4, r3, 0x0)

[   53.053629][ T7301] bridge0: port 2(bridge_slave_1) entered disabled state
[   53.061881][ T7301] bridge0: port 1(bridge_slave_0) entered disabled state
09:07:42 executing program 2:
bpf$PROG_LOAD(0x5, &(0x7f0000903000)={0x1, 0x3, &(0x7f0000519fa8), &(0x7f0000c43000)='syzkaller\x00', 0x0, 0x1000, &(0x7f00001f7000)=""/4096, 0x0, 0x0, [0xffffffc0, 0x2]}, 0x48)

09:07:43 executing program 2:
bpf$PROG_LOAD(0x5, &(0x7f0000903000)={0x1, 0x3, &(0x7f0000519fa8), &(0x7f0000c43000)='syzkaller\x00', 0x0, 0x1000, &(0x7f00001f7000)=""/4096, 0x0, 0x0, [0xffffffc0, 0x2]}, 0x48)

[   53.499307][ T3022] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   53.524062][ T3022] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   53.532719][ T3022] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   53.574387][ T3022] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   53.600379][ T3022] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
09:07:43 executing program 2:
prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0)
r0 = socket(0x0, 0x0, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, 0x0)
pipe(&(0x7f0000000180)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, 0x0, 0x0)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
socket$inet6(0xa, 0x2, 0x0)
r3 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x2)
r4 = perf_event_open(&(0x7f0000000980)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r4, r3, 0x0)

[   53.618450][ T3022] bridge0: port 1(bridge_slave_0) entered blocking state
[   53.625645][ T3022] bridge0: port 1(bridge_slave_0) entered forwarding state
[   53.653970][ T3022] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   53.662892][ T3022] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   53.683557][ T3022] bridge0: port 2(bridge_slave_1) entered blocking state
[   53.690755][ T3022] bridge0: port 2(bridge_slave_1) entered forwarding state
[   53.707652][ T3022] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   53.732136][ T3022] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   53.741597][ T3022] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   53.750331][ T3022] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   53.789185][ T7264] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   53.813215][ T7264] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   53.851603][ T7261] 8021q: adding VLAN 0 to HW filter on device batadv0
[   53.874317][ T3513] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   53.882420][ T3513] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
09:07:43 executing program 1:
mkdir(0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x80)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x40}, 0x0, 0x0, 0x0, 0x0, 0x20000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r2, 0x4, 0x42000)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
ioctl$TIOCSISO7816(0xffffffffffffffff, 0xc0285443, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000002300470800000000000000000400000060f1d0b25ecfededda8dec4d301040e02b7fd7d025fe804e6e153a0c04"], 0x14}}, 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
socket$key(0xf, 0x3, 0x2)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e25, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
socket$netlink(0x10, 0x3, 0x0)
rmdir(0x0)
r3 = socket(0x0, 0x0, 0x5)
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$TIOCGPTLCK(0xffffffffffffffff, 0x80045439, &(0x7f00000001c0))
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60)
ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="f800000016001d0300000000000000521700001e0000007f0000000000000033a63a8c2c0000f7ffff81f2571bf5a594f3833a0a6e3618", @ANYPTR64=&(0x7f0000000300)=ANY=[@ANYRES32=r2, @ANYPTR64=&(0x7f0000000280)=ANY=[@ANYRES32=r3, @ANYRESOCT=r3], @ANYRESOCT, @ANYRESOCT, @ANYRESOCT=r5, @ANYBLOB="301e6417529ae384ee91329958ab870c72ddea6bcc9ab6d7243fe834da549fd2ddd54f83e41a16a9a3a7790a5c37861196ccc217c3bdb2fd0020c92e550f5a6b782979c6087abf5977053470e5e288088ffae3e64d91ddeba9ee37e321c896d55d83bb83b68f079707dddcb5e9813f5f5824c8a893c7e51f531a5c011328526f6df2f4fe57bd19b1405836db8a8982ff8c84e2b34d51cb7fd2a8"], @ANYBLOB], 0x3}}, 0x0)
r6 = socket$inet6(0xa, 0x803, 0x3)
getrandom(&(0x7f0000000200)=""/21, 0x15, 0x5)
ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'})

[   53.918836][ T3513] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   53.949080][ T3513] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   53.990416][ T3513] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   54.004735][ T3513] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   54.013798][ T3513] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   54.022487][ T3513] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
09:07:43 executing program 0:
mkdir(0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x80)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x40}, 0x0, 0x0, 0x0, 0x0, 0x20000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r2, 0x4, 0x42000)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
ioctl$TIOCSISO7816(0xffffffffffffffff, 0xc0285443, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000002300470800000000000000000400000060f1d0b25ecfededda8dec4d301040e02b7fd7d025fe804e6e153a0c04"], 0x14}}, 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
socket$key(0xf, 0x3, 0x2)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e25, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
socket$netlink(0x10, 0x3, 0x0)
rmdir(0x0)
r3 = socket(0x0, 0x0, 0x5)
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$TIOCGPTLCK(0xffffffffffffffff, 0x80045439, &(0x7f00000001c0))
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60)
ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="f800000016001d0300000000000000521700001e0000007f0000000000000033a63a8c2c0000f7ffff81f2571bf5a594f3833a0a6e3618", @ANYPTR64=&(0x7f0000000300)=ANY=[@ANYRES32=r2, @ANYPTR64=&(0x7f0000000280)=ANY=[@ANYRES32=r3, @ANYRESOCT=r3], @ANYRESOCT, @ANYRESOCT, @ANYRESOCT=r5, @ANYBLOB="301e6417529ae384ee91329958ab870c72ddea6bcc9ab6d7243fe834da549fd2ddd54f83e41a16a9a3a7790a5c37861196ccc217c3bdb2fd0020c92e550f5a6b782979c6087abf5977053470e5e288088ffae3e64d91ddeba9ee37e321c896d55d83bb83b68f079707dddcb5e9813f5f5824c8a893c7e51f531a5c011328526f6df2f4fe57bd19b1405836db8a8982ff8c84e2b34d51cb7fd2a8"], @ANYBLOB], 0x3}}, 0x0)
r6 = socket$inet6(0xa, 0x803, 0x3)
getrandom(&(0x7f0000000200)=""/21, 0x15, 0x5)
ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'})

