fff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x2000, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000180)={0x0, 0x8001}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r2, 0x84, 0x5, &(0x7f0000000200)={r3, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, 0x84) ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000100)={r2, 0x0, 0xfffffffffffff000}) 16:18:49 executing program 3: ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x83, &(0x7f0000000080)={'f%lter\x00', 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x3f000000], 0x0, 0x0, 0x0}, &(0x7f0000000140)=0x78) 16:18:49 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000500)='cgroup.procs\x00', 0x2, 0x0) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x5}, 0x2c) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x8, 0x4, 0x100000001, 0x0, r2}, 0x2c) bpf$MAP_DELETE_ELEM(0x14, &(0x7f0000000200)={r3, &(0x7f00000002c0)}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x200, &(0x7f0000000180), 0x0, &(0x7f0000000080), &(0x7f0000000180)) mknod(&(0x7f0000f80000)='./file0\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$bt_hidp(0x1f, 0x3, 0x6) syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000002c0)=""/183, &(0x7f00000003c0)=0xb7) ptrace(0x10, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000080)=0x4c000000, 0x10a000d50) 16:18:49 executing program 3: ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x83, &(0x7f0000000080)={'f%lter\x00', 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x40000000], 0x0, 0x0, 0x0}, &(0x7f0000000140)=0x78) 16:18:49 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x83, &(0x7f0000000080)={'f%lter\x00', 0x0, 0x0, 0x0, [], 0x0, 0x0, 0x0}, &(0x7f0000000140)=0x78) 16:18:49 executing program 3: ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x83, &(0x7f0000000080)={'f%lter\x00', 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000000000], 0x0, 0x0, 0x0}, &(0x7f0000000140)=0x78) 16:18:49 executing program 0: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x3}}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000040)={0x0, 0x28, "cc3f13c265bbaf2f9776602d0ec6fea23a483ce2731b1b01f8ab00f686b31550a33dd287db9a27a2"}, &(0x7f0000000080)=0x30) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f00000000c0)=@sack_info={r2, 0x6, 0x400}, &(0x7f0000000140)=0xc) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 16:18:49 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, &(0x7f0000ac5000), 0x4) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x80, 0x0) r1 = memfd_create(&(0x7f0000000080)='dev ', 0x3) write(r1, &(0x7f0000000040)="16", 0x1) sendfile(0xffffffffffffffff, r1, &(0x7f0000000000), 0xffff) fcntl$addseals(r1, 0x409, 0xd) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8}) r2 = gettid() dup(0xffffffffffffffff) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1004000000016) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$IMCLEAR_L2(r3, 0x80044946, &(0x7f0000000040)=0x7f) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}}) 16:18:49 executing program 3: ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x83, &(0x7f0000000080)={'f%lter\x00', 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x100000000000000], 0x0, 0x0, 0x0}, &(0x7f0000000140)=0x78) [ 2030.165745] protocol 88fb is buggy, dev hsr_slave_0 [ 2030.171420] protocol 88fb is buggy, dev hsr_slave_1 16:18:50 executing program 4: socketpair$unix(0x1, 0x8000100000000001, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'eql\x00\x00\xdf\xdd\x94D\x8f\x15\xcf!\x00', 0xec38ed91f1c74952}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000080)={'eql\x00\x00\xa1\xa9[\x00%?\x00\x00\x03\xca\x00', @ifru_mtu=0x1}) 16:18:50 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000500)='cgroup.procs\x00', 0x2, 0x0) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x5}, 0x2c) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x8, 0x4, 0x100000001, 0x0, r2}, 0x2c) bpf$MAP_DELETE_ELEM(0x15, &(0x7f0000000200)={r3, &(0x7f00000002c0)}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x200, &(0x7f0000000180), 0x0, &(0x7f0000000080), &(0x7f0000000180)) mknod(&(0x7f0000f80000)='./file0\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$bt_hidp(0x1f, 0x3, 0x6) syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000002c0)=""/183, &(0x7f00000003c0)=0xb7) ptrace(0x10, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000080)=0x4c000000, 0x10a000d50) 16:18:50 executing program 3: ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x83, &(0x7f0000000080)={'f%lter\x00', 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x200000000000000], 0x0, 0x0, 0x0}, &(0x7f0000000140)=0x78) 16:18:50 executing program 0: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) r1 = fcntl$getown(r0, 0x9) sched_setscheduler(r1, 0x1, &(0x7f0000000040)=0x10001) 16:18:50 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, &(0x7f0000ac5000), 0x4) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x80, 0x0) r1 = memfd_create(&(0x7f0000000080)='dev ', 0x3) write(r1, &(0x7f0000000040)="16", 0x1) sendfile(0xffffffffffffffff, r1, &(0x7f0000000000), 0xffff) fcntl$addseals(r1, 0x409, 0xd) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8}) r2 = gettid() dup(0xffffffffffffffff) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1004000000016) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$IMCLEAR_L2(r3, 0x80044946, &(0x7f0000000040)=0x7f) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}}) 16:18:50 executing program 5: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$DRM_IOCTL_MODE_SETCRTC(r1, 0xc06864a2, 0x0) clone(0x80200003, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r2, 0x0, 0x83, &(0x7f0000000080)={'f%lter\x00', 0x0, 0x0, 0x0, [], 0x0, 0x0, 0x0}, &(0x7f0000000140)=0x78) 16:18:50 executing program 3: ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x83, &(0x7f0000000080)={'f%lter\x00', 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x600000000000000], 0x0, 0x0, 0x0}, &(0x7f0000000140)=0x78) 16:18:50 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, &(0x7f0000ac5000), 0x4) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x80, 0x0) r1 = memfd_create(&(0x7f0000000080)='dev ', 0x3) write(r1, &(0x7f0000000040)="16", 0x1) sendfile(0xffffffffffffffff, r1, &(0x7f0000000000), 0xffff) fcntl$addseals(r1, 0x409, 0xd) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8}) r2 = gettid() dup(0xffffffffffffffff) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1004000000016) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$IMCLEAR_L2(r3, 0x80044946, &(0x7f0000000040)=0x7f) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}}) 16:18:50 executing program 0: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0xffff, 0x400000) ioctl$HDIO_GETGEO(r1, 0x301, &(0x7f0000000080)) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x80e85411, &(0x7f0000000140)=""/197) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 16:18:50 executing program 3: ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x83, &(0x7f0000000080)={'f%lter\x00', 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x3f00000000000000], 0x0, 0x0, 0x0}, &(0x7f0000000140)=0x78) 16:18:50 executing program 3: ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x83, &(0x7f0000000080)={'f%lter\x00', 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x4000000000000000], 0x0, 0x0, 0x0}, &(0x7f0000000140)=0x78) 16:18:50 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000ac5000), 0x4) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) r2 = memfd_create(&(0x7f0000000080)='dev ', 0x3) write(r2, &(0x7f0000000040)="16", 0x1) sendfile(r1, r2, &(0x7f0000000000), 0xffff) fcntl$addseals(r2, 0x409, 0xd) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8}) r3 = gettid() dup(r0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1004000000016) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$IMCLEAR_L2(r4, 0x80044946, &(0x7f0000000040)=0x7f) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}}) [ 2030.792448] syz-executor5 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2030.862770] CPU: 0 PID: 16026 Comm: syz-executor5 Not tainted 5.0.0-rc2 #24 [ 2030.869937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2030.879286] Call Trace: [ 2030.879306] dump_stack+0x1db/0x2d0 [ 2030.879324] ? dump_stack_print_info.cold+0x20/0x20 [ 2030.885498] ? check_preemption_disabled+0x48/0x290 [ 2030.885529] dump_header+0x1e6/0x116c [ 2030.885547] ? add_lock_to_list.isra.0+0x450/0x450 [ 2030.885561] ? perf_trace_lock+0x750/0x750 [ 2030.885576] ? print_usage_bug+0xd0/0xd0 [ 2030.885592] ? pagefault_out_of_memory+0x1a1/0x1a1 [ 2030.885608] ? ___ratelimit+0x37c/0x686 [ 2030.908912] ? mark_held_locks+0xb1/0x100 [ 2030.908933] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 2030.908949] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 2030.908963] ? lockdep_hardirqs_on+0x415/0x5d0 [ 2030.917923] ? trace_hardirqs_on+0xbd/0x310 [ 2030.917938] ? kasan_check_read+0x11/0x20 [ 2030.917954] ? ___ratelimit+0x37c/0x686 [ 2030.917969] ? trace_hardirqs_off_caller+0x300/0x300 [ 2030.917982] ? do_raw_spin_trylock+0x270/0x270 [ 2030.917998] ? trace_hardirqs_on_caller+0x310/0x310 [ 2030.918010] ? lock_acquire+0x1db/0x570 [ 2030.918033] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 2030.926115] ? ___ratelimit+0xac/0x686 [ 2030.926137] ? idr_get_free+0xee0/0xee0 [ 2030.926153] ? lockdep_hardirqs_on+0x415/0x5d0 [ 2030.926182] oom_kill_process.cold+0x10/0x9d4 [ 2030.926204] ? cgroup_procs_next+0x70/0x70 [ 2030.936376] ? _raw_spin_unlock_irq+0x5e/0x90 [ 2030.936406] ? oom_badness+0xa50/0xa50 [ 2030.936428] ? oom_evaluate_task+0x540/0x540 [ 2030.936464] ? mem_cgroup_iter_break+0x30/0x30 [ 2030.936477] ? mutex_trylock+0x2d0/0x2d0 [ 2030.936494] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2031.025077] ? rcu_read_unlock_special+0x380/0x380 [ 2031.030005] out_of_memory+0x885/0x1420 [ 2031.033979] ? oom_killer_disable+0x340/0x340 [ 2031.038578] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 2031.043691] ? lock_acquire+0x1db/0x570 [ 2031.047684] mem_cgroup_out_of_memory+0x160/0x210 [ 2031.052532] ? do_raw_spin_unlock+0xa0/0x330 [ 2031.056953] ? memcg_memory_event+0x40/0x40 [ 2031.061279] ? do_raw_spin_trylock+0x270/0x270 [ 2031.065882] ? _raw_spin_unlock+0x2d/0x50 [ 2031.070040] try_charge+0x12a9/0x19b0 [ 2031.073852] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2031.079412] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 2031.084262] ? rcu_read_unlock_special+0x380/0x380 [ 2031.089231] ? get_mem_cgroup_from_mm+0x1ea/0x420 [ 2031.094085] ? get_mem_cgroup_from_page+0x190/0x190 [ 2031.099120] ? rcu_read_lock_sched_held+0x110/0x130 [ 2031.104145] mem_cgroup_try_charge+0x43a/0xdb0 [ 2031.108734] ? mem_cgroup_protected+0xa10/0xa10 [ 2031.113421] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2031.118974] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2031.124512] ? check_preemption_disabled+0x48/0x290 [ 2031.129515] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 2031.135035] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 2031.140561] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 2031.145483] wp_page_copy+0x45a/0x1c30 [ 2031.149354] ? swp_swapcount+0x540/0x540 [ 2031.153422] ? pmd_pfn+0x1d0/0x1d0 [ 2031.156960] ? find_held_lock+0x35/0x120 [ 2031.161014] ? do_wp_page+0x70d/0x16b0 [ 2031.164918] ? kasan_check_read+0x11/0x20 [ 2031.169061] ? do_raw_spin_unlock+0xa0/0x330 [ 2031.173467] ? do_raw_spin_trylock+0x270/0x270 [ 2031.178040] ? __lock_acquire+0x572/0x4a30 [ 2031.182267] do_wp_page+0x715/0x16b0 [ 2031.185982] ? finish_mkwrite_fault+0x540/0x540 [ 2031.190746] ? kasan_check_read+0x11/0x20 [ 2031.194891] ? do_raw_spin_lock+0x156/0x360 [ 2031.199219] ? rwlock_bug.part.0+0x90/0x90 [ 2031.203449] ? pmd_devmap_trans_unstable+0x1d0/0x1d0 [ 2031.208549] __handle_mm_fault+0x2c8e/0x55a0 [ 2031.212953] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 2031.217780] ? check_preemption_disabled+0x48/0x290 [ 2031.222798] ? handle_mm_fault+0x3cc/0xc80 [ 2031.227083] ? lock_downgrade+0x910/0x910 [ 2031.231217] ? kasan_check_read+0x11/0x20 [ 2031.235354] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 2031.240631] ? rcu_read_unlock_special+0x380/0x380 [ 2031.245546] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2031.251072] ? check_preemption_disabled+0x48/0x290 [ 2031.256091] handle_mm_fault+0x4ec/0xc80 [ 2031.260147] ? __handle_mm_fault+0x55a0/0x55a0 [ 2031.264715] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2031.270236] ? vmacache_update+0x114/0x140 [ 2031.274476] __do_page_fault+0x5da/0xd60 [ 2031.278533] do_page_fault+0xe6/0x7d8 [ 2031.282327] ? trace_hardirqs_on_caller+0xc0/0x310 [ 2031.287248] ? vmalloc_sync_all+0x30/0x30 [ 2031.291393] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 2031.296845] ? prepare_exit_to_usermode+0x232/0x3b0 [ 2031.301856] ? page_fault+0x8/0x30 [ 2031.305393] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2031.310219] ? page_fault+0x8/0x30 [ 2031.313753] page_fault+0x1e/0x30 [ 2031.317192] RIP: 0033:0x40b1a6 [ 2031.320389] Code: e8 1f 65 ff ff 0f 1f 80 00 00 00 00 80 3d 71 4e 53 00 00 75 06 80 7b 20 00 74 2e 8b 05 67 4e 53 00 c6 43 21 00 8d 70 ff 85 f6 <89> 35 58 4e 53 00 78 50 48 8b 44 24 08 64 48 33 04 25 28 00 00 00 [ 2031.339285] RSP: 002b:0000000000a4fbd0 EFLAGS: 00010202 [ 2031.344630] RAX: 0000000000000002 RBX: 000000000073bfa0 RCX: 0000000000000001 [ 2031.351894] RDX: 0000000000000001 RSI: 0000000000000001 RDI: 000000000073bfa0 [ 2031.359157] RBP: 000000000073bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 2031.366422] R10: 0000000000a4fcc0 R11: 0000000000000246 R12: 00000000000003e8 [ 2031.373686] R13: 00000000001efc8b R14: 00000000001efc5e R15: 000000000073bfac [ 2031.381881] memory: usage 307200kB, limit 307200kB, failcnt 759 [ 2031.398059] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2031.406002] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2031.412449] Memory cgroup stats for /syz5: cache:204KB rss:149960KB rss_huge:73728KB shmem:64KB mapped_file:132KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:150180KB inactive_file:0KB active_file:0KB unevictable:0KB [ 2031.434411] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor5,pid=32208,uid=0 [ 2031.449672] Memory cgroup out of memory: Kill process 32208 (syz-executor5) score 1106 or sacrifice child [ 2031.459546] Killed process 32208 (syz-executor5) total-vm:70532kB, anon-rss:2208kB, file-rss:33736kB, shmem-rss:0kB [ 2031.473305] oom_reaper: reaped process 32208 (syz-executor5), now anon-rss:0kB, file-rss:32776kB, shmem-rss:0kB [ 2031.503860] oom_reaper: reaped process 16037 (syz-executor5), now anon-rss:0kB, file-rss:32776kB, shmem-rss:0kB 16:18:51 executing program 4: socketpair$unix(0x1, 0x8000100000000001, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'eql\x00\x00\xdf\xdd\x94D\x8f\x15\xcf!\x00', 0xec38ed91f1c74952}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000080)={'eql\x00\x00\xa1\xa9[\x01&?\x00\x00\x03\xca\x00', @ifru_mtu=0x1}) 16:18:51 executing program 0: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffff9c) getsockopt$TIPC_NODE_RECVQ_DEPTH(r0, 0x10f, 0x83, &(0x7f00000000c0), &(0x7f0000000140)=0x4) r1 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000001c0)={{0x3, 0x4, 0x5}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) r2 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x0, 0x2) setsockopt$bt_BT_FLUSHABLE(r2, 0x112, 0x8, &(0x7f0000000080), 0x4) ioctl$VIDIOC_STREAMOFF(r2, 0x40045613, &(0x7f0000000180)=0xfffffffffffffffd) setsockopt$TIPC_MCAST_REPLICAST(r2, 0x10f, 0x86) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2, 0x30, r2, 0x0) 16:18:51 executing program 3: ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x83, &(0x7f0000000080)={'f%lter\x00', 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0xffffffff00000000], 0x0, 0x0, 0x0}, &(0x7f0000000140)=0x78) 16:18:51 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000500)='cgroup.procs\x00', 0x2, 0x0) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x5}, 0x2c) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x8, 0x4, 0x100000001, 0x0, r2}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r3, &(0x7f00000002c0)}, 0x70) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x200, &(0x7f0000000180), 0x0, &(0x7f0000000080), &(0x7f0000000180)) mknod(&(0x7f0000f80000)='./file0\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$bt_hidp(0x1f, 0x3, 0x6) syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000002c0)=""/183, &(0x7f00000003c0)=0xb7) ptrace(0x10, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000080)=0x4c000000, 0x10a000d50) 16:18:51 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x283, 0x0) prctl$PR_SET_ENDIAN(0x14, 0x1) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000040)=0x401, 0x4) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet(0x2, 0x5, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x83, &(0x7f0000000080)={'f%lter\x00', 0x0, 0x0, 0x0, [], 0x0, 0x0, 0x0}, &(0x7f0000000140)=0x78) 16:18:51 executing program 3: ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x83, &(0x7f0000000080)={'f%lter\x00', 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2], 0x0, 0x0, 0x0}, &(0x7f0000000140)=0x78) 16:18:51 executing program 5: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setxattr$security_smack_transmute(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000100)='TRUE', 0x4, 0x1) r1 = socket$inet(0x2, 0x1, 0x0) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000180)=0x0) rt_sigqueueinfo(r2, 0x1, &(0x7f00000001c0)={0x34, 0x6, 0x4c400000000000}) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x83, &(0x7f0000000080)={'f%lter\x00', 0x0, 0x0, 0x0, [], 0x0, 0x0, 0x0}, &(0x7f0000000140)=0x78) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000240)='/dev/mixer\x00', 0x50800, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r3, 0x4020565a, &(0x7f0000000280)={0x8001007, 0x4, 0x3}) 16:18:51 executing program 0: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x4000, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000080)={0x9, 0x0, 0x2, 0xff}) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, &(0x7f00000000c0)={0x10000, r2, 0x10000, 0x8000}) 16:18:51 executing program 1: r0 = syz_open_dev$sndtimer(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r2, 0x1, 0x7, &(0x7f0000ac5000), 0x4) sendmmsg$unix(r2, &(0x7f00000bd000), 0x80, 0x0) r3 = memfd_create(&(0x7f0000000080)='dev ', 0x3) write(r3, &(0x7f0000000040)="16", 0x1) sendfile(r2, r3, &(0x7f0000000000), 0xffff) fcntl$addseals(r3, 0x409, 0xd) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8}) r4 = gettid() dup(r1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r4, 0x1004000000016) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$IMCLEAR_L2(r5, 0x80044946, &(0x7f0000000040)=0x7f) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}}) 16:18:51 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x1, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x83, &(0x7f0000000080)={'f%lter\x00', 0x0, 0x0, 0x0, [], 0x0, 0x0, 0x0}, &(0x7f0000000140)=0x78) 16:18:51 executing program 0: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x3}}) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x4000) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001240)={0xffffffffffffffff, 0x10, &(0x7f0000001200)={&(0x7f0000000200)=""/4096, 0x1000, 0xffffffffffffffff}}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000012c0)={r1, 0x10, &(0x7f0000001280)={&(0x7f0000000140)=""/151, 0x97, r2}}, 0x10) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, &(0x7f0000000080)=0x80000000) 16:18:51 executing program 3: ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x83, &(0x7f0000000080)={'f%lter\x00', 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x0, 0x0}, &(0x7f0000000140)=0x78) 16:18:51 executing program 4: socketpair$unix(0x1, 0x8000100000000001, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'eql\x00\x00\xdf\xdd\x94D\x8f\x15\xcf!\x00', 0xec38ed91f1c74952}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000080)={'eql\x00\x00\xa1\xa9[\x00*?\x00\x00\x03\xca\x00', @ifru_mtu=0x1}) 16:18:51 executing program 3: ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x83, &(0x7f0000000080)={'f%lter\x00', 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x600], 0x0, 0x0, 0x0}, &(0x7f0000000140)=0x78) 16:18:51 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet(0x2, 0x1, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0x400000, 0x0) syz_open_dev$midi(&(0x7f0000000240)='/dev/midi#\x00', 0x0, 0x1) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000180)={0x0, 0x7d, "7747ab0d86fb75acaa84e5b4b2ac1399bff2915572d6ff423543849f89791d701dc588147fadba9a09de544268c2fc0def9c896b37b02c6488750d6ba9fd84232a1f6414c2e39237b87ea0103de31c56c81577b2fde185fdaf6f4f6ed9ca19048d00956bef322dd4465015cd653aff8ada0ff30a1dd1df45b031f9052d"}, &(0x7f0000000000)=0x85) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={r2, 0x6}, 0x8) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x83, &(0x7f0000000080)={'f%lter\x00', 0x0, 0x0, 0x0, [], 0x0, 0x0, 0x0}, &(0x7f0000000140)=0x78) 16:18:51 executing program 0: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x3}}) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/rt6_stats\x00') ioctl$VHOST_SET_VRING_CALL(r1, 0x4008af21, &(0x7f0000000140)={0x1}) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x200, 0x0) ioctl$TIOCSWINSZ(r2, 0x5414, &(0x7f0000000080)={0x7f, 0x0, 0x400, 0x7}) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 16:18:51 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000500)='cgroup.procs\x00', 0x2, 0x0) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x5}, 0x2c) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x8, 0x4, 0x100000001, 0x0, r2}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r3, &(0x7f00000002c0)}, 0x20000210) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x200, &(0x7f0000000180), 0x0, &(0x7f0000000080), &(0x7f0000000180)) mknod(&(0x7f0000f80000)='./file0\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$bt_hidp(0x1f, 0x3, 0x6) syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000002c0)=""/183, &(0x7f00000003c0)=0xb7) ptrace(0x10, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000080)=0x4c000000, 0x10a000d50) 16:18:51 executing program 3: ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x83, &(0x7f0000000080)={'f%lter\x00', 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00], 0x0, 0x0, 0x0}, &(0x7f0000000140)=0x78) 16:18:51 executing program 5: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f00000005c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000300)={0x264, r2, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0xe8, 0x5, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xedf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x401}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe8a6}, @TIPC_NLA_PROP_TOL={0x8}]}]}, @TIPC_NLA_NET={0x20, 0x7, [@TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7b}]}, @TIPC_NLA_MEDIA={0x4c, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}]}]}, @TIPC_NLA_SOCK={0x18, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}]}, @TIPC_NLA_MEDIA={0x20, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}]}]}, @TIPC_NLA_SOCK={0x2c, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x20}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}]}, @TIPC_NLA_LINK={0x6c, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2cd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}]}]}, 0x264}, 0x1, 0x0, 0x0, 0x8000}, 0x40) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet(0x2, 0x1, 0x0) r4 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x6, 0x400000) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x400, 0x0) ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, &(0x7f0000000180)={0x0, &(0x7f0000000040), 0x8, r5}) getsockopt$EBT_SO_GET_ENTRIES(r3, 0x0, 0x83, &(0x7f0000000080)={'f%lter\x00', 0x0, 0x0, 0x0, [], 0x0, 0x0, 0x0}, &(0x7f0000000140)=0x78) getsockopt$inet6_mreq(r5, 0x29, 0x1d, &(0x7f00000001c0)={@remote, 0x0}, &(0x7f0000000200)=0x14) setsockopt$packet_drop_memb(r5, 0x107, 0x2, &(0x7f0000000240)={r6, 0x1, 0x6, @dev={[], 0x29}}, 0x10) 16:18:51 executing program 0: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x20000, 0x0) sendmsg$key(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0xf, 0x1, 0x7, 0x1c, 0x0, 0x70bd2d, 0x25dfdbfe, [@sadb_x_filter={0x5, 0x1a, @in=@broadcast, @in6=@mcast2, 0x0, 0x4, 0x10}, @sadb_x_nat_t_port={0x1, 0x15, 0x4e22}, @sadb_x_sec_ctx={0x2, 0x18, 0x8, 0x9, 0x1, "c2"}, @sadb_address={0x3, 0x7, 0xff, 0x80, 0x0, @in={0x2, 0x4e21, @loopback}}, @sadb_lifetime={0x4, 0x2, 0x1, 0x0, 0x7}, @sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x2, {0x6, 0xff, 0x40, 0x1ff, 0x0, 0x7, 0x0, @in=@empty, @in6=@dev={0xfe, 0x80, [], 0x19}}}, @sadb_x_nat_t_port={0x1, 0x16, 0x4e22}, @sadb_ident={0x2, 0xa, 0x3, 0x0, 0x3}]}, 0xe0}}, 0xc084) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x3}}) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000280)={'filter\x00', 0x7, 0x4, 0x458, 0x118, 0x0, 0x0, 0x370, 0x370, 0x370, 0x4, &(0x7f0000000240), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x9, 0x7fffffff, 0x1}}}, {{@uncond, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @remote, @broadcast}}}, {{@arp={@rand_addr=0xffff, @loopback, 0xff, 0xff000000, @mac=@random="e02407779488", {[0xff, 0x0, 0x0, 0xff, 0x0, 0xff]}, @mac=@broadcast, {[0xff, 0x0, 0x0, 0xff, 0xff]}, 0xffff, 0x7f, 0x9, 0x8, 0x3ff, 0xe11, 'bcsh0\x00', 'tunl0\x00', {0xff}, {0xff}, 0x0, 0x10}, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4a8) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000740)={{0x2, 0x4e20, @rand_addr=0x833d6a2}, {0x306, @remote}, 0x4d062dfa52d72607, {0x2, 0x4e24, @rand_addr=0x9}, 'bcsf0\x00'}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 16:18:52 executing program 1: r0 = syz_open_dev$sndtimer(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r2, 0x1, 0x7, &(0x7f0000ac5000), 0x4) sendmmsg$unix(r2, &(0x7f00000bd000), 0x80, 0x0) r3 = memfd_create(&(0x7f0000000080)='dev ', 0x3) write(r3, &(0x7f0000000040)="16", 0x1) sendfile(r2, r3, &(0x7f0000000000), 0xffff) fcntl$addseals(r3, 0x409, 0xd) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8}) r4 = gettid() dup(r1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r4, 0x1004000000016) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$IMCLEAR_L2(r5, 0x80044946, &(0x7f0000000040)=0x7f) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}}) 16:18:52 executing program 5: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f023c123f3188a070") r2 = openat$vnet(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af02, 0x0) r3 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af21, &(0x7f0000000040)={0x0, r3}) r4 = socket$inet(0x2, 0x1, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r4, 0x84, 0x6d, &(0x7f0000000200)={0x0, 0x1000, "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"}, &(0x7f0000000000)=0x1008) setsockopt$inet_sctp_SCTP_AUTH_KEY(r4, 0x84, 0x17, &(0x7f0000001240)={r5, 0x5, 0xfc, "0851f029d72fd8bcc9bc7f7e4aac062716d4097901d6acb297f5e4c087c8d0238ab667beb468a71965ba8cd2f2c1adecdfc8c73e9159631488ce20f133857cf150785da53f2f0033dbfbc54d779285f7149cdb5301af853c06f577235bb447618f645be7beaaa243ba70cb875ec91ccd05cda043f1d84f59097b1d022c0ca03a9c6f461ecfebbe32276ecb78567bca6d63307ee1ddeb06d004f3b23fc3584bb709a946caaf68d1918bf9098b56aa76c157429b0ec3793f06f3c2e5bbca111300f0588ec77cfca3963e06462ddd926133c5ccf7767fae5de112fea96132601003132ec0ba502e5c8cc60fa475f58f4e6e35b8d15192cd35011bd03b9e"}, 0x104) getsockopt$EBT_SO_GET_ENTRIES(r4, 0x0, 0x83, &(0x7f0000000080)={'f%lter\x00', 0x0, 0x0, 0x0, [], 0x0, 0x0, 0x0}, &(0x7f0000000140)=0x78) 16:18:52 executing program 3: ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x83, &(0x7f0000000080)={'f%lter\x00', 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4000], 0x0, 0x0, 0x0}, &(0x7f0000000140)=0x78) 16:18:52 executing program 0: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) r1 = syz_open_dev$usbmon(&(0x7f0000000180)='/dev/usbmon#\x00', 0xfffffffffffffff9, 0x383400) ioctl$DRM_IOCTL_CONTROL(r1, 0x40086414, &(0x7f00000002c0)={0x2, 0x1f}) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='\xb8a5\x96\x153\x90\xfe=\xdf\x97J\xacTP\xd1Nw\x00') getpeername$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0}, &(0x7f0000000080)=0x14) openat$cgroup_type(r2, &(0x7f00000001c0)='cgroup.type\x00', 0x2, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r1, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0c0128bd7000ffdbdf25070000000c000200080003000200000008000500040000002000030014000200666574683100000000000000000000000800040009000000"], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x40008c1) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000002a0000072cbd7000ffdbdf2500000000d51b343e924b736a46e9ada2be4d99e75e9bd0bb95e1104abefe78c687304ca5e7f6266c50c184a6327d374376f5edf820bb0e4215bedee3d4fe73ec7871fe76a0d53b7fa792f972ceeb8e74c52d871912698b0b1339c4d6e5e2f793c8b7e0f3348d789ab6c92e1e8a56786d47759a465209c9258e146f4a3d4ff7cb811db29e7ce03f3f41c823005c10eeb294f441c6137c020a34079da6095e937380f99d93068aabb8185af35df625cf956a0db4d334b1bf404376d0d3a3a70c7735912505b1ec0f7e81069c323c5156d5ccadff3d0c0000000000", @ANYRES32=r3, @ANYBLOB="ffffffff1d000600f3ff0300"], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x200400c0) 16:18:52 executing program 4: socketpair$unix(0x1, 0x8000100000000001, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'eql\x00\x00\xdf\xdd\x94D\x8f\x15\xcf!\x00', 0xec38ed91f1c74952}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000080)={'eql\x00\x00\xa1\xa9[\x01+?\x00\x00\x03\xca\x00', @ifru_mtu=0x1}) 16:18:52 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000500)='cgroup.procs\x00', 0x2, 0x0) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x5}, 0x2c) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x8, 0x1, 0x100000001, 0x0, r2, 0x101}, 0xffffff1f) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r3, &(0x7f00000002c0)}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$swradio(&(0x7f00000001c0)='/dev/swradio#\x00', 0x0, 0x2) getdents64(r4, &(0x7f0000000240)=""/25, 0x19) socket$inet_udplite(0x2, 0x2, 0x88) clone(0x200, &(0x7f0000000180), 0x0, &(0x7f0000000080), &(0x7f0000000180)) mknod(&(0x7f0000f80000)='./file0\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_DIRTY_TLB(r4, 0x4010aeaa, &(0x7f0000000400)={0x1, 0x7a}) socket$bt_hidp(0x1f, 0x3, 0x6) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000002c0)=""/183, &(0x7f00000003c0)=0xb7) syz_open_dev$cec(&(0x7f0000000480)='/dev/cec#\x00', 0x2, 0x2) ptrace(0x10, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r5, 0x4008ae93, &(0x7f0000000380)=0x4000) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x1) open$dir(&(0x7f0000000280)='./file0/file1\x00', 0x400000, 0xc8) clone(0x40000000, &(0x7f0000000100)="a2fa38ddefa5954e5a10b24b6071703658e7e9ef52783d0b68382a3a40ea5d2e1e28046b2b0dc265949fcc473304b1a4fbf5559e878a92b223eb64a0", &(0x7f0000000140), &(0x7f0000000180), &(0x7f0000000540)="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") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000440)={0x127ff, 0x1, 0x0, 0x1000, &(0x7f0000fff000/0x1000)=nil}) sendfile(r1, r1, &(0x7f0000000080)=0x4c000000, 0x10a000d50) 16:18:52 executing program 1: r0 = syz_open_dev$sndtimer(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r2, 0x1, 0x7, &(0x7f0000ac5000), 0x4) sendmmsg$unix(r2, &(0x7f00000bd000), 0x80, 0x0) r3 = memfd_create(&(0x7f0000000080)='dev ', 0x3) write(r3, &(0x7f0000000040)="16", 0x1) sendfile(r2, r3, &(0x7f0000000000), 0xffff) fcntl$addseals(r3, 0x409, 0xd) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8}) r4 = gettid() dup(r1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r4, 0x1004000000016) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$IMCLEAR_L2(r5, 0x80044946, &(0x7f0000000040)=0x7f) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}}) 16:18:52 executing program 0: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x3}}) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0x402080, 0x0) write$capi20(r1, &(0x7f0000000080)={0x10, 0x2, 0x0, 0x81, 0xc00000, 0x9}, 0x10) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 16:18:52 executing program 3: ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x83, &(0x7f0000000080)={'f%lter\x00', 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000], 0x0, 0x0, 0x0}, &(0x7f0000000140)=0x78) 16:18:52 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet(0x2, 0x1, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0x80045500, &(0x7f0000000040)) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x83, &(0x7f0000000080)={'f%lter\x00', 0x0, 0x0, 0x0, [], 0x0, 0x0, 0x0}, &(0x7f0000000140)=0x78) 16:18:52 executing program 1: r0 = syz_open_dev$sndtimer(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r2, 0x1, 0x7, &(0x7f0000ac5000), 0x4) sendmmsg$unix(r2, &(0x7f00000bd000), 0x80, 0x0) r3 = memfd_create(&(0x7f0000000080)='dev ', 0x3) write(r3, &(0x7f0000000040)="16", 0x1) sendfile(r2, r3, &(0x7f0000000000), 0xffff) fcntl$addseals(r3, 0x409, 0xd) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8}) r4 = gettid() dup(r1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r4, 0x1004000000016) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$IMCLEAR_L2(r5, 0x80044946, &(0x7f0000000040)=0x7f) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}}) 16:18:52 executing program 0: openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x0, 0x0) r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 16:18:52 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/backup_only\x00', 0x2, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, &(0x7f0000000040)=0x6) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet(0x2, 0x1, 0x0) 16:18:52 executing program 3: ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x83, &(0x7f0000000080)={'f%lter\x00', 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000], 0x0, 0x0, 0x0}, &(0x7f0000000140)=0x78) 16:18:52 executing program 1: r0 = syz_open_dev$sndtimer(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, &(0x7f0000ac5000), 0x4) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x80, 0x0) r1 = memfd_create(&(0x7f0000000080)='dev ', 0x3) write(r1, &(0x7f0000000040)="16", 0x1) sendfile(0xffffffffffffffff, r1, &(0x7f0000000000), 0xffff) fcntl$addseals(r1, 0x409, 0xd) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8}) r2 = gettid() dup(0xffffffffffffffff) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1004000000016) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$IMCLEAR_L2(r3, 0x80044946, &(0x7f0000000040)=0x7f) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}}) 16:18:52 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x8, 0x14000) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/pfkey\x00', 0x101000, 0x0) creat(&(0x7f0000000180)='./file0\x00', 0x60) openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vcs\x00', 0x2040, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/pfkey\x00', 0x0, 0x0) open$dir(&(0x7f0000000280)='./file0\x00', 0x800, 0xeb) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/rt_cache\x00') ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, 0x0) clone(0x10012102001ff5, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet(0x2, 0x1, 0x0) r2 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) setsockopt$TIPC_MCAST_BROADCAST(r2, 0x10f, 0x85) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x83, &(0x7f0000000080)={'f%lter\x00', 0x0, 0x0, 0x0, [], 0x0, 0x0, 0x0}, &(0x7f0000000140)=0x78) 16:18:53 executing program 4: socketpair$unix(0x1, 0x8000100000000001, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'eql\x00\x00\xdf\xdd\x94D\x8f\x15\xcf!\x00', 0xec38ed91f1c74952}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000080)={'eql\x00\x00\xa1\xa9[\x01,?\x00\x00\x03\xca\x00', @ifru_mtu=0x1}) [ 2033.364773] IPVS: ftp: loaded support on port[0] = 21 [ 2033.649416] IPVS: ftp: loaded support on port[0] = 21 [ 2034.324990] net_ratelimit: 18 callbacks suppressed [ 2034.324998] protocol 88fb is buggy, dev hsr_slave_0 [ 2034.335066] protocol 88fb is buggy, dev hsr_slave_1 [ 2034.884972] protocol 88fb is buggy, dev hsr_slave_0 [ 2034.890083] protocol 88fb is buggy, dev hsr_slave_1 [ 2034.895263] protocol 88fb is buggy, dev hsr_slave_0 [ 2034.900336] protocol 88fb is buggy, dev hsr_slave_1 [ 2034.905497] protocol 88fb is buggy, dev hsr_slave_0 [ 2034.910561] protocol 88fb is buggy, dev hsr_slave_1 [ 2035.285012] protocol 88fb is buggy, dev hsr_slave_0 [ 2035.290160] protocol 88fb is buggy, dev hsr_slave_1 16:18:55 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000500)='cgroup.procs\x00', 0x2, 0x0) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x5}, 0x2c) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x8, 0x4, 0x100000001, 0x0, r2}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r3, &(0x7f00000002c0)}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x200, &(0x7f0000000180), 0x0, &(0x7f0000000080), &(0x7f0000000180)) mknod(&(0x7f0000f80000)='./file0\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$bt_hidp(0x1f, 0x3, 0x6) syz_open_procfs(0x0, &(0x7f0000000100)='pagemap\x00') getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000002c0)=""/183, &(0x7f00000003c0)=0xb7) ptrace(0x10, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000080)=0x4c000000, 0x10a000d50) 16:18:55 executing program 0: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(r0, 0x111, 0x2, 0x1, 0x4) 16:18:55 executing program 3: ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x83, &(0x7f0000000080)={'f%lter\x00', 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0x0, 0x0}, &(0x7f0000000140)=0x78) 16:18:55 executing program 5: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x8100, 0x0) r2 = fcntl$dupfd(r0, 0x406, r0) io_setup(0x3, &(0x7f0000000240)) setsockopt$RXRPC_SECURITY_KEYRING(r2, 0x110, 0x2, &(0x7f0000000180)='f%lter\x00', 0x7) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x200400, 0x0) write$UHID_DESTROY(r2, &(0x7f00000001c0), 0x4) ioctl$DRM_IOCTL_MODE_SETCRTC(r3, 0xc06864a2, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) clone(0x20000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket$inet(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r4, 0x0, 0x83, &(0x7f0000000080)={'f%lter\x00', 0x0, 0x0, 0x0, [], 0x0, 0x0, 0x0}, &(0x7f0000000140)=0x78) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r1, 0x110, 0x5, &(0x7f0000000100)=[0x2, 0x1], 0x2) 16:18:55 executing program 1: r0 = syz_open_dev$sndtimer(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, &(0x7f0000ac5000), 0x4) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x80, 0x0) r1 = memfd_create(&(0x7f0000000080)='dev ', 0x3) write(r1, &(0x7f0000000040)="16", 0x1) sendfile(0xffffffffffffffff, r1, &(0x7f0000000000), 0xffff) fcntl$addseals(r1, 0x409, 0xd) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8}) r2 = gettid() dup(0xffffffffffffffff) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1004000000016) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$IMCLEAR_L2(r3, 0x80044946, &(0x7f0000000040)=0x7f) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}}) 16:18:55 executing program 4: socketpair$unix(0x1, 0x8000100000000001, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'eql\x00\x00\xdf\xdd\x94D\x8f\x15\xcf!