[   54.042575][ T7264] 8021q: adding VLAN 0 to HW filter on device batadv0
[   54.073058][ T7303] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   54.286840][ T7340] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.295994][ T7340] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.955662][ T7275] 8021q: adding VLAN 0 to HW filter on device bond0
[   54.963387][ T7347] bridge0: port 3(gretap0) entered blocking state
[   54.973831][ T7347] bridge0: port 3(gretap0) entered disabled state
[   55.017943][ T7347] device gretap0 entered promiscuous mode
[   55.044405][ T7347] bridge0: port 3(gretap0) entered blocking state
[   55.051220][ T7347] bridge0: port 3(gretap0) entered forwarding state
[   55.071187][ T7351] devpts: called with bogus options
[   55.103691][ T7348] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'.
[   55.148634][ T7275] 8021q: adding VLAN 0 to HW filter on device team0
[   55.274167][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   55.285278][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   55.483699][ T7348] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'.
[   55.494048][ T3513] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   55.503003][ T3513] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   55.523833][ T3513] bridge0: port 1(bridge_slave_0) entered blocking state
09:07:45 executing program 2:
prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0)
r0 = socket(0x0, 0x0, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, 0x0)
pipe(&(0x7f0000000180)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, 0x0, 0x0)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
socket$inet6(0xa, 0x2, 0x0)
r3 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x2)
r4 = perf_event_open(&(0x7f0000000980)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r4, r3, 0x0)

[   55.531047][ T3513] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.539165][ T3513] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   55.548404][ T3513] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   55.556959][ T3513] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.564667][ T3513] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.572785][ T3513] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   55.654678][ T3022] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   55.681738][ T3513] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   55.692642][ T3513] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   55.702675][ T3513] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   55.733779][ T3513] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   55.742916][ T3513] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   55.752377][ T3513] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   55.761632][ T3513] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   55.770575][ T3513] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   55.779570][ T3513] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   55.789804][ T7275] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   55.873520][ T3022] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   55.885893][ T7356] devpts: called with bogus options
09:07:45 executing program 1:
mkdir(0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x80)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x40}, 0x0, 0x0, 0x0, 0x0, 0x20000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r2, 0x4, 0x42000)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
ioctl$TIOCSISO7816(0xffffffffffffffff, 0xc0285443, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000002300470800000000000000000400000060f1d0b25ecfededda8dec4d301040e02b7fd7d025fe804e6e153a0c04"], 0x14}}, 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
socket$key(0xf, 0x3, 0x2)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e25, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
socket$netlink(0x10, 0x3, 0x0)
rmdir(0x0)
r3 = socket(0x0, 0x0, 0x5)
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$TIOCGPTLCK(0xffffffffffffffff, 0x80045439, &(0x7f00000001c0))
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60)
ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="f800000016001d0300000000000000521700001e0000007f0000000000000033a63a8c2c0000f7ffff81f2571bf5a594f3833a0a6e3618", @ANYPTR64=&(0x7f0000000300)=ANY=[@ANYRES32=r2, @ANYPTR64=&(0x7f0000000280)=ANY=[@ANYRES32=r3, @ANYRESOCT=r3], @ANYRESOCT, @ANYRESOCT, @ANYRESOCT=r5, @ANYBLOB="301e6417529ae384ee91329958ab870c72ddea6bcc9ab6d7243fe834da549fd2ddd54f83e41a16a9a3a7790a5c37861196ccc217c3bdb2fd0020c92e550f5a6b782979c6087abf5977053470e5e288088ffae3e64d91ddeba9ee37e321c896d55d83bb83b68f079707dddcb5e9813f5f5824c8a893c7e51f531a5c011328526f6df2f4fe57bd19b1405836db8a8982ff8c84e2b34d51cb7fd2a8"], @ANYBLOB], 0x3}}, 0x0)
r6 = socket$inet6(0xa, 0x803, 0x3)
getrandom(&(0x7f0000000200)=""/21, 0x15, 0x5)
ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'})

[   56.008136][ T7275] 8021q: adding VLAN 0 to HW filter on device batadv0
09:07:46 executing program 5:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={<r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe80, 0x0, &(0x7f00000000c0)="b9ff0300000d698cb89e40f086dd01000005a4004000ffa377fbac141414e9", 0x0, 0x100}, 0x28)

09:07:46 executing program 0:
mkdir(0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x80)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x40}, 0x0, 0x0, 0x0, 0x0, 0x20000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r2, 0x4, 0x42000)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
ioctl$TIOCSISO7816(0xffffffffffffffff, 0xc0285443, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000002300470800000000000000000400000060f1d0b25ecfededda8dec4d301040e02b7fd7d025fe804e6e153a0c04"], 0x14}}, 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
socket$key(0xf, 0x3, 0x2)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e25, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
socket$netlink(0x10, 0x3, 0x0)
rmdir(0x0)
r3 = socket(0x0, 0x0, 0x5)
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$TIOCGPTLCK(0xffffffffffffffff, 0x80045439, &(0x7f00000001c0))
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60)
ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="f800000016001d0300000000000000521700001e0000007f0000000000000033a63a8c2c0000f7ffff81f2571bf5a594f3833a0a6e3618", @ANYPTR64=&(0x7f0000000300)=ANY=[@ANYRES32=r2, @ANYPTR64=&(0x7f0000000280)=ANY=[@ANYRES32=r3, @ANYRESOCT=r3], @ANYRESOCT, @ANYRESOCT, @ANYRESOCT=r5, @ANYBLOB="301e6417529ae384ee91329958ab870c72ddea6bcc9ab6d7243fe834da549fd2ddd54f83e41a16a9a3a7790a5c37861196ccc217c3bdb2fd0020c92e550f5a6b782979c6087abf5977053470e5e288088ffae3e64d91ddeba9ee37e321c896d55d83bb83b68f079707dddcb5e9813f5f5824c8a893c7e51f531a5c011328526f6df2f4fe57bd19b1405836db8a8982ff8c84e2b34d51cb7fd2a8"], @ANYBLOB], 0x3}}, 0x0)
r6 = socket$inet6(0xa, 0x803, 0x3)
getrandom(&(0x7f0000000200)=""/21, 0x15, 0x5)
ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'})

09:07:46 executing program 3:
socket$bt_rfcomm(0x1f, 0x51253494c4300a13, 0x3)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
socket$inet6(0xa, 0x0, 0x7fc)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sched_setaffinity(0x0, 0xffffffffffffffe9, &(0x7f0000000580)=0x5)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x3, 0x5, 0x800000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x3660, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x10000, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x436c7d688a5fceb0)
r2 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f00000005c0)="4acf665ff77df4f20690a5a83bc1a1e6519321db1dc2bf7eee06d978abdfbb33f3bc7025e6befda3c827875946eb75c14639ab6e76811a733653f72afc34e5fce1bed277a8faa02e6da16041b40bab677d6555e94a42b7ac236c8c35d729ac501cf28293c919f2f3ceec4703c892adeac90504aeb3ba485e09bda66d2b96124cabc4d2e653848e2bd909287d0d2c433d72bbd4333cf37f2a8972bba453c776d2c73c61b9fa2153405fc0253992c918682c7018f6a280a9ff312ae4a6996bd9547aed66e72f94342a7d27b9483f7e2e8e3c5bbb89452fd9bb6708ae89ba29", 0xde, 0xfffffffffffffffe)
lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000001d40)={0x0, 0x0, 0x0, 0x0, <r3=>0x0})
getresgid(&(0x7f0000000400), &(0x7f0000000540), &(0x7f00000006c0)=<r4=>0x0)
keyctl$chown(0x4, r2, r3, r4)
socket$inet6(0xa, 0x80001, 0x1ff)
socketpair$unix(0x1, 0x40000000008, 0x0, &(0x7f0000000240)={<r5=>0xffffffffffffffff})
r6 = socket(0xa, 0x3, 0x8)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000800)=<r7=>0x0)
ioctl$sock_FIOSETOWN(r5, 0x8901, &(0x7f0000000440)=r7)
ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x89a2, &(0x7f0000000700)={'bridge0\x00\x00\x02\x00', 0x4})
ioctl$RTC_WKALM_RD(r0, 0x80287010, &(0x7f0000000480))
memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02\x05\x00\x00\x00\xac', 0x0)
write$binfmt_misc(r5, &(0x7f0000000c40)=ANY=[], 0x0)
close(r1)
listen(r6, 0x4)
setsockopt$inet_sctp_SCTP_EVENTS(r6, 0x84, 0xb, &(0x7f0000000740)={0x41, 0x2, 0x80000040, 0x9, 0x1f, 0x7ff, 0x10001, 0x0, 0x7d, 0xfffffffffffffff7, 0xfffffffffffffffd}, 0xfffffffffffffdce)
process_vm_writev(r7, &(0x7f0000000bc0)=[{&(0x7f0000000980)=""/165, 0xa5}, {&(0x7f0000000340)=""/27, 0x1b}, {&(0x7f0000000380)=""/52, 0x34}, {&(0x7f0000000a40)=""/73, 0x49}, {&(0x7f0000000ac0)=""/249, 0xf9}, {&(0x7f0000000780)=""/8, 0x8}], 0x6, &(0x7f0000001d00)=[{&(0x7f0000000c40)=""/4096, 0x1000}, {&(0x7f0000001c40)=""/129, 0x81}], 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040), 0x13f, 0x1}}, 0x20)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$key(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000007c0)=ANY=[@ANYPTR64=&(0x7f0000002000)=ANY=[@ANYBLOB="afda8f976352d83ae67c093dd154ac0c86ab570c896f30bdfcb7def634a0e53f2241f59d81888fa42d976ae44c77000142db69273ffb81896bca3128b445a74f915506df2dde3688a33a8988081b710a6c3d2ca54a49e57da8ef042d968373bcea3f8db77dd8c3c05616fd6f9c65e2f9be6eb52107c1b0cb801d8616818944f8c68c4fefc60e51eda69f5deca02bea80a26b2f3a28dc0b4b7f8c702d5b1517031175242c72edcdf586649ffb8819a7896d90f490a1ceeef54718e818cb36a6723a522e856814b91416b8f5195d9296ba3c095a2f93f92b2755a0fb69c3b6309717a8828b7a1adfa23a1594a783d64318916e8209e1e73007005e42c4c100000000000000000000000000000000788cc241223de1caee3510959fe74abe5162657c6f8d1241843607958e07422bed9fd636eb131fd89a404bc214b1f2d51375fccd780bac05feec2676ba3523b9059bf185a49aa0c96bca0a63e5a64e16b087240eab20216c76c92d10a9b53e6f7f8b1a8b6f7c6aaf5da4bde360e4b8cd8e9de37d86092793517a95097858b40696e92d95831579c70e9adb11cf46241cd4d49e53fb73cb060317910f62e196b98b6d9e9d346f02e76c3d5cba1f5ab4710f5026416d505069b19ba2d3db8d9b174826b97db51e9118cb092a41be0f12563f7a3434d579f33c7cf3b1000000000000000000000000000000009e577de5102f0aad6a9c3888deea5facd33fed8a4496bcee488c9b5b124346c0f30fd73679d290f8af7388f42407829f475a2b73bf2e506d01245f8d26cb12029565838e1107cc06fefa14b8d3f51e68ead9d0bc79f0ba3539d96fa6bef3c4c51260206fdafb0d474fc1075d9155207e7653000000000000000000dc2838ac731fe291ff4527460c3fe22c9ecabac11ec704d731c29296f0c3ae98b4de3e2f19457f240a"]], 0x8}}, 0xfffffffffffffff9)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="2c0000002000290f0000fa2cdd987700020000009500290000000001acf2fbd06c5362a7e91b166997e147e6e7b66a2839ff51b1972084d278520d9879d932a60a350d16ea190fd8aa31bf97bdd04b174a535481c9bdeca4c22fcf4022b3f89918efd1038836e8a68b21d1ac49720fa33a14565935d81ed51a75b99efdc6f00d0722593ea1d6351261da17942df2a1d02912417624a041545b715043f30a1c64d4fc852b9f38895442ea999fd7a5f9ade2d67f29b1e026d004855558af89075b1222b64624f5783040630b4b856a2843ea76098de2308faf9ae1780e7b251e089e9c0bda8a", @ANYRES32=0x0, @ANYRES32=0x0], 0x2c}}, 0x0)

09:07:46 executing program 4:
socket(0x11, 0x0, 0x0)
dup(0xffffffffffffffff)
ioctl$VIDIOC_LOG_STATUS(0xffffffffffffffff, 0x5646, 0x0)
syz_open_dev$radio(0x0, 0x0, 0x2)
creat(&(0x7f00000000c0)='./file0\x00', 0x0)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00')
r0 = gettid()
tkill(r0, 0x3c)
chdir(0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f00000003c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
msync(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x94331c6b254b5f04)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r6, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
sendto$inet(r6, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000040)='vegas\x00', 0x6)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x25}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r7)
r8 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x25}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x252, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x8]}, 0x48)
sendto$inet(r6, &(0x7f00000012c0)=' ', 0x64c8, 0x3, 0x0, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYRESOCT=r4, @ANYRES32, @ANYRES32=0x0, @ANYPTR64, @ANYRES32], 0x5}}, 0x0)