\x00', 0xec38ed91f1c74952}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000080)={'eql\x00\x00\xa1\xa9[\x010?\x00\x00\x03\xca\x00', @ifru_mtu=0x1}) 16:18:55 executing program 0: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x1, 0xfffffffffffffffe}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x41, 0x0) ioctl$VIDIOC_G_AUDIO(r1, 0x80345621, &(0x7f0000000080)) 16:18:55 executing program 1: r0 = syz_open_dev$sndtimer(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, &(0x7f0000ac5000), 0x4) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x80, 0x0) r1 = memfd_create(&(0x7f0000000080)='dev ', 0x3) write(r1, &(0x7f0000000040)="16", 0x1) sendfile(0xffffffffffffffff, r1, &(0x7f0000000000), 0xffff) fcntl$addseals(r1, 0x409, 0xd) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8}) r2 = gettid() dup(0xffffffffffffffff) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1004000000016) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$IMCLEAR_L2(r3, 0x80044946, &(0x7f0000000040)=0x7f) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}}) 16:18:55 executing program 3: ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x83, &(0x7f0000000080)={'f%lter\x00', 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000], 0x0, 0x0, 0x0}, &(0x7f0000000140)=0x78) [ 2035.704270] Unknown ioctl -2144053727 [ 2035.747931] Unknown ioctl -2144053727 [ 2035.768028] syz-executor5 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2035.821615] CPU: 1 PID: 16283 Comm: syz-executor5 Not tainted 5.0.0-rc2 #24 [ 2035.828751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2035.838131] Call Trace: [ 2035.840734] dump_stack+0x1db/0x2d0 [ 2035.844380] ? dump_stack_print_info.cold+0x20/0x20 [ 2035.849407] ? check_preemption_disabled+0x48/0x290 [ 2035.854450] dump_header+0x1e6/0x116c [ 2035.858263] ? add_lock_to_list.isra.0+0x450/0x450 [ 2035.863199] ? perf_trace_lock+0x750/0x750 [ 2035.867443] ? print_usage_bug+0xd0/0xd0 [ 2035.871519] ? pagefault_out_of_memory+0x1a1/0x1a1 [ 2035.876460] ? ___ratelimit+0x37c/0x686 [ 2035.880448] ? mark_held_locks+0xb1/0x100 [ 2035.884695] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 2035.889809] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 2035.894922] ? lockdep_hardirqs_on+0x415/0x5d0 [ 2035.899516] ? trace_hardirqs_on+0xbd/0x310 [ 2035.903847] ? kasan_check_read+0x11/0x20 [ 2035.908004] ? ___ratelimit+0x37c/0x686 [ 2035.911990] ? trace_hardirqs_off_caller+0x300/0x300 [ 2035.917096] ? do_raw_spin_trylock+0x270/0x270 [ 2035.921682] ? trace_hardirqs_on_caller+0x310/0x310 [ 2035.926708] ? lock_acquire+0x1db/0x570 [ 2035.930706] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 2035.935819] ? ___ratelimit+0xac/0x686 [ 2035.939727] ? idr_get_free+0xee0/0xee0 [ 2035.943802] ? lockdep_hardirqs_on+0x415/0x5d0 [ 2035.948410] oom_kill_process.cold+0x10/0x9d4 [ 2035.952919] ? cgroup_procs_next+0x70/0x70 [ 2035.957169] ? _raw_spin_unlock_irq+0x5e/0x90 [ 2035.961673] ? oom_badness+0xa50/0xa50 [ 2035.965580] ? oom_evaluate_task+0x540/0x540 [ 2035.969996] ? mem_cgroup_iter_break+0x30/0x30 [ 2035.974584] ? mutex_trylock+0x2d0/0x2d0 [ 2035.978662] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2035.984224] ? rcu_read_unlock_special+0x380/0x380 [ 2035.989173] out_of_memory+0x885/0x1420 [ 2035.993167] ? oom_killer_disable+0x340/0x340 [ 2035.997672] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 2036.002783] ? lock_acquire+0x1db/0x570 [ 2036.006779] mem_cgroup_out_of_memory+0x160/0x210 [ 2036.011634] ? do_raw_spin_unlock+0xa0/0x330 [ 2036.016059] ? memcg_memory_event+0x40/0x40 [ 2036.020385] ? do_raw_spin_trylock+0x270/0x270 [ 2036.024995] ? _raw_spin_unlock+0x2d/0x50 [ 2036.029157] try_charge+0x12a9/0x19b0 [ 2036.032970] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2036.038781] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 2036.043636] ? rcu_read_unlock_special+0x380/0x380 [ 2036.048593] ? get_mem_cgroup_from_mm+0x1ea/0x420 [ 2036.053443] ? get_mem_cgroup_from_page+0x190/0x190 [ 2036.058472] ? rcu_read_lock_sched_held+0x110/0x130 [ 2036.063498] mem_cgroup_try_charge+0x43a/0xdb0 [ 2036.068096] ? mem_cgroup_protected+0xa10/0xa10 [ 2036.072778] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2036.078322] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2036.083866] ? check_preemption_disabled+0x48/0x290 [ 2036.088882] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 2036.094422] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 2036.099968] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 2036.104907] wp_page_copy+0x45a/0x1c30 [ 2036.108797] ? swp_swapcount+0x540/0x540 [ 2036.112873] ? pmd_pfn+0x1d0/0x1d0 [ 2036.116419] ? find_held_lock+0x35/0x120 [ 2036.120485] ? do_wp_page+0x70d/0x16b0 [ 2036.124393] ? kasan_check_read+0x11/0x20 [ 2036.128548] ? do_raw_spin_unlock+0xa0/0x330 [ 2036.133056] ? do_raw_spin_trylock+0x270/0x270 [ 2036.137644] ? __lock_acquire+0x572/0x4a30 [ 2036.141902] do_wp_page+0x715/0x16b0 [ 2036.145629] ? finish_mkwrite_fault+0x540/0x540 [ 2036.150299] ? kasan_check_read+0x11/0x20 [ 2036.154446] ? do_raw_spin_lock+0x156/0x360 [ 2036.158793] ? rwlock_bug.part.0+0x90/0x90 [ 2036.163043] ? pmd_devmap_trans_unstable+0x1d0/0x1d0 [ 2036.168162] __handle_mm_fault+0x2c8e/0x55a0 [ 2036.172584] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 2036.177428] ? check_preemption_disabled+0x48/0x290 [ 2036.182450] ? handle_mm_fault+0x3cc/0xc80 [ 2036.186729] ? lock_downgrade+0x910/0x910 [ 2036.190876] ? kasan_check_read+0x11/0x20 [ 2036.195035] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 2036.200318] ? rcu_read_unlock_special+0x380/0x380 [ 2036.205254] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2036.210796] ? check_preemption_disabled+0x48/0x290 [ 2036.215827] handle_mm_fault+0x4ec/0xc80 [ 2036.219899] ? __handle_mm_fault+0x55a0/0x55a0 [ 2036.224501] __do_page_fault+0x5da/0xd60 [ 2036.228585] do_page_fault+0xe6/0x7d8 [ 2036.232391] ? trace_hardirqs_on_caller+0xc0/0x310 [ 2036.237331] ? vmalloc_sync_all+0x30/0x30 [ 2036.241479] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 2036.246936] ? prepare_exit_to_usermode+0x232/0x3b0 [ 2036.251955] ? page_fault+0x8/0x30 [ 2036.255500] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2036.260358] ? page_fault+0x8/0x30 [ 2036.263904] page_fault+0x1e/0x30 [ 2036.267359] RIP: 0033:0x40d130 [ 2036.270565] Code: 89 f8 49 8b 34 c6 4a 8d 04 2e 48 3d ff ff ff 7e 0f 86 74 ff ff ff bf 19 d5 4b 00 31 c0 e8 08 49 ff ff 31 ff e8 41 45 ff ff 90 <89> 3c b5 00 00 73 00 eb b6 31 ed 0f 1f 44 00 00 80 3d 36 33 64 00 [ 2036.289463] RSP: 002b:0000000000a4fb30 EFLAGS: 00010246 [ 2036.294824] RAX: 00000000be1d864c RBX: 0000000054dfe287 RCX: 0000001b32120000 [ 2036.302096] RDX: 0000000000000000 RSI: 000000000000064c RDI: ffffffffbe1d864c [ 2036.309364] RBP: 0000000000000006 R08: 00000000be1d864c R09: 00000000be1d8650 [ 2036.316634] R10: 0000000000a4fcc0 R11: 0000000000000246 R12: 000000000073bf00 16:18:56 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000500)='cgroup.procs\x00', 0x2, 0x0) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x5}, 0x2c) r3 = syz_open_dev$mouse(&(0x7f0000000180)='/dev/input/mouse#\x00', 0x1f3, 0x101081) sendto$isdn(r3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1e6876ff8b551fc1ddd0f2ce0cedc63c994e3d0888a4e1597c6e075d18caed839b98c15817b656c127effae383fa92ef02d75cb1720e4d8ecf57b279bf87bd9a83edb80c010000004cece37a73c97f016ece382fb7d3546d13aa37ea6560d38cf25deec71bcaae91d24fec71b33102c37d4c01c28723bd1900000000000000"], 0x75, 0x20000001, &(0x7f00000001c0)={0x22, 0x8c21, 0x4, 0x101, 0x1000}, 0x6) ioctl$sock_SIOCDELDLCI(r3, 0x8981, &(0x7f0000000240)={'tunl0\x00', 0x7}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x8, 0x4, 0x100000001, 0x0, r2}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r4, &(0x7f00000002c0)}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x7f, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x200, &(0x7f0000000180), 0x0, &(0x7f0000000080), &(0x7f0000000180)) mknod(&(0x7f0000f80000)='./file0\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$bt_hidp(0x1f, 0x3, 0x6) syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', 0x4000}) getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000002c0)=""/183, &(0x7f00000003c0)=0xb7) ptrace(0x10, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000080)=0x4c000000, 0x10a000d50) 16:18:56 executing program 1: r0 = syz_open_dev$sndtimer(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, &(0x7f0000ac5000), 0x4) sendmmsg$unix(r2, &(0x7f00000bd000), 0x80, 0x0) r3 = memfd_create(&(0x7f0000000080)='dev ', 0x3) write(r3, &(0x7f0000000040)="16", 0x1) sendfile(r2, r3, &(0x7f0000000000), 0xffff) fcntl$addseals(r3, 0x409, 0xd) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8}) r4 = gettid() dup(r1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r4, 0x1004000000016) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$IMCLEAR_L2(r5, 0x80044946, &(0x7f0000000040)=0x7f) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}}) 16:18:56 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000180)='/dev/vcs#\x00', 0x5, 0x1) r1 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000000)={{0x3}}) ioctl$VIDIOC_ENUMAUDIO(r0, 0xc0345641, &(0x7f00000001c0)={0xaddc, "b955d2c9738de17602dd9fef817afc5f922a08442a0056007a3cea8f972b1f22", 0x2, 0x1}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) r2 = socket$inet(0x2, 0x800000000000a, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r4, 0x5420, &(0x7f0000000140)=0x66) read(r4, &(0x7f0000000100)=""/11, 0xffffff31) r5 = syz_open_pts(r4, 0x0) dup3(r5, r4, 0x0) ioctl$TCXONC(r4, 0x540a, 0x0) r6 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20\x00', 0x404080, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r6, 0xc0205647, &(0x7f0000000140)={0xfffffff, 0x6, 0x5, [], &(0x7f00000000c0)={0x980911, 0xfffffffffffffe00, [], @p_u8=&(0x7f0000000040)=0x6}}) [ 2036.323904] R13: 0000000080000000 R14: 00007ff96d1b6008 R15: 0000000000000015 16:18:56 executing program 3: ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x83, &(0x7f0000000080)={'f%lter\x00', 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000], 0x0, 0x0, 0x0}, &(0x7f0000000140)=0x78) 16:18:56 executing program 1: r0 = syz_open_dev$sndtimer(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, &(0x7f0000ac5000), 0x4) sendmmsg$unix(r2, &(0x7f00000bd000), 0x80, 0x0) r3 = memfd_create(&(0x7f0000000080)='dev ', 0x3) write(r3, &(0x7f0000000040)="16", 0x1) sendfile(r2, r3, &(0x7f0000000000), 0xffff) fcntl$addseals(r3, 0x409, 0xd) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8}) r4 = gettid() dup(r1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r4, 0x1004000000016) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$IMCLEAR_L2(r5, 0x80044946, &(0x7f0000000040)=0x7f) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}}) 16:18:56 executing program 4: socketpair$unix(0x1, 0x8000100000000001, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'eql\x00\x00\xdf\xdd\x94D\x8f\x15\xcf!\x00', 0xec38ed91f1c74952}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000080)={'eql\x00\x00\xa1\xa9[\x015?\x00\x00\x03\xca\x00', @ifru_mtu=0x1}) [ 2036.581953] memory: usage 307200kB, limit 307200kB, failcnt 801 [ 2036.588679] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2036.612102] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2036.641243] Memory cgroup stats for /syz5: cache:204KB rss:148696KB rss_huge:71680KB shmem:64KB mapped_file:132KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:148816KB inactive_file:4KB active_file:0KB unevictable:0KB [ 2036.696447] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor5,pid=32223,uid=0 [ 2036.720210] Memory cgroup out of memory: Kill process 32223 (syz-executor5) score 1106 or sacrifice child [ 2036.734016] Killed process 32223 (syz-executor5) total-vm:70532kB, anon-rss:2208kB, file-rss:33736kB, shmem-rss:0kB [ 2036.782876] syz-executor5 invoked oom-killer: gfp_mask=0x7080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 2036.833094] CPU: 1 PID: 16296 Comm: syz-executor5 Not tainted 5.0.0-rc2 #24 [ 2036.840243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2036.849592] Call Trace: [ 2036.852188] dump_stack+0x1db/0x2d0 [ 2036.855910] ? dump_stack_print_info.cold+0x20/0x20 [ 2036.860928] ? check_preemption_disabled+0x48/0x290 [ 2036.865962] dump_header+0x1e6/0x116c [ 2036.869776] ? add_lock_to_list.isra.0+0x450/0x450 [ 2036.874711] ? perf_trace_lock+0x750/0x750 [ 2036.878953] ? print_usage_bug+0xd0/0xd0 [ 2036.883027] ? pagefault_out_of_memory+0x1a1/0x1a1 [ 2036.887962] ? ___ratelimit+0x37c/0x686 [ 2036.891955] ? mark_held_locks+0xb1/0x100 [ 2036.896110] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 2036.901212] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 2036.906317] ? lockdep_hardirqs_on+0x415/0x5d0 [ 2036.910900] ? trace_hardirqs_on+0xbd/0x310 [ 2036.915309] ? kasan_check_read+0x11/0x20 [ 2036.919456] ? ___ratelimit+0x37c/0x686 [ 2036.923435] ? trace_hardirqs_off_caller+0x300/0x300 [ 2036.928538] ? do_raw_spin_trylock+0x270/0x270 [ 2036.933127] ? trace_hardirqs_on_caller+0x310/0x310 [ 2036.938146] ? lock_acquire+0x1db/0x570 [ 2036.942138] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 2036.947352] ? ___ratelimit+0xac/0x686 [ 2036.951249] ? idr_get_free+0xee0/0xee0 [ 2036.955230] ? lockdep_hardirqs_on+0x415/0x5d0 [ 2036.959828] oom_kill_process.cold+0x10/0x9d4 [ 2036.964331] ? cgroup_procs_next+0x70/0x70 [ 2036.968576] ? _raw_spin_unlock_irq+0x5e/0x90 [ 2036.973073] ? oom_badness+0xa50/0xa50 [ 2036.976978] ? oom_evaluate_task+0x540/0x540 [ 2036.981387] ? mem_cgroup_iter_break+0x30/0x30 [ 2036.985979] ? mutex_trylock+0x2d0/0x2d0 [ 2036.990055] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2036.995616] ? rcu_read_unlock_special+0x380/0x380 [ 2037.000561] out_of_memory+0x885/0x1420 [ 2037.004543] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 2037.009660] ? oom_killer_disable+0x340/0x340 [ 2037.014164] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 2037.019270] ? lock_acquire+0x1db/0x570 [ 2037.023261] mem_cgroup_out_of_memory+0x160/0x210 [ 2037.028108] ? do_raw_spin_unlock+0xa0/0x330 [ 2037.032529] ? memcg_memory_event+0x40/0x40 [ 2037.036854] ? do_raw_spin_trylock+0x270/0x270 [ 2037.041459] ? _raw_spin_unlock+0x2d/0x50 [ 2037.045622] try_charge+0xd44/0x19b0 [ 2037.049334] ? lock_downgrade+0x910/0x910 [ 2037.053489] ? kasan_check_read+0x11/0x20 [ 2037.057656] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 2037.062516] ? get_mem_cgroup_from_mm+0x1cd/0x420 [ 2037.067374] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2037.072929] ? lock_downgrade+0x910/0x910 [ 2037.077097] ? kasan_check_read+0x11/0x20 [ 2037.081248] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 2037.086516] ? rcu_read_unlock_special+0x380/0x380 [ 2037.091444] ? get_mem_cgroup_from_mm+0x1ea/0x420 [ 2037.096296] memcg_kmem_charge_memcg+0x7c/0x130 [ 2037.100955] ? memcg_kmem_put_cache+0xb0/0xb0 [ 2037.105439] ? lock_release+0xc40/0xc40 [ 2037.109404] memcg_kmem_charge+0x13b/0x340 [ 2037.113629] __alloc_pages_nodemask+0x7b8/0xdc0 [ 2037.118288] ? __alloc_pages_slowpath+0x2cc0/0x2cc0 [ 2037.123289] ? __lock_acquire+0x572/0x4a30 [ 2037.127507] ? add_lock_to_list.isra.0+0x450/0x450 [ 2037.132430] ? mark_held_locks+0x100/0x100 [ 2037.136647] ? mark_held_locks+0x100/0x100 [ 2037.140868] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 2037.146396] alloc_pages_current+0x107/0x210 [ 2037.150793] pte_alloc_one+0x1b/0x1a0 [ 2037.154578] __handle_mm_fault+0x437d/0x55a0 [ 2037.158985] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 2037.163817] ? check_preemption_disabled+0x48/0x290 [ 2037.168820] ? handle_mm_fault+0x3cc/0xc80 [ 2037.173047] ? lock_downgrade+0x910/0x910 [ 2037.177179] ? kasan_check_read+0x11/0x20 [ 2037.181312] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 2037.186574] ? rcu_read_unlock_special+0x380/0x380 [ 2037.191487] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2037.197011] ? check_preemption_disabled+0x48/0x290 [ 2037.202018] handle_mm_fault+0x4ec/0xc80 [ 2037.206072] ? __handle_mm_fault+0x55a0/0x55a0 [ 2037.210638] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2037.216165] ? vmacache_update+0x114/0x140 [ 2037.220394] __do_page_fault+0x5da/0xd60 [ 2037.224458] do_page_fault+0xe6/0x7d8 [ 2037.228253] ? trace_hardirqs_on_caller+0xc0/0x310 [ 2037.233175] ? vmalloc_sync_all+0x30/0x30 [ 2037.237308] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 2037.242741] ? syscall_return_slowpath+0x3b0/0x5f0 [ 2037.247656] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 2037.252666] ? page_fault+0x8/0x30 [ 2037.256202] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2037.261029] ? page_fault+0x8/0x30 [ 2037.264555] page_fault+0x1e/0x30 [ 2037.267992] RIP: 0033:0x457ec9 [ 2037.271176] Code: Bad RIP value. [ 2037.274520] RSP: 002b:00007ff96b3b4c78 EFLAGS: 00010246 [ 2037.279864] RAX: 0000000000000000 RBX: 0000000000000005 RCX: 0000000000457ec9 [ 2037.287130] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000000020000 [ 2037.294391] RBP: 000000000073bf00 R08: ffffffffffffffff R09: 0000000000000000 [ 2037.301645] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff96b3b56d4 [ 2037.309099] R13: 00000000004be2a0 R14: 00000000004ce600 R15: 00000000ffffffff [ 2037.316974] memory: usage 305304kB, limit 307200kB, failcnt 801 [ 2037.323665] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2037.331061] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2037.337786] Memory cgroup stats for /syz5: cache:204KB rss:146652KB rss_huge:69632KB shmem:64KB mapped_file:132KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:146764KB inactive_file:4KB active_file:0KB unevictable:0KB [ 2037.359071] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor5,pid=32250,uid=0 [ 2037.374118] Memory cgroup out of memory: Kill process 32250 (syz-executor5) score 1106 or sacrifice child [ 2037.383989] Killed process 32250 (syz-executor5) total-vm:70532kB, anon-rss:2208kB, file-rss:33736kB, shmem-rss:0kB 16:18:57 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x83, &(0x7f0000000080)={'f%lter\x00', 0x0, 0x0, 0x0, [], 0x0, 0x0, 0x0}, &(0x7f0000000140)=0x78) 16:18:57 executing program 0: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x3}}) prctl$PR_GET_PDEATHSIG(0x2, &(0x7f00000000c0)) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000200)='/dev/null\x00', 0x200100, 0x0) setsockopt$netlink_NETLINK_RX_RING(r1, 0x10e, 0x6, &(0x7f0000000240)={0x740f, 0xc1, 0x1, 0x4}, 0x10) sysfs$2(0x2, 0x9, &(0x7f0000000080)=""/15) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) r2 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x8080, 0x8) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r2, 0xc0a85320, &(0x7f0000000140)={{0x4, 0x9}, 'port1\x00', 0x0, 0x1, 0x8, 0x76a, 0x0, 0x2, 0x3b, 0x0, 0x1, 0x4}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) 16:18:57 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000500)='cgroup.procs\x00', 0x2, 0x0) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x5}, 0x2c) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x8, 0x4, 0x100000001, 0x0, r2}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r3, &(0x7f00000002c0)}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x200, &(0x7f0000000180), 0x0, &(0x7f0000000080), &(0x7f0000000180)) mknod(&(0x7f0000f80000)='./file0\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$bt_hidp(0x1f, 0x3, 0x6) syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000002c0)=""/183, &(0x7f00000003c0)=0xb7) socketpair(0x3, 0x0, 0x6, &(0x7f00000000c0)) ptrace(0x10, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000080)=0x4c000000, 0x10a000d50) 16:18:57 executing program 3: ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x83, &(0x7f0000000080)={'f%lter\x00', 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000], 0x0, 0x0, 0x0}, &(0x7f0000000140)=0x78) 16:18:57 executing program 1: r0 = syz_open_dev$sndtimer(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, &(0x7f0000ac5000), 0x4) sendmmsg$unix(r2, &(0x7f00000bd000), 0x80, 0x0) r3 = memfd_create(&(0x7f0000000080)='dev ', 0x3) write(r3, &(0x7f0000000040)="16", 0x1) sendfile(r2, r3, &(0x7f0000000000), 0xffff) fcntl$addseals(r3, 0x409, 0xd) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8}) r4 = gettid() dup(r1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r4, 0x1004000000016) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$IMCLEAR_L2(r5, 0x80044946, &(0x7f0000000040)=0x7f) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}}) 16:18:57 executing program 4: socketpair$unix(0x1, 0x8000100000000001, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'eql\x00\x00\xdf\xdd\x94D\x8f\x15\xcf!\x00', 0xec38ed91f1c74952}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000080)={'eql\x00\x00\xa1\xa9[\x010x0}, {}]}) ioctl$DRM_IOCTL_LOCK(r1, 0x4008642a, &(0x7f0000000180)={r2, 0x8}) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x83, &(0x7f0000000080)={'f%lter\x00', 0x0, 0x0, 0x0, [], 0x0, 0x0, 0x0}, &(0x7f0000000140)=0x78) 16:18:57 executing program 0: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) r1 = syz_open_dev$vcsn(&(0x7f00000001c0)='/dev/vcs#\x00', 0x5, 0x20000) ioctl$VIDIOC_SUBDEV_G_SELECTION(r1, 0xc040563d, &(0x7f0000000080)={0x1, 0x0, 0x102, 0x0, {0x3f, 0x2b9ae14a, 0x0, 0x8}}) 16:18:57 executing program 1: r0 = syz_open_dev$sndtimer(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r2, 0x1, 0x0, &(0x7f0000ac5000), 0x4) sendmmsg$unix(r2, &(0x7f00000bd000), 0x80, 0x0) r3 = memfd_create(&(0x7f0000000080)='dev ', 0x3) write(r3, &(0x7f0000000040)="16", 0x1) sendfile(r2, r3, &(0x7f0000000000), 0xffff) fcntl$addseals(r3, 0x409, 0xd) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8}) r4 = gettid() dup(r1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r4, 0x1004000000016) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$IMCLEAR_L2(r5, 0x80044946, &(0x7f0000000040)=0x7f) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}}) 16:18:57 executing program 3: ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x83, &(0x7f0000000080)={'f%lter\x00', 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000], 0x0, 0x0, 0x0}, &(0x7f0000000140)=0x78) 16:18:57 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, 0x0) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x2000, 0x0) ioctl$sock_inet_SIOCRTMSG(r0, 0x890d, &(0x7f0000000200)={0x0, {0x2, 0x4e20, @multicast1}, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e21, @multicast2}, 0x1, 0x0, 0x0, 0x0, 0x7, &(0x7f00000001c0)='ip6gre0\x00', 0x96d, 0x7, 0x101}) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, &(0x7f0000000040)={'HL\x00'}, &(0x7f0000000100)=0x1e) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r0, 0x4008ae48, &(0x7f0000000180)=0x3000) clone(0x3fffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x83, &(0x7f0000000080)={'f%lter\x00', 0x0, 0x0, 0x0, [], 0x0, 0x0, 0x0}, &(0x7f0000000140)=0x78) 16:18:57 executing program 2: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x10001, 0x0) write$binfmt_elf32(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c46a704060102000000000000000300030007000000b9010000380000001202000006000000f7ff200001000800ff0772000000000001000070050000007400000009000000ff000000070000000300000003000000fab13c079a9fe30e37330fa3fd778a5b45236f408c1a967c58c3278fc27e05f8dd4e462699872b2c761068b4922030d56a9a0ed17d704d0f423afc342afd7059da8fa189862831ce7bc3c880e97117b7ef87d27bf0466aae4ee411009cdbb48e64e376eb9313b96c9a00e4a269f29dbc3917d5b41ac9c8a6ad685de0195c98c0425e7f6606845c0ffabab6570f6a42b5d6190d240ddba12f016a60d6d3e4a63e028affa6f35152ae505358000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x703) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000500)='cgroup.procs\x00', 0x2, 0x0) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x5}, 0x2c) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x8, 0x4, 0x100000001, 0x0, r3}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r4, &(0x7f00000002c0)}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x1fc, &(0x7f0000000180), 0x0, &(0x7f0000000240), &(0x7f0000000400)="490a92e52dfcac01ebf63a9537c8aa8337da83c667f546d89023ff18367f9a32cfd7f985f6f840327b00eb5fdcad65e3a2395b368f0010e92eb3a73e2c7c86dc430f26aa05a15525952097d4e2508e65de69049f6ffa67d9e2a888cd324d3278d2e96fb8dce8fa6f1fef8f083d75e89c2cf142904c5217eb171bc577f657aa6dfa70d7000000000000000000") write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000180)={0x7, 0x8, 0xfa00, {r5, 0x3}}, 0x10) mknod(&(0x7f0000f80000)='./file0\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) write$binfmt_elf64(r2, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], 0x8cc) socket$nl_crypto(0x10, 0x3, 0x15) socket$bt_hidp(0x1f, 0x3, 0x6) syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000002c0)=""/183, &(0x7f00000003c0)=0xb7) ptrace(0x10, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r2, &(0x7f0000000080)=0x4c000000, 0x10a000d50) 16:18:57 executing program 0: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x3, 0x0, 0xfffffffffffffffc, 0x0, 0x1}}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x200402, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000080)={0x41, 0x0, 0x3}, 0x10) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 16:18:57 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000500)='cgroup.procs\x00', 0x2, 0x0) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x5}, 0x2c) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x8, 0x4, 0x100000001, 0x0, r2}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r3, &(0x7f00000002c0)}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) clone(0x200, &(0x7f0000000640)="f34a14b979487e4a1d0134c829e0303524b969bbdb0a08063157ed361fa6af1365e49f18108b34c3084aab20530d491120d38a6194e9d8361ad7cf91e71bef6ca187d51c", 0x0, &(0x7f0000000600), &(0x7f0000000540)="5fa6f137c1618e7966f9dff8f2baeced9e413e84c4040000bbc21690bbd525ecee97222b3cb818469d317fbca8318139e063eb50fbdf9bd1e029aa5702fbeb6785574d9440f768c9fa1be695d0d10387414113cfc42ef9d3b3ee6d08") mknod(&(0x7f0000f80000)='./file0\x00', 0x0, 0x0) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x84100, 0x0) timerfd_gettime(r4, &(0x7f0000000100)) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$bt_hidp(0x1f, 0x3, 0x6) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r4, 0x84, 0x6c, &(0x7f0000000400)=ANY=[@ANYRES32=0x0, @ANYBLOB="ae000000ebb08cf6e1bd51cc7fa1caba96166a7a1a89516d8f9dbdd2666c10059db30b4d290f082848e390b7eff1ed8e4b0039df1a23da887e3c5d985a43b2ecaf8cbcfdf7fdabc6b63c55210ac3c186900381f39a48de1a59c7732a22501bb3578a59c4e9393596afe92279841d5cf06f5b51500ff154c3798d28a9ebda601fda47d5c7d63a5bfb8b1a11bd887234cd8f451cf2d002d194782665a019a03252c0bee3f148af345d00000000000000000000"], &(0x7f0000000180)=0xb6) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f0000000280)={r6, 0x8001, 0x0, 0x6, 0x400000005e310ed7, 0xfffffffffffffffa}, &(0x7f0000000380)=0x14) syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000002c0)=""/183, &(0x7f00000003c0)=0xb7) ptrace(0x10, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet6(r5, &(0x7f0000000140)={0xa, 0x4e24, 0x4, @rand_addr="56cf527927c99379e82d4389fc84f3b0", 0xba3}, 0x1c) sendfile(r1, r1, &(0x7f0000000080)=0x4c000000, 0x10a000d50) 16:18:57 executing program 1: r0 = syz_open_dev$sndtimer(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r2, 0x1, 0x0, &(0x7f0000ac5000), 0x4) sendmmsg$unix(r2, &(0x7f00000bd000), 0x80, 0x0) r3 = memfd_create(&(0x7f0000000080)='dev ', 0x3) write(r3, &(0x7f0000000040)="16", 0x1) sendfile(r2, r3, &(0x7f0000000000), 0xffff) fcntl$addseals(r3, 0x409, 0xd) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8}) r4 = gettid() dup(r1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r4, 0x1004000000016) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$IMCLEAR_L2(r5, 0x80044946, &(0x7f0000000040)=0x7f) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}}) 16:18:57 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x83, &(0x7f0000000080)={'f%lter\x00', 0x0, 0x0, 0x0, [], 0x0, 0x0, 0x0}, &(0x7f0000000140)=0x78) r1 = gettid() perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x9, 0x8, 0x3, 0x80000001, 0x0, 0x67f1e769, 0x200, 0xa, 0x8, 0x5, 0x80000001, 0xa5, 0x0, 0x100, 0x1, 0xfffffffffffffffe, 0x401, 0xffffffffffff05ae, 0x9, 0x1, 0x6, 0xffffffffffffff81, 0x3, 0x5, 0x7, 0x9, 0x3, 0x7, 0x81, 0xfffffffffffffffe, 0x0, 0x2, 0x3ff, 0xb755, 0x8000, 0x8, 0x0, 0x7, 0x0, @perf_bp={&(0x7f0000000000), 0x1}, 0x40, 0x63a7, 0x3, 0x7, 0x0, 0x5, 0x2}, r1, 0xf, 0xffffffffffffff9c, 0x1) 16:18:57 executing program 0: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) r1 = dup(r0) ioctl$NBD_DISCONNECT(r1, 0xab08) 16:18:58 executing program 4: socketpair$unix(0x1, 0x8000100000000001, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'eql\x00\x00\xdf\xdd\x94D\x8f\x15\xcf!\x00', 0xec38ed91f1c74952}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000080)={'eql\x00\x00\xa1\xa9[\x020xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r2, 0x1, 0x0, &(0x7f0000ac5000), 0x4) sendmmsg$unix(r2, &(0x7f00000bd000), 0x80, 0x0) r3 = memfd_create(&(0x7f0000000080)='dev ', 0x3) write(r3, &(0x7f0000000040)="16", 0x1) sendfile(r2, r3, &(0x7f0000000000), 0xffff) fcntl$addseals(r3, 0x409, 0xd) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8}) r4 = gettid() dup(r1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r4, 0x1004000000016) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$IMCLEAR_L2(r5, 0x80044946, &(0x7f0000000040)=0x7f) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}}) 16:18:58 executing program 0: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000040)={0x0, @speck128, 0x2, "a8dfb1160c8c5757"}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 16:18:58 executing program 3: ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x83, &(0x7f0000000080)={'f%lter\x00', 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000], 0x0, 0x0, 0x0}, &(0x7f0000000140)=0x78) 16:18:58 executing program 1: r0 = syz_open_dev$sndtimer(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r2, 0x1, 0x7, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x80, 0x0) r3 = memfd_create(&(0x7f0000000080)='dev ', 0x3) write(r3, &(0x7f0000000040)="16", 0x1) sendfile(r2, r3, &(0x7f0000000000), 0xffff) fcntl$addseals(r3, 0x409, 0xd) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8}) r4 = gettid() dup(r1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r4, 0x1004000000016) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$IMCLEAR_L2(r5, 0x80044946, &(0x7f0000000040)=0x7f) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}}) 16:18:58 executing program 5: r0 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x7fffffff, 0x92000) perf_event_open(0x0, 0x0, 0x0, r0, 0x1) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x83, &(0x7f0000000080)={'f%lter\x00', 0x0, 0x0, 0x0, [], 0x0, 0x0, 0x0}, &(0x7f0000000140)=0x78) 16:18:58 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000500)='cgroup.procs\x00', 0x2, 0x0) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x5}, 0x2c) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x8, 0x4, 0x100000001, 0x0, r2}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r3, &(0x7f00000002c0)}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x200, &(0x7f0000000180), 0x0, &(0x7f0000000080), &(0x7f0000000180)) mknod(&(0x7f0000000240)='./file0\x00', 0x422, 0x68) socket$inet6_tcp(0xa, 0x1, 0x0) socket$bt_hidp(0x1f, 0x3, 0x6) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000002c0)=""/183, &(0x7f00000003c0)=0xb7) ptrace(0x10, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DEST(r4, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x40, r5, 0x0, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x24, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x800}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9e}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x80) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000280)={r4, &(0x7f0000000400)="7b303e4eafee1f17620e945a0ecd59693d50548466cd20bf51883d2539d3598e210a3fe8a931fa1a5f286b23537a955411d1f48afe2b28a060a4bdb15e50751e62f5fdf6eb388dd6343305496da5ed60172afae1af7e2c5316a7ffbdf2d9eadb2c736a1e22ac7be046471497a9445c87a8bae0dc0426d1122ccb56f8c0f9e8e5d2e81f03cf5ceafcee7fe9dd34ba6ca5ac275edcb111acabdae42ed0ca61d20220730989651b0e0e17b7eb92e5a92fa2ddf08f16b69d3982a709dc0bfa98f8eec918e3251aba79dc5074cc220d9756cd3a13"}, 0x10) sendfile(r1, r1, &(0x7f0000000080)=0x4c000000, 0x10a000d50) 16:18:58 executing program 0: r0 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x7fffe) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 16:18:58 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sync() r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x6, 0x80000) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r0, 0x4010ae74, &(0x7f0000000100)={0x2, 0x7, 0x401}) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x483, &(0x7f0000000040)={0x29, @multicast1, 0x4e22, 0x3, 'dh\x00', 0x3e, 0xfff, 0x5a}, 0x2c) r1 = socket$inet(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x83, &(0x7f0000000080)={'f%lter\x00', 0x0, 0x0, 0x0, [], 0x0, 0x0, 0x0}, &(0x7f0000000140)=0x78) 16:18:58 executing program 0: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000500)=ANY=[@ANYRES32=0x0, @ANYBLOB="7c000000d4d773fdb78bab5ef7ea8cb3964e640855386bdeaa9647c08f45d35d0a6e29f7becfc2b101e516f39f2e416da1ced3115041c993a97ca5b3fc713f68d4216ed6a80f37d24c256a92a247bf006f9ad7de471a41c357cbc5344fa6f8e1413e908953d815948d328d7eb71c2154b894a3c9517e56376f76c19da68bbf06"], &(0x7f00000005c0)=0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000600)={0x9, 0x1ff, 0x0, 0xfffffffffffffffd, 0x10caa755, 0x7, 0x9, 0x7ac, r1}, &(0x7f0000000640)=0x20) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x3}}) r3 = accept$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000080)=0x1c) getcwd(&(0x7f0000000340)=""/142, 0x8e) r4 = syz_open_dev$mice(&(0x7f0000000240)='/dev/input/mice\x00', 0x0, 0x100) setsockopt$RDS_CONG_MONITOR(r4, 0x114, 0x6, &(0x7f0000000280), 0x4) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f00000006c0)={r2, @in6={{0xa, 0x4e21, 0x83cd, @dev={0xfe, 0x80, [], 0x22}, 0x3}}}, &(0x7f0000000780)=0x84) getsockopt(r3, 0x1f, 0x0, &(0x7f0000000140)=""/223, &(0x7f00000000c0)=0xdf) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'eql\x00', 0x0}) setsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000300)={r5, @broadcast, @rand_addr=0xfffffffffffffff8}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={0x0, r4, 0x0, 0xf, &(0x7f0000000400)='/dev/snd/timer\x00', 0xffffffffffffffff}, 0x30) get_thread_area(&(0x7f0000000680)={0x6, 0x0, 0x4000, 0x6, 0x4, 0x3ff, 0x6, 0x9, 0xc5a, 0x4}) r7 = gettid() rt_tgsigqueueinfo(r6, r7, 0x31, &(0x7f0000000480)={0x3d, 0x4, 0x7f}) 16:18:58 executing program 1: r0 = syz_open_dev$sndtimer(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r2, 0x1, 0x7, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x80, 0x0) r3 = memfd_create(&(0x7f0000000080)='dev ', 0x3) write(r3, &(0x7f0000000040)="16", 0x1) sendfile(r2, r3, &(0x7f0000000000), 0xffff) fcntl$addseals(r3, 0x409, 0xd) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8}) r4 = gettid() dup(r1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r4, 0x1004000000016) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$IMCLEAR_L2(r5, 0x80044946, &(0x7f0000000040)=0x7f) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}}) [ 2039.318027] IPVS: ftp: loaded support on port[0] = 21 16:18:59 executing program 4: socketpair$unix(0x1, 0x8000100000000001, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'eql\x00\x00\xdf\xdd\x94D\x8f\x15\xcf!\x00', 0xec38ed91f1c74952}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000080)={'eql\x00\x00\xa1\xa9[\x01>?\x00\x00\x03\xca\x00', @ifru_mtu=0x1}) 16:18:59 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000500)='cgroup.procs\x00', 0x2, 0x0) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x5}, 0x2c) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x8, 0x4, 0x100000001, 0x0, r2}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r3, &(0x7f00000002c0)}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000f80000)='./file0\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$bt_hidp(0x1f, 0x3, 0x6) syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000002c0)=""/183, &(0x7f00000003c0)=0xb7) ptrace(0x10, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000080)=0x4c000000, 0x10a000d50) 16:18:59 executing program 0: r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vfio/vfio\x00', 0x48080, 0x0) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r0, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000000c0)={0xffffffffffffffff}, 0x111, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x8e, @empty, 0x38}, {0xa, 0x4e22, 0x80000001, @mcast1, 0x100}, r1, 0x4}}, 0x48) r2 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000000)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x1ff) 16:18:59 executing program 1: r0 = syz_open_dev$sndtimer(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r2, 0x1, 0x7, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x80, 0x0) r3 = memfd_create(&(0x7f0000000080)='dev ', 0x3) write(r3, &(0x7f0000000040)="16", 0x1) sendfile(r2, r3, &(0x7f0000000000), 0xffff) fcntl$addseals(r3, 0x409, 0xd) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8}) r4 = gettid() dup(r1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r4, 0x1004000000016) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$IMCLEAR_L2(r5, 0x80044946, &(0x7f0000000040)=0x7f) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}}) [ 2039.364993] net_ratelimit: 12 callbacks suppressed [ 2039.365001] protocol 88fb is buggy, dev hsr_slave_0 [ 2039.375071] protocol 88fb is buggy, dev hsr_slave_1 [ 2039.380158] protocol 88fb is buggy, dev hsr_slave_0 [ 2039.385279] protocol 88fb is buggy, dev hsr_slave_1 [ 2039.390444] protocol 88fb is buggy, dev hsr_slave_0 [ 2039.395575] protocol 88fb is buggy, dev hsr_slave_1 [ 2039.444990] protocol 88fb is buggy, dev hsr_slave_0 [ 2039.450122] protocol 88fb is buggy, dev hsr_slave_1 [ 2039.515223] chnl_net:caif_netlink_parms(): no params data found [ 2039.642966] bridge0: port 1(bridge_slave_0) entered blocking state [ 2039.649670] bridge0: port 1(bridge_slave_0) entered disabled state [ 2039.657260] device bridge_slave_0 entered promiscuous mode [ 2039.664256] bridge0: port 2(bridge_slave_1) entered blocking state [ 2039.670707] bridge0: port 2(bridge_slave_1) entered disabled state [ 2039.680932] device bridge_slave_1 entered promiscuous mode [ 2039.710197] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 2039.720056] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 2039.747737] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 2039.755395] team0: Port device team_slave_0 added [ 2039.760825] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 2039.768508] team0: Port device team_slave_1 added [ 2039.773926] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 2039.781347] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 2039.801227] device hsr_slave_0 entered promiscuous mode [ 2039.808512] device hsr_slave_1 entered promiscuous mode [ 2039.814411] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 2039.828430] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 2039.846014] bridge0: port 2(bridge_slave_1) entered blocking state [ 2039.852356] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2039.859027] bridge0: port 1(bridge_slave_0) entered blocking state [ 2039.865428] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2039.903930] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 2039.910177] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2039.923486] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 2039.932136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2039.942545] bridge0: port 1(bridge_slave_0) entered disabled state [ 2039.950154] bridge0: port 2(bridge_slave_1) entered disabled state [ 2039.958265] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 2039.973662] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 2039.980203] 8021q: adding VLAN 0 to HW filter on device team0 [ 2039.990378] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2039.998839] bridge0: port 1(bridge_slave_0) entered blocking state [ 2040.005239] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2040.013003] device bridge_slave_1 left promiscuous mode [ 2040.019152] bridge0: port 2(bridge_slave_1) entered disabled state [ 2040.027084] device bridge_slave_0 left promiscuous mode [ 2040.032531] bridge0: port 1(bridge_slave_0) entered disabled state [ 2040.088035] device hsr_slave_1 left promiscuous mode [ 2040.101990] device hsr_slave_0 left promiscuous mode [ 2040.112933] team0 (unregistering): Port device team_slave_1 removed [ 2040.125416] team0 (unregistering): Port device team_slave_0 removed [ 2040.136534] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 2040.149734] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 2040.203491] bond0 (unregistering): Released all slaves [ 2040.265449] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2040.273001] bridge0: port 2(bridge_slave_1) entered blocking state [ 2040.279401] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2040.298024] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2040.306122] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2040.319159] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2040.329972] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2040.340562] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 2040.347161] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2040.354184] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2040.361862] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2040.369581] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2040.389596] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 2040.405981] 8021q: adding VLAN 0 to HW filter on device batadv0 16:19:00 executing program 3: ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x83, &(0x7f0000000080)={'f%lter\x00', 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000], 0x0, 0x0, 0x0}, &(0x7f0000000140)=0x78) 16:19:00 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet(0x2, 0x1, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc0\x00', 0x100, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe01, 0x0, 0xf, 0x0, "98e42f1d240df2c06d59f1c1736f2e497925b714d6ea4114e036abfbf6f40a654ca750da51fc95da0b0655ca0464780176e4ff9e16aa4e028a206838d468a55d", "f1f1d89657f1a834ff417d23e474778f0e1b88ffdecca6aea070453adf1ca16f", [0x5, 0x4]}) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x83, &(0x7f0000000080)={'f%lter\x00', 0x0, 0x0, 0x0, [], 0x0, 0x0, 0x0}, &(0x7f0000000140)=0x78) r2 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x2, 0x2) ioctl$GIO_UNIMAP(r2, 0x4b66, &(0x7f0000000100)={0x5, &(0x7f0000000040)=[{}, {}, {}, {}, {}]}) 16:19:00 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000500)='cgroup.procs\x00', 0x2, 0x0) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x5}, 0x2c) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x8, 0x4, 0x100000001, 0x0, r2}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r3, &(0x7f00000002c0)}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x200, &(0x7f0000000180), 0x0, &(0x7f0000000080), &(0x7f0000000180)) mknod(&(0x7f0000f80000)='./file0\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$bt_hidp(0x1f, 0x3, 0x6) syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000000c0)=""/183, &(0x7f00000003c0)=0xfffffe41) ptrace(0x10, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000080)=0x4c000000, 0x10a000d50) 16:19:00 executing program 0: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x3}}) r1 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x6f9, 0x2000) mmap$perf(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2, 0x10, r1, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$VIDIOC_SUBDEV_S_CROP(r1, 0xc038563c, &(0x7f0000000080)={0x1, 0x0, {0xed, 0x7, 0x4}}) ioctl$FS_IOC_ENABLE_VERITY(r1, 0x6685) 16:19:00 executing program 1: r0 = syz_open_dev$sndtimer(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r2, 0x1, 0x7, &(0x7f0000ac5000), 0x4) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x80, 0x0) r3 = memfd_create(&(0x7f0000000080)='dev ', 0x3) write(r3, &(0x7f0000000040)="16", 0x1) sendfile(r2, r3, &(0x7f0000000000), 0xffff) fcntl$addseals(r3, 0x409, 0xd) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8}) r4 = gettid() dup(r1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r4, 0x1004000000016) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$IMCLEAR_L2(r5, 0x80044946, &(0x7f0000000040)=0x7f) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}}) 16:19:00 executing program 4: socketpair$unix(0x1, 0x8000100000000001, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'eql\x00\x00\xdf\xdd\x94D\x8f\x15\xcf!\x00', 0xec38ed91f1c74952}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000080)={'eql\x00\x00\xa1\xa9[\x00@?\x00\x00\x03\xca\x00', @ifru_mtu=0x1}) [ 2040.465025] protocol 88fb is buggy, dev hsr_slave_0 [ 2040.470128] protocol 88fb is buggy, dev hsr_slave_1 16:19:00 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet(0x2, 0x80000, 0xdffffffffffffffa) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x83, &(0x7f0000000080)={'f%lter\x00', 0x0, 0x0, 0x0, [], 0x0, 0x0, 0x0}, &(0x7f0000000140)=0x78) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x7, 0x400500) 16:19:00 executing program 0: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x3}}) 16:19:00 executing program 1: r0 = syz_open_dev$sndtimer(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r2, 0x1, 0x7, &(0x7f0000ac5000), 0x4) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x80, 0x0) r3 = memfd_create(&(0x7f0000000080)='dev ', 0x3) write(r3, &(0x7f0000000040)="16", 0x1) sendfile(r2, r3, &(0x7f0000000000), 0xffff) fcntl$addseals(r3, 0x409, 0xd) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8}) r4 = gettid() dup(r1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r4, 0x1004000000016) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$IMCLEAR_L2(r5, 0x80044946, &(0x7f0000000040)=0x7f) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}}) 16:19:00 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000500)='cgroup.procs\x00', 0x2, 0x0) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x5}, 0x2c) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x8, 0x4, 0x100000001, 0x0, r2}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r3, &(0x7f00000002c0)}, 0x10) getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f00000000c0), &(0x7f0000000100)=0x8) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000140)=0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000400)={0x0, 0xdd, "752f3f92a1e24571f3c0853e755f6a83ffdb5812f6b8f63dc928a105d0e7ad2cb988b731ced31318a4eaec11998473e2899af818285673eadeac3f4c7e8f970f86cb06f9ceb05187aa679ab2f321c377441060b447ae4458d2a1e549aecdd0cd2b395f72d539fbfee1e56e41a1f356c8622a3371ff886fd2119e6d0b6ad92ca39af7d3f67d5c19884efacf7ade8736035fa25a99cc4b7d610b910f298da80e55f5f0c1e84278661c15479fcee1c38abaa25c87bdd5d71f324b00b36a3edac92fc083d7bbdacc66b8eef6c12cff5a6e07abb74daefe33042d279ad8fb0c"}, &(0x7f0000000240)=0xe5) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000280)={0x810, 0x2, 0xfffffffffffffff9, 0x3, r5}, 0x10) capget(&(0x7f0000000180)={0x399f1736, r4}, &(0x7f00000001c0)={0x3, 0x4, 0xff, 0xfe09, 0x5, 0x800}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x200, &(0x7f0000000180), 0x0, &(0x7f0000000080), &(0x7f0000000180)) mknod(&(0x7f0000f80000)='./file0\x00', 0x0, 0x0) r6 = syz_open_dev$sndpcmc(&(0x7f0000000380)='/dev/snd/pcmC#D#c\x00', 0xa3a, 0x80000) ioctl$PPPIOCSMAXCID(r6, 0x40047451, &(0x7f0000000540)=0x1) socket$inet6_tcp(0xa, 0x1, 0x0) socket$bt_hidp(0x1f, 0x3, 0x6) syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000002c0)=""/183, &(0x7f00000003c0)=0xb7) ptrace(0x10, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$uinput_user_dev(r6, &(0x7f0000000580)={'syz1\x00', {0x4, 0xfffffffffffffff9, 0x8000}, 0x35, [0xbfb, 0x7f, 0x1, 0x7, 0x5, 0x8000, 0x40, 0x8, 0xfffffffffffffffc, 0x7ae, 0xce2, 0x9, 0x2, 0x7f, 0xa30e, 0x2, 0x0, 0x80000001, 0x7, 0x529, 0x6, 0xc2, 0xffffffff, 0x2, 0x2, 0xfffffffffffffffe, 0x3d5, 0x32, 0x100, 0x3, 0x3, 0x7, 0x7, 0x0, 0x7, 0x100, 0x1, 0x0, 0x80, 0x10001, 0x4, 0x1d7, 0x8da, 0x1f, 0x7, 0x253f, 0x1000, 0xfa, 0x0, 0x0, 0x2, 0x15a, 0x2, 0x5, 0x100, 0x1, 0x200, 0x0, 0x5, 0x23f, 0x7, 0x5, 0x1f, 0x4], [0x2, 0xffffffffffff1ef6, 0x4c, 0x3, 0x6, 0x1, 0x101, 0x80, 0x6, 0x7f, 0x6, 0x4, 0x401, 0x7f, 0x240000000000, 0x7, 0x2, 0x3, 0x6800000000000000, 0x4, 0x8, 0xb984, 0x1ff800000000000, 0x4108, 0xffffffffffffffc1, 0x8, 0x8, 0x2fd27c55, 0xffffffffffff8001, 0x5, 0xffffffffffffffff, 0x20, 0x76, 0x5, 0x4, 0x0, 0x8001, 0x80000001, 0x0, 0x36, 0x2b644d84, 0x2, 0x2, 0x4, 0x9, 0x6, 0x3f, 0x9, 0x28442ec3, 0xffffffffffffffff, 0x1, 0x6, 0x6, 0xdd0, 0x9, 0x37df3ce1, 0xfffffffffffffffd, 0x8, 0x6, 0x7f, 0x7fffffff, 0x80000000, 0x4, 0x24c], [0x2, 0x0, 0x1, 0x10001, 0x1, 0xee, 0x2, 0x2, 0xffffffff, 0x10001, 0x200000000, 0x2, 0x8, 0x2, 0x8, 0x8e, 0x4, 0x2, 0xfffffffffffffffa, 0x1, 0x100, 0xf29, 0x56, 0x0, 0x3, 0x9, 0x2, 0x20, 0xfffffffffffffff8, 0x1000, 0x5, 0x7fff, 0x200, 0xd3a, 0xa2, 0x81, 0x1, 0x47a1, 0x401, 0x5, 0x0, 0x2, 0xfffffffffffeffff, 0x8, 0x8b9b, 0x1f2c, 0xaa08, 0x2, 0x9, 0x1000, 0x3, 0x6, 0x2, 0x7ff, 0x74, 0x2505, 0xc7, 0x4, 0x800, 0x5, 0x7, 0x7ff, 0x6eb, 0x9], [0x4, 0x2, 0x4, 0x7f, 0x3, 0x9, 0x3, 0x2, 0x1000, 0x3e, 0x3ff, 0x5, 0x100000000, 0xff, 0x100000001, 0x3, 0x7, 0x8, 0x2, 0x1e62, 0xffffffff, 0xff, 0xffffffff, 0xff, 0xfffffffffffffffd, 0x26c, 0x6, 0x200000000000000, 0x200, 0x2, 0x42be1c9f, 0xffffffffffff85ae, 0x6, 0x9eb, 0x5, 0x2, 0x81, 0x100000000, 0x9, 0x8, 0x1, 0x7, 0x0, 0x8, 0xffffffff, 0x3fd, 0x19, 0x177e, 0x9, 0x4, 0x7fff, 0x20, 0x28ac, 0x4000000000000000, 0x40, 0x1, 0x6, 0x3, 0x1, 0xfffffffffffffffe, 0x0, 0x7]}, 0x45c) sendfile(r1, r1, &(0x7f0000000080)=0x4c000000, 0x10a000d50) 16:19:00 executing program 3: ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x83, &(0x7f0000000080)={'f%lter\x00', 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x600000000000000], 0x0, 0x0, 0x0}, &(0x7f0000000140)=0x78) 16:19:00 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x101400, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) writev(r0, &(0x7f0000000480)=[{&(0x7f0000000180)="79e5cc8c232b3ef23cc7ac40bf68c6178fa7c395a5a2162bf70ce71afb0cd8e54ac51475148eaf8b52738a6c8199743ccfb815d14d3f41f50d7e3bafc58d2b2671bda58f124cb37aca218492d0814fe064c153d371c2cedde1ba271ed0a3a418da3e4f005a963df03437ef575fceb252bac06fea55e42688aa7f1ac87095f925c71ce4dee191f06c4e0261b0cf6281ba1961cf8983b059ad8e4ffd7b36f20a99e9a299a18fed1d155a24b2057c9fa3b1ee7fce5452feed4dd0c700e80312e68a55b2b1f72d186316c4ad8c0e325941d45010efe5b68220b75e7cf4bdf9a02b1e220155722cd11e4a5b42", 0xea}, {&(0x7f0000000280)="13ba78c2d9b7502c435500314959568b47ea8d4e388a0fb4dceca855f01e8a00f79de164ab645472cc03983a60f478e3fe87001e21b1750fecce4f555c27c43e310b0b6fc65e7cb99f2827e3ebaa70a4c0d68ae88e2453b498bfccc218b5998942271dca96f83e73426ad788bce1f2ecc143c24f920bcdf829d7a5c723cf08557c9f9a0ce5a49ba8ab708eecca11fa5db599b6b633c1e5cf54833c33f882a4e8d9cecd8d6d79", 0xa6}, {&(0x7f0000000340)="83e144e55a5359", 0x7}, {&(0x7f0000000380)="383c46430112bf74358d2dca22e4937bde2382b543ffca384143df8ba9963a066699b73d40914f37c1deae9c6689dfab4c400a03f03a3588e04bc8c80ceab9004b99e9ba1b308e484795c6c18cbe96c616182b930053d2cd73323b2f17476935b3d743001696aa73eaf4a20d9aee210e9d1be7dbd4f3e6c942794c88f0dd4d10a4fb7e0101f4f76252b7400b0e2037b589a70e1e39ffe0508d143b8ca66b9c434883d7540f6d35959927e859938ecc6383b5b0d262a9a14baa8b92cab21f2da00297", 0xc2}], 0x4) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x4082, 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="2c00000004000000000040200000000004000000000000ff070000fd0000000004000000deff000001000000"], 0x2c) r2 = socket$inet(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r2, 0x0, 0x83, &(0x7f0000000080)={'f%lter\x00', 0x0, 0x0, 0x0, [], 0x0, 0x0, 0x0}, &(0x7f0000000140)=0x78) 16:19:00 executing program 1: r0 = syz_open_dev$sndtimer(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r2, 0x1, 0x7, &(0x7f0000ac5000), 0x4) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x80, 0x0) r3 = memfd_create(&(0x7f0000000080)='dev ', 0x3) write(r3, &(0x7f0000000040)="16", 0x1) sendfile(r2, r3, &(0x7f0000000000), 0xffff) fcntl$addseals(r3, 0x409, 0xd) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8}) r4 = gettid() dup(r1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r4, 0x1004000000016) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$IMCLEAR_L2(r5, 0x80044946, &(0x7f0000000040)=0x7f) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}}) 16:19:00 executing program 0: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x3}}) ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000000040)=0x0) ptrace$poke(0x5, r1, &(0x7f0000000080), 0xf7c5) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 16:19:00 executing program 3: ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x83, &(0x7f0000000080)={'f%lter\x00', 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00000000000000], 0x0, 0x0, 0x0}, &(0x7f0000000140)=0x78) 16:19:00 executing program 1: r0 = syz_open_dev$sndtimer(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r2, 0x1, 0x7, &(0x7f0000ac5000), 0x4) sendmmsg$unix(r2, 0x0, 0x0, 0x0) r3 = memfd_create(&(0x7f0000000080)='dev ', 0x3) write(r3, &(0x7f0000000040)="16", 0x1) sendfile(r2, r3, &(0x7f0000000000), 0xffff) fcntl$addseals(r3, 0x409, 0xd) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8}) r4 = gettid() dup(r1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r4, 0x1004000000016) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$IMCLEAR_L2(r5, 0x80044946, &(0x7f0000000040)=0x7f) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}}) 16:19:00 executing program 5: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x60) syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x1, 0x2) dup(r0) openat$cgroup_ro(r0, &(0x7f0000000340)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) creat(&(0x7f0000000180)='./file0\x00', 0xa0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000200)={0x0, 0x80000}) syz_open_dev$mice(&(0x7f0000000240)='/dev/input/mice\x00', 0x0, 0xd7cfc6916a5c518) syz_open_dev$media(&(0x7f0000000280)='/dev/media#\x00', 0xafb6, 0x200000) openat$vcs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vcs\x00', 0x1, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vga_arbiter\x00', 0x410100, 0x0) r1 = dup3(r0, r0, 0x80000) ioctl$DRM_IOCTL_MODE_SETCRTC(r1, 0xc06864a2, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r2, 0x0, 0x83, &(0x7f0000000080)={'f%lter\x00', 0x0, 0x0, 0x0, [], 0x0, 0x0, 0x0}, &(0x7f0000000140)=0x78) 16:19:00 executing program 4: socketpair$unix(0x1, 0x8000100000000001, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'eql\x00\x00\xdf\xdd\x94D\x8f\x15\xcf!\x00', 0xec38ed91f1c74952}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000080)={'eql\x00\x00\xa1\xa9[\x02@?\x00\x00\x03\xca\x00', @ifru_mtu=0x1}) 16:19:00 executing program 0: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x3}}) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000140)={0x2, 0x845, 0x4, 0xda7, 0x6, [{0x7f, 0xc84d, 0x9, 0x0, 0x0, 0x1200}, {0x5, 0x1, 0xfffffffffffffffd, 0x0, 0x0, 0x800}, {0x100000000, 0xffff, 0x6, 0x0, 0x0, 0x100}, {0x100000000, 0x6, 0xfffffffffffffbff, 0x0, 0x0, 0x2080}, {0x400, 0x5, 0x3ff, 0x0, 0x0, 0x409}, {0x1ff, 0xce60, 0x55380483, 0x0, 0x0, 0x401}]}) socket$inet_udp(0x2, 0x2, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 16:19:00 executing program 1: r0 = syz_open_dev$sndtimer(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r2, 0x1, 0x7, &(0x7f0000ac5000), 0x4) sendmmsg$unix(r2, 0x0, 0x0, 0x0) r3 = memfd_create(&(0x7f0000000080)='dev ', 0x3) write(r3, &(0x7f0000000040)="16", 0x1) sendfile(r2, r3, &(0x7f0000000000), 0xffff) fcntl$addseals(r3, 0x409, 0xd) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8}) r4 = gettid() dup(r1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r4, 0x1004000000016) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$IMCLEAR_L2(r5, 0x80044946, &(0x7f0000000040)=0x7f) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}}) 16:19:00 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x83, &(0x7f0000000080)={'f%lter\x00', 0x0, 0x0, 0x0, [], 0x0, 0x0, 0x0}, &(0x7f0000000140)=0x78) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000001c0)={'veth1_to_bridge\x00', &(0x7f0000000180)=@ethtool_wolinfo={0x6, 0x1000, 0x1000, "7cfb2038d1b0"}}) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000100)={r0, r2}) 16:19:01 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000500)='cgroup.procs\x00', 0x2, 0x0) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x5}, 0x2c) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x8, 0x4, 0x100000001, 0x0, r2}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r3, &(0x7f00000002c0)}, 0x10) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000400)={{{@in=@multicast1, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@multicast1}}, &(0x7f0000000180)=0xe8) lsetxattr$security_capability(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='security.capability\x00', &(0x7f00000001c0)=@v3={0x3000000, [{0x3, 0x7fff}, {0x5, 0x569}], r4}, 0x18, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x200, &(0x7f0000000180), 0x0, &(0x7f0000000080), &(0x7f0000000180)) mknod(&(0x7f0000f80000)='./file0\x00', 0x0, 0x0) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f0000001800)='/dev/rtc0\x00', 0x18000, 0x0) connect$netlink(r5, &(0x7f0000001840)=@kern={0x10, 0x0, 0x0, 0x8}, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) socket$bt_hidp(0x1f, 0x3, 0x6) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='pa\x89emap\x00') write$apparmor_current(r6, &(0x7f00000000c0)=@hat={'changehat ', 0x2, 0x5e, ['security-\x00', 'pa\x89emap\x00', 'cgroup.procs\x00']}, 0x3c) getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000002c0)=""/183, &(0x7f00000003c0)=0xb7) ptrace(0x10, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') sendmsg$TIPC_CMD_GET_MAX_PORTS(r6, &(0x7f0000000580)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4010000}, 0xc, &(0x7f0000000540)={&(0x7f0000000380)={0x1c, r7, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x2004c050}, 0x4) sendfile(r1, r1, &(0x7f0000000080)=0x4c000000, 0x10a000d50) 16:19:01 executing program 3: ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x83, &(0x7f0000000080)={'f%lter\x00', 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000], 0x0, 0x0, 0x0}, &(0x7f0000000140)=0x78) 16:19:01 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, 0x0) r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x2061c0) setsockopt$RDS_RECVERR(r0, 0x114, 0x5, &(0x7f0000000040)=0x1, 0x4) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$EBT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000000080)={'f%lter\x00', 0x0, 0x0, 0x0, [], 0x0, 0x0, 0x0}, &(0x7f0000000140)=0x78) ioctl$UI_SET_PROPBIT(r0, 0x4004556e, 0x1b) 16:19:01 executing program 1: r0 = syz_open_dev$sndtimer(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r2, 0x1, 0x7, &(0x7f0000ac5000), 0x4) sendmmsg$unix(r2, 0x0, 0x0, 0x0) r3 = memfd_create(&(0x7f0000000080)='dev ', 0x3) write(r3, &(0x7f0000000040)="16", 0x1) sendfile(r2, r3, &(0x7f0000000000), 0xffff) fcntl$addseals(r3, 0x409, 0xd) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8}) r4 = gettid() dup(r1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r4, 0x1004000000016) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$IMCLEAR_L2(r5, 0x80044946, &(0x7f0000000040)=0x7f) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}}) 16:19:01 executing program 0: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 16:19:01 executing program 3: ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x83, &(0x7f0000000080)={'f%lter\x00', 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000], 0x0, 0x0, 0x0}, &(0x7f0000000140)=0x78) 16:19:01 executing program 5: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x83, &(0x7f00000001c0)={'f%lter\x00', 0x0, 0x0, 0x0, [], 0x0, 0x0, 0x0}, &(0x7f0000000240)=0x20) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000000)={0x0, 0xa1, 0x2, [0x3, 0x1f]}, &(0x7f0000000040)=0xc) setsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000100)={r2, 0x5}, 0x8) 16:19:01 executing program 1: r0 = syz_open_dev$sndtimer(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r2, 0x1, 0x7, &(0x7f0000ac5000), 0x4) sendmmsg$unix(r2, &(0x7f00000bd000), 0x80, 0x0) r3 = memfd_create(0x0, 0x3) write(r3, &(0x7f0000000040)="16", 0x1) sendfile(r2, r3, &(0x7f0000000000), 0xffff) fcntl$addseals(r3, 0x409, 0xd) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8}) r4 = gettid() dup(r1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r4, 0x1004000000016) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$IMCLEAR_L2(r5, 0x80044946, &(0x7f0000000040)=0x7f) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}}) 16:19:01 executing program 4: socketpair$unix(0x1, 0x8000100000000001, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'eql\x00\x00\xdf\xdd\x94D\x8f\x15\xcf!\x00', 0xec38ed91f1c74952}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000080)={'eql\x00\x00\xa1\xa9[\x01C?\x00\x00\x03\xca\x00', @ifru_mtu=0x1}) 16:19:01 executing program 0: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)="0a4344310b178b2dedfde7d4261b4819f895a668819948a6a323e4f8142cbd36686747d8800ce9655ab6ded6863db5559638f089878d9d0bb66475d1f0281ac29eab56d4c1883bcbaedaf6e0ef45c913a6f0037d", 0x59}], 0x258, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0xa0080, 0x0) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000380)='team\x00') ioctl$sock_SIOCGIFINDEX(0xffffffffffffff9c, 0x8933, &(0x7f0000000800)={'rose0\x00', 0x0}) accept4$packet(0xffffffffffffff9c, &(0x7f0000000b40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000b80)=0x14, 0x80800) getpeername$packet(0xffffffffffffffff, &(0x7f0000000bc0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000c00)=0x14) getpeername$packet(0xffffffffffffff9c, &(0x7f0000000f80)={0x11, 0x0, 0x0}, &(0x7f0000000fc0)=0x14) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000001040)={{{@in6=@loopback, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000001140)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffff9c, 0x8933, &(0x7f0000001180)={'team0\x00', 0x0}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f00000011c0)={{{@in6=@initdev, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@local}}, &(0x7f00000012c0)=0xe8) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f0000001600)={&(0x7f0000000340), 0xc, &(0x7f00000015c0)={&(0x7f0000001300)={0x284, r2, 0x8, 0x70bd25, 0x25dfdbfe, {}, [{{0x8, 0x1, r3}, {0x104, 0x2, [{0x84, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x54, 0x4, [{0x5, 0x80, 0x2, 0x4}, {0x3, 0x9, 0x7, 0x6}, {0x8, 0x800, 0x742}, {0x9, 0x9, 0x5, 0x364c}, {0x9, 0x80000000, 0x2, 0x7f}, {0x69e, 0x6, 0x0, 0xfffffffffffff001}, {0x6, 0x10000, 0x2, 0x9}, {0x12a, 0x3, 0x6, 0xf9db}, {0x27e190f9, 0x1, 0x2}, {0x473, 0x80000001, 0x800, 0x1}]}}}, {0x44, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x14, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x2aa5}}}]}}, {{0x8, 0x1, r4}, {0x80, 0x2, [{0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'roundrobin\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r5}}}]}}, {{0x8, 0x1, r6}, {0x44, 0x2, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0xd2d}}, {0x8, 0x6, r7}}}]}}, {{0x8, 0x1, r8}, {0x88, 0x2, [{0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r9}}}]}}]}, 0x284}, 0x1, 0x0, 0x0, 0x40000}, 0x10) r10 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x8, 0x420000) ioctl$BLKREPORTZONE(r10, 0xc0101282, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"]) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 16:19:01 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, 0x0) r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x3, 0x2) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000220}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x78, r1, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x5}]}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0xaffd111}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x800000000000}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r2, 0x0, 0x83, &(0x7f0000000080)={'f%lter\x00', 0x0, 0x0, 0x0, [], 0x0, 0x0, 0x0}, &(0x7f0000000140)=0x78) 16:19:01 executing program 1: r0 = syz_open_dev$sndtimer(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r2, 0x1, 0x7, &(0x7f0000ac5000), 0x4) sendmmsg$unix(r2, &(0x7f00000bd000), 0x80, 0x0) r3 = memfd_create(&(0x7f0000000080)='dev ', 0x0) write(r3, &(0x7f0000000040)="16", 0x1) sendfile(r2, r3, &(0x7f0000000000), 0xffff) fcntl$addseals(r3, 0x409, 0xd) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8}) r4 = gettid() dup(r1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r4, 0x1004000000016) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$IMCLEAR_L2(r5, 0x80044946, &(0x7f0000000040)=0x7f) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}}) 16:19:01 executing program 3: ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x83, &(0x7f0000000080)={'f%lter\x00', 0x0, 0x0, 0x0, [], 0x2, 0x0, 0x0}, &(0x7f0000000140)=0x78) 16:19:01 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000500)='cgroup.procs\x00', 0x2, 0x0) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x5}, 0x2c) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x8, 0x4, 0x100000001, 0x0, r2}, 0x2c) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240)='/proc/self/net/pfkey\x00', 0x1810c0, 0x0) ioctl$IMSETDEVNAME(r4, 0x80184947, &(0x7f0000000280)={0x7, 'syz0\x00'}) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r3, &(0x7f00000002c0)}, 0x10) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x201, 0x0) ioctl$KDSKBLED(r5, 0x4b65, 0x9ef) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x200, &(0x7f0000000180), 0x0, &(0x7f0000000080), &(0x7f0000000180)) mknod(&(0x7f0000f80000)='./file0\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$bt_hidp(0x1f, 0x3, 0x6) r7 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cachefiles\x00', 0x80, 0x0) getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000002c0)=""/183, &(0x7f00000003c0)=0xb7) r8 = msgget(0x3, 0x20) msgsnd(r8, &(0x7f0000001540)={0x3, "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"}, 0x1008, 0x800) ptrace(0x10, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000080)=0x4c000000, 0x10a000d50) ioctl$sock_bt_hidp_HIDPCONNADD(r7, 0x400448c8, &(0x7f00000000c0)={r2, r6, 0x9, 0x1000, &(0x7f0000000540)="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", 0x10000, 0x4, 0x0, 0x52ff07b6, 0xffffffffffffff00, 0x1, 0x6, 'syz0\x00'}) 16:19:01 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x2f, &(0x7f0000000000)="8262482f87973b3bbb51b7fa3460f8a0dc220327213e07861716c4ead5478040c91835ac286601c9792fdcf6c22aae17f423be7f1153ff14bfcbe65d816b2c97e063ac355fbc9a81b3a4f740b87011cd10c07566c6b4e20f69fe8052d5691f6066f46eca196f", 0x66) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x83, &(0x7f0000000180)={'f%lter\x00', 0x0, 0x0, 0x0, [], 0x3a8, 0x0, 0x0}, &(0x7f0000000140)=0x78) socket$inet(0x2, 0x7, 0x9) 16:19:01 executing program 3: ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x83, &(0x7f0000000080)={'f%lter\x00', 0x0, 0x0, 0x0, [], 0x6, 0x0, 0x0}, &(0x7f0000000140)=0x78) 16:19:01 executing program 3: ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x83, &(0x7f0000000080)={'f%lter\x00', 0x0, 0x0, 0x0, [], 0x600, 0x0, 0x0}, &(0x7f0000000140)=0x78) 16:19:01 executing program 0: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) r1 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000000c0)) r2 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x9, 0x0) write$P9_RSETATTR(r2, &(0x7f0000000080)={0x7, 0x1b, 0x2}, 0x7) 16:19:01 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x2800, 0x0) ioctl$TIOCSBRK(r0, 0x5427) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, 0x0) arch_prctl$ARCH_SET_CPUID(0x1012, 0x0) clone(0x44028a02, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x83, &(0x7f0000000080)={'f%lter\x00', 0x0, 0x0, 0x0, [], 0x0, 0x0, 0x0}, &(0x7f0000000140)=0x78) 16:19:02 executing program 3: ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x83, &(0x7f0000000080)={'f%lter\x00', 0x0, 0x0, 0x0, [], 0x3f00, 0x0, 0x0}, &(0x7f0000000140)=0x78) 16:19:02 executing program 4: socketpair$unix(0x1, 0x8000100000000001, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'eql\x00\x00\xdf\xdd\x94D\x8f\x15\xcf!\x00', 0xec38ed91f1c74952}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000080)={'eql\x00\x00\xa1\xa9[\x02E?\x00\x00\x03\xca\x00', @ifru_mtu=0x1}) 16:19:02 executing program 0: r0 = syz_open_dev$sndtimer(&(0x7f0000000140)='/dev/snd/timer\x00', 0x0, 0x10000) getpid() fsetxattr$trusted_overlay_nlink(r0, &(0x7f00000000c0)='trusted.overlay.nlink\x00', &(0x7f0000000100)={'L+', 0x5}, 0x28, 0x3) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vfio/vfio\x00', 0x10000, 0x0) ioctl$EVIOCSCLOCKID(r1, 0x400445a0, &(0x7f0000000080)=0x3) 16:19:02 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000500)='cgroup.procs\x00', 0x2, 0x0) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x5}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0xd, 0x8, 0x4, 0x100000001}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000480)={r2, &(0x7f0000000640)="5084a328309145b886d990091978d11595bc083a1bd5f860769294ec34250bd977de1721eb2e91fee5d9e2f9ffffffffffffcec8469f6da32b0d5f528120fb7f5470cc6e59f2a24c3a1229584133e4fd5736d79d7e738ed34963c7fd4211b98b7cf27b5fabbb3ee0ed73080e4fd7209f5d23b8af170b347844"}, 0xffffffc7) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0xffffffffffffff9c}) r4 = syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x7, 0x20a00) ioctl$NBD_CLEAR_SOCK(r4, 0xab04) getpeername$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000240)=0x14) getresuid(&(0x7f0000000280), &(0x7f0000000380), &(0x7f0000000400)=0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000540)={{{@in=@remote, @in=@broadcast, 0x4e23, 0x1, 0x4e24, 0x8001, 0xa, 0x20, 0x80, 0x3b, r5, r6}, {0x0, 0x0, 0x5, 0x10001, 0x0, 0x4, 0x100, 0xff}, {0x0, 0x8, 0x0, 0x9}, 0x100, 0x6e6bbb, 0x1, 0x1, 0x2, 0x1}, {{@in=@multicast2, 0x4d6, 0x3c}, 0x2, @in=@rand_addr=0x6, 0x34ff, 0x0, 0x3, 0x1f, 0x0, 0x5, 0x1}}, 0xe8) clone(0x200, &(0x7f0000000180), 0x0, &(0x7f0000000080), &(0x7f0000000180)) socket$inet6_tcp(0xa, 0x1, 0x0) socket$bt_hidp(0x1f, 0x3, 0x6) syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000002c0)=""/183, &(0x7f00000003c0)=0xb7) ptrace(0x10, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000080)=0x4c000000, 0x10a000d50) 16:19:02 executing program 1: r0 = syz_open_dev$sndtimer(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r2, 0x1, 0x7, &(0x7f0000ac5000), 0x4) sendmmsg$unix(r2, &(0x7f00000bd000), 0x80, 0x0) r3 = memfd_create(&(0x7f0000000080)='dev ', 0x3) write(0xffffffffffffffff, &(0x7f0000000040)="16", 0x1) sendfile(r2, r3, &(0x7f0000000000), 0xffff) fcntl$addseals(r3, 0x409, 0xd) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8}) r4 = gettid() dup(r1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r4, 0x1004000000016) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$IMCLEAR_L2(r5, 0x80044946, &(0x7f0000000040)=0x7f) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}}) 16:19:02 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, 0x0) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x11) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000100)={'IDLETIMER\x00'}, &(0x7f0000000180)=0x1e) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000040), 0x8) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x83, &(0x7f0000000080)={'f%lter\x00', 0x0, 0x0, 0x0, [], 0x0, 0x0, 0x0}, &(0x7f0000000140)=0x78) 16:19:02 executing program 3: ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x83, &(0x7f0000000080)={'f%lter\x00', 0x0, 0x0, 0x0, [], 0x4000, 0x0, 0x0}, &(0x7f0000000140)=0x78) 16:19:02 executing program 0: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x4800) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x200, 0x0) ioctl$VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000140)={0x3, 0xa, 0x4, 0x4000, {0x77359400}, {0x5, 0xc, 0x80000001, 0x1, 0x101, 0x401, "ff9cbde3"}, 0x3, 0x1, @fd=r2, 0x4}) 16:19:02 executing program 3: ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x83, &(0x7f0000000080)={'f%lter\x00', 0x0, 0x0, 0x0, [], 0x20000, 0x0, 0x0}, &(0x7f0000000140)=0x78) 16:19:02 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/dlm-control\x00', 0x40000, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e20, @multicast2}}, 0x0, 0x6}, &(0x7f0000000240)=0x90) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000280)={r1, 0x19a5}, 0x8) r2 = socket$inet(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r2, 0x0, 0x83, &(0x7f0000000080)={'f%lter\x00', 0x0, 0x0, 0x0, [], 0x0, 0x0, 0x0}, &(0x7f0000000140)=0x78) seccomp(0x0, 0x0, &(0x7f0000000040)={0x6, &(0x7f0000000000)=[{0x80000000, 0xd5b, 0x10001, 0xff}, {0xa71, 0x5, 0x2, 0x5}, {0x4, 0x10001, 0x100000000, 0x400}, {0x75e0, 0x2, 0x819, 0x2}, {0x7, 0x8, 0x1c, 0x9}, {0x1, 0x4a06bd0a, 0x10001}]}) 16:19:02 executing program 0: r0 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0xc, 0x80080) r1 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f00000002c0)={{0x3, 0x3, 0xffffffffffffff00, 0x0, 0x480000000000}}) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x34000002}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0xb0, r2, 0x20, 0x70bd2c, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x10001}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast1}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x2}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xbdf}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xb, 0x12}}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x33}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x20}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7fffffff}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4040000}, 0x80) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) 16:19:02 executing program 3: ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x83, &(0x7f0000000080)={'f%lter\x00', 0x0, 0x0, 0x0, [], 0x1000000, 0x0, 0x0}, &(0x7f0000000140)=0x78) 16:19:02 executing program 1: r0 = syz_open_dev$sndtimer(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r2, 0x1, 0x7, &(0x7f0000ac5000), 0x4) sendmmsg$unix(r2, &(0x7f00000bd000), 0x80, 0x0) r3 = memfd_create(&(0x7f0000000080)='dev ', 0x3) write(0xffffffffffffffff, &(0x7f0000000040)="16", 0x1) sendfile(r2, r3, &(0x7f0000000000), 0xffff) fcntl$addseals(r3, 0x409, 0xd) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8}) r4 = gettid() dup(r1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r4, 0x1004000000016) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$IMCLEAR_L2(r5, 0x80044946, &(0x7f0000000040)=0x7f) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}}) 16:19:03 executing program 5: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='stat\x00') write$ppp(r1, &(0x7f0000000280)="70edd7ed64acec49b1f2a1b23e0e6cf9d8100539166a1a079a7754a7e8fc91055ae12c92f05b96649f3d69f4665dfee8022e947544fd31ba1ac3c4b643", 0x3d) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, 0x0) fcntl$setflags(r0, 0x2, 0x1) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x111000, 0x0) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f00000003c0)=0x0) ptrace$cont(0x18, r3, 0x50, 0x7) getdents(r2, &(0x7f0000000180)=""/253, 0xfd) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet_udp_int(r2, 0x11, 0x67, &(0x7f0000000040), 0x4) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sequencer2\x00', 0x80000, 0x0) r5 = socket$inet(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r5, 0x0, 0x83, &(0x7f0000000080)={'f%lter\x00', 0x0, 0x0, 0x0, [], 0x0, 0x0, 0x0}, &(0x7f0000000140)=0x78) ioctl$PPPOEIOCDFWD(r2, 0xb101, 0x0) write$UHID_SET_REPORT_REPLY(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="0e0000000800000000078d008fe34f881b681f12b74023b80fec9dda125cc4d0ec5ecf4353a8d22c87bbd64ad4afb534f9fb898ccc0400ac1f666d97f93f2946f4a349569c9ddf7465ae75c53189c32d63bb74ee2d1d1aa80087557b6bfaa3c20e2f3bb7c931b9a25d971fa31706842034c4bd93c5d04131e0b4db762ca8c0b17f3bfd383f0543dda62f7a6021f8aa33cd4d5f99d0cc820ac2"], 0x99) 16:19:03 executing program 3: ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x83, &(0x7f0000000080)={'f%lter\x00', 0x0, 0x0, 0x0, [], 0x2000000, 0x0, 0x0}, &(0x7f0000000140)=0x78) 16:19:03 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000500)='cgroup.procs\x00', 0x2, 0x0) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x5}, 0x2c) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x8, 0x4, 0x100000001, 0x0, r2}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r3, &(0x7f00000002c0)}, 0x10) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') sendmsg$TIPC_CMD_GET_MAX_PORTS(r4, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40080000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r5, 0x10, 0x70bd2c, 0x25dfdbfb, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) clone(0x200, &(0x7f0000000180), 0x0, &(0x7f0000000080), &(0x7f0000000180)) mknod(&(0x7f0000f80000)='./file0\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$bt_hidp(0x1f, 0x3, 0x6) r6 = gettid() ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r6, 0x8, &(0x7f0000000400)=""/217) syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000002c0)=""/183, &(0x7f00000003c0)=0xb7) ptrace(0x10, 0x0) r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r7, r1, &(0x7f0000000280)=0x4c000000, 0x14a000d50) 16:19:03 executing program 0: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x3}}) ioctl(r0, 0x4f6, &(0x7f0000000140)="d80baa5a8578b0693d90a96f8cf868a06b60433f9a1b212f010bd2369434092a5b11e7bc99b675e1381f1fb2e1f30d0847cba3cac3690588d0c157fbb1ae5ebf637a8121540b01b97068e2537d6bc9019210bcd19393326cfde51cf947face1796a12d06afff17c90dd724f276231a1e8eae9a6a5ae735ea038da436593209a258be2e4534a0b328cee29ee358bf863aea00825aaab7df203218f85442408f632ac42df4c3d458b60fb4f014624d5ae8c50eac7423cef5dac31ede6e84dc9a2d1d62dad9e8956742fb1bfb1d06289aac8022422a0065d54d7f6846272a0895cff155fed6665c440224f34f131770b627") ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 16:19:03 executing program 4: socketpair$unix(0x1, 0x8000100000000001, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'eql\x00\x00\xdf\xdd\x94D\x8f\x15\xcf!