[   56.443495][ T7379] devpts: called with bogus options
09:07:46 executing program 4:
socket(0x11, 0x0, 0x0)
dup(0xffffffffffffffff)
ioctl$VIDIOC_LOG_STATUS(0xffffffffffffffff, 0x5646, 0x0)
syz_open_dev$radio(0x0, 0x0, 0x2)
creat(&(0x7f00000000c0)='./file0\x00', 0x0)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00')
r0 = gettid()
tkill(r0, 0x3c)
chdir(0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f00000003c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
msync(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x94331c6b254b5f04)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r6, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
sendto$inet(r6, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000040)='vegas\x00', 0x6)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x25}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r7)
r8 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x25}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x252, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x8]}, 0x48)
sendto$inet(r6, &(0x7f00000012c0)=' ', 0x64c8, 0x3, 0x0, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYRESOCT=r4, @ANYRES32, @ANYRES32=0x0, @ANYPTR64, @ANYRES32], 0x5}}, 0x0)

09:07:46 executing program 2:
prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0)
r0 = socket(0x0, 0x0, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, 0x0)
pipe(&(0x7f0000000180)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, 0x0, 0x0)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
socket$inet6(0xa, 0x2, 0x0)
r3 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x2)
r4 = perf_event_open(&(0x7f0000000980)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r4, r3, 0x0)

[   56.554329][ T7381] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'.
09:07:46 executing program 3:
socket$bt_rfcomm(0x1f, 0x51253494c4300a13, 0x3)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
socket$inet6(0xa, 0x0, 0x7fc)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sched_setaffinity(0x0, 0xffffffffffffffe9, &(0x7f0000000580)=0x5)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x3, 0x5, 0x800000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x3660, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x10000, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x436c7d688a5fceb0)
r2 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f00000005c0)="4acf665ff77df4f20690a5a83bc1a1e6519321db1dc2bf7eee06d978abdfbb33f3bc7025e6befda3c827875946eb75c14639ab6e76811a733653f72afc34e5fce1bed277a8faa02e6da16041b40bab677d6555e94a42b7ac236c8c35d729ac501cf28293c919f2f3ceec4703c892adeac90504aeb3ba485e09bda66d2b96124cabc4d2e653848e2bd909287d0d2c433d72bbd4333cf37f2a8972bba453c776d2c73c61b9fa2153405fc0253992c918682c7018f6a280a9ff312ae4a6996bd9547aed66e72f94342a7d27b9483f7e2e8e3c5bbb89452fd9bb6708ae89ba29", 0xde, 0xfffffffffffffffe)
lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000001d40)={0x0, 0x0, 0x0, 0x0, <r3=>0x0})
getresgid(&(0x7f0000000400), &(0x7f0000000540), &(0x7f00000006c0)=<r4=>0x0)
keyctl$chown(0x4, r2, r3, r4)
socket$inet6(0xa, 0x80001, 0x1ff)
socketpair$unix(0x1, 0x40000000008, 0x0, &(0x7f0000000240)={<r5=>0xffffffffffffffff})
r6 = socket(0xa, 0x3, 0x8)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000800)=<r7=>0x0)
ioctl$sock_FIOSETOWN(r5, 0x8901, &(0x7f0000000440)=r7)
ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x89a2, &(0x7f0000000700)={'bridge0\x00\x00\x02\x00', 0x4})
ioctl$RTC_WKALM_RD(r0, 0x80287010, &(0x7f0000000480))
memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02\x05\x00\x00\x00\xac', 0x0)
write$binfmt_misc(r5, &(0x7f0000000c40)=ANY=[], 0x0)
close(r1)
listen(r6, 0x4)
setsockopt$inet_sctp_SCTP_EVENTS(r6, 0x84, 0xb, &(0x7f0000000740)={0x41, 0x2, 0x80000040, 0x9, 0x1f, 0x7ff, 0x10001, 0x0, 0x7d, 0xfffffffffffffff7, 0xfffffffffffffffd}, 0xfffffffffffffdce)
process_vm_writev(r7, &(0x7f0000000bc0)=[{&(0x7f0000000980)=""/165, 0xa5}, {&(0x7f0000000340)=""/27, 0x1b}, {&(0x7f0000000380)=""/52, 0x34}, {&(0x7f0000000a40)=""/73, 0x49}, {&(0x7f0000000ac0)=""/249, 0xf9}, {&(0x7f0000000780)=""/8, 0x8}], 0x6, &(0x7f0000001d00)=[{&(0x7f0000000c40)=""/4096, 0x1000}, {&(0x7f0000001c40)=""/129, 0x81}], 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040), 0x13f, 0x1}}, 0x20)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$key(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000007c0)=ANY=[@ANYPTR64=&(0x7f0000002000)=ANY=[@ANYBLOB="afda8f976352d83ae67c093dd154ac0c86ab570c896f30bdfcb7def634a0e53f2241f59d81888fa42d976ae44c77000142db69273ffb81896bca3128b445a74f915506df2dde3688a33a8988081b710a6c3d2ca54a49e57da8ef042d968373bcea3f8db77dd8c3c05616fd6f9c65e2f9be6eb52107c1b0cb801d8616818944f8c68c4fefc60e51eda69f5deca02bea80a26b2f3a28dc0b4b7f8c702d5b1517031175242c72edcdf586649ffb8819a7896d90f490a1ceeef54718e818cb36a6723a522e856814b91416b8f5195d9296ba3c095a2f93f92b2755a0fb69c3b6309717a8828b7a1adfa23a1594a783d64318916e8209e1e73007005e42c4c100000000000000000000000000000000788cc241223de1caee3510959fe74abe5162657c6f8d1241843607958e07422bed9fd636eb131fd89a404bc214b1f2d51375fccd780bac05feec2676ba3523b9059bf185a49aa0c96bca0a63e5a64e16b087240eab20216c76c92d10a9b53e6f7f8b1a8b6f7c6aaf5da4bde360e4b8cd8e9de37d86092793517a95097858b40696e92d95831579c70e9adb11cf46241cd4d49e53fb73cb060317910f62e196b98b6d9e9d346f02e76c3d5cba1f5ab4710f5026416d505069b19ba2d3db8d9b174826b97db51e9118cb092a41be0f12563f7a3434d579f33c7cf3b1000000000000000000000000000000009e577de5102f0aad6a9c3888deea5facd33fed8a4496bcee488c9b5b124346c0f30fd73679d290f8af7388f42407829f475a2b73bf2e506d01245f8d26cb12029565838e1107cc06fefa14b8d3f51e68ead9d0bc79f0ba3539d96fa6bef3c4c51260206fdafb0d474fc1075d9155207e7653000000000000000000dc2838ac731fe291ff4527460c3fe22c9ecabac11ec704d731c29296f0c3ae98b4de3e2f19457f240a"]], 0x8}}, 0xfffffffffffffff9)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="2c0000002000290f0000fa2cdd987700020000009500290000000001acf2fbd06c5362a7e91b166997e147e6e7b66a2839ff51b1972084d278520d9879d932a60a350d16ea190fd8aa31bf97bdd04b174a535481c9bdeca4c22fcf4022b3f89918efd1038836e8a68b21d1ac49720fa33a14565935d81ed51a75b99efdc6f00d0722593ea1d6351261da17942df2a1d02912417624a041545b715043f30a1c64d4fc852b9f38895442ea999fd7a5f9ade2d67f29b1e026d004855558af89075b1222b64624f5783040630b4b856a2843ea76098de2308faf9ae1780e7b251e089e9c0bda8a", @ANYRES32=0x0, @ANYRES32=0x0], 0x2c}}, 0x0)