\x00', 0xec38ed91f1c74952}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000080)={'eql\x00\x00\xa1\xa9[\x01H?\x00\x00\x03\xca\x00', @ifru_mtu=0x1}) 16:19:03 executing program 1: r0 = syz_open_dev$sndtimer(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r2, 0x1, 0x7, &(0x7f0000ac5000), 0x4) sendmmsg$unix(r2, &(0x7f00000bd000), 0x80, 0x0) r3 = memfd_create(&(0x7f0000000080)='dev ', 0x3) write(0xffffffffffffffff, &(0x7f0000000040)="16", 0x1) sendfile(r2, r3, &(0x7f0000000000), 0xffff) fcntl$addseals(r3, 0x409, 0xd) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8}) r4 = gettid() dup(r1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r4, 0x1004000000016) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$IMCLEAR_L2(r5, 0x80044946, &(0x7f0000000040)=0x7f) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}}) 16:19:03 executing program 0: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x14) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r1, 0x84, 0x65, &(0x7f0000000140)=[@in={0x2, 0x4e22, @local}, @in6={0xa, 0x4e21, 0x9, @loopback, 0x7a800303}, @in6={0xa, 0x4e21, 0x9, @loopback, 0xfffffffffffffff9}, @in6={0xa, 0x4e22, 0x7fffffff, @remote, 0x8}, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x25}}, @in={0x2, 0x4e23, @multicast1}, @in6={0xa, 0x4e24, 0x80000000, @empty, 0x1}], 0xa0) write$P9_RVERSION(r1, &(0x7f00000000c0)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.L'}, 0x15) ioctl$DRM_IOCTL_INFO_BUFS(r1, 0xc0106418, &(0x7f0000000080)={0x5, 0x10000, 0x800007, 0x8, 0x200000000000001a, 0x88}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ubi_ctrl\x00', 0x210002, 0x0) [ 2043.623534] syz-executor5 invoked oom-killer: gfp_mask=0x7080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=1000 16:19:03 executing program 3: ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x83, &(0x7f0000000080)={'f%lter\x00', 0x0, 0x0, 0x0, [], 0x6000000, 0x0, 0x0}, &(0x7f0000000140)=0x78) [ 2043.705460] CPU: 0 PID: 16767 Comm: syz-executor5 Not tainted 5.0.0-rc2 #24 [ 2043.712615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2043.721970] Call Trace: [ 2043.724571] dump_stack+0x1db/0x2d0 [ 2043.728209] ? dump_stack_print_info.cold+0x20/0x20 [ 2043.733232] ? check_preemption_disabled+0x48/0x290 [ 2043.738267] dump_header+0x1e6/0x116c [ 2043.742079] ? add_lock_to_list.isra.0+0x450/0x450 [ 2043.747016] ? perf_trace_lock+0x750/0x750 [ 2043.751255] ? print_usage_bug+0xd0/0xd0 [ 2043.755326] ? pagefault_out_of_memory+0x1a1/0x1a1 [ 2043.760264] ? ___ratelimit+0x37c/0x686 [ 2043.764259] ? mark_held_locks+0xb1/0x100 [ 2043.768412] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 2043.773545] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 2043.778657] ? lockdep_hardirqs_on+0x415/0x5d0 [ 2043.783244] ? trace_hardirqs_on+0xbd/0x310 [ 2043.787574] ? kasan_check_read+0x11/0x20 [ 2043.791727] ? ___ratelimit+0x37c/0x686 [ 2043.795706] ? trace_hardirqs_off_caller+0x300/0x300 [ 2043.800811] ? do_raw_spin_trylock+0x270/0x270 [ 2043.805401] ? trace_hardirqs_on_caller+0x310/0x310 [ 2043.810422] ? lock_acquire+0x1db/0x570 [ 2043.814409] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 2043.819533] ? ___ratelimit+0xac/0x686 [ 2043.823433] ? idr_get_free+0xee0/0xee0 [ 2043.827417] ? lockdep_hardirqs_on+0x415/0x5d0 [ 2043.832016] oom_kill_process.cold+0x10/0x9d4 [ 2043.836538] ? cgroup_procs_next+0x70/0x70 [ 2043.840788] ? _raw_spin_unlock_irq+0x5e/0x90 [ 2043.845292] ? oom_badness+0xa50/0xa50 [ 2043.849189] ? oom_evaluate_task+0x540/0x540 [ 2043.853605] ? mem_cgroup_iter_break+0x30/0x30 [ 2043.858204] ? mutex_trylock+0x2d0/0x2d0 [ 2043.862270] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2043.867831] ? rcu_read_unlock_special+0x380/0x380 [ 2043.872779] out_of_memory+0x885/0x1420 [ 2043.876775] ? oom_killer_disable+0x340/0x340 [ 2043.881284] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 2043.886395] ? lock_acquire+0x1db/0x570 [ 2043.890389] mem_cgroup_out_of_memory+0x160/0x210 [ 2043.895234] ? do_raw_spin_unlock+0xa0/0x330 [ 2043.899648] ? memcg_memory_event+0x40/0x40 [ 2043.904043] ? do_raw_spin_trylock+0x270/0x270 [ 2043.908648] ? _raw_spin_unlock+0x2d/0x50 [ 2043.912804] try_charge+0x12a9/0x19b0 [ 2043.916602] ? lock_downgrade+0x910/0x910 [ 2043.920750] ? kasan_check_read+0x11/0x20 [ 2043.924907] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 2043.929756] ? get_mem_cgroup_from_mm+0x1cd/0x420 [ 2043.934608] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2043.940155] ? lock_downgrade+0x910/0x910 [ 2043.944306] ? kasan_check_read+0x11/0x20 [ 2043.948463] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 2043.953758] ? rcu_read_unlock_special+0x380/0x380 [ 2043.958708] ? get_mem_cgroup_from_mm+0x1ea/0x420 [ 2043.963559] memcg_kmem_charge_memcg+0x7c/0x130 [ 2043.968231] ? memcg_kmem_put_cache+0xb0/0xb0 [ 2043.972738] ? lock_release+0xc40/0xc40 [ 2043.976732] memcg_kmem_charge+0x13b/0x340 [ 2043.980977] __alloc_pages_nodemask+0x7b8/0xdc0 [ 2043.985657] ? __alloc_pages_slowpath+0x2cc0/0x2cc0 [ 2043.990677] ? rcu_pm_notify+0xd0/0xd0 [ 2043.994588] ? rcu_read_lock_sched_held+0x110/0x130 [ 2043.999612] ? kmem_cache_alloc_node+0x347/0x710 [ 2044.004373] ? print_usage_bug+0xd0/0xd0 [ 2044.008469] copy_process+0x847/0x8710 [ 2044.012379] ? print_usage_bug+0xd0/0xd0 [ 2044.016451] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2044.021999] ? check_preemption_disabled+0x48/0x290 [ 2044.027037] ? __lock_acquire+0x572/0x4a30 [ 2044.031272] ? mark_held_locks+0x100/0x100 [ 2044.035537] ? __cleanup_sighand+0x70/0x70 [ 2044.039777] ? mark_held_locks+0x100/0x100 [ 2044.044022] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2044.049568] ? check_preemption_disabled+0x48/0x290 [ 2044.054613] ? check_preemption_disabled+0x48/0x290 [ 2044.059640] ? debug_smp_processor_id+0x1c/0x20 [ 2044.064313] ? perf_trace_lock+0x12f/0x750 [ 2044.068555] ? perf_trace_lock_acquire+0x138/0x7d0 [ 2044.073508] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2044.079052] ? check_preemption_disabled+0x48/0x290 [ 2044.084081] ? debug_smp_processor_id+0x1c/0x20 [ 2044.088753] ? perf_trace_lock+0x12f/0x750 [ 2044.092995] ? perf_trace_lock_acquire+0x138/0x7d0 [ 2044.097939] ? add_lock_to_list.isra.0+0x450/0x450 [ 2044.102877] ? find_held_lock+0x35/0x120 [ 2044.106948] ? print_usage_bug+0xd0/0xd0 [ 2044.111018] ? psi_memstall_leave+0x1f8/0x280 [ 2044.115531] ? find_held_lock+0x35/0x120 [ 2044.119601] ? __lock_acquire+0x572/0x4a30 [ 2044.123840] ? _raw_spin_unlock_irq+0x28/0x90 [ 2044.128340] ? _raw_spin_unlock_irq+0x28/0x90 [ 2044.132842] ? lockdep_hardirqs_on+0x415/0x5d0 [ 2044.137428] ? trace_hardirqs_on+0xbd/0x310 [ 2044.141767] ? mark_held_locks+0x100/0x100 [ 2044.146021] ? check_preemption_disabled+0x48/0x290 [ 2044.151045] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2044.156590] ? check_preemption_disabled+0x48/0x290 [ 2044.161615] ? check_preemption_disabled+0x48/0x290 [ 2044.166644] ? debug_smp_processor_id+0x1c/0x20 [ 2044.171313] ? perf_trace_lock+0x12f/0x750 [ 2044.175551] ? perf_trace_lock_acquire+0x138/0x7d0 [ 2044.180500] ? add_lock_to_list.isra.0+0x450/0x450 [ 2044.185436] ? perf_trace_lock+0x750/0x750 [ 2044.189677] ? lockdep_hardirqs_on+0x415/0x5d0 [ 2044.194275] ? try_to_free_pages+0xb70/0xb70 [ 2044.198695] ? percpu_ref_put_many+0x129/0x270 [ 2044.203294] ? blkcg_maybe_throttle_current+0x75e/0x1400 [ 2044.208751] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2044.214304] _do_fork+0x1a9/0x1170 [ 2044.217860] ? fork_idle+0x1d0/0x1d0 [ 2044.221590] ? trace_hardirqs_off+0xb8/0x310 [ 2044.226008] ? get_mctgt_type_thp.isra.0+0x4c0/0x4c0 [ 2044.231116] ? prepare_exit_to_usermode+0x32e/0x3b0 [ 2044.236134] ? do_syscall_64+0x8c/0x800 [ 2044.240111] ? do_syscall_64+0x8c/0x800 [ 2044.244095] ? lockdep_hardirqs_on+0x415/0x5d0 [ 2044.248684] ? trace_hardirqs_on+0xbd/0x310 [ 2044.253020] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2044.258394] ? trace_hardirqs_off_caller+0x300/0x300 [ 2044.263524] __x64_sys_clone+0xbf/0x150 [ 2044.267520] do_syscall_64+0x1a3/0x800 [ 2044.271416] ? syscall_return_slowpath+0x5f0/0x5f0 [ 2044.276354] ? prepare_exit_to_usermode+0x232/0x3b0 [ 2044.281386] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2044.286248] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2044.291437] RIP: 0033:0x45a899 16:19:04 executing program 0: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x3}}) syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x200000) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 16:19:04 executing program 1: r0 = syz_open_dev$sndtimer(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r2, 0x1, 0x7, &(0x7f0000ac5000), 0x4) sendmmsg$unix(r2, &(0x7f00000bd000), 0x80, 0x0) r3 = memfd_create(&(0x7f0000000080)='dev ', 0x3) write(r3, 0x0, 0x0) sendfile(r2, r3, &(0x7f0000000000), 0xffff) fcntl$addseals(r3, 0x409, 0xd) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8}) r4 = gettid() dup(r1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r4, 0x1004000000016) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$IMCLEAR_L2(r5, 0x80044946, &(0x7f0000000040)=0x7f) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}}) 16:19:04 executing program 3: ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x83, &(0x7f0000000080)={'f%lter\x00', 0x0, 0x0, 0x0, [], 0x3f000000, 0x0, 0x0}, &(0x7f0000000140)=0x78) 16:19:04 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = syz_open_dev$adsp(&(0x7f00000000c0)='/dev/adsp#\x00', 0x0, 0x10000) ioctl$TUNGETIFF(r1, 0x800454d2, &(0x7f0000000100)) r2 = openat$cgroup_procs(r0, &(0x7f0000000500)='cgroup.procs\x00', 0x2, 0x0) clone(0x2102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x5}, 0x2c) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x8, 0x4, 0x100000001, 0x0, r3}, 0x2c) finit_module(r2, &(0x7f0000000140)='em1-selinuxcgroup\x00', 0x3) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r4, &(0x7f00000002c0)}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x200, &(0x7f0000000180), 0x0, &(0x7f0000000080), &(0x7f0000000180)) mknod(&(0x7f0000f80000)='./file0\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$bt_hidp(0x1f, 0x3, 0x6) syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000002c0)=""/183, &(0x7f00000003c0)=0xb7) ptrace(0x10, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r2, &(0x7f0000000080)=0x4c000000, 0x10a000d50) [ 2044.294637] Code: ff 48 85 f6 0f 84 97 8d fb ff 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 0f 8c 6e 8d fb ff 74 01 c3 31 ed 48 f7 c7 00 00 01 00 75 [ 2044.314121] RSP: 002b:0000000000a4fac8 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 2044.321837] RAX: ffffffffffffffda RBX: 00007ff96b3b5700 RCX: 000000000045a899 [ 2044.329106] RDX: 00007ff96b3b59d0 RSI: 00007ff96b3b4db0 RDI: 00000000003d0f00 [ 2044.336371] RBP: 0000000000a4fcd0 R08: 00007ff96b3b5700 R09: 00007ff96b3b5700 [ 2044.336381] R10: 00007ff96b3b59d0 R11: 0000000000000202 R12: 0000000000000000 [ 2044.336390] R13: 0000000000a4fb7f R14: 00007ff96b3b59c0 R15: 000000000073bf0c [ 2044.495205] memory: usage 307192kB, limit 307200kB, failcnt 835 [ 2044.511595] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2044.560479] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2044.585929] Memory cgroup stats for /syz5: cache:204KB rss:146124KB rss_huge:67584KB shmem:64KB mapped_file:132KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:146176KB inactive_file:0KB active_file:0KB unevictable:0KB [ 2044.637199] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor5,pid=32267,uid=0 [ 2044.666169] Memory cgroup out of memory: Kill process 32267 (syz-executor5) score 1106 or sacrifice child [ 2044.695138] Killed process 32267 (syz-executor5) total-vm:70532kB, anon-rss:2208kB, file-rss:33736kB, shmem-rss:0kB [ 2044.723639] oom_reaper: reaped process 32267 (syz-executor5), now anon-rss:0kB, file-rss:32776kB, shmem-rss:0kB [ 2044.735006] net_ratelimit: 24 callbacks suppressed [ 2044.735014] protocol 88fb is buggy, dev hsr_slave_0 [ 2044.745065] protocol 88fb is buggy, dev hsr_slave_1 [ 2044.817353] syz-executor5 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2044.841426] CPU: 1 PID: 16767 Comm: syz-executor5 Not tainted 5.0.0-rc2 #24 [ 2044.848560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2044.857910] Call Trace: [ 2044.860510] dump_stack+0x1db/0x2d0 [ 2044.864141] ? dump_stack_print_info.cold+0x20/0x20 [ 2044.869159] ? check_preemption_disabled+0x48/0x290 [ 2044.874194] dump_header+0x1e6/0x116c [ 2044.878002] ? add_lock_to_list.isra.0+0x450/0x450 [ 2044.882932] ? perf_trace_lock+0x750/0x750 [ 2044.887174] ? print_usage_bug+0xd0/0xd0 [ 2044.891238] ? pagefault_out_of_memory+0x1a1/0x1a1 [ 2044.896175] ? ___ratelimit+0x37c/0x686 [ 2044.900156] ? mark_held_locks+0xb1/0x100 [ 2044.904411] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 2044.909518] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 2044.914606] ? lockdep_hardirqs_on+0x415/0x5d0 [ 2044.919172] ? trace_hardirqs_on+0xbd/0x310 [ 2044.923478] ? kasan_check_read+0x11/0x20 [ 2044.927611] ? ___ratelimit+0x37c/0x686 [ 2044.931567] ? trace_hardirqs_off_caller+0x300/0x300 [ 2044.936653] ? do_raw_spin_trylock+0x270/0x270 [ 2044.941218] ? trace_hardirqs_on_caller+0x310/0x310 [ 2044.946216] ? lock_acquire+0x1db/0x570 [ 2044.950176] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 2044.955272] ? ___ratelimit+0xac/0x686 [ 2044.959144] ? idr_get_free+0xee0/0xee0 [ 2044.963142] ? lockdep_hardirqs_on+0x415/0x5d0 [ 2044.967720] oom_kill_process.cold+0x10/0x9d4 [ 2044.972202] ? cgroup_procs_next+0x70/0x70 [ 2044.976467] ? _raw_spin_unlock_irq+0x5e/0x90 [ 2044.980955] ? oom_badness+0xa50/0xa50 [ 2044.984836] ? oom_evaluate_task+0x540/0x540 [ 2044.989231] ? mem_cgroup_iter_break+0x30/0x30 [ 2044.993792] ? mutex_trylock+0x2d0/0x2d0 [ 2044.997838] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2045.003365] ? rcu_read_unlock_special+0x380/0x380 [ 2045.008286] out_of_memory+0x885/0x1420 [ 2045.012257] ? oom_killer_disable+0x340/0x340 [ 2045.016736] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 2045.021826] ? lock_acquire+0x1db/0x570 [ 2045.025792] mem_cgroup_out_of_memory+0x160/0x210 [ 2045.030620] ? do_raw_spin_unlock+0xa0/0x330 [ 2045.035061] ? memcg_memory_event+0x40/0x40 [ 2045.039375] ? do_raw_spin_trylock+0x270/0x270 [ 2045.043952] ? _raw_spin_unlock+0x2d/0x50 [ 2045.048096] try_charge+0x12a9/0x19b0 [ 2045.051881] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2045.057408] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 2045.062239] ? rcu_read_unlock_special+0x380/0x380 [ 2045.067254] ? get_mem_cgroup_from_mm+0x1ea/0x420 [ 2045.072080] ? get_mem_cgroup_from_page+0x190/0x190 [ 2045.078586] ? rcu_read_lock_sched_held+0x110/0x130 [ 2045.083606] mem_cgroup_try_charge+0x43a/0xdb0 [ 2045.088178] ? mem_cgroup_protected+0xa10/0xa10 [ 2045.092836] ? mark_held_locks+0x100/0x100 [ 2045.097056] ? pmd_val+0x85/0x100 [ 2045.100501] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 2045.106037] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 2045.111564] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 2045.116490] __handle_mm_fault+0x2594/0x55a0 [ 2045.120887] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 2045.125730] ? check_preemption_disabled+0x48/0x290 [ 2045.130742] ? handle_mm_fault+0x3cc/0xc80 [ 2045.134969] ? lock_downgrade+0x910/0x910 [ 2045.139099] ? kasan_check_read+0x11/0x20 [ 2045.143232] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 2045.148495] ? rcu_read_unlock_special+0x380/0x380 [ 2045.153405] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2045.158943] ? check_preemption_disabled+0x48/0x290 [ 2045.163952] handle_mm_fault+0x4ec/0xc80 [ 2045.168001] ? __handle_mm_fault+0x55a0/0x55a0 [ 2045.172565] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2045.178083] ? vmacache_update+0x114/0x140 [ 2045.182310] __do_page_fault+0x5da/0xd60 [ 2045.186361] do_page_fault+0xe6/0x7d8 [ 2045.190159] ? trace_hardirqs_on_caller+0xc0/0x310 [ 2045.195093] ? vmalloc_sync_all+0x30/0x30 [ 2045.199224] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 2045.204658] ? syscall_return_slowpath+0x5f0/0x5f0 [ 2045.209574] ? prepare_exit_to_usermode+0x232/0x3b0 [ 2045.214575] ? page_fault+0x8/0x30 [ 2045.218101] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2045.222932] ? page_fault+0x8/0x30 [ 2045.226457] page_fault+0x1e/0x30 [ 2045.229904] RIP: 0033:0x45a87d [ 2045.233186] Code: 5b 5d f3 c3 66 0f 1f 84 00 00 00 00 00 48 c7 c0 ea ff ff ff 48 85 ff 0f 84 a0 8d fb ff 48 85 f6 0f 84 97 8d fb ff 48 83 ee 10 <48> 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 [ 2045.258665] RSP: 002b:0000000000a4fac8 EFLAGS: 00010202 [ 2045.264013] RAX: ffffffffffffffea RBX: 00007ff96b373700 RCX: 00007ff96b373700 [ 2045.271264] RDX: 00000000003d0f00 RSI: 00007ff96b372db0 RDI: 000000000040ece0 [ 2045.278517] RBP: 0000000000a4fcd0 R08: 00007ff96b3739d0 R09: 00007ff96b373700 [ 2045.285768] R10: 00007ff96b372dc0 R11: 0000000000000246 R12: 0000000000000000 [ 2045.293021] R13: 0000000000a4fb7f R14: 00007ff96b3739c0 R15: 000000000073c04c [ 2045.300702] protocol 88fb is buggy, dev hsr_slave_0 [ 2045.306034] protocol 88fb is buggy, dev hsr_slave_1 [ 2045.311428] memory: usage 307044kB, limit 307200kB, failcnt 852 [ 2045.317643] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2045.324510] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2045.330734] Memory cgroup stats for /syz5: cache:204KB rss:146096KB rss_huge:67584KB shmem:64KB mapped_file:132KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:146124KB inactive_file:0KB active_file:0KB unevictable:0KB [ 2045.352176] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor5,pid=32283,uid=0 [ 2045.366784] Memory cgroup out of memory: Kill process 32283 (syz-executor5) score 1106 or sacrifice child [ 2045.376657] Killed process 32283 (syz-executor5) total-vm:70532kB, anon-rss:2208kB, file-rss:33736kB, shmem-rss:0kB [ 2045.403756] syz-executor5 invoked oom-killer: gfp_mask=0x7080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=1000 16:19:05 executing program 5: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet(0x2, 0x1, 0x0) fcntl$addseals(r1, 0x409, 0xf) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x83, &(0x7f0000000080)={'f%lter\x00', 0x0, 0x0, 0x0, [], 0x0, 0x0, 0x0}, &(0x7f0000000140)=0x78) syz_genetlink_get_family_id$nbd(&(0x7f0000000040)='nbd\x00') ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000000)={0x4, 0x0, 0x84b}) 16:19:05 executing program 3: ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x83, &(0x7f0000000080)={'f%lter\x00', 0x0, 0x0, 0x0, [], 0x40000000, 0x0, 0x0}, &(0x7f0000000140)=0x78) 16:19:05 executing program 0: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x3}}) 16:19:05 executing program 1: r0 = syz_open_dev$sndtimer(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r2, 0x1, 0x7, &(0x7f0000ac5000), 0x4) sendmmsg$unix(r2, &(0x7f00000bd000), 0x80, 0x0) r3 = memfd_create(&(0x7f0000000080)='dev ', 0x3) write(r3, 0x0, 0x0) sendfile(r2, r3, &(0x7f0000000000), 0xffff) fcntl$addseals(r3, 0x409, 0xd) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8}) r4 = gettid() dup(r1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r4, 0x1004000000016) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$IMCLEAR_L2(r5, 0x80044946, &(0x7f0000000040)=0x7f) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}}) 16:19:05 executing program 4: socketpair$unix(0x1, 0x8000100000000001, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'eql\x00\x00\xdf\xdd\x94D\x8f\x15\xcf!\x00', 0xec38ed91f1c74952}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000080)={'eql\x00\x00\xa1\xa9[\x02L?\x00\x00\x03\xca\x00', @ifru_mtu=0x1}) 16:19:05 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000500)='cgroup.procs\x00', 0x2, 0x0) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x5}, 0x2c) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x8, 0x4, 0x100000001, 0x0, r2}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r3, &(0x7f00000002c0)}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x200, &(0x7f0000000180), 0x0, &(0x7f0000000080), &(0x7f0000000180)) mknod(&(0x7f0000f80000)='./file0\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$bt_hidp(0x1f, 0x3, 0x6) syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f00000000c0)={0x0, @speck128, 0x0, "a1ce698d2f617bb2"}) getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000002c0)=""/183, &(0x7f00000003c0)=0xb7) ptrace(0x10, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000080)=0x4c000000, 0x10a000d50) [ 2045.434977] CPU: 1 PID: 16821 Comm: syz-executor5 Not tainted 5.0.0-rc2 #24 [ 2045.442095] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2045.442102] Call Trace: [ 2045.454032] dump_stack+0x1db/0x2d0 [ 2045.457673] ? dump_stack_print_info.cold+0x20/0x20 [ 2045.462698] ? check_preemption_disabled+0x48/0x290 [ 2045.467734] dump_header+0x1e6/0x116c [ 2045.472034] ? add_lock_to_list.isra.0+0x450/0x450 [ 2045.476969] ? perf_trace_lock+0x750/0x750 [ 2045.481210] ? print_usage_bug+0xd0/0xd0 [ 2045.485296] ? pagefault_out_of_memory+0x1a1/0x1a1 [ 2045.490235] ? ___ratelimit+0x37c/0x686 [ 2045.494230] ? mark_held_locks+0xb1/0x100 [ 2045.498399] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 2045.503525] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 2045.508650] ? lockdep_hardirqs_on+0x415/0x5d0 [ 2045.513245] ? trace_hardirqs_on+0xbd/0x310 [ 2045.517567] ? kasan_check_read+0x11/0x20 [ 2045.517583] ? ___ratelimit+0x37c/0x686 [ 2045.517600] ? trace_hardirqs_off_caller+0x300/0x300 [ 2045.517615] ? do_raw_spin_trylock+0x270/0x270 16:19:05 executing program 0: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x3}}) r1 = syz_open_dev$cec(&(0x7f0000000440)='/dev/cec#\x00', 0x1, 0x2) getsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000480), &(0x7f00000004c0)=0xb) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) [ 2045.517631] ? trace_hardirqs_on_caller+0x310/0x310 [ 2045.517646] ? lock_acquire+0x1db/0x570 [ 2045.517670] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 2045.549490] ? ___ratelimit+0xac/0x686 [ 2045.553396] ? idr_get_free+0xee0/0xee0 [ 2045.557378] ? lockdep_hardirqs_on+0x415/0x5d0 [ 2045.561991] oom_kill_process.cold+0x10/0x9d4 [ 2045.566500] ? cgroup_procs_next+0x70/0x70 [ 2045.570746] ? _raw_spin_unlock_irq+0x5e/0x90 [ 2045.575248] ? oom_badness+0xa50/0xa50 [ 2045.579146] ? oom_evaluate_task+0x540/0x540 [ 2045.583560] ? mem_cgroup_iter_break+0x30/0x30 [ 2045.588140] ? mutex_trylock+0x2d0/0x2d0 [ 2045.592197] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2045.592232] ? rcu_read_unlock_special+0x380/0x380 [ 2045.592256] out_of_memory+0x885/0x1420 [ 2045.592275] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 2045.606697] ? oom_killer_disable+0x340/0x340 [ 2045.606718] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 2045.606736] ? lock_acquire+0x1db/0x570 [ 2045.606764] mem_cgroup_out_of_memory+0x160/0x210 [ 2045.606778] ? do_raw_spin_unlock+0xa0/0x330 [ 2045.606794] ? memcg_memory_event+0x40/0x40 [ 2045.638973] ? do_raw_spin_trylock+0x270/0x270 [ 2045.643582] ? _raw_spin_unlock+0x2d/0x50 [ 2045.647757] try_charge+0xd44/0x19b0 [ 2045.651475] ? lock_downgrade+0x910/0x910 [ 2045.655627] ? kasan_check_read+0x11/0x20 [ 2045.659790] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 2045.664640] ? get_mem_cgroup_from_mm+0x1cd/0x420 [ 2045.669493] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2045.675044] ? lock_downgrade+0x910/0x910 [ 2045.679193] ? kasan_check_read+0x11/0x20 [ 2045.683343] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 2045.688637] ? rcu_read_unlock_special+0x380/0x380 [ 2045.693589] ? get_mem_cgroup_from_mm+0x1ea/0x420 [ 2045.698452] memcg_kmem_charge_memcg+0x7c/0x130 [ 2045.703132] ? memcg_kmem_put_cache+0xb0/0xb0 [ 2045.707634] ? lock_release+0xc40/0xc40 [ 2045.711736] memcg_kmem_charge+0x13b/0x340 [ 2045.715984] __alloc_pages_nodemask+0x7b8/0xdc0 [ 2045.720670] ? __alloc_pages_slowpath+0x2cc0/0x2cc0 [ 2045.725695] ? rcu_pm_notify+0xd0/0xd0 [ 2045.729618] ? rcu_read_lock_sched_held+0x110/0x130 16:19:05 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000500)='cgroup.procs\x00', 0x2, 0x0) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x5}, 0x2c) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x8, 0x4, 0x100000001, 0x0, r2}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r3, &(0x7f00000002c0)}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x200, &(0x7f0000000180), 0x0, &(0x7f0000000080), &(0x7f0000000180)) mknod(&(0x7f0000f80000)='./file0\x00', 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$bt_hidp(0x1f, 0x3, 0x6) write$FUSE_BMAP(r4, &(0x7f00000000c0)={0x18, 0x0, 0x1}, 0x18) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') getsockopt$IP_VS_SO_GET_DESTS(r5, 0x0, 0x484, &(0x7f00000002c0)=""/183, &(0x7f00000003c0)=0xb7) ptrace(0x10, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000080)=0x4c000000, 0x10a000d50) [ 2045.734642] ? kmem_cache_alloc_node+0x347/0x710 [ 2045.739411] ? pci_mmcfg_check_reserved+0x170/0x170 [ 2045.744448] copy_process+0x847/0x8710 [ 2045.748387] ? ___might_sleep+0x1e7/0x310 [ 2045.752556] ? arch_local_save_flags+0x50/0x50 [ 2045.757148] ? __schedule+0x1e60/0x1e60 [ 2045.761131] ? do_raw_spin_trylock+0x270/0x270 [ 2045.765736] ? __cleanup_sighand+0x70/0x70 [ 2045.769982] ? futex_wait_queue_me+0x539/0x810 [ 2045.774576] ? refill_pi_state_cache.part.0+0x310/0x310 [ 2045.779967] ? __sanitizer_cov_trace_cmp4+0x16/0x20 16:19:05 executing program 0: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x3}}) [ 2045.785010] ? handle_futex_death+0x230/0x230 [ 2045.789609] ? lock_acquire+0x1db/0x570 [ 2045.793679] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 2045.798884] ? drop_futex_key_refs.isra.0+0x6f/0xf0 [ 2045.803906] ? futex_wait+0x6e6/0xa40 [ 2045.803932] ? print_usage_bug+0xd0/0xd0 [ 2045.803949] ? futex_wait_setup+0x430/0x430 [ 2045.803967] ? drop_futex_key_refs.isra.0+0x6f/0xf0 [ 2045.803988] ? __lock_acquire+0x572/0x4a30 [ 2045.804018] ? mark_held_locks+0x100/0x100 [ 2045.811840] ? mark_held_locks+0x100/0x100 [ 2045.811858] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2045.811885] ? check_preemption_disabled+0x48/0x290 [ 2045.811900] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2045.811916] ? check_preemption_disabled+0x48/0x290 [ 2045.811929] ? check_preemption_disabled+0x48/0x290 [ 2045.811948] ? debug_smp_processor_id+0x1c/0x20 [ 2045.864662] ? perf_trace_lock+0x12f/0x750 [ 2045.868904] ? perf_trace_lock_acquire+0x138/0x7d0 [ 2045.873843] ? add_lock_to_list.isra.0+0x450/0x450 [ 2045.878788] ? mark_held_locks+0x100/0x100 [ 2045.883035] ? __might_fault+0x12b/0x1e0 16:19:05 executing program 0: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x3}}) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x541000, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_SOCK_GET(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x20, r2, 0x0, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7d2}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$ASHMEM_PURGE_ALL_CACHES(r1, 0x770a, 0x0) [ 2045.887102] ? find_held_lock+0x35/0x120 [ 2045.891170] ? __might_fault+0x12b/0x1e0 [ 2045.895239] ? lock_acquire+0x1db/0x570 [ 2045.899228] ? lock_downgrade+0x910/0x910 [ 2045.903399] ? lock_release+0xc40/0xc40 [ 2045.907401] _do_fork+0x1a9/0x1170 [ 2045.910963] ? fork_idle+0x1d0/0x1d0 [ 2045.914686] ? kasan_check_read+0x11/0x20 [ 2045.918841] ? _copy_to_user+0xc9/0x120 [ 2045.922841] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2045.928396] ? put_timespec64+0x115/0x1b0 [ 2045.932553] ? nsecs_to_jiffies+0x30/0x30 [ 2045.936725] ? do_syscall_64+0x8c/0x800 [ 2045.940705] ? do_syscall_64+0x8c/0x800 [ 2045.944682] ? lockdep_hardirqs_on+0x415/0x5d0 [ 2045.944698] ? trace_hardirqs_on+0xbd/0x310 [ 2045.944713] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2045.953593] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2045.953610] ? trace_hardirqs_off_caller+0x300/0x300 [ 2045.953636] __x64_sys_clone+0xbf/0x150 [ 2045.953657] do_syscall_64+0x1a3/0x800 [ 2045.953675] ? syscall_return_slowpath+0x5f0/0x5f0 [ 2045.953692] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 2045.987430] ? __switch_to_asm+0x34/0x70 [ 2045.991501] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2045.996371] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2046.001564] RIP: 0033:0x457ec9 [ 2046.004752] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2046.023664] RSP: 002b:00007ff96b3b4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 2046.031384] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000457ec9 [ 2046.038656] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000002102001ffd [ 2046.045930] RBP: 000000000073bf00 R08: ffffffffffffffff R09: 0000000000000000 [ 2046.053200] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff96b3b56d4 [ 2046.060469] R13: 00000000004be2a0 R14: 00000000004ce600 R15: 00000000ffffffff [ 2046.075526] protocol 88fb is buggy, dev hsr_slave_0 [ 2046.080626] protocol 88fb is buggy, dev hsr_slave_1 16:19:05 executing program 3: ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x83, &(0x7f0000000080)={'f%lter\x00', 0x0, 0x0, 0x0, [], 0x2000000000000, 0x0, 0x0}, &(0x7f0000000140)=0x78) [ 2046.085835] protocol 88fb is buggy, dev hsr_slave_0 [ 2046.090905] protocol 88fb is buggy, dev hsr_slave_1 [ 2046.096065] protocol 88fb is buggy, dev hsr_slave_0 [ 2046.101144] protocol 88fb is buggy, dev hsr_slave_1 16:19:05 executing program 0: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x3}}) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vfio/vfio\x00', 0x4800, 0x0) connect$vsock_dgram(r1, &(0x7f0000000080)={0x28, 0x0, 0x0, @my=0x1}, 0x10) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r1, 0x110, 0x5, &(0x7f00000000c0)=[0x0, 0x1], 0x2) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) [ 2046.375037] memory: usage 305308kB, limit 307200kB, failcnt 852 [ 2046.381132] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 16:19:06 executing program 5: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet(0x2, 0x1, 0x0) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e24, @multicast2}}, 0x24) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x83, &(0x7f0000000080)={'f%lter\x00', 0x0, 0x0, 0x0, [], 0x0, 0x0, 0x0}, &(0x7f0000000140)=0x78) 16:19:06 executing program 1: r0 = syz_open_dev$sndtimer(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r2, 0x1, 0x7, &(0x7f0000ac5000), 0x4) sendmmsg$unix(r2, &(0x7f00000bd000), 0x80, 0x0) r3 = memfd_create(&(0x7f0000000080)='dev ', 0x3) write(r3, 0x0, 0x0) sendfile(r2, r3, &(0x7f0000000000), 0xffff) fcntl$addseals(r3, 0x409, 0xd) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8}) r4 = gettid() dup(r1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r4, 0x1004000000016) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$IMCLEAR_L2(r5, 0x80044946, &(0x7f0000000040)=0x7f) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}}) 16:19:06 executing program 3: ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x83, &(0x7f0000000080)={'f%lter\x00', 0x0, 0x0, 0x0, [], 0x100000000000000, 0x0, 0x0}, &(0x7f0000000140)=0x78) 16:19:06 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x7, 0x80) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) r2 = getpgrp(0xffffffffffffffff) sendmsg$nl_netfilter(r0, &(0x7f00000013c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001380)={&(0x7f00000001c0)={0x11ac, 0x0, 0x0, 0x2, 0x70bd25, 0x80, {0x7, 0x0, 0x1}, [@nested={0x1158, 0x89, [@typed={0x8, 0x8c, @uid=r1}, @generic="925546e7ea504ad9e5d7db16992426b80cbf70a1b95f46cd", @typed={0x8, 0x84, @pid=r2}, @generic="a3113ff2139800ad83f7bc7a83d115c53e82d5e9522d732ee3890f499258aecae00aae8319", @typed={0x8, 0x8f, @ipv4=@multicast2}, @generic="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", @generic="dfdeca23d16f29441a141a6d046f039273b867c9ba07c5894b314247f0e89c31272d1839484489cbdcb3cca90cece2e807f05103408303855369e93bb072bf2ee4097564917c7257e1faa4e1edc1e9f795bee5995f6f3155ecf2fce2814eafb7d18083063b9ebf36fdbf4267aca4e04a895c2599b033c7dd6dbe047369afe55897265e100d09f33dd76559181434baa0a8410d4f11cf2f902c2d2b539f0578ab632d237ea459f16d5c89e3c1b26de18d5e8fab4ba25c24f0b4b43adee78fba0cf15785390a3b92a0534dad2678e660078119566a84f9496c21", @typed={0x14, 0x2, @ipv6=@remote}, @typed={0x4, 0x88}, @typed={0xc, 0x16, @u64=0xf161}]}, @typed={0x8, 0x81, @fd=r0}, @generic="f79d97f4442cbd3b0d83d2cddce5d5d301c2f8bb8211913ec8a4194e83b27632c340af86cfef23d002034d7c2a20c92dd0e52e5f736c82bd"]}, 0x11ac}, 0x1, 0x0, 0x0, 0x8080}, 0x1) r3 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000000)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r3, 0x54a0) [ 2046.499681] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 16:19:06 executing program 4: socketpair$unix(0x1, 0x8000100000000001, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'eql\x00\x00\xdf\xdd\x94D\x8f\x15\xcf!\x00', 0xec38ed91f1c74952}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000080)={'eql\x00\x00\xa1\xa9[\x01M?\x00\x00\x03\xca\x00', @ifru_mtu=0x1}) 16:19:06 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000500)='cgroup.procs\x00', 0x2, 0x0) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x5}, 0x2c) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x8, 0x4, 0x100000001, 0x0, r2}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r3, &(0x7f00000002c0)}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x200, &(0x7f0000000180), 0x0, &(0x7f0000000080), &(0x7f0000000180)) mknod(&(0x7f0000f80000)='./file0\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$bt_hidp(0x1f, 0x3, 0x6) syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') getsockopt$IP_VS_SO_GET_DESTS(r4, 0x0, 0x484, &(0x7f00000000c0)=""/183, &(0x7f00000003c0)=0xb7) ptrace(0x10, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0xfffffe82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x81, 0x74b6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x82}, 0x0, 0x3, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000080)=0x4c000000, 0x10a000d50) 16:19:06 executing program 3: ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x83, &(0x7f0000000080)={'f%lter\x00', 0x0, 0x0, 0x0, [], 0x200000000000000, 0x0, 0x0}, &(0x7f0000000140)=0x78) 16:19:06 executing program 1: r0 = syz_open_dev$sndtimer(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r2, 0x1, 0x7, &(0x7f0000ac5000), 0x4) sendmmsg$unix(r2, &(0x7f00000bd000), 0x80, 0x0) r3 = memfd_create(&(0x7f0000000080)='dev ', 0x3) write(r3, &(0x7f0000000040), 0x0) sendfile(r2, r3, &(0x7f0000000000), 0xffff) fcntl$addseals(r3, 0x409, 0xd) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8}) r4 = gettid() dup(r1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r4, 0x1004000000016) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$IMCLEAR_L2(r5, 0x80044946, &(0x7f0000000040)=0x7f) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}}) 16:19:06 executing program 0: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000480)=ANY=[@ANYRESOCT=r1, @ANYRESHEX=r1, @ANYRES16=r1, @ANYPTR64=&(0x7f00000003c0)=ANY=[@ANYBLOB="e0a23c0fcf59c0b05a961e0ab1e0d9bae29edc6e841c22997f93ce519d354a1517b7bae08f0e6e503dce7bc71668a3f3796e28d0c343dd3f179aa64b727e4d9fbd8056093ae629ee7b6042ee7b2be43a6aa039374a716d5d83ce189ff9e0116071e894e784bfb157585ec5f811dcf68f581c07b56b9167f494fde144045cae4b667738ec1659b5b88104cb73878f40206aee1e48e9800f090cdf30178154eeddac41f85374d80de32c554155f19d17bd5a8316"], @ANYRESDEC=r2, @ANYPTR=&(0x7f0000000180)=ANY=[@ANYRES16=r3, @ANYRESOCT=r3, @ANYPTR=&(0x7f0000000140)=ANY=[@ANYPTR64], @ANYRESDEC]], 0xffffffffffffffcb) setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f0000000380)={0x4, &(0x7f0000000340)=[{0xffffffffffffff64, 0x6, 0x4, 0x3}, {0x700000000000000, 0xffffffffffffffd8, 0x9, 0x6085}, {0x96, 0xfffffffffffffff9, 0xffffffffffffffff, 0x2d9}, {0x4, 0x100000001, 0x1, 0x100}]}, 0x10) unlink(&(0x7f00000001c0)='./file0\x00') dup3(r1, r3, 0x0) clone(0x2100001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f00000002c0)=ANY=[@ANYRES64=r2, @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYPTR64=&(0x7f0000000200)=ANY=[@ANYRESHEX=0x0, @ANYRES32=r3, @ANYRES64=r0, @ANYRES32=r2, @ANYBLOB="dd34930c504340d2a6282401aa5f848386982b7f59608e5dfb7870e54d2391843506aa7b33a689870c28028f63294b725a89d01bbe610dfe0bf3", @ANYRESDEC=r0, @ANYRESHEX=r0, @ANYRESOCT=r3]]], &(0x7f0000000300)='./file0\x00', 0x0, 0x2003, 0x0) creat(&(0x7f0000000080)='./file1\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) [ 2046.555179] Memory cgroup stats for /syz5: cache:204KB rss:144104KB rss_huge:65536KB shmem:64KB mapped_file:132KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:144220KB inactive_file:0KB active_file:0KB unevictable:0KB 16:19:06 executing program 3: ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x83, &(0x7f0000000080)={'f%lter\x00', 0x0, 0x0, 0x0, [], 0x600000000000000, 0x0, 0x0}, &(0x7f0000000140)=0x78) [ 2046.627918] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor5,pid=32301,uid=0 16:19:06 executing program 0: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x3}}) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x2000, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 16:19:06 executing program 0: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm_plock\x00', 0x101, 0x0) sendto$rxrpc(r0, &(0x7f0000000300)="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", 0x1000, 0x20000010, 0x0, 0x0) r1 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000001340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40080000}, 0xc, &(0x7f0000001300)={&(0x7f0000000200)={0x60, r2, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [@NBD_ATTR_SOCKETS={0x34, 0x7, [{0x8, 0x1, r0}, {0x8, 0x1, r0}, {0x8, 0x1, r0}, {0x8, 0x1, r0}, {0x8, 0x1, r0}, {0x8, 0x1, r0}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}]}, 0x60}, 0x1, 0x0, 0x0, 0x11}, 0x20000800) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000000)={{0x3}}) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x141000, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffff9c, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) setsockopt$RDS_FREE_MR(r3, 0x114, 0x3, &(0x7f00000000c0)={{0x7, 0x7}, 0x41}, 0x282) socket$inet_sctp(0x2, 0x5, 0x84) ioctl$HDIO_GETGEO(r3, 0x301, &(0x7f0000000080)) bind$packet(r3, &(0x7f00000002c0)={0x11, 0x8, r4, 0x1, 0x86}, 0x14) ioctl$SNDRV_TIMER_IOCTL_START(r3, 0x54a0) 16:19:06 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x8840, 0x0) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x9) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet(0x2, 0x6, 0xb) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x83, &(0x7f0000000080)={'f%lter\x00', 0x0, 0x0, 0x0, [], 0x0, 0x0, 0x0}, &(0x7f0000000140)=0x78) [ 2046.775886] Memory cgroup out of memory: Kill process 32301 (syz-executor5) score 1106 or sacrifice child 16:19:06 executing program 1: r0 = syz_open_dev$sndtimer(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r2, 0x1, 0x7, &(0x7f0000ac5000), 0x4) sendmmsg$unix(r2, &(0x7f00000bd000), 0x80, 0x0) r3 = memfd_create(&(0x7f0000000080)='dev ', 0x3) write(r3, &(0x7f0000000040), 0x0) sendfile(r2, r3, &(0x7f0000000000), 0xffff) fcntl$addseals(r3, 0x409, 0xd) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8}) r4 = gettid() dup(r1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r4, 0x1004000000016) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$IMCLEAR_L2(r5, 0x80044946, &(0x7f0000000040)=0x7f) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}}) [ 2046.843148] Killed process 32301 (syz-executor5) total-vm:70532kB, anon-rss:2208kB, file-rss:33736kB, shmem-rss:0kB 16:19:06 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000500)='cgroup.procs\x00', 0x2, 0x0) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x5}, 0x2c) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x8, 0x4, 0x100000001, 0x0, r2}, 0x2c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={r3, 0x28, &(0x7f0000000180)={0x0, 0x0}}, 0xffffffffffffffa2) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000240)={r4, 0x3}, 0xc) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r3, &(0x7f00000002c0)}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x200, &(0x7f0000000180), 0x0, &(0x7f0000000080), &(0x7f0000000180)) mknod(&(0x7f0000f80000)='./file0\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$bt_hidp(0x1f, 0x3, 0x6) r5 = open(&(0x7f00000000c0)='./file0\x00', 0x9d7c63132428e673, 0x21) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYBLOB="04000000000000007108000000080000950a00000000544659b0000000000000cc090000000000000200000000000000f209000000000000008d9cffff00000077715d4f66e58e28"]) syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000002c0)=""/183, &(0x7f00000003c0)=0xb7) ptrace(0x10, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000080)=0x4c000000, 0x10a000d50) 16:19:06 executing program 0: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x3, 0x2000000000000}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 16:19:07 executing program 4: socketpair$unix(0x1, 0x8000100000000001, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'eql\x00\x00\xdf\xdd\x94D\x8f\x15\xcf!\x00', 0xec38ed91f1c74952}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000080)={'eql\x00\x00\xa1\xa9[\x02Q?\x00\x00\x03\xca\x00', @ifru_mtu=0x1}) 16:19:07 executing program 1: r0 = syz_open_dev$sndtimer(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r2, 0x1, 0x7, &(0x7f0000ac5000), 0x4) sendmmsg$unix(r2, &(0x7f00000bd000), 0x80, 0x0) r3 = memfd_create(&(0x7f0000000080)='dev ', 0x3) write(r3, &(0x7f0000000040), 0x0) sendfile(r2, r3, &(0x7f0000000000), 0xffff) fcntl$addseals(r3, 0x409, 0xd) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8}) r4 = gettid() dup(r1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r4, 0x1004000000016) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$IMCLEAR_L2(r5, 0x80044946, &(0x7f0000000040)=0x7f) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}}) 16:19:07 executing program 0: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_persist_mode\x00', 0x2, 0x0) getsockopt$inet_dccp_int(r1, 0x21, 0x5, &(0x7f0000000080), &(0x7f00000000c0)=0x4) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000140)={0x0, 0x8, 0x1000}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r1, 0x84, 0x78, &(0x7f00000001c0)=r2, 0x4) 16:19:07 executing program 5: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x80883, 0x0) ioctl$VIDIOC_S_JPEGCOMP(r0, 0x408c563e, &(0x7f0000000240)={0x7, 0xa, 0x27, "6fba4d10284eab386aa25380a17dbeb372f3c174c51fd8d2742b92bdd10eafe4ea43ebb13aa8ed98f78281967f60ee3fdf2c747b4143cfb137d33505", 0x2e, "52bbb02818f86be65eada8b2cf2317ae5e6d514754122bd42b5d5ed5dd291ef706fe5c7306e8d8cb553550bfad9c1403dd20cc304ce802feaf60dd81"}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, 0x0) clone(0x200, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000340)=0x401, 0x4) r1 = socket$inet(0x2, 0x1, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vcs\x00', 0x98001, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000040)) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000180)={'filter\x00'}, &(0x7f0000000300)=0x44) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000100)) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x83, &(0x7f0000000080)={'f%lter\x00', 0x0, 0x0, 0x0, [], 0x0, 0x0, 0x0}, &(0x7f0000000140)=0x78) 16:19:07 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000500)='cgroup.procs\x00', 0x2, 0x0) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$IPT_SO_SET_ADD_COUNTERS(r3, 0x0, 0x41, &(0x7f0000000140)={'filter\x00', 0x4, [{}, {}, {}, {}]}, 0x68) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x5}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x8, 0x4, 0x100000001, 0x0, r4}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r4, &(0x7f00000000c0)="9cc26ad78a1b0ac74658ea64ebb9f1501e4ce0c970b96c"}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x200, &(0x7f0000000180), 0x0, &(0x7f0000000080), &(0x7f0000000180)) mknod(&(0x7f0000f80000)='./file0\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x4) setsockopt$IP_VS_SO_SET_STOPDAEMON(r1, 0x0, 0x48c, &(0x7f00000001c0)={0x0, 'syz_tun\x00'}, 0x18) socket$bt_hidp(0x1f, 0x3, 0x6) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000002c0)=""/183, &(0x7f00000003c0)=0xb7) ptrace(0x10, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESTART(r5, 0x1274, 0x0) sendfile(r1, r1, &(0x7f0000000080)=0x4c000000, 0x10a000d50) 16:19:07 executing program 3: ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x83, &(0x7f0000000080)={'f%lter\x00', 0x0, 0x0, 0x0, [], 0x3f00000000000000, 0x0, 0x0}, &(0x7f0000000140)=0x78) 16:19:07 executing program 0: r0 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x501002) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x3}}) socket$rxrpc(0x21, 0x2, 0x2) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 16:19:07 executing program 1: r0 = syz_open_dev$sndtimer(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r2, 0x1, 0x7, &(0x7f0000ac5000), 0x4) sendmmsg$unix(r2, &(0x7f00000bd000), 0x80, 0x0) r3 = memfd_create(&(0x7f0000000080)='dev ', 0x3) write(r3, &(0x7f0000000040)="16", 0x1) sendfile(0xffffffffffffffff, r3, &(0x7f0000000000), 0xffff) fcntl$addseals(r3, 0x409, 0xd) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8}) r4 = gettid() dup(r1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r4, 0x1004000000016) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$IMCLEAR_L2(r5, 0x80044946, &(0x7f0000000040)=0x7f) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}}) 16:19:07 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x400000, 0x0) syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x80) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240)='/dev/snapshot\x00', 0xa00, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/btrfs-control\x00', 0x40, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x400, 0x100) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') ioctl$KVM_GET_PIT(r1, 0xc048ae65, &(0x7f0000000180)) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r2, 0x0, 0x83, &(0x7f0000000080)={'f%lter\x00', 0x0, 0x0, 0x0, [], 0x0, 0x0, 0x0}, &(0x7f0000000140)=0x78) 16:19:07 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcs\x00', 0x28000, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffff9c, 0x84, 0x1, &(0x7f0000000180)={0x0, 0x6, 0x2, 0x1, 0x7ae, 0x2}, &(0x7f00000001c0)=0x14) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000200)={0x7, 0x90d6b1f16e43902a, 0xad6f, 0x1, r1}, &(0x7f0000000240)=0x10) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r2, 0x0, 0x83, &(0x7f0000000080)={'f%lter\x00', 0x0, 0x0, 0x0, [], 0x0, 0x0, 0x0}, &(0x7f0000000140)=0x78) r3 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x5, 0x4000) setsockopt$inet_sctp6_SCTP_NODELAY(r3, 0x84, 0x3, &(0x7f0000000040), 0x4) 16:19:07 executing program 0: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x3}}) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x800, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f0000000080)={0x800, 0x0, 0x10000, 0x5}) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f00000000c0)={0xdfe2, r2, 0x10003, 0x7fffffff}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 16:19:07 executing program 4: socketpair$unix(0x1, 0x8000100000000001, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'eql\x00\x00\xdf\xdd\x94D\x8f\x15\xcf!\x00', 0xec38ed91f1c74952}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000080)={'eql\x00\x00\xa1\xa9[\x00S?\x00\x00\x03\xca\x00', @ifru_mtu=0x1}) 16:19:07 executing program 1: r0 = syz_open_dev$sndtimer(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r2, 0x1, 0x7, &(0x7f0000ac5000), 0x4) sendmmsg$unix(r2, &(0x7f00000bd000), 0x80, 0x0) r3 = memfd_create(&(0x7f0000000080)='dev ', 0x3) write(r3, &(0x7f0000000040)="16", 0x1) sendfile(0xffffffffffffffff, r3, &(0x7f0000000000), 0xffff) fcntl$addseals(r3, 0x409, 0xd) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8}) r4 = gettid() dup(r1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r4, 0x1004000000016) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$IMCLEAR_L2(r5, 0x80044946, &(0x7f0000000040)=0x7f) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}}) 16:19:08 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x2000, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x83, &(0x7f0000000080)={'f%lter\x00', 0x0, 0x0, 0x0, [], 0x0, 0x0, 0x0}, &(0x7f0000000140)=0x78) 16:19:08 executing program 0: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) r1 = gettid() ptrace$poke(0xffffffffffffffff, r1, &(0x7f00000000c0), 0xf2c9) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0xc900, 0x0) ioctl$IOC_PR_PREEMPT(r2, 0x401870cb, &(0x7f0000000080)={0x70, 0x2, 0x4, 0x7}) 16:19:08 executing program 1: r0 = syz_open_dev$sndtimer(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r2, 0x1, 0x7, &(0x7f0000ac5000), 0x4) sendmmsg$unix(r2, &(0x7f00000bd000), 0x80, 0x0) r3 = memfd_create(&(0x7f0000000080)='dev ', 0x3) write(r3, &(0x7f0000000040)="16", 0x1) sendfile(0xffffffffffffffff, r3, &(0x7f0000000000), 0xffff) fcntl$addseals(r3, 0x409, 0xd) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8}) r4 = gettid() dup(r1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r4, 0x1004000000016) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$IMCLEAR_L2(r5, 0x80044946, &(0x7f0000000040)=0x7f) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}}) [ 2048.550295] IPVS: ftp: loaded support on port[0] = 21 16:19:08 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000500)='cgroup.procs\x00', 0x2, 0x0) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x5}, 0x2c) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x8, 0x4, 0x100000001, 0x0, r2}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r3, &(0x7f00000002c0)}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x200, &(0x7f0000000180), 0x0, &(0x7f0000000080), &(0x7f0000000180)) mknod(&(0x7f0000f80000)='./file0\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$bt_hidp(0x1f, 0x3, 0x6) syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000002c0)=""/183, &(0x7f00000003c0)=0xb7) ptrace(0x10, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendfile(r1, r1, &(0x7f0000000080)=0x4c000000, 0x10a000d50) [ 2048.702876] device bridge_slave_1 left promiscuous mode [ 2048.710413] bridge0: port 2(bridge_slave_1) entered disabled state [ 2048.750159] device bridge_slave_0 left promiscuous mode [ 2048.785150] bridge0: port 1(bridge_slave_0) entered disabled state [ 2048.941324] device hsr_slave_1 left promiscuous mode [ 2048.984269] device hsr_slave_0 left promiscuous mode [ 2049.020780] team0 (unregistering): Port device team_slave_1 removed [ 2049.057455] team0 (unregistering): Port device team_slave_0 removed [ 2049.077636] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 2049.125038] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 2049.210769] bond0 (unregistering): Released all slaves [ 2049.402986] chnl_net:caif_netlink_parms(): no params data found [ 2049.444013] bridge0: port 1(bridge_slave_0) entered blocking state [ 2049.450645] bridge0: port 1(bridge_slave_0) entered disabled state [ 2049.457747] device bridge_slave_0 entered promiscuous mode [ 2049.465171] bridge0: port 2(bridge_slave_1) entered blocking state [ 2049.471608] bridge0: port 2(bridge_slave_1) entered disabled state [ 2049.479156] device bridge_slave_1 entered promiscuous mode [ 2049.499826] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 2049.510852] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 2049.531965] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 2049.539544] team0: Port device team_slave_0 added [ 2049.545304] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 2049.552713] team0: Port device team_slave_1 added [ 2049.558231] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 2049.565708] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 2049.589629] device hsr_slave_0 entered promiscuous mode [ 2049.595583] device hsr_slave_1 entered promiscuous mode [ 2049.601759] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 2049.608964] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 2049.627962] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 2049.671481] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2049.681184] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 2049.691566] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 2049.698136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2049.706448] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2049.716330] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 2049.722394] 8021q: adding VLAN 0 to HW filter on device team0 [ 2049.741883] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 2049.754580] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2049.772417] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2049.781866] bridge0: port 1(bridge_slave_0) entered blocking state [ 2049.788284] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2049.807255] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 2049.824193] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2049.831822] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2049.848695] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2049.861610] bridge0: port 2(bridge_slave_1) entered blocking state [ 2049.868021] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2049.886174] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 2049.904746] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 2049.911918] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2049.930247] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2049.945014] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 2049.954423] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 2049.962995] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2049.971424] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2049.979418] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2049.991626] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2050.006282] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 2050.024496] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 2050.031690] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2050.047867] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2050.061621] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2050.072208] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2050.088673] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2050.102593] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 2050.114307] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2050.142245] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 2050.165915] 8021q: adding VLAN 0 to HW filter on device batadv0 16:19:09 executing program 3: ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x83, &(0x7f0000000080)={'f%lter\x00', 0x0, 0x0, 0x0, [], 0x4000000000000000, 0x0, 0x0}, &(0x7f0000000140)=0x78) 16:19:09 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x4000, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$EBT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000000080)={'f%lter\x00', 0x0, 0x0, 0x0, [], 0x0, 0x0, 0x0}, &(0x7f0000000140)=0x78) 16:19:09 executing program 0: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffff9c, 0xc0086420, &(0x7f0000000080)={0x0}) ioctl$DRM_IOCTL_GET_CTX(r1, 0xc0086423, &(0x7f00000000c0)={r2, 0x3}) 16:19:09 executing program 1: r0 = syz_open_dev$sndtimer(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r2, 0x1, 0x7, &(0x7f0000ac5000), 0x4) sendmmsg$unix(r2, &(0x7f00000bd000), 0x80, 0x0) r3 = memfd_create(&(0x7f0000000080)='dev ', 0x3) write(r3, &(0x7f0000000040)="16", 0x1) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000000), 0xffff) fcntl$addseals(r3, 0x409, 0xd) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8}) r4 = gettid() dup(r1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r4, 0x1004000000016) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$IMCLEAR_L2(r5, 0x80044946, &(0x7f0000000040)=0x7f) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}}) 16:19:09 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000500)='cgroup.procs\x00', 0x2, 0x0) clone(0x10000003, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x5}, 0x2c) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x8, 0x4, 0x100000001, 0x0, r2}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r3, &(0x7f00000002c0)}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x200, &(0x7f0000000180), 0x0, &(0x7f0000000080), &(0x7f0000000180)) mknod(&(0x7f0000f80000)='./file0\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$bt_hidp(0x1f, 0x3, 0x6) syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000002c0)=""/183, &(0x7f00000003c0)=0xb7) ptrace(0x10, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000080)=0x4c000000, 0x10a000d50) 16:19:09 executing program 4: socketpair$unix(0x1, 0x8000100000000001, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'eql\x00\x00\xdf\xdd\x94D\x8f\x15\xcf!\x00', 0xec38ed91f1c74952}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000080)={'eql\x00\x00\xa1\xa9[\x01T?\x00\x00\x03\xca\x00', @ifru_mtu=0x1}) [ 2050.234974] net_ratelimit: 12 callbacks suppressed [ 2050.234983] protocol 88fb is buggy, dev hsr_slave_0 [ 2050.245035] protocol 88fb is buggy, dev hsr_slave_1 [ 2050.250199] protocol 88fb is buggy, dev hsr_slave_0 [ 2050.255334] protocol 88fb is buggy, dev hsr_slave_1 [ 2050.260463] protocol 88fb is buggy, dev hsr_slave_0 [ 2050.265567] protocol 88fb is buggy, dev hsr_slave_1 [ 2050.270679] protocol 88fb is buggy, dev hsr_slave_0 [ 2050.275775] protocol 88fb is buggy, dev hsr_slave_1 16:19:10 executing program 3: ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x83, &(0x7f0000000080)={'f%lter\x00', 0x0, 0x0, 0x0, [], 0xffffffff00000000, 0x0, 0x0}, &(0x7f0000000140)=0x78) [ 2050.355000] protocol 88fb is buggy, dev hsr_slave_0 [ 2050.360138] protocol 88fb is buggy, dev hsr_slave_1 16:19:10 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x80000, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x83, &(0x7f0000000080)={'f%lter\x00', 0x0, 0x0, 0x0, [], 0x0, 0x0, 0x0}, &(0x7f0000000140)=0x78) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f0000000240)={0x101, 0x0, 0x191a, 0xfffffffffffff686, 0x7ff, 0x29}) write$FUSE_IOCTL(r0, &(0x7f0000000100)={0x20, 0x0, 0x3, {0x1, 0x0, 0x7, 0x200}}, 0x20) r2 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$SNDRV_TIMER_IOCTL_STATUS(r2, 0x80605414, &(0x7f0000000180)=""/139) 16:19:10 executing program 0: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x3}}) r1 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x80, 0x600) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000080)={0x0, 0x0, 0xf49}) r3 = syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x40, 0x40000) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000140)={r2, 0x80000, r3}) 16:19:10 executing program 3: ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x83, &(0x7f0000000080)={'f%lter\x00', 0x0, 0x0, 0x0, [], 0x0, 0x0, 0x0}, &(0x7f0000000140)=0x78) 16:19:10 executing program 1: r0 = syz_open_dev$sndtimer(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r2, 0x1, 0x7, &(0x7f0000ac5000), 0x4) sendmmsg$unix(r2, &(0x7f00000bd000), 0x80, 0x0) r3 = memfd_create(&(0x7f0000000080)='dev ', 0x3) write(r3, &(0x7f0000000040)="16", 0x1) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000000), 0xffff) fcntl$addseals(r3, 0x409, 0xd) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8}) r4 = gettid() dup(r1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r4, 0x1004000000016) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$IMCLEAR_L2(r5, 0x80044946, &(0x7f0000000040)=0x7f) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}}) 16:19:10 executing program 3: ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x83, &(0x7f0000000080)={'f%lter\x00', 0x0, 0x0, 0x0, [], 0x0, 0x0, 0x0}, &(0x7f0000000140)=0x78) 16:19:10 executing program 0: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vsock\x00', 0x0, 0x0) clock_gettime(0x2, &(0x7f0000000240)) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000140)={0x0, 0x3}, &(0x7f0000000180)=0x8) r2 = request_key(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz', 0x2}, &(0x7f0000000300)='/dev/snd/pcmC#D#p\x00', 0xfffffffffffffffe) keyctl$setperm(0x5, r2, 0x0) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f00000001c0)=@assoc_value={r1, 0x8}, 0x8) r3 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000003c0)={r1, 0x2, 0x7f}, 0x8) syz_open_dev$sndpcmp(&(0x7f0000000200)='/dev/snd/pcmC#D#p\x00', 0x5, 0x200000) getsockopt$packet_int(r0, 0x107, 0xb, &(0x7f0000000340), &(0x7f0000000380)=0x4) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000000)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) fsetxattr$security_capability(r3, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v2={0x2000000, [{0x5, 0x3}, {0x200, 0x4}]}, 0x14, 0x2) 16:19:10 executing program 3: ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x83, &(0x7f0000000080)={'f%lter\x00', 0x0, 0x0, 0x0, [], 0x0, 0x0, 0x0}, &(0x7f0000000140)=0x78) 16:19:10 executing program 1: r0 = syz_open_dev$sndtimer(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r2, 0x1, 0x7, &(0x7f0000ac5000), 0x4) sendmmsg$unix(r2, &(0x7f00000bd000), 0x80, 0x0) r3 = memfd_create(&(0x7f0000000080)='dev ', 0x3) write(r3, &(0x7f0000000040)="16", 0x1) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000000), 0xffff) fcntl$addseals(r3, 0x409, 0xd) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8}) r4 = gettid() dup(r1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r4, 0x1004000000016) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$IMCLEAR_L2(r5, 0x80044946, &(0x7f0000000040)=0x7f) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}}) 16:19:10 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000500)='cgroup.procs\x00', 0x2, 0x0) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x5}, 0x2c) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x8, 0x4, 0x100000001, 0x0, r2}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r3, &(0x7f00000002c0)}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x200, &(0x7f0000000180), 0x0, &(0x7f0000000080), &(0x7f0000000180)) mknod(&(0x7f0000f80000)='./file0\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$bt_hidp(0x1f, 0x3, 0x6) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000002c0)=""/183, &(0x7f00000003c0)=0xb7) ioctl$KVM_TRANSLATE(r4, 0xc018ae85, &(0x7f00000000c0)={0x1000, 0x1000, 0x401, 0x3}) ptrace(0x10, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000080)=0x4c000000, 0x10a000d50) [ 2050.835259] Unknown ioctl 21664 16:19:10 executing program 5: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x406, 0xffffffffffffff9c) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, &(0x7f0000000100)={0xfffffffffffffffd, 0x200, 0x4, 0xcfe8, 0x0}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f00000001c0)={r1, @in={{0x2, 0x4e24, @multicast1}}}, 0x84) r2 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x3f, 0x22000) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r2, 0x0, 0x83, &(0x7f0000000080)={'f%lter\x00', 0x0, 0x3, 0x0, [], 0x31, 0x0, 0x0}, &(0x7f0000000140)=0xffffffffffffffae) [ 2050.857238] Unknown ioctl 21664 16:19:11 executing program 4: socketpair$unix(0x1, 0x8000100000000001, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'eql\x00\x00\xdf\xdd\x94D\x8f\x15\xcf!\x00', 0xec38ed91f1c74952}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000080)={'eql\x00\x00\xa1\xa9[\x00W?\x00\x00\x03\xca\x00', @ifru_mtu=0x1}) 16:19:11 executing program 0: sync() r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 16:19:11 executing program 3: ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x83, &(0x7f0000000080)={'f%lter\x00', 0x0, 0x0, 0x0, [], 0x0, 0x0, 0x0}, &(0x7f0000000140)=0x78) 16:19:11 executing program 1: r0 = syz_open_dev$sndtimer(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r2, 0x1, 0x7, &(0x7f0000ac5000), 0x4) sendmmsg$unix(r2, &(0x7f00000bd000), 0x80, 0x0) r3 = memfd_create(&(0x7f0000000080)='dev ', 0x3) write(r3, &(0x7f0000000040)="16", 0x1) sendfile(r2, r3, 0x0, 0xffff) fcntl$addseals(r3, 0x409, 0xd) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8}) r4 = gettid() dup(r1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r4, 0x1004000000016) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$IMCLEAR_L2(r5, 0x80044946, &(0x7f0000000040)=0x7f) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}}) 16:19:11 executing program 5: r0 = gettid() perf_event_open(0x0, r0, 0xe, 0xffffffffffffffff, 0x2) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x83, &(0x7f0000000080)={'f%lter\x00', 0x0, 0x0, 0x0, [], 0x0, 0x0, 0x0}, &(0x7f0000000140)=0x78) 16:19:11 executing program 3: ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x83, &(0x7f0000000080)={'f%lter\x00', 0x0, 0x0, 0x0, [], 0x0, 0x0, 0x0}, &(0x7f0000000140)=0x78) 16:19:11 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video37\x00', 0x2, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x0, 0x80) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000100)={0x3, [0x0, 0x0, 0x0]}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000280)={0x0, @in6={{0xa, 0x4e23, 0x0, @rand_addr="88b6c71bd8217700c2a25c4ef423a7db", 0x4}}}, &(0x7f0000000340)=0x84) socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000380)={r2, 0x9, 0x4, 0x2, 0x9, 0x400, 0x7, 0xc13, {r3, @in6={{0xa, 0x4e22, 0x5, @empty, 0x8}}, 0x4, 0x0, 0x2, 0x6, 0x5}}, &(0x7f0000000440)=0xb0) ioctl$VIDIOC_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f0000000180)={0x4, 0x0, [], {0x0, @bt={0xc4, 0xeb9, 0x1, 0x2, 0x3ff, 0x6, 0x6, 0x6, 0xfffffffffffffffb, 0x60, 0x3, 0x1, 0x8, 0x9, 0x10, 0x8}}}) r4 = socket$inet(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r4, 0x0, 0x83, &(0x7f0000000080)={'f%lter\x00', 0x0, 0x0, 0x0, [], 0x0, 0x0, 0x0}, &(0x7f0000000140)=0x78) 16:19:11 executing program 3: ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x83, &(0x7f0000000080)={'f%lter\x00', 0x0, 0x0, 0x0, [], 0x0, 0x0, 0x0}, &(0x7f0000000140)=0x78) 16:19:11 executing program 1: r0 = syz_open_dev$sndtimer(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r2, 0x1, 0x7, &(0x7f0000ac5000), 0x4) sendmmsg$unix(r2, &(0x7f00000bd000), 0x80, 0x0) r3 = memfd_create(&(0x7f0000000080)='dev ', 0x3) write(r3, &(0x7f0000000040)="16", 0x1) sendfile(r2, r3, 0x0, 0xffff) fcntl$addseals(r3, 0x409, 0xd) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8}) r4 = gettid() dup(r1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r4, 0x1004000000016) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$IMCLEAR_L2(r5, 0x80044946, &(0x7f0000000040)=0x7f) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}}) 16:19:11 executing program 3: ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x83, &(0x7f0000000080)={'f%lter\x00', 0x0, 0x0, 0x0, [], 0x0, 0x0, 0x0}, &(0x7f0000000140)=0x78) [ 2051.664283] syz-executor5 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2051.711288] CPU: 0 PID: 17182 Comm: syz-executor5 Not tainted 5.0.0-rc2 #24 [ 2051.718416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2051.727770] Call Trace: [ 2051.730385] dump_stack+0x1db/0x2d0 [ 2051.734028] ? dump_stack_print_info.cold+0x20/0x20 [ 2051.739054] ? check_preemption_disabled+0x48/0x290 [ 2051.744091] dump_header+0x1e6/0x116c [ 2051.747901] ? add_lock_to_list.isra.0+0x450/0x450 [ 2051.752831] ? perf_trace_lock+0x750/0x750 [ 2051.757075] ? print_usage_bug+0xd0/0xd0 16:19:11 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000500)='cgroup.procs\x00', 0x2, 0x0) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x5}, 0x2c) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x8, 0x4, 0x100000001, 0x0, r2}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r3, &(0x7f00000002c0)}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setsig(r3, 0xa, 0x26) r4 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x7, 0x440) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x81, &(0x7f0000000100)={0xffffffffffffffff}, 0x111, 0xd}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r4, &(0x7f0000000180)={0x4, 0x8, 0xfa00, {r5, 0x9}}, 0x10) clone(0x200, &(0x7f0000000180), 0x0, &(0x7f0000000080), &(0x7f0000000180)) mknod(&(0x7f0000f80000)='./file0\x00', 0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) socket$bt_hidp(0x1f, 0x3, 0x6) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') ioctl$EXT4_IOC_SWAP_BOOT(r6, 0x6611) setsockopt$inet_dccp_int(r6, 0x21, 0x1b, 0xfffffffffffffffe, 0x0) getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000002c0)=""/183, &(0x7f00000003c0)=0xb7) ptrace(0x10, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000080)=0x4c000000, 0x10a000d50) 16:19:11 executing program 3: ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x83, &(0x7f0000000080)={'f%lter\x00', 0x0, 0x0, 0x0, [], 0x0, 0x0, 0x0}, &(0x7f0000000140)=0x78) [ 2051.761141] ? pagefault_out_of_memory+0x1a1/0x1a1 [ 2051.766071] ? ___ratelimit+0x37c/0x686 [ 2051.770054] ? mark_held_locks+0xb1/0x100 [ 2051.774208] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 2051.779312] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 2051.784414] ? lockdep_hardirqs_on+0x415/0x5d0 [ 2051.789007] ? trace_hardirqs_on+0xbd/0x310 [ 2051.793342] ? kasan_check_read+0x11/0x20 [ 2051.797501] ? ___ratelimit+0x37c/0x686 [ 2051.801481] ? trace_hardirqs_off_caller+0x300/0x300 [ 2051.806591] ? do_raw_spin_trylock+0x270/0x270 [ 2051.811185] ? trace_hardirqs_on_caller+0x310/0x310 [ 2051.816206] ? lock_acquire+0x1db/0x570 [ 2051.820192] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 2051.825296] ? ___ratelimit+0xac/0x686 [ 2051.829192] ? idr_get_free+0xee0/0xee0 [ 2051.833170] ? lockdep_hardirqs_on+0x415/0x5d0 [ 2051.837773] oom_kill_process.cold+0x10/0x9d4 [ 2051.842276] ? cgroup_procs_next+0x70/0x70 [ 2051.846527] ? _raw_spin_unlock_irq+0x5e/0x90 [ 2051.851030] ? oom_badness+0xa50/0xa50 [ 2051.854949] ? oom_evaluate_task+0x540/0x540 [ 2051.859391] ? mem_cgroup_iter_break+0x30/0x30 [ 2051.863990] ? mutex_trylock+0x2d0/0x2d0 [ 2051.868060] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2051.873618] ? rcu_read_unlock_special+0x380/0x380 [ 2051.878561] out_of_memory+0x885/0x1420 [ 2051.882554] ? oom_killer_disable+0x340/0x340 [ 2051.887058] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 2051.892168] ? lock_acquire+0x1db/0x570 [ 2051.896154] mem_cgroup_out_of_memory+0x160/0x210 [ 2051.901005] ? do_raw_spin_unlock+0xa0/0x330 [ 2051.905422] ? memcg_memory_event+0x40/0x40 [ 2051.909743] ? do_raw_spin_trylock+0x270/0x270 [ 2051.914347] ? _raw_spin_unlock+0x2d/0x50 [ 2051.918520] try_charge+0x12a9/0x19b0 [ 2051.922322] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2051.927872] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 2051.932723] ? rcu_read_unlock_special+0x380/0x380 [ 2051.937672] ? get_mem_cgroup_from_mm+0x1ea/0x420 [ 2051.942520] ? get_mem_cgroup_from_page+0x190/0x190 [ 2051.947547] ? rcu_read_lock_sched_held+0x110/0x130 [ 2051.952687] mem_cgroup_try_charge+0x43a/0xdb0 [ 2051.957280] ? mem_cgroup_protected+0xa10/0xa10 [ 2051.961972] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2051.967530] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2051.973080] ? check_preemption_disabled+0x48/0x290 [ 2051.978097] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 2051.983637] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 2051.989191] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 2051.994129] wp_page_copy+0x45a/0x1c30 [ 2051.998025] ? mark_held_locks+0x100/0x100 [ 2052.002263] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2052.007817] ? pmd_pfn+0x1d0/0x1d0 [ 2052.011361] ? find_held_lock+0x35/0x120 [ 2052.015427] ? do_wp_page+0x70d/0x16b0 [ 2052.019335] ? kasan_check_read+0x11/0x20 [ 2052.023487] ? do_raw_spin_unlock+0xa0/0x330 [ 2052.027903] ? do_raw_spin_trylock+0x270/0x270 [ 2052.032493] ? __lock_acquire+0x572/0x4a30 [ 2052.036758] do_wp_page+0x715/0x16b0 [ 2052.040473] ? lock_acquire+0x1db/0x570 [ 2052.044452] ? finish_mkwrite_fault+0x540/0x540 [ 2052.049139] ? kasan_check_read+0x11/0x20 [ 2052.053288] ? do_raw_spin_lock+0x156/0x360 [ 2052.057603] ? lock_release+0xc40/0xc40 [ 2052.061598] ? rwlock_bug.part.0+0x90/0x90 [ 2052.065847] ? pmd_devmap_trans_unstable+0x1d0/0x1d0 [ 2052.070967] ? add_mm_counter_fast.part.0+0x40/0x40 [ 2052.075997] __handle_mm_fault+0x2c8e/0x55a0 [ 2052.080423] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 2052.085271] ? check_preemption_disabled+0x48/0x290 [ 2052.090315] ? handle_mm_fault+0x3cc/0xc80 [ 2052.094580] ? lock_downgrade+0x910/0x910 [ 2052.098728] ? kasan_check_read+0x11/0x20 [ 2052.102878] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 2052.108166] ? rcu_read_unlock_special+0x380/0x380 [ 2052.113104] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2052.118651] ? check_preemption_disabled+0x48/0x290 [ 2052.123678] handle_mm_fault+0x4ec/0xc80 [ 2052.127746] ? __handle_mm_fault+0x55a0/0x55a0 [ 2052.132361] __do_page_fault+0x5da/0xd60 [ 2052.136443] do_page_fault+0xe6/0x7d8 [ 2052.140243] ? trace_hardirqs_on_caller+0xc0/0x310 [ 2052.145177] ? vmalloc_sync_all+0x30/0x30 [ 2052.149328] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 2052.154786] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2052.160325] ? prepare_exit_to_usermode+0x232/0x3b0 [ 2052.165354] ? page_fault+0x8/0x30 [ 2052.168905] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2052.173767] ? page_fault+0x8/0x30 [ 2052.177309] page_fault+0x1e/0x30 [ 2052.180757] RIP: 0033:0x40d130 [ 2052.183962] Code: 89 f8 49 8b 34 c6 4a 8d 04 2e 48 3d ff ff ff 7e 0f 86 74 ff ff ff bf 19 d5 4b 00 31 c0 e8 08 49 ff ff 31 ff e8 41 45 ff ff 90 <89> 3c b5 00 00 73 00 eb b6 31 ed 0f 1f 44 00 00 80 3d 36 33 64 00 [ 2052.202867] RSP: 002b:0000000000a4fb30 EFLAGS: 00010246 [ 2052.208231] RAX: 00000000746b99fa RBX: 00000000d5fe596c RCX: 0000001b32120000 [ 2052.215503] RDX: 0000000000000000 RSI: 00000000000019fa RDI: ffffffff746b99fa [ 2052.222768] RBP: 0000000000000001 R08: 00000000746b99fa R09: 00000000746b99fe [ 2052.230040] R10: 0000000000a4fcc0 R11: 0000000000000246 R12: 000000000073bf00 [ 2052.237310] R13: 0000000080000000 R14: 00007ff96d1b6008 R15: 0000000000000001 [ 2052.251186] memory: usage 307200kB, limit 307200kB, failcnt 878 [ 2052.272029] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2052.298420] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2052.316408] Memory cgroup stats for /syz5: cache:204KB rss:144876KB rss_huge:65536KB shmem:64KB mapped_file:132KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:144880KB inactive_file:0KB active_file:0KB unevictable:0KB [ 2052.342945] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor5,pid=16821,uid=0 [ 2052.357959] Memory cgroup out of memory: Kill process 16821 (syz-executor5) score 1107 or sacrifice child [ 2052.368357] Killed process 16821 (syz-executor5) total-vm:70664kB, anon-rss:2216kB, file-rss:33744kB, shmem-rss:0kB 16:19:12 executing program 4: socketpair$unix(0x1, 0x8000100000000001, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'eql\x00\x00\xdf\xdd\x94D\x8f\x15\xcf!