[   56.707768][ T7394] devpts: called with bogus options
09:07:46 executing program 5:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={<r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe80, 0x0, &(0x7f00000000c0)="b9ff0300000d698cb89e40f086dd01000005a4004000ffa377fbac141414e9", 0x0, 0x100}, 0x28)

[   56.859439][ T7399] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'.
[   56.931747][ T2557] device bridge_slave_1 left promiscuous mode
[   56.960619][ T2557] bridge0: port 2(bridge_slave_1) entered disabled state
09:07:46 executing program 3:
socket$bt_rfcomm(0x1f, 0x51253494c4300a13, 0x3)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
socket$inet6(0xa, 0x0, 0x7fc)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sched_setaffinity(0x0, 0xffffffffffffffe9, &(0x7f0000000580)=0x5)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x3, 0x5, 0x800000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x3660, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x10000, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x436c7d688a5fceb0)
r2 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f00000005c0)="4acf665ff77df4f20690a5a83bc1a1e6519321db1dc2bf7eee06d978abdfbb33f3bc7025e6befda3c827875946eb75c14639ab6e76811a733653f72afc34e5fce1bed277a8faa02e6da16041b40bab677d6555e94a42b7ac236c8c35d729ac501cf28293c919f2f3ceec4703c892adeac90504aeb3ba485e09bda66d2b96124cabc4d2e653848e2bd909287d0d2c433d72bbd4333cf37f2a8972bba453c776d2c73c61b9fa2153405fc0253992c918682c7018f6a280a9ff312ae4a6996bd9547aed66e72f94342a7d27b9483f7e2e8e3c5bbb89452fd9bb6708ae89ba29", 0xde, 0xfffffffffffffffe)
lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000001d40)={0x0, 0x0, 0x0, 0x0, <r3=>0x0})
getresgid(&(0x7f0000000400), &(0x7f0000000540), &(0x7f00000006c0)=<r4=>0x0)
keyctl$chown(0x4, r2, r3, r4)
socket$inet6(0xa, 0x80001, 0x1ff)
socketpair$unix(0x1, 0x40000000008, 0x0, &(0x7f0000000240)={<r5=>0xffffffffffffffff})
r6 = socket(0xa, 0x3, 0x8)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000800)=<r7=>0x0)
ioctl$sock_FIOSETOWN(r5, 0x8901, &(0x7f0000000440)=r7)
ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x89a2, &(0x7f0000000700)={'bridge0\x00\x00\x02\x00', 0x4})
ioctl$RTC_WKALM_RD(r0, 0x80287010, &(0x7f0000000480))
memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02\x05\x00\x00\x00\xac', 0x0)
write$binfmt_misc(r5, &(0x7f0000000c40)=ANY=[], 0x0)
close(r1)
listen(r6, 0x4)
setsockopt$inet_sctp_SCTP_EVENTS(r6, 0x84, 0xb, &(0x7f0000000740)={0x41, 0x2, 0x80000040, 0x9, 0x1f, 0x7ff, 0x10001, 0x0, 0x7d, 0xfffffffffffffff7, 0xfffffffffffffffd}, 0xfffffffffffffdce)
process_vm_writev(r7, &(0x7f0000000bc0)=[{&(0x7f0000000980)=""/165, 0xa5}, {&(0x7f0000000340)=""/27, 0x1b}, {&(0x7f0000000380)=""/52, 0x34}, {&(0x7f0000000a40)=""/73, 0x49}, {&(0x7f0000000ac0)=""/249, 0xf9}, {&(0x7f0000000780)=""/8, 0x8}], 0x6, &(0x7f0000001d00)=[{&(0x7f0000000c40)=""/4096, 0x1000}, {&(0x7f0000001c40)=""/129, 0x81}], 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040), 0x13f, 0x1}}, 0x20)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$key(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000007c0)=ANY=[@ANYPTR64=&(0x7f0000002000)=ANY=[@ANYBLOB="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"]], 0x8}}, 0xfffffffffffffff9)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="2c0000002000290f0000fa2cdd987700020000009500290000000001acf2fbd06c5362a7e91b166997e147e6e7b66a2839ff51b1972084d278520d9879d932a60a350d16ea190fd8aa31bf97bdd04b174a535481c9bdeca4c22fcf4022b3f89918efd1038836e8a68b21d1ac49720fa33a14565935d81ed51a75b99efdc6f00d0722593ea1d6351261da17942df2a1d02912417624a041545b715043f30a1c64d4fc852b9f38895442ea999fd7a5f9ade2d67f29b1e026d004855558af89075b1222b64624f5783040630b4b856a2843ea76098de2308faf9ae1780e7b251e089e9c0bda8a", @ANYRES32=0x0, @ANYRES32=0x0], 0x2c}}, 0x0)

[   57.045074][ T2557] device bridge_slave_0 left promiscuous mode
[   57.071844][ T2557] bridge0: port 1(bridge_slave_0) entered disabled state
09:07:47 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={<r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe80, 0x0, &(0x7f00000000c0)="b9ff0300000d698cb89e40f086dd01000005a4004000ffa377fbac141414e9", 0x0, 0x100}, 0x28)