\x00', 0xec38ed91f1c74952}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000080)={'eql\x00\x00\xa1\xa9[\x00X?\x00\x00\x03\xca\x00', @ifru_mtu=0x1}) 16:19:12 executing program 0: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) fcntl$getown(r0, 0x9) 16:19:12 executing program 1: r0 = syz_open_dev$sndtimer(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r2, 0x1, 0x7, &(0x7f0000ac5000), 0x4) sendmmsg$unix(r2, &(0x7f00000bd000), 0x80, 0x0) r3 = memfd_create(&(0x7f0000000080)='dev ', 0x3) write(r3, &(0x7f0000000040)="16", 0x1) sendfile(r2, r3, 0x0, 0xffff) fcntl$addseals(r3, 0x409, 0xd) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8}) r4 = gettid() dup(r1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r4, 0x1004000000016) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$IMCLEAR_L2(r5, 0x80044946, &(0x7f0000000040)=0x7f) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}}) 16:19:12 executing program 3: ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x83, &(0x7f0000000080)={'f%lter\x00', 0x0, 0x0, 0x0, [], 0x0, 0x0, 0x0}, &(0x7f0000000140)=0x78) 16:19:12 executing program 5: fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000)) r0 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x6, 0x400) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000100)=0x0) r2 = dup(r0) setsockopt$sock_void(r2, 0x1, 0x3f, 0x0, 0x0) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm-monitor\x00', 0x80000, 0x0) ioctl$KVM_SET_NESTED_STATE(r3, 0x4080aebf, &(0x7f0000000400)={0x1, 0x0, 0x2080, {0x7000, 0x1, 0x1}, [], "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", "6c622b5325323feffcf34411ca5d76ea89271e19dd1d0e088893fecb088a504bcd5ef6e77912add12ce064e53af6c6cc790d9a0116b40d69720dda700282e7c47b346ad95eede683ea98248b01c23637570377bf70af6455984b42d7d799cb3550156a31fa4328d307af5bc593a68cbfd9efa27bf3a8b3ab21d239baf026729ee2779431b57ee4487e9412e50a258c7a8c79c5b53d5ccdedab6013e142fe61bf1be133068fee3da84945289c1a2d19e5f3961c065e78cc4998639bcfd083970ec05b6468f8c537a34338132987dde98121a8fbc46f8c27b5e8428dd3fe5b915538f938a3570fd0d8d975ad16baa208741a7c0173474265655318214c69a7775265605764a0a863dc610a968b323d38ff5e3daa276ab02076ded2ca76ff5a79ac51f0d23494e12a12a232e140f92fe686cd4dcd2d1a8d842b477646fa83dd1e3c0a7d43c4f47d70ebe7ed18205b5d252fbb3413e9fc91635b28a53f09dfe969eb1cfecdc997227c2684c2cac6c1e63bd9a48e1ccb9d615149e2a2b3026e065f901e2a6f953b6606a23f539049b569eec7ce1f231b281f35c0c2dd0b17f6409b4f917b2473d39f7d46e2ff1717c920fb565c7e333e478296b5b217b1ac5dec9b67042e6a18831c7975c09b1c0e731689fd18b3d90f853c38a61c48d1e8b13e766188bbca457596813ed2a302d4dc6cfcf491ce07cca6554dd207a554b087a9977a7b8e37843667295126d57327c649cc2dfb93c8222b00d50b712eab4bdf317e8260c595b12b82979a21d8c3939c50bdd07467a6ab580da68f21b54449f07fbe47791760a57009d90bc4dd9a992fded49080ad5a74a8a3d466166aa93aa490ee9292e787391c3b805f4e6cb7096655d3f2123a18abe7a62a04b9828ed251113209389a7695dd4a337d2a4787eef935d3d89db92b864a49d079af1ac392cb9d2e69fc38f981080fa22058e7690dda2d78f353093a952337f5159124d6efb095554b6bc6af2e8170559e640ddd4453e9ac7556a7aa5dc036c79b47fa560c34e5b46b74ace58f8d6984b63a2f2ddc0e3eb803db4e7108a143842c9ee68545d33d2c18d6c4d497bae3fd96182f426edda18f8b10989595fc03b1c1b4c2a544ab5d578c895ffcc0e762a4184484583229c9b3a02b5c8a043e52377fdcafabc1ee2ea5f5caac0bfdbb28e67f05cecbffecf8f4d9c47b8ba7e8d66f2d24e62a0341a6313af1d712fa1d0b803570acf6db77dd8f4dcf3c0ff2e93db25e3219e3b664e00224e3e56eac8c11b9cd369ac387013797ff5705c8912361767bf370420acb1772dd55e17e1f04bb35b867c83a1ff0f0ccea9d0f21f6126b6bcac598f148f6431894f120d3d2b79f5d79d85bea97d5ec6ffada87914d90d2b9384018104b4bb279cb9fc63de6c4c7d906eed7430b7623ac828b98c70eaec32a47934647231caa8d4a7f00c144a71f89662cb6fe4f65ce93889609021b195198b0aec9dc9f5b790894ba7ab018b17678725cd1d0185a345b6f40636e81fd1f08c161166c0971a02a3b5bf5a1009bbf900a22df83882eeb2236c3d278b15308fbed24597e53a883726f68fb00c10f11279502980df04c0dd42ccdb9f93dfbf216f1641cf8d50df65ff01264ed3a7580d8d336f5ac800621b1768c8991c7b932a0da827be4b307c07e1116b7ab389afc6d3b588d0a71e99fa7f28baf5526c3d9214c231102dfafde825fd125483e3193cbba377da2579eca362bcf0acbba78e1a317fb662e3ca907f5a895511d6f97c350e37fc80609811e8a1685ca4d872f95418921b26a0fa8a58da8ba8419d01d50e3832ffd532150959de154b995e47c9c351b8a02a5aee4bb1aff4f4637848c6eeffdbd8b0d2f8807ee5f3b64d8714e7811c06cb2de05fe0fa0d01c25f2fceb82d643f08ef27b472aa40689cdfd43431fec2ef1a82556c55a03f9fa98693394509f131c67c75bf4380e8308fd90fdc4c0d2dc57a8dcb94ea49a5e8cc97ae1a09f0b5b76bc4f219fc0968a4d9c692c8cadffb582e2b79baeab177b2297864cefa0b1a5a84e7ad0acfb9a428ca25f930f0a2a922182914b181bda98ca9eaa7232430f92f819ed7abc3f2b529be117327be4f1fdd31b330638a0ef19103eb657cb31afdab2bfee307340074dad5de240d10e3f4354c2d3d120f3fbe0f803ea5142654da8525cd15bff758f2ab8dc7b2c3c881ba91c20454a65692a8f01278b4d83da150d77759a7a9b54b5f487e194c75746a73015ced758e102d28e25784a9d39287e0097b0be5528ab912c68e433a1c015c96a8a38b20f25d57423064b11a463cc8518e4eff78b2459e29a02fdb383842d004ddcf80723d5fdccc8feb81541733d322fae28c137eea914dbc1fb4a7801a9606c71e2c6c0c1c9fcf27fef9d04ec1cb82294056ae586d1e1db4e9b48d955eb8dd6fe26a123531f6b033e8c636ea5369f2c2a2f73de59ed48a752c4dba665483573aef1effa701b303eb6891b8cb353b728f2809b3a28e9177ba3a105708a6c0c31559672f5f0f2511e0459967d3d3e4997d15e34bd71c8e687904d2aad2b63b171ba543b813a82d4614f011aacbf07425326be78e3159b94fa99cde2042f27f11174a5b1438290fc4a46a4502b8ba72927f81cd758776c19575973ff7a337ab2a0b202bf67fab5534cb182b551f2a399f967de5903a4c2b7c9dc9c308e4198e8101b8a9edc463f5932e13a8140f2732bbed8ea28902ac45c072cd72a64b985fd9fe28d2dbf468f7a3101b4f835fad7ed51fb635e0eea65d086bf7d32e023d84ba9caba5c303f89cadc73b8cedd2af4fea93ec682965b61a27400ce8a282e7813f7d507e8c182f44bd571cda57c4671a4ab2ffd138eba07a67ddb1fb5a73ab208390aa91b49e63f65391329edf5103c11b480cf661ef18b35dec064eda58768d16a1a62aa4cd84b61b0253bc05cf13af6aa8aa7cff8c165d5704267339690b105166f5ac5b18404b5a4385025ae36de01a3d063d525848addaaa828e5213acaeb7ee9ccedf84c734d115b43c542df812304fc845dbfdc89e00c292caff1d90d4cb519ad28be6dcf52b8f168e9b46857a65f86b5053930fc33e0137501d98699a3418caf420992fd5282807775638d3885954fa1e2566ad8bbe2153456b84bc4427789ae7383e45f88d7d1d12195ada9f13099c24581892223ccda273b520b2b41daa245ea5793282aa12c160ffd6661a8c120963ed66b97cf0dd1bc45a625a7dd158ef5bed558b6fa256c7824a1c4f2d59d3f758ea11ac71bb4d55c0342e09e1210db21f3ba3d5d8e736b24d293dc2794fb9a8e41043a21f3b47401e126a526ada49c7aa13f13f1a48cfa5df4e6ea48d9f7960a94ed9a9b8058453ec1af1a4210573a4359c617d6a8e2043fa623608361bcdc1d895ec132fadd5e86f1f0a691f2dd5937069742b1eb300d43d96ff91c61737391913d5a01c9eb86d36c19dc59681b0438f988ca2d47798564a18c81b0c09c5d6408b976ab55abf57ff1a8de3fd838970f08dc0cbe256c65ca86485ce5bdaa55e3b218469b2865730260632e95ba0dba389e8cc0e25404075c672dc636ea1ac4cad5141bef2f5778577bc98363008a4f4e558566e5c8d0c2c9f13f7e12f9d979ec04a83a283cbaa39e59477a109ca0579ca6ce2ae4a48e6ca33a2e36de4851d75db84e1ce0d18f41f54c010bf01f69028250c3f885f664811a7d28974ad1dda2af085b47ba6e80abaf052e99f282e4a1b1547b2d00d594823334d2eb2cf69027a0614a524cb46846f1e42d8c31ee7c1f866a62aa23e31f181fe3e22b9c3b7c84282fc7fd17222d9841da6a20fe32d0cd384215420fa6023bab82a2f7defd397eda5d7d12a8d8f0a26b85db566c2eaa684b5d552cc3bdb1efbbc1d0290244d5bcf5cee566edca4e9914bc6056a89ad6577ea11fe798541acd5db7c8bad5f440c3c072cf89f3c368790835edc76a7877c907d468126e72afceeebb080208f8502b31a4c05e21c8de0518823d03c18a8287ed6fe807c3000e8bc43406f16c4035629d1d2ff14eb17fb5a7f6455978b9ea96c1b54b764682fea651f3b362b3b13f004159bb5bc893c720c6c0a2cf745f60d36084611241e0daf9d051c9206f90c15a2f526e4348b4aaf085761470fe3dd1b21a5b9fa8e1bf1f8d1985c155202d880a608ba5839dd75720fa458908d840d7f7266843b8a2a31c8a8c28c4b2faf6c9db6226ddb0c367ec40fd5a9ce40735377cd7a17453bb8bdc2f488fe65fb8290ac8f2aa1e8727a01c37e0ab68621bdf9d0dc28d1196511dd7927283b67cb71c0e68e9bcfb20b183daee3a76932222f0f978bc483dfdd06d48cc1a95b69d8706d5dbd2c14a13671a682fbf969947db409060340eb17e848e2da88c60de22c06bdf663905b58330297311ec28639bab7afb6e0129dd124653b8db1dd5bd7c44927eb56cd6d13ba69dfb55211b7616633e008d55c7bfa12499559112063fb5c84dd94cd708bf8a4ffb83795217ccd9bc0fe85d00fe7d53e7d6204d2ab3acf3b84f152f6a6977807a700115da1a90b1748a300b5a24832a7a0258729e23dcd3dab6e387ff82affe27224fcb90bbc1b634df977a2fdd53de8557e91f74cf46c9db985dd8de22f3c00724d2ce14761b174e354991335454416a46b93b1bc2d6049d9864c63c8a8b28b87fb5186cdca3b5af88e947abfefe0bc7b3bf8570dc6e71205c6ed4d5395ae5d5c010b352f6eb23cc326f203827ee0ed1180923f190bf9b8cb0fd862f19749e48d3274265ecb787bd97c35e0759ed4ed74af6d1c8b4e23890eb3dbbe0d1b2d1d5aecdc1100a9c27f4bb5c858ad4e840ad566be911291d7e0fb46a32321526e16a029e6e14500a003f4bd5c6bcbf10838a5e8748ae5809391af272857b30efcc05668cc844700d25ada3e5d7e5b6e0bd02781653088d7d4463b48b716516804cbe41221f3341f251333a89430c6194f0de021c1f1d59dc3147f639c7cd9e209b922f486f95893f4406ac4b78347dcad48027b1eb53d5cc3c45d63fa91cd8d8f218c267b481a4cbaf45758f8a2e80432eccd4094140308e9eab78644c6d89aec272b3f4bde00dc176a658d845754a8c1671b1f058423855a44cd6fa61ca57af15afed50eace59f2db7b29bdbf1440afc6bb206599c51b696fa3cbffac1a037a9ed1b13831485bd705288a64f9041ece833f1e7be756c7a8242ec9962e46d5e8505a15852a7fab71f8bf9f149e40e494aa6f98ab2bcff272ca6c1fb10fcc724341acfe70737012f4b4b3166174af5842351fbe42a99e01ec51b72b5851adb7f1865bfdce386e7fa3e1836442e03924b8a4e514d3352672f6bb9f0d87614ccbebe4ec617c6e37ea3399402f5439c64bf20872b37d7222427df7941cdcb5e1abfe4445823d8b06e48741c775e29acea00352f4713405d75d78a56628fc8f0cdd7e6a511ba099fd02e7c37d43f3932ac16734195cd2688c26d69c0e0431b668680b943a437f04cf5e50a3d995682db61f99195c68296caca55d8f73dfeffa4aa06968457139d17569d018f78d12abaa190e41529137a80db7ccf761965e39325f03a4444fd2cdde42ea74569eeacf5635e3b969633877ba3e46fda9bc2544b8b582dc7d96da1017867a2f62307db968b9c01b8ba3d03828534a85a0f0d14245622a18e4ec8052b43b29e00c13b1e32696f79fddc6e6df618bfeb296ee9675f65f0523a68482e7853073360774d443215d4f764373a92bc740234e8bb3b5cf6ab517f86fff7cc2e230672a9b7af3c26cc16801bd5bd5"}) perf_event_open(0x0, r1, 0x1000, r3, 0x50859590fc0b01bf) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, &(0x7f0000000300)={'broute\x00', 0x0, 0x3, 0xc1, [], 0x2, &(0x7f00000001c0)=[{}, {}], &(0x7f0000000200)=""/193}, &(0x7f0000000380)=0x78) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet(0x2, 0x1, 0x0) ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f00000003c0)=r3) 16:19:12 executing program 3: ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x83, &(0x7f0000000080)={'f%lter\x00', 0x0, 0x0, 0x0, [], 0x0, 0x0, 0x0}, &(0x7f0000000140)=0x78) 16:19:12 executing program 0: recvmmsg(0xffffffffffffff9c, &(0x7f0000007600)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000280)=""/178, 0xb2}, {&(0x7f0000000340)=""/117, 0x75}, {&(0x7f00000003c0)}, {&(0x7f0000000400)=""/27, 0x1b}, {&(0x7f0000000440)=""/138, 0x8a}, {&(0x7f0000000500)=""/75, 0x4b}, {&(0x7f0000000580)=""/141, 0x8d}], 0x7, &(0x7f00000006c0)=""/193, 0xc1}, 0x6}, {{&(0x7f00000007c0)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f0000001e40)=[{&(0x7f0000000840)=""/242, 0xf2}, {&(0x7f0000000940)=""/47, 0x2f}, {&(0x7f0000000980)=""/4096, 0x1000}, {&(0x7f0000001980)=""/237, 0xed}, {&(0x7f0000001a80)=""/75, 0x4b}, {&(0x7f0000001b00)=""/246, 0xf6}, {&(0x7f0000001c00)=""/197, 0xc5}, {&(0x7f0000001d00)=""/141, 0x8d}, {&(0x7f0000001dc0)=""/106, 0x6a}], 0x9, &(0x7f0000001f00)=""/171, 0xab}, 0x80}, {{&(0x7f0000001fc0)=@alg, 0x80, &(0x7f0000002380)=[{&(0x7f0000002040)=""/150, 0x96}, {&(0x7f0000002100)=""/73, 0x49}, {&(0x7f0000002180)=""/112, 0x70}, {&(0x7f0000002200)=""/254, 0xfe}, {&(0x7f0000002300)=""/94, 0x5e}], 0x5}, 0x3}, {{&(0x7f0000002400)=@pptp={0x18, 0x2, {0x0, @multicast2}}, 0x80, &(0x7f0000002880)=[{&(0x7f0000002480)=""/225, 0xe1}, {&(0x7f0000002580)=""/212, 0xd4}, {&(0x7f0000002680)=""/21, 0x15}, {&(0x7f00000026c0)=""/10, 0xa}, {&(0x7f0000002700)=""/145, 0x91}, {&(0x7f00000027c0)=""/172, 0xac}], 0x6, &(0x7f0000002900)=""/4096, 0x1000}, 0x8001}, {{&(0x7f0000003900)=@pppoe={0x18, 0x0, {0x0, @remote}}, 0x80, &(0x7f0000005d40)=[{&(0x7f0000003980)=""/193, 0xc1}, {&(0x7f0000003a80)=""/11, 0xb}, {&(0x7f0000003ac0)=""/176, 0xb0}, {&(0x7f0000003b80)=""/4096, 0x1000}, {&(0x7f0000004b80)=""/51, 0x33}, {&(0x7f0000004bc0)=""/115, 0x73}, {&(0x7f0000004c40)=""/234, 0xea}, {&(0x7f0000004d40)=""/4096, 0x1000}], 0x8, &(0x7f0000005dc0)=""/4096, 0x1000}, 0xe7d}, {{&(0x7f0000006dc0)=@tipc, 0x80, &(0x7f00000072c0)=[{&(0x7f0000006e40)=""/46, 0x2e}, {&(0x7f0000006e80)=""/51, 0x33}, {&(0x7f0000006ec0)=""/86, 0x56}, {&(0x7f0000006f40)=""/216, 0xd8}, {&(0x7f0000007040)=""/158, 0x9e}, {&(0x7f0000007100)=""/62, 0x3e}, {&(0x7f0000007140)=""/225, 0xe1}, {&(0x7f0000007240)=""/119, 0x77}], 0x8, &(0x7f0000007340)=""/250, 0xfa}, 0x7}, {{&(0x7f0000007440)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, &(0x7f00000075c0)=[{&(0x7f00000074c0)=""/16, 0x10}, {&(0x7f0000007500)=""/174, 0xae}], 0x2}, 0x90000}], 0x7, 0x120, &(0x7f00000077c0)={0x77359400}) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f00000003c0), &(0x7f0000007880)=0x4) getsockopt$inet_mreqsrc(r0, 0x0, 0x25, &(0x7f0000007800)={@multicast2, @rand_addr, @loopback}, &(0x7f0000007840)=0xc) r1 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x1, 0x80) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000000c0)={'ip6tnl0\x00', 0x400}) socket$can_bcm(0x1d, 0x2, 0x2) r2 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x800000000000) setsockopt$inet6_dccp_buf(r1, 0x21, 0x8d, &(0x7f0000000180)="0313a7e8062317e04c58f7eddba28e0b984bfbcc217a57bc1805f22cb6ce316653bd08535973ee758c51ce0e53847c7e35cfa9297b99d5b213fc702468094a7cd84c7335eb8d08b060e8ddf1f80f0ef5de9579c7140afc4c1fa51ebca1afc2e00e5fbdac6a44431b134ce2a8a6ae280661ab0d15cbced7a2d271af4979f01249e56c7ceaf72d135199653c101eb60c62e1a6a42ce57d863ddebd77c850785086d6db18de88ea048e774d91fc912c8687a88804380e82875ec18cf67cb3d308f7eaf8", 0xffffffffffffffc4) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000040)={{0x0, 0x3, 0x4, 0x0, 0x2}}) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f00000078c0)='/proc/self/attr/exec\x00', 0x2, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000000)={{0x3}}) ioctl$VIDIOC_G_AUDOUT(r1, 0x80345631, &(0x7f0000007900)) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000140)=0x400, 0x4) 16:19:12 executing program 1: r0 = syz_open_dev$sndtimer(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r2, 0x1, 0x7, &(0x7f0000ac5000), 0x4) sendmmsg$unix(r2, &(0x7f00000bd000), 0x80, 0x0) r3 = memfd_create(&(0x7f0000000080)='dev ', 0x3) write(r3, &(0x7f0000000040)="16", 0x1) sendfile(r2, r3, &(0x7f0000000000), 0x0) fcntl$addseals(r3, 0x409, 0xd) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8}) r4 = gettid() dup(r1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r4, 0x1004000000016) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$IMCLEAR_L2(r5, 0x80044946, &(0x7f0000000040)=0x7f) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}}) 16:19:12 executing program 3: ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x83, &(0x7f0000000080)={'f%lter\x00', 0x0, 0x0, 0x0, [], 0x0, 0x0, 0x0}, &(0x7f0000000140)=0x78) [ 2052.608213] syz-executor5 invoked oom-killer: gfp_mask=0x7080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=1000 16:19:12 executing program 1: r0 = syz_open_dev$sndtimer(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r2, 0x1, 0x7, &(0x7f0000ac5000), 0x4) sendmmsg$unix(r2, &(0x7f00000bd000), 0x80, 0x0) r3 = memfd_create(&(0x7f0000000080)='dev ', 0x3) write(r3, &(0x7f0000000040)="16", 0x1) sendfile(r2, r3, &(0x7f0000000000), 0x0) fcntl$addseals(r3, 0x409, 0xd) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8}) r4 = gettid() dup(r1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r4, 0x1004000000016) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$IMCLEAR_L2(r5, 0x80044946, &(0x7f0000000040)=0x7f) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}}) [ 2052.665502] CPU: 0 PID: 17235 Comm: syz-executor5 Not tainted 5.0.0-rc2 #24 [ 2052.672643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2052.682003] Call Trace: [ 2052.684600] dump_stack+0x1db/0x2d0 [ 2052.688240] ? dump_stack_print_info.cold+0x20/0x20 [ 2052.693263] ? check_preemption_disabled+0x48/0x290 [ 2052.698302] dump_header+0x1e6/0x116c [ 2052.702116] ? add_lock_to_list.isra.0+0x450/0x450 [ 2052.707053] ? perf_trace_lock+0x750/0x750 [ 2052.711295] ? print_usage_bug+0xd0/0xd0 [ 2052.715367] ? pagefault_out_of_memory+0x1a1/0x1a1 [ 2052.720306] ? ___ratelimit+0x37c/0x686 [ 2052.724298] ? mark_held_locks+0xb1/0x100 [ 2052.728454] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 2052.733560] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 2052.738668] ? lockdep_hardirqs_on+0x415/0x5d0 [ 2052.743255] ? trace_hardirqs_on+0xbd/0x310 [ 2052.747578] ? kasan_check_read+0x11/0x20 [ 2052.751731] ? ___ratelimit+0x37c/0x686 [ 2052.755731] ? trace_hardirqs_off_caller+0x300/0x300 [ 2052.760836] ? do_raw_spin_trylock+0x270/0x270 [ 2052.765421] ? trace_hardirqs_on_caller+0x310/0x310 [ 2052.770435] ? lock_acquire+0x1db/0x570 [ 2052.774428] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 2052.779537] ? ___ratelimit+0xac/0x686 [ 2052.783429] ? idr_get_free+0xee0/0xee0 [ 2052.787406] ? lockdep_hardirqs_on+0x415/0x5d0 [ 2052.791999] oom_kill_process.cold+0x10/0x9d4 [ 2052.796504] ? cgroup_procs_next+0x70/0x70 [ 2052.800752] ? _raw_spin_unlock_irq+0x5e/0x90 [ 2052.805253] ? oom_badness+0xa50/0xa50 [ 2052.809153] ? oom_evaluate_task+0x540/0x540 [ 2052.813571] ? mem_cgroup_iter_break+0x30/0x30 [ 2052.818164] ? mutex_trylock+0x2d0/0x2d0 [ 2052.822233] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2052.827920] ? rcu_read_unlock_special+0x380/0x380 [ 2052.832853] out_of_memory+0x885/0x1420 [ 2052.836822] ? oom_killer_disable+0x340/0x340 [ 2052.841318] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 2052.846432] ? lock_acquire+0x1db/0x570 [ 2052.850426] mem_cgroup_out_of_memory+0x160/0x210 [ 2052.855271] ? do_raw_spin_unlock+0xa0/0x330 [ 2052.859688] ? memcg_memory_event+0x40/0x40 [ 2052.864015] ? do_raw_spin_trylock+0x270/0x270 [ 2052.868637] ? _raw_spin_unlock+0x2d/0x50 [ 2052.872797] try_charge+0x12a9/0x19b0 [ 2052.876594] ? lock_downgrade+0x910/0x910 [ 2052.880727] ? kasan_check_read+0x11/0x20 [ 2052.884875] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 2052.889724] ? get_mem_cgroup_from_mm+0x1cd/0x420 [ 2052.894575] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2052.900103] ? lock_downgrade+0x910/0x910 [ 2052.904402] ? kasan_check_read+0x11/0x20 [ 2052.908560] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 2052.913835] ? rcu_read_unlock_special+0x380/0x380 [ 2052.918757] ? get_mem_cgroup_from_mm+0x1ea/0x420 [ 2052.923587] memcg_kmem_charge_memcg+0x7c/0x130 [ 2052.928272] ? memcg_kmem_put_cache+0xb0/0xb0 [ 2052.932775] ? lock_release+0xc40/0xc40 [ 2052.936743] memcg_kmem_charge+0x13b/0x340 [ 2052.940965] __alloc_pages_nodemask+0x7b8/0xdc0 [ 2052.945637] ? __alloc_pages_slowpath+0x2cc0/0x2cc0 [ 2052.950652] ? rcu_pm_notify+0xd0/0xd0 [ 2052.954535] ? rcu_read_lock_sched_held+0x110/0x130 [ 2052.959550] ? kmem_cache_alloc_node+0x347/0x710 [ 2052.964297] ? print_usage_bug+0xd0/0xd0 [ 2052.968373] copy_process+0x847/0x8710 [ 2052.972256] ? print_usage_bug+0xd0/0xd0 [ 2052.976304] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2052.981825] ? check_preemption_disabled+0x48/0x290 [ 2052.986845] ? __lock_acquire+0x572/0x4a30 [ 2052.991116] ? mark_held_locks+0x100/0x100 [ 2052.995345] ? __cleanup_sighand+0x70/0x70 [ 2052.999576] ? mark_held_locks+0x100/0x100 [ 2053.003800] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2053.009328] ? check_preemption_disabled+0x48/0x290 [ 2053.014335] ? check_preemption_disabled+0x48/0x290 [ 2053.019340] ? debug_smp_processor_id+0x1c/0x20 [ 2053.023991] ? perf_trace_lock+0x12f/0x750 [ 2053.028217] ? perf_trace_lock_acquire+0x138/0x7d0 [ 2053.033231] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2053.038759] ? check_preemption_disabled+0x48/0x290 [ 2053.043778] ? debug_smp_processor_id+0x1c/0x20 [ 2053.048449] ? perf_trace_lock+0x12f/0x750 [ 2053.052783] ? perf_trace_lock_acquire+0x138/0x7d0 [ 2053.057703] ? add_lock_to_list.isra.0+0x450/0x450 [ 2053.062621] ? find_held_lock+0x35/0x120 [ 2053.066681] ? print_usage_bug+0xd0/0xd0 [ 2053.070739] ? psi_memstall_leave+0x1f8/0x280 [ 2053.075219] ? find_held_lock+0x35/0x120 [ 2053.079281] ? __lock_acquire+0x572/0x4a30 [ 2053.083505] ? _raw_spin_unlock_irq+0x28/0x90 [ 2053.087994] ? _raw_spin_unlock_irq+0x28/0x90 [ 2053.092483] ? lockdep_hardirqs_on+0x415/0x5d0 [ 2053.097054] ? trace_hardirqs_on+0xbd/0x310 [ 2053.101362] ? mark_held_locks+0x100/0x100 [ 2053.105594] ? check_preemption_disabled+0x48/0x290 [ 2053.110619] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2053.116141] ? check_preemption_disabled+0x48/0x290 [ 2053.121142] ? check_preemption_disabled+0x48/0x290 [ 2053.126164] ? debug_smp_processor_id+0x1c/0x20 [ 2053.130834] ? perf_trace_lock+0x12f/0x750 [ 2053.135081] ? perf_trace_lock_acquire+0x138/0x7d0 [ 2053.140010] ? add_lock_to_list.isra.0+0x450/0x450 [ 2053.144938] ? perf_trace_lock+0x750/0x750 [ 2053.149166] ? lockdep_hardirqs_on+0x415/0x5d0 [ 2053.153733] ? try_to_free_pages+0xb70/0xb70 [ 2053.158132] ? percpu_ref_put_many+0x129/0x270 [ 2053.162705] ? blkcg_maybe_throttle_current+0x75e/0x1400 [ 2053.168156] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2053.173694] _do_fork+0x1a9/0x1170 [ 2053.177224] ? fork_idle+0x1d0/0x1d0 [ 2053.180933] ? trace_hardirqs_off+0xb8/0x310 [ 2053.185340] ? get_mctgt_type_thp.isra.0+0x4c0/0x4c0 [ 2053.190438] ? prepare_exit_to_usermode+0x32e/0x3b0 [ 2053.195581] ? do_syscall_64+0x8c/0x800 [ 2053.199547] ? do_syscall_64+0x8c/0x800 [ 2053.203517] ? lockdep_hardirqs_on+0x415/0x5d0 [ 2053.208096] ? trace_hardirqs_on+0xbd/0x310 [ 2053.212457] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2053.217818] ? trace_hardirqs_off_caller+0x300/0x300 [ 2053.222918] __x64_sys_clone+0xbf/0x150 [ 2053.226910] do_syscall_64+0x1a3/0x800 [ 2053.230791] ? syscall_return_slowpath+0x5f0/0x5f0 [ 2053.235708] ? prepare_exit_to_usermode+0x232/0x3b0 [ 2053.240719] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2053.245570] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2053.250754] RIP: 0033:0x45a899 [ 2053.253944] Code: ff 48 85 f6 0f 84 97 8d fb ff 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 0f 8c 6e 8d fb ff 74 01 c3 31 ed 48 f7 c7 00 00 01 00 75 [ 2053.272827] RSP: 002b:0000000000a4fac8 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 2053.280527] RAX: ffffffffffffffda RBX: 00007ff96b3b5700 RCX: 000000000045a899 [ 2053.287797] RDX: 00007ff96b3b59d0 RSI: 00007ff96b3b4db0 RDI: 00000000003d0f00 [ 2053.295061] RBP: 0000000000a4fcd0 R08: 00007ff96b3b5700 R09: 00007ff96b3b5700 [ 2053.302315] R10: 00007ff96b3b59d0 R11: 0000000000000202 R12: 0000000000000000 [ 2053.309571] R13: 0000000000a4fb7f R14: 00007ff96b3b59c0 R15: 000000000073bf0c [ 2053.320803] memory: usage 307200kB, limit 307200kB, failcnt 927 [ 2053.328157] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2053.335505] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2053.342265] Memory cgroup stats for /syz5: cache:204KB rss:144868KB rss_huge:65536KB shmem:64KB mapped_file:132KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:144864KB inactive_file:0KB active_file:0KB unevictable:0KB [ 2053.364055] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor5,pid=17221,uid=0 [ 2053.379323] Memory cgroup out of memory: Kill process 17221 (syz-executor5) score 1107 or sacrifice child [ 2053.389628] Killed process 17221 (syz-executor5) total-vm:70532kB, anon-rss:2208kB, file-rss:33740kB, shmem-rss:0kB 16:19:13 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000500)='cgroup.procs\x00', 0x2, 0x0) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x5}, 0x2c) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x8, 0x4, 0x100000001, 0x0, r2}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r3, &(0x7f00000002c0)}, 0x10) r4 = syz_open_dev$sndpcmc(&(0x7f0000000140)='/dev/snd/pcmC#D#c\x00', 0x2, 0x2200) write$P9_RXATTRCREATE(r4, &(0x7f0000000180)={0x7, 0x21, 0x2}, 0x7) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x200, &(0x7f0000000180), 0x0, &(0x7f0000000080), &(0x7f0000000180)) mknod(&(0x7f0000f80000)='./file0\x00', 0x0, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000400)={0x0, 0xfb, 0xe2, 0x2, 0xc89a, "274d3803842686bd2eba9c99288a9849", "2fe3ade13a844fecb24db6dfb2c1440b99c56c5642ea6963a6be3fcbaec9d27ddb93b7fb05c224055f2e477fb93829d00e30f00aec71ff64dfa155131f6a020763bdefec5255da903f3ec5007e8e42abcba9b2bd80510f0e4a01ce22d39a4e431aa1aff9fd49e78bd2043298aa8c000917c2273496ded8009d33d1488e80a228842d56ea768932bbb90596f51a5f040d6e67799fb42dc87de18730cfc718c111e16f7bf692cb1f527d499c9dd58e001cda0938a946de4ef7abbd5a88847060682f5da3b3fbf0d794634daed35a"}, 0xe2, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$bt_hidp(0x1f, 0x3, 0x6) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000002c0)=""/183, &(0x7f00000003c0)=0xb7) ptrace(0x10, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(r6, r5) sendfile(r1, r1, &(0x7f0000000080)=0x4c000000, 0x10a000d50) 16:19:13 executing program 3: ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x83, &(0x7f0000000080)={'f%lter\x00', 0x0, 0x0, 0x0, [], 0x0, 0x0, 0x0}, &(0x7f0000000140)=0x78) 16:19:13 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000500)='cgroup.procs\x00', 0x2, 0x0) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x5}, 0x2c) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x8, 0x4, 0x100000001, 0x0, r2}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r3, &(0x7f00000002c0)}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x200, &(0x7f0000000180), 0x0, &(0x7f0000000080), &(0x7f0000000180)) mknod(&(0x7f0000f80000)='./file0\x00', 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$bt_hidp(0x1f, 0x3, 0x6) write$FUSE_BMAP(r4, &(0x7f00000000c0)={0x18, 0x0, 0x1}, 0x18) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') getsockopt$IP_VS_SO_GET_DESTS(r5, 0x0, 0x484, &(0x7f00000002c0)=""/183, &(0x7f00000003c0)=0xb7) ptrace(0x10, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000080)=0x4c000000, 0x10a000d50) 16:19:13 executing program 1: r0 = syz_open_dev$sndtimer(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r2, 0x1, 0x7, &(0x7f0000ac5000), 0x4) sendmmsg$unix(r2, &(0x7f00000bd000), 0x80, 0x0) r3 = memfd_create(&(0x7f0000000080)='dev ', 0x3) write(r3, &(0x7f0000000040)="16", 0x1) sendfile(r2, r3, &(0x7f0000000000), 0x0) fcntl$addseals(r3, 0x409, 0xd) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8}) r4 = gettid() dup(r1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r4, 0x1004000000016) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$IMCLEAR_L2(r5, 0x80044946, &(0x7f0000000040)=0x7f) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}}) 16:19:13 executing program 4: socketpair$unix(0x1, 0x8000100000000001, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'eql\x00\x00\xdf\xdd\x94D\x8f\x15\xcf!\x00', 0xec38ed91f1c74952}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000080)={'eql\x00\x00\xa1\xa9[\x00\\?\x00\x00\x03\xca\x00', @ifru_mtu=0x1}) 16:19:13 executing program 3: ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x83, &(0x7f0000000080)={'f%lter\x00', 0x0, 0x0, 0x0, [], 0x0, 0x0, 0x0}, &(0x7f0000000140)=0x78) 16:19:13 executing program 3: ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x83, &(0x7f0000000080)={'f%lter\x00', 0x0, 0x0, 0x0, [], 0x0, 0x0, 0x0}, &(0x7f0000000140)=0x78) 16:19:13 executing program 1: r0 = syz_open_dev$sndtimer(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r2, 0x1, 0x7, &(0x7f0000ac5000), 0x4) sendmmsg$unix(r2, &(0x7f00000bd000), 0x80, 0x0) r3 = memfd_create(&(0x7f0000000080)='dev ', 0x3) write(r3, &(0x7f0000000040)="16", 0x1) sendfile(r2, r3, &(0x7f0000000000), 0xffff) fcntl$addseals(0xffffffffffffffff, 0x409, 0xd) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8}) r4 = gettid() dup(r1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r4, 0x1004000000016) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$IMCLEAR_L2(r5, 0x80044946, &(0x7f0000000040)=0x7f) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}}) 16:19:13 executing program 0: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 16:19:13 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) clock_adjtime(0x7, &(0x7f0000000400)={0x200, 0x10001, 0x100000000000, 0x800000000, 0x1, 0x1000000000, 0x7f, 0x4, 0xe000000000000, 0x6, 0x79, 0x1, 0x0, 0x642, 0x0, 0x8, 0x401, 0x80000001, 0x2, 0x0, 0x59c, 0x0, 0x364638d1, 0x0, 0xfffffffffffffffe, 0x1800000000000000}) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x5}, 0x2c) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x8, 0x4, 0x100000001, 0x0, r2}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r3, &(0x7f00000002c0)}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x200, &(0x7f0000000180), 0x0, &(0x7f0000000080), &(0x7f0000000180)) mknod(&(0x7f0000f80000)='./file0\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$bt_hidp(0x1f, 0x3, 0x6) syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000002c0)=""/183, &(0x7f00000003c0)=0xb7) ptrace(0x10, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000080)=0x4c000000, 0x10a000d50) 16:19:13 executing program 3: ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x83, &(0x7f0000000080)={'f%lter\x00', 0x0, 0x0, 0x0, [], 0x0, 0x0, 0x0}, &(0x7f0000000140)=0x78) 16:19:13 executing program 0: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000040)='/dev/capi20\x00', 0x200, 0x0) fchown(r0, 0x0, 0x0) fsetxattr$security_smack_transmute(r0, &(0x7f0000000300)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000340)='TRUE', 0x4, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000280)='/dev/full\x00', 0x8000, 0x0) write$eventfd(r1, &(0x7f00000002c0)=0xffffffffffffffc1, 0x8) r2 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id, &(0x7f0000000140)=0x10, 0x800) ioctl$void(r0, 0x5451) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000380)={0x0, 0x7, 0x80, 0xc}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0xfffffffffffffffd) ioctl$KVM_GET_SUPPORTED_CPUID(r1, 0xc008ae05, &(0x7f00000003c0)=""/241) r3 = accept4(r2, &(0x7f0000000180)=@nfc, &(0x7f0000000200)=0x80, 0x800) fsetxattr$trusted_overlay_redirect(r3, &(0x7f0000000080)='trusted.overlay.redirect\x00', &(0x7f00000000c0)='./file0\x00', 0x8, 0x1) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) [ 2054.114462] syz-executor5 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2054.225238] CPU: 0 PID: 17275 Comm: syz-executor5 Not tainted 5.0.0-rc2 #24 [ 2054.232372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2054.241829] Call Trace: [ 2054.244423] dump_stack+0x1db/0x2d0 [ 2054.248061] ? dump_stack_print_info.cold+0x20/0x20 [ 2054.253081] ? check_preemption_disabled+0x48/0x290 [ 2054.258122] dump_header+0x1e6/0x116c [ 2054.261935] ? add_lock_to_list.isra.0+0x450/0x450 [ 2054.266872] ? perf_trace_lock+0x750/0x750 [ 2054.271112] ? print_usage_bug+0xd0/0xd0 16:19:14 executing program 4: socketpair$unix(0x1, 0x8000100000000001, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'eql\x00\x00\xdf\xdd\x94D\x8f\x15\xcf!\x00', 0xec38ed91f1c74952}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000080)={'eql\x00\x00\xa1\xa9[\x00`?\x00\x00\x03\xca\x00', @ifru_mtu=0x1}) [ 2054.275181] ? pagefault_out_of_memory+0x1a1/0x1a1 [ 2054.280119] ? ___ratelimit+0x37c/0x686 [ 2054.284109] ? mark_held_locks+0xb1/0x100 [ 2054.288268] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 2054.293382] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 2054.298491] ? lockdep_hardirqs_on+0x415/0x5d0 [ 2054.303562] ? trace_hardirqs_on+0xbd/0x310 [ 2054.307890] ? kasan_check_read+0x11/0x20 [ 2054.312047] ? ___ratelimit+0x37c/0x686 [ 2054.316048] ? trace_hardirqs_off_caller+0x300/0x300 [ 2054.321186] ? do_raw_spin_trylock+0x270/0x270 [ 2054.325775] ? trace_hardirqs_on_caller+0x310/0x310 [ 2054.330817] ? lock_acquire+0x1db/0x570 [ 2054.330861] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 2054.330880] ? ___ratelimit+0xac/0x686 [ 2054.330900] ? idr_get_free+0xee0/0xee0 [ 2054.330913] ? lockdep_hardirqs_on+0x415/0x5d0 [ 2054.330939] oom_kill_process.cold+0x10/0x9d4 [ 2054.356965] ? cgroup_procs_next+0x70/0x70 [ 2054.361213] ? _raw_spin_unlock_irq+0x5e/0x90 [ 2054.365719] ? oom_badness+0xa50/0xa50 [ 2054.369627] ? oom_evaluate_task+0x540/0x540 [ 2054.374047] ? mem_cgroup_iter_break+0x30/0x30 [ 2054.378639] ? mutex_trylock+0x2d0/0x2d0 [ 2054.382706] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2054.388266] ? rcu_read_unlock_special+0x380/0x380 [ 2054.393207] out_of_memory+0x885/0x1420 [ 2054.393238] ? oom_killer_disable+0x340/0x340 [ 2054.393258] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 2054.406820] ? lock_acquire+0x1db/0x570 [ 2054.410829] mem_cgroup_out_of_memory+0x160/0x210 [ 2054.415679] ? do_raw_spin_unlock+0xa0/0x330 [ 2054.420093] ? memcg_memory_event+0x40/0x40 [ 2054.424421] ? do_raw_spin_trylock+0x270/0x270 [ 2054.429026] ? _raw_spin_unlock+0x2d/0x50 [ 2054.433185] try_charge+0x12a9/0x19b0 [ 2054.436995] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2054.442549] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 2054.447403] ? rcu_read_unlock_special+0x380/0x380 [ 2054.452352] ? get_mem_cgroup_from_mm+0x1ea/0x420 [ 2054.457208] ? get_mem_cgroup_from_page+0x190/0x190 [ 2054.462233] ? rcu_read_lock_sched_held+0x110/0x130 [ 2054.462258] mem_cgroup_try_charge+0x43a/0xdb0 [ 2054.462281] ? mem_cgroup_protected+0xa10/0xa10 [ 2054.462304] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2054.482073] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2054.487620] ? check_preemption_disabled+0x48/0x290 [ 2054.492644] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 2054.498178] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 2054.498202] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 2054.508643] wp_page_copy+0x45a/0x1c30 [ 2054.512535] ? swp_swapcount+0x540/0x540 [ 2054.516698] ? pmd_pfn+0x1d0/0x1d0 [ 2054.520245] ? find_held_lock+0x35/0x120 [ 2054.524307] ? do_wp_page+0x70d/0x16b0 [ 2054.524340] ? kasan_check_read+0x11/0x20 [ 2054.524357] ? do_raw_spin_unlock+0xa0/0x330 [ 2054.524374] ? do_raw_spin_trylock+0x270/0x270 [ 2054.524391] ? __lock_acquire+0x572/0x4a30 [ 2054.524414] do_wp_page+0x715/0x16b0 [ 2054.549325] ? finish_mkwrite_fault+0x540/0x540 [ 2054.554173] ? kasan_check_read+0x11/0x20 [ 2054.558327] ? do_raw_spin_lock+0x156/0x360 [ 2054.562653] ? rwlock_bug.part.0+0x90/0x90 [ 2054.562674] ? pmd_devmap_trans_unstable+0x1d0/0x1d0 [ 2054.562704] __handle_mm_fault+0x2c8e/0x55a0 [ 2054.562732] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 2054.562750] ? check_preemption_disabled+0x48/0x290 [ 2054.586299] ? handle_mm_fault+0x3cc/0xc80 [ 2054.590562] ? lock_downgrade+0x910/0x910 [ 2054.594725] ? kasan_check_read+0x11/0x20 [ 2054.598883] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 2054.604172] ? rcu_read_unlock_special+0x380/0x380 [ 2054.609106] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2054.609125] ? check_preemption_disabled+0x48/0x290 [ 2054.609152] handle_mm_fault+0x4ec/0xc80 [ 2054.609173] ? __handle_mm_fault+0x55a0/0x55a0 [ 2054.609202] __do_page_fault+0x5da/0xd60 [ 2054.628353] do_page_fault+0xe6/0x7d8 [ 2054.628368] ? trace_hardirqs_on_caller+0xc0/0x310 [ 2054.628388] ? vmalloc_sync_all+0x30/0x30 [ 2054.628404] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 2054.645287] ? syscall_return_slowpath+0x5f0/0x5f0 [ 2054.645307] ? prepare_exit_to_usermode+0x232/0x3b0 [ 2054.645325] ? page_fault+0x8/0x30 [ 2054.645344] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2054.645363] ? page_fault+0x8/0x30 [ 2054.645381] page_fault+0x1e/0x30 [ 2054.645393] RIP: 0033:0x40b932 [ 2054.645408] Code: ff 48 81 fe 00 00 94 00 0f 83 df fc ff ff 48 8d 47 20 48 89 44 24 68 48 b8 ff ff ff ff ff ff ff 7f 48 23 47 18 48 89 44 24 30 <64> f0 83 04 25 d0 ff ff ff 01 48 8b 7c 24 18 e8 4a 48 01 00 85 c0 [ 2054.645415] RSP: 002b:0000000000a4fc00 EFLAGS: 00010202 [ 2054.645428] RAX: 0000000000000008 RBX: 000000000073c900 RCX: 00000000001f5388 [ 2054.645437] RDX: 00000000000000fc RSI: 00000000007413f8 RDI: 00000000007413e0 [ 2054.645446] RBP: 000000000073c900 R08: 0000000000000000 R09: 0000000000000000 16:19:14 executing program 0: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) r1 = syz_open_dev$media(&(0x7f0000000300)='/dev/media#\x00', 0x800000001, 0x10003) unshare(0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000000c0)={0xffffffffffffffff}, 0x13f, 0xa}}, 0x20) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f0000000040)={0x311, 0x5, 0x0, {0x0, 0x4, 0x100, 0x7ff}}, 0x30) r3 = getpid() getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0}, &(0x7f0000001740)=0xc) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000001780)={0x0, 0x0, 0x0}, &(0x7f00000017c0)=0xc) r6 = syz_open_dev$cec(&(0x7f0000001800)='/dev/cec#\x00', 0x1, 0x2) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000001840)=0x0) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000001880)={{{@in=@local, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@multicast1}}, &(0x7f0000001980)=0xe8) stat(&(0x7f00000019c0)='./file0\x00', &(0x7f0000001a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(r1, &(0x7f0000001c00)=[{&(0x7f0000000200)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f00000016c0)=[{&(0x7f0000000340)="b3c2d0e19c669c8353d168446dd4f3e7d0b619758551fbf74120217ca741344e810213be2c61797616e14d374f72115b57b7be9952dbda19dbaceb8b3effea6406b3c6cce82ed179b5f8599390aa570c6fbbf3cb12b9920cebc2443ac5e943236da12a914ae075b29874d685c1ed4b0c796e1c16dc94a01c69439323d80376510d33b951e1cdb272a695da88", 0x8c}, {&(0x7f0000000400)="e845f85206fecb75c02d01c25ec737f8ccdeacf41db9e5c048c71ce2b67207d3c5dcc3bd460751a9c003254f2172a8013b40fe0d8c1fdcbcad5d0081b27c9a1b1e93b1c24e9ff1bfaea938dcfa57d95998e0d807081edc6dbde1a7c3850861a4311528fc799107730b4f13c6deb8b57720390863a4f6905c1dfdab56a86f27c54bd026f54066327a1f769cd814518966a56e1e2dd90661e2ee116354d5a0188bfa491f17c969dd636261a5822ae859440206499284bde5cbd8ddc1017d7e3bf12ea2b2415dc722", 0xc7}, {&(0x7f0000000500)="355f7d4ffa45f7f7ed076137d9e76a8bba3b6896ca677d1fb1a303012f98ece22ab48178bd03315aa8cebd25f1d46b1b036f458cf1e5e77072c99a0a8a82063ea1ed3dae4796464cd2c9a4f665c51459109a82e58eeaaf5c2436fe9c5f63f0e8dddcbedc8405c619cfe609d02b964db260731fa1fb40a0dc1a2d0eb0cc362dde7b06483bff64fdffa5687f0e630fce7c7c0924a979ea34638cfec33c1e8b93f48795a119d16a12422021f9ed8a394699169059d919794ca79a5d85d457fda01051126ead9f8245ca7f170ef58c0ddbd86c42a3e2340ca5df530a80a968afc86e", 0xe0}, {&(0x7f0000000280)="ec68c975d15d63c39a1d62536190f4627a0757febaf6fb86977aaeead277fac60291c8a5f07294ddc363a673414879cc5243e115ae10628cb233d0298aac36e3a9cb19e8803370d064", 0x49}, {&(0x7f0000000600)="ce306104f489195ae918412199ff0ab018068fae457656ec9a363eb1c8dc0338fe97347ee706540501409edc5e8872b0d69d4a606b28b2585187b680de1212fb65be629eab27917e3435e5c29e7047009146844c23184c4dd3956b0fdc623eddc3b904a2a402e7a9f552ac664a83243cd03edad15ca145c9e058aab8a9fc6653b0d73d08a9ed9747d50067294a974a3c6ce9380301da55ba4ab4277d6190055ba191038e08c9be15f68ccdb6ffb53ab713b467997c3bcded7ee75c285c1726906f311536aa9099de9eced7f5cb0e28b166286eac17f22891061e9af217f498ab96292069edc7dd98cbe5b2fa0f3d831c101a5dca56b8e94f34dce969ed9421e18ddf82d6fb35c5620897fcd9aec7de0754505b4a5e388c1fa47b9dff0665d8e87119840ee936a5f89fdc9306d4e94de36d5e1484782dfd4bf209a1d6b646f2fd6a1206e12ad2a6d109f58ab8b077fff4261940db5cae59eb2703f20bb473dc6303018b103d0800bcbf9c3076995e697d7fb1f6b3ea3a48347bbef6a2cb10987e4d6bc0c0604651a2ed165646180ced4e308d951a8caeb3b016bc0a3754e1e5fd9ddf09d9fe427a32d478c2d74998bee4d7a7d93e8d6cc6bdbb5e0bdb1a0f84b7341dd91013666f30797daa9846e7aa1b1705d32f0815a2dbffbfc7c47f0554c2c8f78147c6913ecf2b64a36f491595a8fca897ce09700ca717e2f3a8861d185b8952bd40ff635ec8a33f5c93d19d5d9071ba296e3ec4ab97c06b5b97f6101a3f9748b2d551b5374616a002347ab44faa606ce0869fb1db956a33b9566a7a5d8f2ce62a66c85a43ac5b54965409866f7da9a0f5b0ad44bb260479c5ee335626cd25871e34647509420369258c0abe23f46a93afd18793f49bf3fe4ef8539c966814b42fdeb93e3f4a751a9b552b3dc06f1c97cb2ce9139ea229a49734592a08520c932b41421d2de8e5fc7ea8a79ce17643212b2cf24b8f4ec83f879e398876829ddb497e417516bb0f67c5565f3f4c54f60fef35b25830508823355395ad3b5bf2550e7c1c9f5d78db66e8125cca42c0ac00fa83221c4b898353e105004e71363a0036a097c7860334e599f35dc1d52c0ff0ec3a7bcc50dcafff68b8abf72dcdc186f1d4ffd7a34a65976027a51fc2816806f5cac779473d64b1921a291260e6d380d5ce4e7d4aa77b1d2ec994ee976da989b1801eb1aa788845bd84e92b68fd5c2c77f1e672a6c3be015374b6125e7b1d80d17c6cf094adbea0682bf1e2a7950eeea199072c8b9377870522e2a07f04c62939a80bb78a315317f0519b1d3a2b822379f5ff8fe5a898b35c47ac591f2e6c4c6f87f09b0954ecd807331c83ffe578cf326935f2074febf8b520fda205f533938e34b88aaa927a06099166f8bd99c0b7cf507c03fb1e67de6a4e6082fb6ce8886f9a2bd0507334e69d3df341c7e0a0b5d9f9c59d4e1f01452a2b9ebf3248dd133fc40d5e84416240c1b402e179094ae801ffa0ebfdca595a98aea0561245d394b6f9e9a2b3a20a2c5be02cfae18a78e94ebc5b064872a20820db30beba5d8e6b4fdf3e5b24628a6fc5b5e7ac4920c067c9b0e37c7a4db7e4d88f2147bbdab8859bb6b6920a672f19984984d152f6c4d0552332a337ab4ec1d5e2e0418c0701ee75414ae3c1f6c731dd709d3f30abeaf09001024f64e586ea6cf9d80b9be4cc77d42639bab6e9225ea2909ed22644b58a80d3fcf9de0cbe116411f140786a7927a0b9fd298dfb4e39f109bc940b19a962714872f8d41fac165b34cf2767d9318be3b8631ba624c2fe13c37868d407ff14c9b1b858b83670b38f45d9d5b80b01cce1cb4455eb165f88e364b31441d0242792803a241994a8279620f34f366f183a1eb358d13c85ed8fad2d5bdbb1049ae111d299471a8f09f33eb7aa6fbb8d8a726d71d8a790ccc6840d212aa1f4f45dc50ce6a6c55e584723622377bdd85911aca1457d34592a4d1f9d83864f147d60a9599a8e59dc6ffe90403e694752bafdb99a1d9d79e19b5ce0dbfef541276088d7bcc3be958a3d13f5fb715e34adda359b71afb3acc7ec2b436e55254108f7114468ba99e07d75eb75d259a2fd4e44c48706edc391a79cac263d56f499d586591ac0a8e588bd0482545cd3a93c98d143e30a7d00fd2a28369c67f7520a53e9fdaa81e24848c43ed81e46bf1d979640546f9bba4dc1ada50e77e6abc9d9bb30da333516bd4ca5d60e15a9e007b80a7563b25b4a0ae4b6949ab2b9fd19b0e8f626e88a9ab753efa36458dd0db05747998d0a7b3da3e9bb4e75a73032f9724f5b43646c320e26c79111f0aface05de9d1089d8a1a452b06c19908d76504f0c6234212ac42317afeb284e6ce3dda9994e71217a3433d42fce79c5a706d384bd1caa44b75f623e5ec83a47dbb0cbcaf9eb6ccd7b6fb1fe3f715acd8abe21ea8556d41ff4c552c2efa7fd104d28f9ce11bc07dadfb1e4da347ac8e84bf562af4f312141aab3891fb3df55d81091e9781a0d674ce5c0b8ca77f85355fc4fa13dae782c1d3e40dcd64e2b012a2964003edee1f61d1d1bb9dff32e69d7aaee49244dc4ccbd54298b32bcd6bb67389d8eb414334587bed32404b47f30fff1e657512d2b4d7d5fbce43df0362aaf6e78825808a19820aa0edb65e78b1a2771c5576845e47ad56bc34965b1f2b0104ed0a08b17d5128242fb088f93d271af55563c1222d0ef89a1dc43e5fc0afe92f29cbb43b60df5d61c505136dffec4232142a198b9e2fc924e93c8b57d106dadb121bdcf4d95c3d11bd4e9db4b2b207b19ee6adb0a4fc7cd8be5dc07e3c3e380ffb22a0f702661ae345c98a8558489e6e8759dfb15e7c6ad7488a782a13463dcfc3289e7caff1ccae3748b2729699d5397ffe5fbee229ad30921aa017e4927a30d1222ec0b41d1e338298b994510ef481f8bb820ce50064ca8c6b9b1a741d5c6fd351e1e188a0d4d1c2062a5bc87a92f3c97e71c0c89c4f1924d2bbfe4fc9476cd3c8a10de31697e253fbcb6d073aff12ee3992786a87c403ece9357a9d50cfe83739ed0cc5b3b649100af543002ea3e7b0b7e3c3e258845e3bedfd2dd04b3cc3d65c1ccb9791c053e528a8f4f35b62a22d427b9d3286c7e7fc7d58021163441f3fc48160242b3945618c2546a547ad0a0d0b8d2b501cc0a943cb746546c3a2b75e7e439782ac9906f20389c63fd54710750012671a4478c72676438838dc2e6cac61f2739970930d1b85cc7511afa0ad3cfc746f47533d42a55b2e9ef63a1691453caefe75ae00632cb1fd982c916b2513f0ca842ef51d6b88aec6b3132212c611959c9dcc63ad5fe9d90fe3c703a21bc6fe46d5f39dba7f0a5401675126fc9b1161ff12973c6bab24b0793a8385290c66e6a2898fa5e97cef205fae1d1add9553f2278198cb5896be89e868603acb7ecdca7dc9599088f8e2c436c3afb7a12cbf9bf927f73ad372917b384421e04b5a294b6fee806e66bc212807ac569e51492a52c305b7b49068d5b2dbd0b4b3db6075b649e0a8d281f579f7e84571a74c9b1415bd0b7c7840ef59cbc5b28c60b9f81a1fa071a57a47b7cb30624976280571db2a3c724677a63ecc39e343757a0e4397c6ed90a262947d49a6dc9e7beb8ab2c919f04dcc8464fa90420fe050feecb478f3ed52faf187bec1ec2f39d765a16648b4e7ccea48d9623413331efcb2919a20f046fb1a373af6ea6103222905d26544647bf5c7bf4cf2c7bcc7980127607b9a7120e13b446dfdc6c5c75ecdfdb6fb2e95a756a7aed96b15a8b5b0bc119bd651d5fe0c81fc96e40159a45d85bca99fd0afab066a2d624bff0d20fe3d41aa6baa315cc1c34753f8444d79880e694c1e23ca5852041851bab7ec950fe755b04083bccb2e8d7cb77d510a2c7921849c139a62c20e935f1c92006f3be973158ffc52f8d99f6301d67cdd56f995fdc8248f5536ea370266ce2ce0732556a4d8cb32b457c76ef90e5fa2bc253cf5a7ba994e07182712bbdca8f60a6fed82e629f698be574440698c2ea8c505a855a4f3b54a33bb8a6fff94f779c24ab36f0f1e7616675b1b01116310ffd8789b6bfa2a1f3efc1263e06cad44567bb6d714d2cab20f61b9d4c2480402f14ef55abdd317b9a5b8486f958f3ba899afc45df3ef3823caebf919d54cc419621adb5cc9d3ced8ad6bed72cb702f5c7fbe113d6c6028d86f9d16859fa325ac6d9f0074712439ddbccdaa43f3fd2ff277a8be88fd0d3775b305c554e8f8ee9440da179bb32ac4eb0332aa3e63fae61275073a738db3ec026ade172c1c9f1b58ff573632eaa115414f984b1fd0d9377367f8159b1a7548234edbc4256ba66922f055e8207cf4f621f685785d7f228a77345498f6f0a9821b0e0451f8cfe53dd221edf3b55f2a32c40bae7b62c1b9aa7c88748bb734b65debd069d42c30ea464cc2aa2594299814905140a3cd6279b7a2dc39bcbb11e6096eb604e9a30642002b8efd585552ff5c7c7c285206a047acfe93345ed5abbcc0cc3199a59a6a8617fa6a85dffd3559909f6c7ed2c6041e25264e754efa587b6468f99db2e98c02aa2546e1c1336771338d1dd4180b4c5ff01873296699769985b5772ded8b7e386b2db93d701c55fbc433a448ac1cfb97d15aa9e990c857c5c69b3cd930b7c06090cb14cfac97f84a5d8bd3198a1d97490166570c7834702c4b81ec80f50ce3182c2fb8b5729da983c267471933172a83f723daddebf808d2a536a5b350a6eafbda07c93f801117754696b571c7608c2e01d0d29129dd2874b92f1603871ac6c28f2759df6d20b5fddbed4007540c2f97b9732c36d07b3802634744a90812c771d8595e0175b162cb7f5776ce2bfb5fe2ebf735feeada3b7cf6f53bd36d92702c7554c498dcb4799e710a00ed24159afe7e91bdb4394e0d53cfa707c79ad4d8682e25fec610baf5839aa3640c0192553a4601a1fdb8d605312442efd6a8da535061e1666984236c8e522a6ec09c821bbae104dc7d9b640c8e1f8e1e9d628168bfb033748546599c259d73062a4bfb27efbd0f89250d19f82122cd29e99f29c1bcf66e055881e959a90a084e96c3e90a120aa4d8763d6fabe1f8756c0c6d1c0f181738fdf2789e22cdbda9694ff1b3a1d00d500f03b20dc40478b075cd9ee3ffa786012708c3147e3eb608c7622257f3fd36f71f6f7a8796fe212ac8042cbfb298b9a9c915574c702e2459ccbd06873551e80daef6f8665be5e68e5cc7c7fae09cb50ce528b34a046e4001a3b6352e4b1ba8fdc94f50116ad7894274d41a54ffe14b413be24863e621e421e8aa95fc4d8f0a0a5eba8122a0fef151a74daf07d55665d5fef9530bd662aea06b41dd4922004ff416c43f2fdf2c5a83c4135b060932b54b8abc7bd0bd9d2d8b0df064679f8ee5fea8c27f9fd5018d9710b813d8fdd21504f04a59748b2baf40a141f4eb88b1d569986cf1f782de5f82353b2242217540c4e14893926a6f149dbd182968b3e172c1228dbbcf63e868f9829906b114319b211fbb9aab5722904bcaffeb362c000ede0d9f3c3341cabfa288bc6e056f202deeac910c240b58656843fc1c5643aabb9487b40d5f1e1565c90c1c63f1820f59b14c2e070fdba17c9c0023275329e26d879d0e06dcbebe9d57042ad0fcf1db4202dc3670050e46c4ca49c9e049ebb85577770c5e81654a6829caf0bd5c6d26e9680cd36ce3ed2056671fd2480eeac04d9ad4e9d48e87cc57e973d8d44d769855148df278b8ce51375a70e828f50587c37200c30a88248c453452a7c53ccfcdb3", 0x1000}, {&(0x7f0000001600)="7d74236fa4f1a3114b681244d3b601a9215fa6af6e9e174a1c483ce9933bd31d8f5d85d409cd42d2be3dfd037a1c417daca02089fe323b209a92276315e74768e757f4015b6e23ce952da1d14125472dd492cc7aefb9346928acf3226e14368f8996dd4bd20d394ca579187ac40565ea00b80504cdd274b0182b6f5be3b987ff532f2cdbbece18fed005c2906068b4fe3ccc145351f1699e0626fbb0e3958f6122841a74c664b92782c4fa27d3617157be06032f718cce7589", 0xb9}], 0x6, &(0x7f0000001a80)=[@rights={0x18, 0x1, 0x1, [r1]}, @rights={0x28, 0x1, 0x1, [r1, r1, r0, r0, r0]}, @cred={0x20, 0x1, 0x2, r3, r4, r5}, @rights={0x38, 0x1, 0x1, [r0, r1, r6, r0, r0, r1, r1, r0, r0]}, @rights={0x20, 0x1, 0x1, [r1, r1, r1, r0]}, @rights={0x20, 0x1, 0x1, [r1, r1, r0, r0]}, @rights={0x28, 0x1, 0x1, [r0, r0, r1, r1, r1, r0]}, @cred={0x20, 0x1, 0x2, r7, r8, r9}, @rights={0x20, 0x1, 0x1, [r0, r0, r1]}, @rights={0x18, 0x1, 0x1, [r0, r1]}], 0x158, 0x48011}], 0x1, 0x40000) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f00000001c0)={0xe, 0xfffffffffffffd58, 0xfa00, @id_afonly={&(0x7f0000000080)=0x1, r2, 0x0, 0x2, 0x4}}, 0x20) socket(0xe, 0x7, 0x8b3) [ 2054.645455] R10: 0000000000a4fcc0 R11: 0000000000000246 R12: 00000000000003e8 [ 2054.645466] R13: fffffffffffffffe R14: 00000000001f566b R15: 000000000073bf0c [ 2054.912920] memory: usage 307184kB, limit 307200kB, failcnt 981 [ 2054.927814] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2054.934577] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2054.934584] Memory cgroup stats for /syz5: cache:204KB rss:144828KB rss_huge:65536KB shmem:64KB mapped_file:132KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:144804KB inactive_file:0KB active_file:0KB unevictable:0KB [ 2054.970982] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor5,pid=32324,uid=0 [ 2054.986018] Memory cgroup out of memory: Kill process 32324 (syz-executor5) score 1106 or sacrifice child [ 2055.003975] Killed process 32324 (syz-executor5) total-vm:70532kB, anon-rss:2208kB, file-rss:33736kB, shmem-rss:0kB [ 2055.081817] syz-executor5 invoked oom-killer: gfp_mask=0x7080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 2055.093995] CPU: 1 PID: 17317 Comm: syz-executor5 Not tainted 5.0.0-rc2 #24 [ 2055.101104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2055.110449] Call Trace: [ 2055.113042] dump_stack+0x1db/0x2d0 [ 2055.116668] ? dump_stack_print_info.cold+0x20/0x20 [ 2055.121673] ? check_preemption_disabled+0x48/0x290 [ 2055.126701] dump_header+0x1e6/0x116c [ 2055.130491] ? add_lock_to_list.isra.0+0x450/0x450 [ 2055.135410] ? perf_trace_lock+0x750/0x750 [ 2055.139637] ? print_usage_bug+0xd0/0xd0 [ 2055.143827] ? pagefault_out_of_memory+0x1a1/0x1a1 [ 2055.148754] ? ___ratelimit+0x37c/0x686 [ 2055.152746] ? mark_held_locks+0xb1/0x100 [ 2055.156885] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 2055.161975] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 2055.167066] ? lockdep_hardirqs_on+0x415/0x5d0 [ 2055.171645] ? trace_hardirqs_on+0xbd/0x310 [ 2055.175962] ? kasan_check_read+0x11/0x20 [ 2055.180099] ? ___ratelimit+0x37c/0x686 [ 2055.184072] ? trace_hardirqs_off_caller+0x300/0x300 [ 2055.189171] ? do_raw_spin_trylock+0x270/0x270 [ 2055.193749] ? trace_hardirqs_on_caller+0x310/0x310 [ 2055.198760] ? lock_acquire+0x1db/0x570 [ 2055.202740] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 2055.207833] ? ___ratelimit+0xac/0x686 [ 2055.211711] ? idr_get_free+0xee0/0xee0 [ 2055.215684] ? lockdep_hardirqs_on+0x415/0x5d0 [ 2055.220265] oom_kill_process.cold+0x10/0x9d4 [ 2055.224756] ? cgroup_procs_next+0x70/0x70 [ 2055.228978] ? _raw_spin_unlock_irq+0x5e/0x90 [ 2055.233465] ? oom_badness+0xa50/0xa50 [ 2055.237349] ? oom_evaluate_task+0x540/0x540 [ 2055.241774] ? mem_cgroup_iter_break+0x30/0x30 [ 2055.246373] ? mutex_trylock+0x2d0/0x2d0 [ 2055.250427] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2055.255962] ? rcu_read_unlock_special+0x380/0x380 [ 2055.260885] out_of_memory+0x885/0x1420 [ 2055.264859] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 2055.269981] ? oom_killer_disable+0x340/0x340 [ 2055.274466] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 2055.279566] ? lock_acquire+0x1db/0x570 [ 2055.283549] mem_cgroup_out_of_memory+0x160/0x210 [ 2055.288472] ? do_raw_spin_unlock+0xa0/0x330 [ 2055.292895] ? memcg_memory_event+0x40/0x40 [ 2055.297211] ? do_raw_spin_trylock+0x270/0x270 [ 2055.301809] ? _raw_spin_unlock+0x2d/0x50 [ 2055.306113] try_charge+0xd44/0x19b0 [ 2055.309819] ? lock_downgrade+0x910/0x910 [ 2055.313963] ? kasan_check_read+0x11/0x20 [ 2055.318106] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 2055.322953] ? get_mem_cgroup_from_mm+0x1cd/0x420 [ 2055.327969] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2055.333506] ? lock_downgrade+0x910/0x910 [ 2055.337645] ? kasan_check_read+0x11/0x20 [ 2055.341785] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 2055.347060] ? rcu_read_unlock_special+0x380/0x380 [ 2055.351995] ? get_mem_cgroup_from_mm+0x1ea/0x420 [ 2055.356831] memcg_kmem_charge_memcg+0x7c/0x130 [ 2055.361499] ? memcg_kmem_put_cache+0xb0/0xb0 [ 2055.365987] ? lock_release+0xc40/0xc40 [ 2055.369957] memcg_kmem_charge+0x13b/0x340 [ 2055.374190] __alloc_pages_nodemask+0x7b8/0xdc0 [ 2055.378852] ? __alloc_pages_slowpath+0x2cc0/0x2cc0 [ 2055.383855] ? __lock_acquire+0x572/0x4a30 [ 2055.388098] ? add_lock_to_list.isra.0+0x450/0x450 [ 2055.393042] ? mark_held_locks+0x100/0x100 [ 2055.397274] ? mark_held_locks+0x100/0x100 [ 2055.401504] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 2055.407042] alloc_pages_current+0x107/0x210 [ 2055.411449] pte_alloc_one+0x1b/0x1a0 [ 2055.415242] __handle_mm_fault+0x437d/0x55a0 [ 2055.419657] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 2055.424590] ? check_preemption_disabled+0x48/0x290 [ 2055.429599] ? handle_mm_fault+0x3cc/0xc80 [ 2055.433836] ? lock_downgrade+0x910/0x910 [ 2055.437973] ? kasan_check_read+0x11/0x20 [ 2055.442114] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 2055.447383] ? rcu_read_unlock_special+0x380/0x380 [ 2055.452301] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2055.457834] ? check_preemption_disabled+0x48/0x290 [ 2055.462856] handle_mm_fault+0x4ec/0xc80 [ 2055.466921] ? __handle_mm_fault+0x55a0/0x55a0 [ 2055.471502] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2055.477036] ? vmacache_update+0x114/0x140 [ 2055.481267] __do_page_fault+0x5da/0xd60 [ 2055.485331] do_page_fault+0xe6/0x7d8 [ 2055.489124] ? trace_hardirqs_on_caller+0xc0/0x310 [ 2055.494041] ? vmalloc_sync_all+0x30/0x30 [ 2055.498173] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 2055.503615] ? syscall_return_slowpath+0x3b0/0x5f0 [ 2055.508540] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 2055.513547] ? page_fault+0x8/0x30 [ 2055.517077] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2055.521935] ? page_fault+0x8/0x30 [ 2055.525473] page_fault+0x1e/0x30 [ 2055.528913] RIP: 0033:0x457ec9 [ 2055.532099] Code: Bad RIP value. [ 2055.535446] RSP: 002b:0000000020000180 EFLAGS: 00010246 [ 2055.540793] RAX: 0000000000000000 RBX: 0000000000000005 RCX: 0000000000457ec9 [ 2055.548047] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000200 [ 2055.555304] RBP: 000000000073bf00 R08: 0000000020000180 R09: 0000000000000000 [ 2055.562558] R10: 0000000020000080 R11: 0000000000000246 R12: 00007ff96b3b56d4 [ 2055.569826] R13: 00000000004be2a0 R14: 00000000004ce600 R15: 00000000ffffffff [ 2055.583254] memory: usage 304968kB, limit 307200kB, failcnt 981 [ 2055.589646] net_ratelimit: 24 callbacks suppressed [ 2055.589654] protocol 88fb is buggy, dev hsr_slave_0 [ 2055.589731] protocol 88fb is buggy, dev hsr_slave_1 [ 2055.615469] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2055.623021] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2055.631545] Memory cgroup stats for /syz5: cache:204KB rss:142752KB rss_huge:63488KB shmem:64KB mapped_file:132KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:142648KB inactive_file:0KB active_file:0KB unevictable:0KB [ 2055.652933] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor5,pid=32351,uid=0 [ 2055.667663] Memory cgroup out of memory: Kill process 32351 (syz-executor5) score 1106 or sacrifice child [ 2055.677620] Killed process 32351 (syz-executor5) total-vm:70532kB, anon-rss:2208kB, file-rss:33736kB, shmem-rss:0kB [ 2055.837814] syz-executor5 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2055.847780] CPU: 0 PID: 17282 Comm: syz-executor5 Not tainted 5.0.0-rc2 #24 [ 2055.854881] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2055.864246] Call Trace: [ 2055.866837] dump_stack+0x1db/0x2d0 [ 2055.870475] ? dump_stack_print_info.cold+0x20/0x20 [ 2055.875500] ? check_preemption_disabled+0x48/0x290 [ 2055.880538] dump_header+0x1e6/0x116c [ 2055.884351] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2055.889116] ? lockdep_hardirqs_on+0x415/0x5d0 [ 2055.893708] ? retint_kernel+0x2d/0x2d [ 2055.897590] ? pagefault_out_of_memory+0x1a1/0x1a1 [ 2055.902509] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 2055.907957] ? ___ratelimit+0x37c/0x686 [ 2055.911957] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2055.916724] ? retint_kernel+0x2d/0x2d [ 2055.920611] ? _raw_spin_unlock_irqrestore+0x95/0xe0 [ 2055.925727] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 2055.930846] ? ___ratelimit+0xac/0x686 [ 2055.934742] ? idr_get_free+0xee0/0xee0 [ 2055.938739] oom_kill_process.cold+0x10/0x9d4 [ 2055.943230] ? retint_kernel+0x2d/0x2d [ 2055.947114] ? trace_hardirqs_on_caller+0xc0/0x310 [ 2055.952050] ? cgroup_procs_next+0x70/0x70 [ 2055.956291] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2055.961049] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 2055.966496] ? _raw_spin_unlock_irq+0x5e/0x90 [ 2055.971001] ? oom_badness+0xa50/0xa50 [ 2055.974899] ? oom_evaluate_task+0x540/0x540 [ 2055.979305] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2055.984050] ? retint_kernel+0x2d/0x2d [ 2055.987964] out_of_memory+0x885/0x1420 [ 2055.991954] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 2055.997058] ? oom_killer_disable+0x340/0x340 [ 2056.001552] ? lock_release+0x546/0xc40 [ 2056.005544] ? lock_acquire+0x1db/0x570 [ 2056.009533] mem_cgroup_out_of_memory+0x160/0x210 [ 2056.014367] ? do_raw_spin_unlock+0xa0/0x330 [ 2056.018768] ? memcg_memory_event+0x40/0x40 [ 2056.023077] ? do_raw_spin_trylock+0x270/0x270 [ 2056.027685] ? _raw_spin_unlock+0x2d/0x50 [ 2056.031848] try_charge+0xd44/0x19b0 [ 2056.035574] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2056.041115] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 2056.045959] ? rcu_read_unlock_special+0x380/0x380 [ 2056.050916] ? get_mem_cgroup_from_mm+0x1ea/0x420 [ 2056.055771] ? get_mem_cgroup_from_page+0x190/0x190 [ 2056.060801] ? rcu_read_lock_sched_held+0x110/0x130 [ 2056.065837] mem_cgroup_try_charge+0x43a/0xdb0 [ 2056.070428] ? mem_cgroup_protected+0xa10/0xa10 [ 2056.075117] ? mark_held_locks+0x100/0x100 [ 2056.079350] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2056.084889] ? check_preemption_disabled+0x48/0x290 [ 2056.089912] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 2056.095455] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 2056.100994] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 2056.105926] wp_page_copy+0x45a/0x1c30 [ 2056.109814] ? swp_swapcount+0x540/0x540 [ 2056.113916] ? pmd_pfn+0x1d0/0x1d0 [ 2056.117454] ? find_held_lock+0x35/0x120 [ 2056.121516] ? do_wp_page+0x70d/0x16b0 [ 2056.125423] ? kasan_check_read+0x11/0x20 [ 2056.129584] ? do_raw_spin_unlock+0xa0/0x330 [ 2056.133991] ? do_raw_spin_trylock+0x270/0x270 [ 2056.138563] ? __lock_acquire+0x572/0x4a30 [ 2056.142794] do_wp_page+0x715/0x16b0 [ 2056.146517] ? finish_mkwrite_fault+0x540/0x540 [ 2056.151189] ? kasan_check_read+0x11/0x20 [ 2056.155347] ? do_raw_spin_lock+0x156/0x360 [ 2056.159683] ? rwlock_bug.part.0+0x90/0x90 [ 2056.163916] ? pmd_devmap_trans_unstable+0x1d0/0x1d0 [ 2056.169034] __handle_mm_fault+0x2c8e/0x55a0 [ 2056.173474] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 2056.178316] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2056.183062] ? handle_mm_fault+0x3cc/0xc80 [ 2056.187317] ? lock_downgrade+0x910/0x910 [ 2056.191472] ? kasan_check_read+0x11/0x20 [ 2056.195626] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 2056.200912] ? rcu_read_unlock_special+0x380/0x380 [ 2056.205852] handle_mm_fault+0x4ec/0xc80 [ 2056.209927] ? __handle_mm_fault+0x55a0/0x55a0 [ 2056.214508] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2056.220029] ? vmacache_update+0x114/0x140 [ 2056.224274] __do_page_fault+0x5da/0xd60 [ 2056.228361] do_page_fault+0xe6/0x7d8 [ 2056.232166] ? trace_hardirqs_on_caller+0xc0/0x310 [ 2056.237111] ? vmalloc_sync_all+0x30/0x30 [ 2056.241246] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 2056.246704] ? syscall_return_slowpath+0x5f0/0x5f0 [ 2056.251644] ? prepare_exit_to_usermode+0x232/0x3b0 [ 2056.256685] ? page_fault+0x8/0x30 [ 2056.260216] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2056.265062] ? page_fault+0x8/0x30 [ 2056.268606] page_fault+0x1e/0x30 [ 2056.272060] RIP: 0033:0x40438e [ 2056.275257] Code: 48 8b 55 40 48 8b 75 38 48 8b 7d 30 ff 75 70 ff 75 68 ff 75 60 4c 8b 4d 58 4c 8b 45 50 ff d0 48 83 c4 20 48 89 c3 48 83 fb ff <48> 89 5d 78 41 8b 04 24 0f 85 d4 00 00 00 85 c0 0f 85 cc 00 00 00 [ 2056.294150] RSP: 002b:00007ff96b3b4c90 EFLAGS: 00010217 [ 2056.299504] RAX: 0000000000000000 RBX: 0000000000003ec9 RCX: 0000000000457ec9 [ 2056.306775] RDX: 0000000000404346 RSI: 0000000020000180 RDI: 0000000000000200 [ 2056.314039] RBP: 000000000073bf00 R08: 0000000020000180 R09: 0000000000000000 [ 2056.321311] R10: 0000000020000080 R11: 0000000000000246 R12: 00007ff96b3b56d4 [ 2056.328579] R13: 00000000004be2a0 R14: 00000000004ce600 R15: 00000000ffffffff [ 2056.342905] memory: usage 302484kB, limit 307200kB, failcnt 981 [ 2056.355261] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2056.362148] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2056.368637] Memory cgroup stats for /syz5: cache:204KB rss:140612KB rss_huge:61440KB shmem:64KB mapped_file:132KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:140496KB inactive_file:0KB active_file:0KB unevictable:0KB [ 2056.390150] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor5,pid=32460,uid=0 [ 2056.405301] Memory cgroup out of memory: Kill process 32460 (syz-executor5) score 1106 or sacrifice child [ 2056.415557] Killed process 32460 (syz-executor5) total-vm:70532kB, anon-rss:2208kB, file-rss:33736kB, shmem-rss:0kB 16:19:16 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000500)='cgroup.procs\x00', 0x2, 0x0) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x5}, 0x2c) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x8, 0x4, 0x100000001, 0x0, r2}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r3, &(0x7f00000002c0)}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x200, &(0x7f0000000180), 0x0, &(0x7f0000000080), &(0x7f0000000180)) mknod(&(0x7f0000f80000)='./file0\x00', 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$bt_hidp(0x1f, 0x3, 0x6) write$FUSE_BMAP(r4, &(0x7f00000000c0)={0x18, 0x0, 0x1}, 0x18) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') getsockopt$IP_VS_SO_GET_DESTS(r5, 0x0, 0x484, &(0x7f00000002c0)=""/183, &(0x7f00000003c0)=0xb7) ptrace(0x10, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000080)=0x4c000000, 0x10a000d50) 16:19:16 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000500)='cgroup.procs\x00', 0x2, 0x0) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0x1) r3 = syz_open_dev$vcsa(&(0x7f00000001c0)='/dev/vcsa#\x00', 0x0, 0x200) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000400)={{{@in6=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@ipv4={[], [], @loopback}}}, &(0x7f0000000240)=0xe8) stat(&(0x7f0000000280)='./file0\x00', &(0x7f0000001540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_DIRENTPLUS(r3, &(0x7f00000015c0)={0xa8, 0x0, 0x7, [{{0x0, 0x3, 0xfff, 0x8, 0x3, 0x1, {0x3, 0x8cd, 0x0, 0x1, 0x2, 0x1, 0x6, 0xfffffffffffffffc, 0x8001, 0x8, 0x1000, r4, r5, 0x3ff, 0x2}}, {0x4, 0x9, 0x0, 0x2}}]}, 0xa8) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x5}, 0x2c) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x8, 0x4, 0x100000001, 0x0, r6}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r7, &(0x7f00000002c0)}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x200, &(0x7f0000000180), 0x0, &(0x7f0000000080), &(0x7f0000000180)) mknod(&(0x7f0000f80000)='./file0\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$bt_hidp(0x1f, 0x3, 0x6) r8 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000002c0)=""/183, &(0x7f00000003c0)=0xb7) read$FUSE(r8, &(0x7f0000000540), 0x1000) ioctl$SNDRV_TIMER_IOCTL_TREAD(r8, 0x40045402, &(0x7f0000001680)=0x1) ptrace(0x10, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r8, 0xc008ae05, &(0x7f00000000c0)=""/207) sendfile(r6, r1, &(0x7f0000000080)=0x4c000000, 0x10a000d50) 16:19:16 executing program 0: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$SIOCGETNODEID(r0, 0x89e1, &(0x7f0000000040)={0x2}) ioctl$KVM_GET_REGS(r0, 0x8090ae81, &(0x7f0000000080)) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000000)={{0x3, 0x0, 0x0, 0x0, 0x1ff}}) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) 16:19:16 executing program 1: r0 = syz_open_dev$sndtimer(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r2, 0x1, 0x7, &(0x7f0000ac5000), 0x4) sendmmsg$unix(r2, &(0x7f00000bd000), 0x80, 0x0) r3 = memfd_create(&(0x7f0000000080)='dev ', 0x3) write(r3, &(0x7f0000000040)="16", 0x1) sendfile(r2, r3, &(0x7f0000000000), 0xffff) fcntl$addseals(r3, 0x409, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8}) r4 = gettid() dup(r1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r4, 0x1004000000016) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$IMCLEAR_L2(r5, 0x80044946, &(0x7f0000000040)=0x7f) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}}) 16:19:16 executing program 4: socketpair$unix(0x1, 0x8000100000000001, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'eql\x00\x00\xdf\xdd\x94D\x8f\x15\xcf!\x00', 0xec38ed91f1c74952}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000080)={'eql\x00\x00\xa1\xa9[\x00e?\x00\x00\x03\xca\x00', @ifru_mtu=0x1}) 16:19:16 executing program 3: ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x83, &(0x7f0000000080)={'f%lter\x00', 0x0, 0x0, 0x0, [], 0x0, 0x0, 0x0}, &(0x7f0000000140)=0x78) 16:19:16 executing program 0: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x50000, 0x80) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) write$USERIO_CMD_REGISTER(r1, &(0x7f00000000c0)={0x0, 0x3ff}, 0x2) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x3}}) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x802, 0x0) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f0000000140)={0x0, 0x1f, 0x2, 0x1, 0x9, [{0xffff, 0xffffffffffff72a9, 0x8, 0x0, 0x0, 0x200}, {0x3, 0x6, 0xfffffffffffffff9, 0x0, 0x0, 0x4}, {0x0, 0x40, 0xfffffffeffffffff, 0x0, 0x0, 0x800}, {0x1, 0x3, 0x8, 0x0, 0x0, 0x202}, {0x486, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x1100}, {0x200, 0x3, 0xbfd, 0x0, 0x0, 0x2}, {0x80, 0x7fffffff, 0x4, 0x0, 0x0, 0x1000}, {0x0, 0x59c, 0x1000, 0x0, 0x0, 0x301}, {0xffffffffffff975d, 0x3b7, 0x0, 0x0, 0x0, 0x8}]}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) [ 2056.725247] protocol 88fb is buggy, dev hsr_slave_0 [ 2056.730692] protocol 88fb is buggy, dev hsr_slave_1 [ 2056.736414] protocol 88fb is buggy, dev hsr_slave_0 [ 2056.741835] protocol 88fb is buggy, dev hsr_slave_1 [ 2056.748014] protocol 88fb is buggy, dev hsr_slave_0 [ 2056.753601] protocol 88fb is buggy, dev hsr_slave_1 16:19:16 executing program 0: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) sysfs$1(0x1, &(0x7f0000000040)='posix_acl_accessGPLvmnet0\x00') ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) [ 2056.805100] protocol 88fb is buggy, dev hsr_slave_0 [ 2056.810275] protocol 88fb is buggy, dev hsr_slave_1 16:19:16 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000500)='cgroup.procs\x00', 0x2, 0x0) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x5}, 0x2c) setsockopt$IP_VS_SO_SET_ZERO(r1, 0x0, 0x48f, &(0x7f00000000c0)={0x0, @rand_addr=0x7e, 0x4e23, 0x4, 'fo\x00', 0x1, 0x7, 0x18}, 0x2c) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x8, 0x4, 0x100000001, 0x0, r2}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r3, &(0x7f00000002c0)}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x200, &(0x7f0000000180), 0x0, &(0x7f0000000080), &(0x7f0000000180)) mknod(&(0x7f0000f80000)='./file0\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$bt_hidp(0x1f, 0x3, 0x6) syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000002c0)=""/183, &(0x7f00000003c0)=0xb7) ptrace(0x10, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000080)=0x4c000000, 0x10a000d50) 16:19:16 executing program 0: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) r1 = accept4(0xffffffffffffffff, &(0x7f0000000140)=@pptp={0x18, 0x2, {0x0, @broadcast}}, &(0x7f0000000040)=0x80, 0x80800) getsockopt$XDP_STATISTICS(r1, 0x11b, 0x7, &(0x7f0000000380), &(0x7f00000003c0)=0x18) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x10000, 0x0) sendmsg$IPVS_CMD_GET_INFO(r1, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200040}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0xc8, r2, 0xa00, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x20, 0x2, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@local}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x80}]}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x30}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x3e}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'fo\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x9, 0xc}}, @IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x800}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4008000}, 0x800) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0xffffffffffffffff, 0x0, 0x0, 0x3, 0x800000}}) pipe2(&(0x7f0000000000), 0x4000) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) openat$zero(0xffffffffffffff9c, &(0x7f0000000440)='/dev/zero\x00', 0x6be1c0ce8321f780, 0x0) [ 2056.992533] IPVS: ftp: loaded support on port[0] = 21 16:19:16 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000500)='cgroup.procs\x00', 0x2, 0x0) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x5}, 0x2c) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x8, 0x4, 0x100000001, 0x0, r2}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r3, &(0x7f00000002c0)}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x200, &(0x7f0000000180), 0x0, &(0x7f0000000080), &(0x7f0000000180)) mknod(&(0x7f0000f80000)='./file0\x00', 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$bt_hidp(0x1f, 0x3, 0x6) write$FUSE_BMAP(r4, &(0x7f00000000c0)={0x18, 0x0, 0x1}, 0x18) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') getsockopt$IP_VS_SO_GET_DESTS(r5, 0x0, 0x484, &(0x7f00000002c0)=""/183, &(0x7f00000003c0)=0xb7) ptrace(0x10, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000080)=0x4c000000, 0x10a000d50) 16:19:16 executing program 0: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) r1 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x3, 0x2) ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000080)={0x3, 0xc, 0x4}) ioctl$BLKRAGET(r1, 0x1263, &(0x7f0000000140)) 16:19:16 executing program 0: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000000c0)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000002, 0x94811, r0, 0x0) 16:19:17 executing program 1: r0 = syz_open_dev$sndtimer(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r2, 0x1, 0x7, &(0x7f0000ac5000), 0x4) sendmmsg$unix(r2, &(0x7f00000bd000), 0x80, 0x0) r3 = memfd_create(&(0x7f0000000080)='dev ', 0x3) write(r3, &(0x7f0000000040)="16", 0x1) sendfile(r2, r3, &(0x7f0000000000), 0xffff) fcntl$addseals(r3, 0x409, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8}) r4 = gettid() dup(r1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r4, 0x1004000000016) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$IMCLEAR_L2(r5, 0x80044946, &(0x7f0000000040)=0x7f) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}}) 16:19:17 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000500)='cgroup.procs\x00', 0x2, 0x0) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x5}, 0x2c) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x8, 0x4, 0x100000001, 0x0, r2}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r3, &(0x7f00000002c0)}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x200, &(0x7f0000000180), 0x0, &(0x7f0000000080), &(0x7f0000000180)) mknod(&(0x7f0000f80000)='./file0\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$bt_hidp(0x1f, 0x3, 0x6) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000240)={r4, 0x10, &(0x7f00000001c0)={&(0x7f0000000540)=""/225, 0x133, 0xffffffffffffffff}}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000380)={r4, 0x10, &(0x7f0000000280)={&(0x7f00000000c0)=""/209, 0xd1, r5}}, 0x10) getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000002c0)=""/183, &(0x7f00000003c0)=0xb7) ptrace(0x10, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_UNALIGN(0x6, 0x0) sendfile(r1, r1, &(0x7f0000000080)=0x4c000000, 0x10a000d50) 16:19:17 executing program 0: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x3}}) r1 = socket$bt_rfcomm(0x1f, 0x3, 0x3) getsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 16:19:17 executing program 4: socketpair$unix(0x1, 0x8000100000000001, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'eql\x00\x00\xdf\xdd\x94D\x8f\x15\xcf!\x00', 0xec38ed91f1c74952}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000080)={'eql\x00\x00\xa1\xa9[\x03r?