09:07:47 executing program 4:
socket(0x11, 0x0, 0x0)
dup(0xffffffffffffffff)
ioctl$VIDIOC_LOG_STATUS(0xffffffffffffffff, 0x5646, 0x0)
syz_open_dev$radio(0x0, 0x0, 0x2)
creat(&(0x7f00000000c0)='./file0\x00', 0x0)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00')
r0 = gettid()
tkill(r0, 0x3c)
chdir(0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f00000003c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
msync(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x94331c6b254b5f04)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r6, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
sendto$inet(r6, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000040)='vegas\x00', 0x6)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x25}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r7)
r8 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x25}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x252, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x8]}, 0x48)
sendto$inet(r6, &(0x7f00000012c0)=' ', 0x64c8, 0x3, 0x0, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYRESOCT=r4, @ANYRES32, @ANYRES32=0x0, @ANYPTR64, @ANYRES32], 0x5}}, 0x0)

[   57.766277][ T7420] devpts: called with bogus options
[   58.593525][ T2557] device hsr_slave_0 left promiscuous mode
[   58.636034][ T2557] device hsr_slave_1 left promiscuous mode
[   58.692133][ T2557] team0 (unregistering): Port device team_slave_1 removed
[   58.703778][ T2557] team0 (unregistering): Port device team_slave_0 removed
[   58.714678][ T2557] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   58.758561][ T2557] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   58.832187][ T2557] bond0 (unregistering): Released all slaves
[   58.943695][ T7411] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'.
[   58.967773][ T7412] IPVS: ftp: loaded support on port[0] = 21
[   58.971081][ T7423] IPVS: ftp: loaded support on port[0] = 21
[   59.258594][ T7412] chnl_net:caif_netlink_parms(): no params data found
[   59.316668][ T7423] chnl_net:caif_netlink_parms(): no params data found
[   59.354445][ T7412] bridge0: port 1(bridge_slave_0) entered blocking state
[   59.361537][ T7412] bridge0: port 1(bridge_slave_0) entered disabled state
[   59.370222][ T7412] device bridge_slave_0 entered promiscuous mode
[   59.389167][ T7412] bridge0: port 2(bridge_slave_1) entered blocking state
[   59.396479][ T7412] bridge0: port 2(bridge_slave_1) entered disabled state
[   59.404979][ T7412] device bridge_slave_1 entered promiscuous mode
[   59.441475][ T7412] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   59.450659][ T7423] bridge0: port 1(bridge_slave_0) entered blocking state
[   59.458063][ T7423] bridge0: port 1(bridge_slave_0) entered disabled state
[   59.472286][ T7423] device bridge_slave_0 entered promiscuous mode
[   59.482455][ T7412] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   59.497242][ T7423] bridge0: port 2(bridge_slave_1) entered blocking state
[   59.504849][ T7423] bridge0: port 2(bridge_slave_1) entered disabled state
[   59.512905][ T7423] device bridge_slave_1 entered promiscuous mode
[   59.558214][ T7412] team0: Port device team_slave_0 added
[   59.572030][ T7423] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   59.582821][ T7412] team0: Port device team_slave_1 added
[   59.595723][ T7423] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   59.716567][ T7412] device hsr_slave_0 entered promiscuous mode
[   59.763698][ T7412] device hsr_slave_1 entered promiscuous mode
[   59.823707][ T7412] debugfs: Directory 'hsr0' with parent '/' already present!
[   59.832287][ T7423] team0: Port device team_slave_0 added
[   59.840695][ T7423] team0: Port device team_slave_1 added
[   59.853075][ T7412] bridge0: port 2(bridge_slave_1) entered blocking state
[   59.860191][ T7412] bridge0: port 2(bridge_slave_1) entered forwarding state
[   59.867521][ T7412] bridge0: port 1(bridge_slave_0) entered blocking state
[   59.874586][ T7412] bridge0: port 1(bridge_slave_0) entered forwarding state
[   59.935556][ T7423] device hsr_slave_0 entered promiscuous mode
[   59.983922][ T7423] device hsr_slave_1 entered promiscuous mode
[   60.023278][ T7423] debugfs: Directory 'hsr0' with parent '/' already present!
[   60.031602][ T3022] bridge0: port 1(bridge_slave_0) entered disabled state
[   60.040490][ T3022] bridge0: port 2(bridge_slave_1) entered disabled state
[   60.119704][ T7412] 8021q: adding VLAN 0 to HW filter on device bond0
[   60.141349][ T7423] 8021q: adding VLAN 0 to HW filter on device bond0
[   60.155549][ T2846] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   60.167575][ T2846] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   60.175544][ T2846] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   60.183819][ T2846] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   60.193520][ T7423] 8021q: adding VLAN 0 to HW filter on device team0
[   60.209998][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   60.218920][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   60.228077][   T17] bridge0: port 1(bridge_slave_0) entered blocking state
[   60.235163][   T17] bridge0: port 1(bridge_slave_0) entered forwarding state
[   60.243874][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   60.252472][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   60.262131][   T17] bridge0: port 2(bridge_slave_1) entered blocking state
[   60.269171][   T17] bridge0: port 2(bridge_slave_1) entered forwarding state
[   60.277518][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   60.287937][ T7412] 8021q: adding VLAN 0 to HW filter on device team0
[   60.312768][ T7412] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   60.323867][ T7412] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   60.343370][ T7256] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   60.351666][ T7256] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   60.360620][ T7256] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   60.369225][ T7256] bridge0: port 1(bridge_slave_0) entered blocking state
[   60.376940][ T7256] bridge0: port 1(bridge_slave_0) entered forwarding state
[   60.385539][ T7256] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   60.394624][ T7256] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   60.403100][ T7256] bridge0: port 2(bridge_slave_1) entered blocking state
[   60.413894][ T7256] bridge0: port 2(bridge_slave_1) entered forwarding state
[   60.421999][ T7256] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   60.431180][ T7256] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   60.440200][ T7256] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   60.449176][ T7256] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   60.458014][ T7256] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   60.466954][ T7256] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   60.475821][ T7256] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   60.484653][ T7256] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   60.493361][ T7256] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   60.501943][ T7256] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   60.511084][ T7256] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   60.519896][ T7256] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   60.533027][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   60.551918][ T7412] 8021q: adding VLAN 0 to HW filter on device batadv0
[   60.562728][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   60.574403][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   60.584045][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   60.592851][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   60.601889][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   60.610404][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   60.619044][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   60.627849][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   60.637589][ T7423] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   60.646014][ T3022] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   60.667668][ T7423] 8021q: adding VLAN 0 to HW filter on device batadv0
[   60.980046][ T7441] bridge0: port 2(bridge_slave_1) entered disabled state
[   60.988636][ T7441] bridge0: port 1(bridge_slave_0) entered disabled state
[   61.459055][ T7448] bridge0: port 2(bridge_slave_1) entered disabled state
[   61.468425][ T7448] bridge0: port 1(bridge_slave_0) entered disabled state
09:07:51 executing program 1:
mkdir(0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x80)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x40}, 0x0, 0x0, 0x0, 0x0, 0x20000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r2, 0x4, 0x42000)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
ioctl$TIOCSISO7816(0xffffffffffffffff, 0xc0285443, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000002300470800000000000000000400000060f1d0b25ecfededda8dec4d301040e02b7fd7d025fe804e6e153a0c04"], 0x14}}, 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
socket$key(0xf, 0x3, 0x2)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e25, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
socket$netlink(0x10, 0x3, 0x0)
rmdir(0x0)
r3 = socket(0x0, 0x0, 0x5)
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$TIOCGPTLCK(0xffffffffffffffff, 0x80045439, &(0x7f00000001c0))
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60)
ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="f800000016001d0300000000000000521700001e0000007f0000000000000033a63a8c2c0000f7ffff81f2571bf5a594f3833a0a6e3618", @ANYPTR64=&(0x7f0000000300)=ANY=[@ANYRES32=r2, @ANYPTR64=&(0x7f0000000280)=ANY=[@ANYRES32=r3, @ANYRESOCT=r3], @ANYRESOCT, @ANYRESOCT, @ANYRESOCT=r5, @ANYBLOB="301e6417529ae384ee91329958ab870c72ddea6bcc9ab6d7243fe834da549fd2ddd54f83e41a16a9a3a7790a5c37861196ccc217c3bdb2fd0020c92e550f5a6b782979c6087abf5977053470e5e288088ffae3e64d91ddeba9ee37e321c896d55d83bb83b68f079707dddcb5e9813f5f5824c8a893c7e51f531a5c011328526f6df2f4fe57bd19b1405836db8a8982ff8c84e2b34d51cb7fd2a8"], @ANYBLOB], 0x3}}, 0x0)
r6 = socket$inet6(0xa, 0x803, 0x3)
getrandom(&(0x7f0000000200)=""/21, 0x15, 0x5)
ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'})

09:07:51 executing program 4:
socket(0x11, 0x0, 0x0)
dup(0xffffffffffffffff)
ioctl$VIDIOC_LOG_STATUS(0xffffffffffffffff, 0x5646, 0x0)
syz_open_dev$radio(0x0, 0x0, 0x2)
creat(&(0x7f00000000c0)='./file0\x00', 0x0)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00')
r0 = gettid()
tkill(r0, 0x3c)
chdir(0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f00000003c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
msync(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x94331c6b254b5f04)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r6, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
sendto$inet(r6, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000040)='vegas\x00', 0x6)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x25}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r7)
r8 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x25}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x252, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x8]}, 0x48)
sendto$inet(r6, &(0x7f00000012c0)=' ', 0x64c8, 0x3, 0x0, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYRESOCT=r4, @ANYRES32, @ANYRES32=0x0, @ANYPTR64, @ANYRES32], 0x5}}, 0x0)

[   61.592968][ T7451] devpts: called with bogus options
09:07:51 executing program 0:
mkdir(0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x80)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x40}, 0x0, 0x0, 0x0, 0x0, 0x20000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r2, 0x4, 0x42000)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
ioctl$TIOCSISO7816(0xffffffffffffffff, 0xc0285443, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000002300470800000000000000000400000060f1d0b25ecfededda8dec4d301040e02b7fd7d025fe804e6e153a0c04"], 0x14}}, 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
socket$key(0xf, 0x3, 0x2)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e25, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
socket$netlink(0x10, 0x3, 0x0)
rmdir(0x0)
r3 = socket(0x0, 0x0, 0x5)
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$TIOCGPTLCK(0xffffffffffffffff, 0x80045439, &(0x7f00000001c0))
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60)
ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="f800000016001d0300000000000000521700001e0000007f0000000000000033a63a8c2c0000f7ffff81f2571bf5a594f3833a0a6e3618", @ANYPTR64=&(0x7f0000000300)=ANY=[@ANYRES32=r2, @ANYPTR64=&(0x7f0000000280)=ANY=[@ANYRES32=r3, @ANYRESOCT=r3], @ANYRESOCT, @ANYRESOCT, @ANYRESOCT=r5, @ANYBLOB="301e6417529ae384ee91329958ab870c72ddea6bcc9ab6d7243fe834da549fd2ddd54f83e41a16a9a3a7790a5c37861196ccc217c3bdb2fd0020c92e550f5a6b782979c6087abf5977053470e5e288088ffae3e64d91ddeba9ee37e321c896d55d83bb83b68f079707dddcb5e9813f5f5824c8a893c7e51f531a5c011328526f6df2f4fe57bd19b1405836db8a8982ff8c84e2b34d51cb7fd2a8"], @ANYBLOB], 0x3}}, 0x0)
r6 = socket$inet6(0xa, 0x803, 0x3)
getrandom(&(0x7f0000000200)=""/21, 0x15, 0x5)
ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'})

09:07:51 executing program 5:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={<r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe80, 0x0, &(0x7f00000000c0)="b9ff0300000d698cb89e40f086dd01000005a4004000ffa377fbac141414e9", 0x0, 0x100}, 0x28)

09:07:51 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={<r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe80, 0x0, &(0x7f00000000c0)="b9ff0300000d698cb89e40f086dd01000005a4004000ffa377fbac141414e9", 0x0, 0x100}, 0x28)

09:07:51 executing program 3:
socket(0x11, 0x0, 0x0)
dup(0xffffffffffffffff)
ioctl$VIDIOC_LOG_STATUS(0xffffffffffffffff, 0x5646, 0x0)
syz_open_dev$radio(0x0, 0x0, 0x2)
creat(&(0x7f00000000c0)='./file0\x00', 0x0)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00')
r0 = gettid()
tkill(r0, 0x3c)
chdir(0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f00000003c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
msync(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x94331c6b254b5f04)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r6, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
sendto$inet(r6, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000040)='vegas\x00', 0x6)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x25}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r7)
r8 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x25}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x252, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x8]}, 0x48)
sendto$inet(r6, &(0x7f00000012c0)=' ', 0x64c8, 0x3, 0x0, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYRESOCT=r4, @ANYRES32, @ANYRES32=0x0, @ANYPTR64, @ANYRES32], 0x5}}, 0x0)

09:07:51 executing program 4:
socket(0x11, 0x0, 0x0)
dup(0xffffffffffffffff)
ioctl$VIDIOC_LOG_STATUS(0xffffffffffffffff, 0x5646, 0x0)
syz_open_dev$radio(0x0, 0x0, 0x2)
creat(&(0x7f00000000c0)='./file0\x00', 0x0)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00')
r0 = gettid()
tkill(r0, 0x3c)
chdir(0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f00000003c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
msync(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x94331c6b254b5f04)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r6, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
sendto$inet(r6, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000040)='vegas\x00', 0x6)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x25}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r7)
r8 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x25}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x252, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x8]}, 0x48)
sendto$inet(r6, &(0x7f00000012c0)=' ', 0x64c8, 0x3, 0x0, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYRESOCT=r4, @ANYRES32, @ANYRES32=0x0, @ANYPTR64, @ANYRES32], 0x5}}, 0x0)

[   61.903395][ T7236] ==================================================================
[   61.911536][ T7236] BUG: KCSAN: data-race in pipe_poll / pipe_read
[   61.917891][ T7236] 
[   61.920217][ T7236] write to 0xffff88810824c338 of 4 bytes by task 7275 on cpu 1:
[   61.927846][ T7236]  pipe_read+0x2a5/0x5e0
[   61.932088][ T7236]  new_sync_read+0x389/0x4f0
[   61.936688][ T7236]  __vfs_read+0xb1/0xc0
[   61.940844][ T7236]  vfs_read+0x143/0x2c0
[   61.945003][ T7236]  ksys_read+0xd5/0x1b0
[   61.949148][ T7236]  __x64_sys_read+0x4c/0x60
[   61.953655][ T7236]  do_syscall_64+0xcf/0x2f0
[   61.958159][ T7236]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[   61.964034][ T7236] 
[   61.966357][ T7236] read to 0xffff88810824c338 of 4 bytes by task 7236 on cpu 0:
[   61.973897][ T7236]  pipe_poll+0x84/0x1d0
[   61.978060][ T7236]  ep_item_poll.isra.0+0x90/0x190
[   61.983084][ T7236]  ep_send_events_proc+0x113/0x5c0
[   61.988197][ T7236]  ep_scan_ready_list.constprop.0+0x189/0x500
[   61.994278][ T7236]  ep_poll+0xe3/0x900
[   61.998256][ T7236]  do_epoll_wait+0x162/0x180
[   62.002847][ T7236]  __x64_sys_epoll_pwait+0xcd/0x170
[   62.008046][ T7236]  do_syscall_64+0xcf/0x2f0
[   62.012556][ T7236]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[   62.018436][ T7236] 
[   62.020758][ T7236] Reported by Kernel Concurrency Sanitizer on:
[   62.026912][ T7236] CPU: 0 PID: 7236 Comm: syz-fuzzer Not tainted 5.3.0+ #0
[   62.034029][ T7236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[   62.044075][ T7236] ==================================================================
[   62.052908][ T7236] Kernel panic - not syncing: panic_on_warn set ...
[   62.059490][ T7236] CPU: 0 PID: 7236 Comm: syz-fuzzer Not tainted 5.3.0+ #0
[   62.066590][ T7236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[   62.076643][ T7236] Call Trace:
[   62.079929][ T7236]  dump_stack+0xf5/0x159
[   62.084163][ T7236]  panic+0x209/0x639
[   62.088053][ T7236]  ? entry_SYSCALL_64_after_hwframe+0x44/0xa9
[   62.094106][ T7236]  ? vprintk_func+0x8d/0x140
[   62.098699][ T7236]  kcsan_report.cold+0xc/0x1b
[   62.103453][ T7236]  __kcsan_setup_watchpoint+0x3ee/0x510
[   62.108986][ T7236]  __tsan_read4+0x2c/0x30
[   62.113305][ T7236]  pipe_poll+0x84/0x1d0
[   62.117459][ T7236]  ? generic_pipe_buf_confirm+0x20/0x20
[   62.122994][ T7236]  ep_item_poll.isra.0+0x90/0x190
[   62.128010][ T7236]  ep_send_events_proc+0x113/0x5c0
[   62.133118][ T7236]  ep_scan_ready_list.constprop.0+0x189/0x500
[   62.139181][ T7236]  ? ep_loop_check_proc+0x2f0/0x2f0
[   62.144376][ T7236]  ep_poll+0xe3/0x900
[   62.148363][ T7236]  ? __fget+0xb8/0x1d0
[   62.152424][ T7236]  ? __kcsan_setup_watchpoint+0x96/0x510
[   62.158047][ T7236]  ? __fget_light+0xaf/0x190
[   62.162633][ T7236]  do_epoll_wait+0x162/0x180
[   62.167212][ T7236]  __x64_sys_epoll_pwait+0xcd/0x170
[   62.172427][ T7236]  do_syscall_64+0xcf/0x2f0
[   62.176921][ T7236]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[   62.182806][ T7236] RIP: 0033:0x45b300
[   62.186694][ T7236] Code: 0f 05 89 44 24 20 c3 cc cc cc 8b 7c 24 08 48 8b 74 24 10 8b 54 24 18 44 8b 54 24 1c 49 c7 c0 00 00 00 00 b8 19 01 00 00 0f 05 <89> 44 24 20 c3 cc cc cc cc cc cc cc cc cc cc cc 8b 7c 24 08 48 c7
[   62.206282][ T7236] RSP: 002b:000000c420051860 EFLAGS: 00000246 ORIG_RAX: 0000000000000119
[   62.214682][ T7236] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 000000000045b300
[   62.222639][ T7236] RDX: 0000000000000080 RSI: 000000c4200518a0 RDI: 0000000000000004
[   62.230598][ T7236] RBP: 000000c420051ea0 R08: 0000000000000000 R09: 0000000000000000
[   62.238556][ T7236] R10: 0000000000000000 R11: 0000000000000246 R12: 000000c4203c9bf8
[   62.246513][ T7236] R13: 0000000000000001 R14: 000000c42050e060 R15: 0000000000000001
[   62.255733][ T7236] Kernel Offset: disabled
[   62.260099][ T7236] Rebooting in 86400 seconds..