\x00\x00\x03\xca\x00', @ifru_mtu=0x1}) [ 2057.521092] device bridge_slave_1 left promiscuous mode [ 2057.529720] bridge0: port 2(bridge_slave_1) entered disabled state [ 2057.563584] device bridge_slave_0 left promiscuous mode [ 2057.582487] bridge0: port 1(bridge_slave_0) entered disabled state [ 2057.762383] device hsr_slave_1 left promiscuous mode [ 2057.789991] device hsr_slave_0 left promiscuous mode [ 2057.812062] team0 (unregistering): Port device team_slave_1 removed [ 2057.852189] team0 (unregistering): Port device team_slave_0 removed [ 2057.872771] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 2057.889810] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 2057.947662] bond0 (unregistering): Released all slaves [ 2058.281133] chnl_net:caif_netlink_parms(): no params data found [ 2058.328068] bridge0: port 1(bridge_slave_0) entered blocking state [ 2058.334724] bridge0: port 1(bridge_slave_0) entered disabled state [ 2058.342371] device bridge_slave_0 entered promiscuous mode [ 2058.351595] bridge0: port 2(bridge_slave_1) entered blocking state [ 2058.358398] bridge0: port 2(bridge_slave_1) entered disabled state [ 2058.366149] device bridge_slave_1 entered promiscuous mode [ 2058.389456] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 2058.399818] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 2058.437954] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 2058.445920] team0: Port device team_slave_0 added [ 2058.451608] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 2058.459275] team0: Port device team_slave_1 added [ 2058.464675] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 2058.472523] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 2058.498832] device hsr_slave_0 entered promiscuous mode [ 2058.504691] device hsr_slave_1 entered promiscuous mode [ 2058.511282] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 2058.518471] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 2058.536848] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 2058.589302] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2058.609955] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 2058.619702] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 2058.628051] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2058.635756] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2058.645433] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 2058.651524] 8021q: adding VLAN 0 to HW filter on device team0 [ 2058.661818] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 2058.669008] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2058.677467] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2058.686167] bridge0: port 1(bridge_slave_0) entered blocking state [ 2058.692531] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2058.702029] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 2058.710355] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2058.726405] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2058.734259] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2058.750619] bridge0: port 2(bridge_slave_1) entered blocking state [ 2058.757023] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2058.775147] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 2058.784410] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 2058.801360] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2058.820677] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2058.846696] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2058.854637] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2058.862891] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2058.870808] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2058.880661] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 2058.887348] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2058.894561] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2058.910760] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 2058.928051] 8021q: adding VLAN 0 to HW filter on device batadv0 16:19:18 executing program 3: ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x83, &(0x7f0000000080)={'f%lter\x00', 0x0, 0x0, 0x0, [], 0x0, 0x0, 0x0}, &(0x7f0000000140)=0x78) 16:19:18 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000500)='cgroup.procs\x00', 0x2, 0x0) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x5}, 0x2c) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x8, 0x4, 0x100000001, 0x0, r2}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r3, &(0x7f00000002c0)}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000f80000)='./file0\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$bt_hidp(0x1f, 0x3, 0x6) syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000002c0)=""/183, &(0x7f00000003c0)=0xb7) ptrace(0x10, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000080)=0x4c000000, 0x10a000d50) 16:19:18 executing program 0: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x3}}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180)='/dev/zero\x00', 0x305001, 0x0) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f00000001c0)={[{0x1, 0x400, 0x6, 0x6, 0x8, 0x6, 0x7, 0x2, 0x8, 0x80000001, 0x8000000000000000, 0x200, 0x7fffffff}, {0x25, 0x9, 0x2, 0x10001, 0x2, 0x0, 0x2, 0x401, 0x7, 0x8, 0x5, 0x7, 0x9}, {0xb73, 0x3, 0xfffffffffffffc00, 0x9, 0x15, 0x360659df, 0x6, 0x10000, 0x2, 0x3, 0x200, 0x400, 0x6}], 0x8}) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x101000, 0x0) ioctl$RNDZAPENTCNT(r2, 0x5204, &(0x7f0000000140)=0x148a) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) r3 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4, 0x2000) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000080)=@req={0x6, 0x8, 0x1624d196, 0x7e}, 0x10) 16:19:18 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000500)='cgroup.procs\x00', 0x2, 0x0) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x5}, 0x2c) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x8, 0x4, 0x100000001, 0x0, r2}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r3, &(0x7f00000002c0)}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x200, &(0x7f0000000180), 0x0, &(0x7f0000000080), &(0x7f0000000180)) mknod(&(0x7f0000f80000)='./file0\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$bt_hidp(0x1f, 0x3, 0x6) syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000002c0)=""/183, &(0x7f00000003c0)=0xb7) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) ptrace(0x10, r4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000080)=0x4c000000, 0x10a000d50) 16:19:18 executing program 1: r0 = syz_open_dev$sndtimer(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r2, 0x1, 0x7, &(0x7f0000ac5000), 0x4) sendmmsg$unix(r2, &(0x7f00000bd000), 0x80, 0x0) r3 = memfd_create(&(0x7f0000000080)='dev ', 0x3) write(r3, &(0x7f0000000040)="16", 0x1) sendfile(r2, r3, &(0x7f0000000000), 0xffff) fcntl$addseals(r3, 0x409, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8}) r4 = gettid() dup(r1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r4, 0x1004000000016) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$IMCLEAR_L2(r5, 0x80044946, &(0x7f0000000040)=0x7f) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}}) 16:19:18 executing program 4: socketpair$unix(0x1, 0x8000100000000001, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'eql\x00\x00\xdf\xdd\x94D\x8f\x15\xcf!\x00', 0xec38ed91f1c74952}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000080)={'eql\x00\x00\xa1\xa9[\x03w?\x00\x00\x03\xca\x00', @ifru_mtu=0x1}) 16:19:18 executing program 3: ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x83, &(0x7f0000000080)={'f%lter\x00', 0x0, 0x0, 0x0, [], 0x0, 0x0, 0x0}, &(0x7f0000000140)=0x78) 16:19:18 executing program 0: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000300)) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) r2 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x5118c2) ioctl$sock_inet_tcp_SIOCATMARK(r2, 0x8905, &(0x7f0000000080)) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000180)={{{@in6=@loopback, @in=@initdev}}, {{@in6=@initdev}}}, &(0x7f0000000280)=0xe8) 16:19:18 executing program 3: ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x83, &(0x7f0000000080)={'f%lter\x00', 0x0, 0x0, 0x0, [], 0x0, 0x0, 0x0}, &(0x7f0000000140)=0x200000f8) 16:19:18 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000500)='cgroup.procs\x00', 0x2, 0x0) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x5}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x8, 0x4, 0x100000001, 0x0, r2}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r2, &(0x7f0000000140)}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x200, &(0x7f0000000180), 0x0, &(0x7f0000000080), &(0x7f0000000180)) mknod(&(0x7f0000f80000)='./file0\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$bt_hidp(0x1f, 0x3, 0x6) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000002c0)=""/183, &(0x7f00000003c0)=0xb7) ptrace(0x10, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000080)=0x4c000000, 0x10a000d50) ioctl$PPPIOCSMRU(r4, 0x40047452, &(0x7f00000000c0)=0x6) socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_MAXSEG(r4, 0x84, 0xd, &(0x7f0000000100)=@assoc_value={0x0, 0x6}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f0000000400)={r5, @in={{0x2, 0x4e23, @rand_addr=0x5}}, 0x6a, 0x0, 0x5, 0x6, 0x1}, &(0x7f0000000180)=0x98) 16:19:19 executing program 0: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x20) 16:19:19 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000500)='cgroup.procs\x00', 0x2, 0x0) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x5}, 0x2c) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x8, 0x4, 0x100000001, 0x0, r2}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r3, &(0x7f00000002c0)}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000f80000)='./file0\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$bt_hidp(0x1f, 0x3, 0x6) syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000002c0)=""/183, &(0x7f00000003c0)=0xb7) ptrace(0x10, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000080)=0x4c000000, 0x10a000d50) 16:19:19 executing program 4: socketpair$unix(0x1, 0x8000100000000001, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'eql\x00\x00\xdf\xdd\x94D\x8f\x15\xcf!\x00', 0xec38ed91f1c74952}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000080)={'eql\x00\x00\xa1\xa9[\x03|?\x00\x00\x03\xca\x00', @ifru_mtu=0x1}) 16:19:19 executing program 3: ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet(0x2, 0xa, 0x7) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x83, &(0x7f0000000080)={'f%lter\x00', 0x0, 0x0, 0x0, [], 0x0, 0x0, 0x0}, &(0x7f0000000140)=0x78) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)={0x5, 0x4, 0x8, 0x9, 0x1f, 0xb316}) 16:19:19 executing program 0: r0 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x600000) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 16:19:19 executing program 3: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x80000, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet(0x2, 0x1, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x4, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS(r0, 0x80605414, &(0x7f0000000180)=""/209) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x83, &(0x7f0000000080)={'f%lter\x00', 0x0, 0x0, 0x0, [], 0x0, 0x0, 0x0}, &(0x7f0000000140)=0x78) 16:19:19 executing program 1: r0 = syz_open_dev$sndtimer(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r2, 0x1, 0x7, &(0x7f0000ac5000), 0x4) sendmmsg$unix(r2, &(0x7f00000bd000), 0x80, 0x0) r3 = memfd_create(&(0x7f0000000080)='dev ', 0x3) write(r3, &(0x7f0000000040)="16", 0x1) sendfile(r2, r3, &(0x7f0000000000), 0xffff) fcntl$addseals(r3, 0x409, 0xd) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8}) r4 = gettid() dup(r1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r4, 0x1004000000016) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$IMCLEAR_L2(r5, 0x80044946, &(0x7f0000000040)=0x7f) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}}) 16:19:19 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) ioctl$KVM_SET_DEBUGREGS(r0, 0x4080aea2, &(0x7f0000000140)={[0xf002, 0x3000, 0x2000, 0x4000], 0x8, 0x4, 0x814}) r1 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000003bc0)={0x0, 0x0}) recvmmsg(0xffffffffffffff9c, &(0x7f0000003a80)=[{{&(0x7f0000001980)=@pppoe={0x18, 0x0, {0x0, @remote}}, 0x80, &(0x7f0000001a80)=[{&(0x7f0000001a00)=""/122, 0x7a}], 0x1, &(0x7f0000001ac0)=""/28, 0x1c}}, {{&(0x7f0000001b00)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000001c80)=[{&(0x7f0000001b80)=""/241, 0xf1}], 0x1, &(0x7f0000001cc0)=""/226, 0xe2}, 0x100000000}, {{&(0x7f0000001dc0)=@un=@abs, 0x80, &(0x7f0000001f40)=[{&(0x7f0000001e40)=""/209, 0xd1}], 0x1, &(0x7f0000001f80)=""/132, 0x84}, 0xffffffffffffffff}, {{&(0x7f0000002040)=@in={0x2, 0x0, @empty}, 0x80, &(0x7f0000002400)=[{&(0x7f00000020c0)=""/95, 0x5f}, {&(0x7f0000002140)=""/22, 0x16}, {&(0x7f0000002180)=""/185, 0xb9}, {&(0x7f0000002240)=""/115, 0x73}, {&(0x7f00000022c0)=""/62, 0x3e}, {&(0x7f0000002300)=""/52, 0x34}, {&(0x7f0000002340)=""/103, 0x67}, {&(0x7f00000023c0)=""/52, 0x34}], 0x8, &(0x7f0000002480)=""/136, 0x88}, 0x5}, {{&(0x7f0000002540)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000003940)=[{&(0x7f00000025c0)=""/4096, 0x1000}, {&(0x7f00000035c0)=""/151, 0x97}, {&(0x7f0000003680)=""/159, 0x9f}, {&(0x7f0000003740)=""/96, 0x60}, {&(0x7f00000037c0)=""/169, 0xa9}, {&(0x7f0000003880)=""/184, 0xb8}], 0x6, &(0x7f00000039c0)=""/182, 0xb6}, 0x80000000}], 0x5, 0x12002, &(0x7f0000003c00)={r2, r3+30000000}) getsockopt$packet_buf(r4, 0x107, 0x2, &(0x7f0000003c40)=""/215, &(0x7f0000003d40)=0xd7) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000000)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) r5 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x6, 0x2000) write$P9_RCREATE(r5, &(0x7f00000001c0)={0x18, 0x73, 0x1, {{0x8, 0x3, 0x7}, 0xfffffffffffffffb}}, 0x18) fchmodat(r5, &(0x7f0000000080)='\x00', 0x40) 16:19:19 executing program 3: ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet(0x2, 0x1, 0x5) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x83, &(0x7f0000000080)={'f%lter\x00', 0x0, 0x0, 0x0, [], 0x0, 0x0, 0x0}, &(0x7f0000000140)=0x78) 16:19:19 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000500)='cgroup.procs\x00', 0x2, 0x0) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x5}, 0x2c) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x8, 0x4, 0x100000001, 0x0, r2}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r3, &(0x7f00000002c0)}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000f80000)='./file0\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$bt_hidp(0x1f, 0x3, 0x6) syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000002c0)=""/183, &(0x7f00000003c0)=0xb7) ptrace(0x10, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000080)=0x4c000000, 0x10a000d50) 16:19:19 executing program 0: r0 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x40000) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x3}}) r1 = syz_open_dev$amidi(&(0x7f0000000140)='/dev/amidi#\x00', 0x100, 0x20800) perf_event_open$cgroup(&(0x7f00000000c0)={0x3, 0x70, 0xfaf, 0x8ec, 0x9, 0x3, 0x0, 0x42, 0x83, 0x1, 0x1f, 0x100, 0x0, 0xce, 0x7, 0x2, 0x1, 0x1f, 0x12a, 0x81, 0x5, 0x1, 0x5a, 0x0, 0xfffffffffffffffd, 0x5, 0x2e, 0x2, 0x3, 0x2, 0x101, 0xffffffffffff0000, 0x2c6, 0x3, 0x80000001, 0x1, 0x0, 0x9, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000080), 0x8}, 0x1001, 0x9, 0x1, 0xf, 0xffffffffffff0001, 0x3, 0xfffffffffffffff8}, r1, 0xf, r1, 0x1) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r1, 0xc040564a, &(0x7f0000000180)={0xcf, 0x0, 0x3016, 0x0, 0x3, 0x1, 0x8}) ioctl$TUNDETACHFILTER(r1, 0x401054d6, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 16:19:19 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000500)='cgroup.procs\x00', 0x2, 0x0) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x5}, 0x2c) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x8, 0x4, 0x100000001, 0x0, r2}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r3, &(0x7f00000002c0)}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x200, &(0x7f0000000180), 0x0, &(0x7f0000000080), &(0x7f0000000180)) mknod(&(0x7f0000f80000)='./file0\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x8000, 0x0) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x200000, 0x0) ioctl$TUNSETFILTEREBPF(r4, 0x800454e1, &(0x7f0000000140)=r5) socket$bt_hidp(0x1f, 0x3, 0x6) syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000002c0)=""/183, &(0x7f00000003c0)=0xb7) ptrace(0x10, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000080)=0x4c000000, 0x10a000d50) 16:19:19 executing program 3: ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0xffffffffffffffff, 0x40) futimesat(r0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={{}, {0x0, 0x7530}}) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000200)=0x3, 0x4) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x5, 0x48080) bind$pptp(r1, &(0x7f0000000040)={0x18, 0x2, {0x0, @multicast1}}, 0x1e) r2 = socket$inet(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r2, 0x0, 0x83, &(0x7f0000000080)={'f%lter\x00', 0x0, 0x0, 0x0, [], 0x0, 0x0, 0x0}, &(0x7f0000000140)=0x78) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000240)="35bb3021486f3af665007c905abc9d5171911eacdc8d3a7ce159818ced2710817de1fbe9fa68e5937629bfc9cfc88fffd91360e6a8965012b2f0738b94", 0x3d) 16:19:19 executing program 4: socketpair$unix(0x1, 0x8000100000000001, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'eql\x00\x00\xdf\xdd\x94D\x8f\x15\xcf!\x00', 0xec38ed91f1c74952}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000080)={'eql\x00\x00\xa1\xa9[\x03\x80?\x00\x00\x03\xca\x00', @ifru_mtu=0x1}) 16:19:19 executing program 3: ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, 0x0) r0 = syz_open_dev$admmidi(&(0x7f0000000200)='/dev/admmidi#\x00', 0x7, 0x90383) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffff9c, 0x84, 0x6c, &(0x7f00000000c0)={0x0, 0x22, "12fc7125a62d6a599c922504d2278b50e6260405195b989125b818c7a99d0f9984e6"}, &(0x7f0000000100)=0x2a) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000140)={r1, 0x75e}, &(0x7f00000001c0)=0x8) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r2, 0x0, 0x83, &(0x7f0000000000)={'filter\x00', 0x0, 0x0, 0x92, [], 0x0, 0x0, 0x0}, &(0x7f0000000180)=0x78) 16:19:19 executing program 0: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000040)=0x1) 16:19:20 executing program 0: r0 = syz_open_dev$mouse(&(0x7f0000000140)='/dev/input/mouse#\x00', 0x8ea, 0x20000) write$P9_RLERROR(r0, &(0x7f0000000180)={0x18, 0x7, 0x1, {0xf, '/dev/snd/timer\x00'}}, 0x18) r1 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000000)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) write$smack_current(r2, &(0x7f00000000c0)='/dev/snd/timer\x00', 0xf) r3 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x80000) pwrite64(r3, &(0x7f00000001c0)="894f69f75926800566360e5815b0f15e15a168bc2e6cdb801b8971b89b107d36957afa00a2c7434ec1602efa4d5efb3ca9acf9f0aa9854159f224957637219e4486241377c470c70496db04e4b2652c8c3f2ae55028a68bb3a0a4cf44a2322908d20c19756d356e27acb52bfc2efff108d92635f7924073ff30f6210da4f45dc50937db90a01c4c3adec346c9be1aaa11e855b9cc96a8fa4e38c5cea7ee95e45a2f2dd2fd0262ae5b189f444fe5b0742011c8ddacfdae8c3fd6a53706538783e54983e22cdcb", 0xc6, 0x0) 16:19:20 executing program 3: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x400000, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, 0x0) socket$xdp(0x2c, 0x3, 0x0) clone(0x40000004000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x83, &(0x7f0000000080)={'f%lter\x00', 0x0, 0x0, 0x0, [], 0x0, 0x0, 0x0}, &(0x7f0000000140)=0x78) ioctl$KVM_S390_INTERRUPT_CPU(r0, 0x4010ae94, &(0x7f0000000040)={0x3f, 0x3, 0xf1}) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x0, 0x100d}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0xa, 0x4, 0xfa00, {r2}}, 0xc) 16:19:20 executing program 0: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x3}}) r1 = accept$alg(0xffffffffffffffff, 0x0, 0x0) sendmsg(r1, &(0x7f00000015c0)={&(0x7f0000000040)=@nl=@kern={0x10, 0x0, 0x0, 0x8200000}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="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", 0x1000}, {&(0x7f0000001140)="bf73e89c145263a78721e930e67fa9922d791390f3198bb9c233f1b9acb8d6f28cf676c2b2af8339b50b3885ffb121e89d692a52e99dd5e62e91291d5bb13f7327587329e222349225860807e19a2372ecc1", 0x52}, {&(0x7f00000011c0)="1750310f34a99ae352828a2ff74c4e75fe7d6ab7a163bcc3711030896566050c4097b383b81678a33daba918902900c1d2f3088763b90a9875fe55749539e080551a45e6bc3356d4e629f06f47ab069f7ad18abe44a236a1ecea83f29d5599d6d76bec346dfcde922179efcd0b1b7c283be22010d02abcc7cdc3ccd2a1da557d0cf0f0660ad71d72bf74e2685a5d61a761843ac51bd3bc760a109dbbe476438978a05bd69615999816", 0xa9}, {&(0x7f0000001280)="21dc103da4ba7215dcf13988079cadafa971406cb25a418547d44a0791e01d52994636b7bea80fc8ec9890ea226348c42004bc48db6ab63fc410d0fbc66466c9275c65cc8ed79e37d5b338b36243514b55b1df8b4f942c32071956ad044195425d7c29e0d6d301ae4d6b5dcd73fa66317b7879cb584b8c24b4f1fb49e16608b9684f5f3bc11915805427baf5822e8e0c0379d79a956e62de47b4fddcde50f6ef99217da7fcc0b08c9d787476158af8e470866521d2dedff307f00877d7af3bc9b8705847eca778e8c97554", 0xcb}], 0x4, &(0x7f0000001380)=[{0x108, 0x104, 0x8000, "4b9df7d96421c54eaa80708b5d98d469354dfb37c7a830c8a062635b15608f71dd039f2b33f486ba2e91bad83dcf34b15242e773d44a46084fde62b3a9846c44ee3592942a09e0a9b236d8bc731763276dfc9b4b06d12e21fe086e09ec17ea1201bc07cd9e14ed9685f09a9c189e0fa0a1f4b1fe1cd59e7b779060a1b22c9e917bf74339b403c434f1c632eff71c4e1b3800d656966f0e55ed70426b9095349f071715a465865da83d2b294e9100985c3af1ad6ac90472e4ba39fc11a748a7aa71836b35f655e7802c5cfacf2793e9e74f9697ff513cb8cb22ca95f72ed0e436385bc6f8a0b9f030befb649f3c968057c4b37a8707"}, {0x30, 0xff, 0x48e2, "917404920ed27b9c69cf2b16fa13ffe413f52fd8b7ff2f2ad6"}, {0x48, 0x117, 0x6, "f0dbcf40dd35e5d3a532a87eef89ae2691dc54056825c5713c318fe5636063a2556284771a44d4b9549700b5025661fcabbbff2f42c8ad"}, {0xb8, 0x13b, 0x5, "6af344b232bece77c6186a5af863da0f683bf8ef34253a3a0a78dde7f77a8cb4341a14c70890cb04ffdfe763ad35755d798c317c6322664091b674e908558ca52feb7b5882cd30f13a78ed29a6626486079304d0c5a82d36b712d0932bcf4a87c7d4afdf1d5be324e6af8641ab9960b8ac8efc5a9b023dfc9ad995939a35f503a168f9dc1e4f9305cfc05fd13568a98a53af2b614b71530d95e190c1a0f08ff93eb1f4207e58"}], 0x238}, 0x20040050) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000001600)='/dev/sequencer2\x00', 0x400000, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2f, &(0x7f0000001640)={0x0, {{0xa, 0x4e23, 0x8, @loopback}}, {{0xa, 0x4e24, 0xd7a, @local, 0xfffffffffffffffe}}}, 0x108) 16:19:20 executing program 5: r0 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x7fffffff, 0x92000) perf_event_open(0x0, 0x0, 0x0, r0, 0x1) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x83, &(0x7f0000000080)={'f%lter\x00', 0x0, 0x0, 0x0, [], 0x0, 0x0, 0x0}, &(0x7f0000000140)=0x78) 16:19:20 executing program 4: socketpair$unix(0x1, 0x8000100000000001, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'eql\x00\x00\xdf\xdd\x94D\x8f\x15\xcf!\x00', 0xec38ed91f1c74952}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000080)={'eql\x00\x00\xa1\xa9[\x03\x85?\x00\x00\x03\xca\x00', @ifru_mtu=0x1}) 16:19:20 executing program 1: r0 = syz_open_dev$sndtimer(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r2, 0x1, 0x7, &(0x7f0000ac5000), 0x4) sendmmsg$unix(r2, &(0x7f00000bd000), 0x80, 0x0) r3 = memfd_create(&(0x7f0000000080)='dev ', 0x3) write(r3, &(0x7f0000000040)="16", 0x1) sendfile(r2, r3, &(0x7f0000000000), 0xffff) fcntl$addseals(r3, 0x409, 0xd) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) r4 = gettid() dup(r1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r4, 0x1004000000016) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$IMCLEAR_L2(r5, 0x80044946, &(0x7f0000000040)=0x7f) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}}) 16:19:20 executing program 3: r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x83, &(0x7f0000000080)={'f%lter\x00', 0x0, 0x0, 0x0, [], 0x0, 0x0, 0x0}, &(0x7f0000000140)=0x78) [ 2060.885000] net_ratelimit: 18 callbacks suppressed [ 2060.885009] protocol 88fb is buggy, dev hsr_slave_0 [ 2060.895086] protocol 88fb is buggy, dev hsr_slave_1 [ 2060.900219] protocol 88fb is buggy, dev hsr_slave_0 [ 2060.905365] protocol 88fb is buggy, dev hsr_slave_1 [ 2060.910529] protocol 88fb is buggy, dev hsr_slave_0 [ 2060.915655] protocol 88fb is buggy, dev hsr_slave_1 16:19:20 executing program 5: socketpair$unix(0x1, 0x8000100000000001, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'eql\x00\x00\xdf\xdd\x94D\x8f\x15\xcf!\x00', 0xec38ed91f1c74952}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000080)={'eql\x00\x00\xa1\xa9[\x00\x16?\x00\x00\x03\xca\x00', @ifru_mtu=0x1}) 16:19:20 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000500)='cgroup.procs\x00', 0x2, 0x0) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/autofs\x00', 0xc0, 0x0) ioctl$KVM_GET_XCRS(r2, 0x8188aea6, &(0x7f0000000280)=ANY=[@ANYBLOB="01000000ffff0000f6000000c991cf3d0100000000000000"]) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x5}, 0x2c) ioctl$UI_SET_PROPBIT(r2, 0x4004556e, 0x5) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x8, 0x4, 0x100000001, 0x0, r3}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r4, &(0x7f00000002c0)}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_BT_SNDMTU(r2, 0x112, 0xc, &(0x7f0000000380)=0x3, 0x2) clone(0x200, &(0x7f0000000180), 0x0, &(0x7f0000000080), &(0x7f0000000180)) mknod(&(0x7f0000f80000)='./file0\x00', 0x0, 0x0) r5 = accept(0xffffffffffffff9c, &(0x7f00000000c0)=@nl=@proc, &(0x7f0000000140)=0x80) getsockopt$inet6_opts(r5, 0x29, 0x37, &(0x7f0000000400)=""/156, &(0x7f0000000180)=0x9c) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$bt_hidp(0x1f, 0x3, 0x6) syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000002c0)=""/183, &(0x7f00000003c0)=0xb7) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f00000001c0)=0x0) ptrace(0x10, r7) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000080)=0x4c000000, 0x10a000d50) 16:19:20 executing program 0: r0 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x2) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 16:19:20 executing program 0: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000040)) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vfio/vfio\x00', 0x80000, 0x0) ioctl$KDSIGACCEPT(r1, 0x4b4e, 0x22) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x3}}) uname(&(0x7f0000000080)=""/12) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 16:19:20 executing program 0: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 16:19:21 executing program 0: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm_plock\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000340)={0x7fff, 0x2, {0x0, 0x2, 0x3, 0x0, 0xffffffff80000000}}) write$binfmt_misc(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="73797a31a30b065dfaae1b02666a838937bfd88ddac02c34d4e86f0ba25faa287a004e71b852275e9ab24b769c5f92a7a3ab4a75d33b1a0e6538aca0a75611bbdf0214533148a3e987a5386f31fd2e7c2567a9aa3447bc7a7294d2d8e5b0c3bd866301775ee502a65b2a8c0ae6fa9bcbf0dc246c9115ea91c2e40900596b1bf0ae44"], 0x8c) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000000200)={0x5, 0xc63, 0x8, 0x0, 0x0, [{r0, 0x0, 0x6}, {r0, 0x0, 0x2}, {r1, 0x0, 0x100000000}, {r0}, {r1, 0x0, 0x8000}, {r0, 0x0, 0x3}, {r0, 0x0, 0x8}, {r0, 0x0, 0x1}]}) 16:19:21 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000500)='cgroup.procs\x00', 0x2, 0x0) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x5}, 0x2c) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x8, 0x4, 0x100000001, 0x0, r2}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r3, &(0x7f00000002c0)}, 0x10) r4 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x0, 0x2) ioctl$DRM_IOCTL_GET_MAP(r4, 0xc0286404, &(0x7f0000000180)={&(0x7f0000ffd000/0x2000)=nil, 0x4, 0x0, 0x51, &(0x7f0000ffe000/0x2000)=nil}) fcntl$F_GET_RW_HINT(r1, 0x40b, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x200, &(0x7f0000000180), 0x0, &(0x7f0000000080), &(0x7f0000000180)) mknod(&(0x7f0000f80000)='./file0\x00', 0x0, 0x0) prctl$PR_GET_TIMERSLACK(0x1e) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r4, 0x80045301, &(0x7f0000000280)) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r4, 0x4008af23, &(0x7f00000001c0)={0x3, 0x4e7}) socket$bt_hidp(0x1f, 0x3, 0x6) epoll_create1(0x3decc64c760731fe) r5 = syz_open_dev$audion(&(0x7f0000000140)='/dev/audio#\x00', 0x6636, 0x50000) ioctl$DRM_IOCTL_DROP_MASTER(r5, 0x641f) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000002c0)=""/183, &(0x7f00000003c0)=0xb7) ptrace(0x10, 0x0) write$P9_RRENAME(r6, &(0x7f00000000c0)={0x7, 0x15, 0x2}, 0x7) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r2, &(0x7f0000000240)=0x4c000000, 0x10a000d51) [ 2061.365158] protocol 88fb is buggy, dev hsr_slave_0 [ 2061.370270] protocol 88fb is buggy, dev hsr_slave_1 16:19:21 executing program 4: socketpair$unix(0x1, 0x8000100000000001, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'eql\x00\x00\xdf\xdd\x94D\x8f\x15\xcf!\x00', 0xec38ed91f1c74952}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000080)={'eql\x00\x00\xa1\xa9[\x02\x88?\x00\x00\x03\xca\x00', @ifru_mtu=0x1}) 16:19:21 executing program 0: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 16:19:21 executing program 1: r0 = syz_open_dev$sndtimer(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000ac5000), 0x4) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) r2 = memfd_create(&(0x7f0000000080)='dev ', 0x3) write(r2, &(0x7f0000000040)="16", 0x1) sendfile(r1, r2, &(0x7f0000000000), 0xffff) fcntl$addseals(r2, 0x409, 0xd) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) r3 = gettid() dup(0xffffffffffffffff) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1004000000016) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$IMCLEAR_L2(r4, 0x80044946, &(0x7f0000000040)=0x7f) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}}) 16:19:21 executing program 0: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x3}}) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x2c) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000300aaaaaaaaaa11aaffaaaaaaaa0180c2000002"]) prctl$PR_SET_FPEXC(0xc, 0x80) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000000c0)={r1, &(0x7f0000000080)="d1f0e2f161b9c517f6af14c2d3f3d3c0", &(0x7f0000000140)=""/122}, 0x18) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) [ 2061.764998] protocol 88fb is buggy, dev hsr_slave_0 [ 2061.770215] protocol 88fb is buggy, dev hsr_slave_1 16:19:22 executing program 3: ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) r0 = syz_open_dev$audion(&(0x7f00000005c0)='/dev/audio#\x00', 0x3, 0x400000) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000600)={0x7145, 0x5, 0x0, 0x6, 0x9, 0x1f, 0x5, 0xd1ee, 0x0}, &(0x7f0000000640)=0x20) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000900)={r1, 0x80000000, 0x200, 0x9}, &(0x7f00000006c0)=0x10) r3 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x10141) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000000940)=[0x5, 0x6]) write$UHID_CREATE(r0, &(0x7f0000000300)={0x0, 'syz0\x00', 'syz1\x00', 'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00', &(0x7f0000000200)=""/221, 0xdd, 0x6, 0x40, 0x5, 0x4, 0x40}, 0x120) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000440)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r3, &(0x7f0000000580)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0x94, r4, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x6}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x7}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x4}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x6}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x550}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x94}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) getsockopt$inet6_opts(r3, 0x29, 0x36, &(0x7f0000000180)=""/106, &(0x7f0000000040)=0x6a) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000700)={{{@in=@broadcast, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}}}, &(0x7f0000000800)=0xe8) setsockopt$inet6_IPV6_PKTINFO(r3, 0x29, 0x32, &(0x7f0000000840)={@rand_addr="0be42a30d5698257ae031247f496d874", r5}, 0x14) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, 0x0) clone(0x84040000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000880)={r2, 0x3}, &(0x7f00000008c0)=0x8) r6 = socket$inet(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r6, 0x0, 0x83, &(0x7f0000000080)={'f%lter\x00', 0x0, 0x0, 0x0, [], 0x0, 0x0, 0x0}, &(0x7f0000000140)=0x78) syz_open_dev$vcsa(&(0x7f0000000680)='/dev/vcsa#\x00', 0x9, 0x80000) 16:19:22 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000500)='cgroup.procs\x00', 0x2, 0x0) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x5}, 0x2c) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x8, 0x4, 0x100000001, 0x0, r2}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r3, &(0x7f00000002c0)}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x200, &(0x7f0000000180), 0x0, &(0x7f0000000080), &(0x7f0000000180)) mknod(&(0x7f0000f80000)='./file0\x00', 0x0, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x402000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c010000", @ANYRES16=r4, @ANYBLOB="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"], 0x14c}, 0x1, 0x0, 0x0, 0x20000800}, 0x800) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000380)='/proc/capi/capi20\x00', 0x1, 0x0) r5 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x5, 0x800) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r5, 0xc0505350, &(0x7f0000000400)={{0x59db, 0x5}, {0x8, 0x5}, 0x72, 0x4, 0x3f}) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0xa100, 0x0) write$cgroup_type(r6, &(0x7f0000000100)='threaded\x00', 0x9) socket$bt_hidp(0x1f, 0x3, 0x6) syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000002c0)=""/183, &(0x7f00000003c0)=0xb7) ptrace(0x10, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000080)=0x4c000000, 0x10a000d50) 16:19:22 executing program 1: r0 = syz_open_dev$sndtimer(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000ac5000), 0x4) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) r2 = memfd_create(&(0x7f0000000080)='dev ', 0x3) write(r2, &(0x7f0000000040)="16", 0x1) sendfile(r1, r2, &(0x7f0000000000), 0xffff) fcntl$addseals(r2, 0x409, 0xd) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) r3 = gettid() dup(0xffffffffffffffff) timer_create(0x0, 0x0, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1004000000016) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$IMCLEAR_L2(r4, 0x80044946, &(0x7f0000000040)=0x7f) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}}) 16:19:22 executing program 0: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) epoll_create(0x6) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 16:19:22 executing program 4: socketpair$unix(0x1, 0x8000100000000001, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'eql\x00\x00\xdf\xdd\x94D\x8f\x15\xcf!\x00', 0xec38ed91f1c74952}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000080)={'eql\x00\x00\xa1\xa9[\x02\x8c?\x00\x00\x03\xca\x00', @ifru_mtu=0x1}) 16:19:22 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000500)='cgroup.procs\x00', 0x2, 0x0) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x5}, 0x2c) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x8, 0x4, 0x100000001, 0x0, r2}, 0x2c) bpf$MAP_DELETE_ELEM(0x14, &(0x7f0000000200)={r3, &(0x7f00000002c0)}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x200, &(0x7f0000000180), 0x0, &(0x7f0000000080), &(0x7f0000000180)) mknod(&(0x7f0000f80000)='./file0\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$bt_hidp(0x1f, 0x3, 0x6) syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000002c0)=""/183, &(0x7f00000003c0)=0xb7) ptrace(0x10, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000080)=0x4c000000, 0x10a000d50) 16:19:22 executing program 0: r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 16:19:22 executing program 1: r0 = syz_open_dev$sndtimer(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000ac5000), 0x4) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) r2 = memfd_create(&(0x7f0000000080)='dev ', 0x3) write(r2, &(0x7f0000000040)="16", 0x1) sendfile(r1, r2, &(0x7f0000000000), 0xffff) fcntl$addseals(r2, 0x409, 0xd) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) r3 = gettid() dup(0xffffffffffffffff) timer_create(0x0, 0x0, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1004000000016) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$IMCLEAR_L2(r4, 0x80044946, &(0x7f0000000040)=0x7f) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}}) 16:19:22 executing program 0: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) acct(&(0x7f00000000c0)='./file0\x00') ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000200)={0x2, 0x0, 0xcb, 0x1, 0x8}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x228000, 0x0) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r1, 0x800443d2, &(0x7f0000000080)={0x9, &(0x7f0000000140)=[{}, {}, {}, {}, {}, {}, {}, {}, {}]}) 16:19:22 executing program 3: ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, 0x0) clone(0x3ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x83, &(0x7f0000000080)={'f%lter\x00', 0x0, 0x0, 0x0, [], 0x0, 0x0, 0x0}, &(0x7f0000000140)=0x78) 16:19:22 executing program 3: ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet(0x2, 0x1, 0x0) sendto$inet(r0, &(0x7f0000000180)="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", 0x1000, 0x8000, &(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x83, &(0x7f0000000080)={'f%lter\x00', 0x0, 0x0, 0x0, [], 0x0, 0x0, 0x0}, &(0x7f0000000140)=0x78) 16:19:22 executing program 0: r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x801) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 16:19:22 executing program 1: r0 = syz_open_dev$sndtimer(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000ac5000), 0x4) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) r2 = memfd_create(&(0x7f0000000080)='dev ', 0x3) write(r2, &(0x7f0000000040)="16", 0x1) sendfile(r1, r2, &(0x7f0000000000), 0xffff) fcntl$addseals(r2, 0x409, 0xd) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) r3 = gettid() dup(0xffffffffffffffff) timer_create(0x0, 0x0, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1004000000016) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$IMCLEAR_L2(r4, 0x80044946, &(0x7f0000000040)=0x7f) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}}) 16:19:23 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000500)='cgroup.procs\x00', 0x2, 0x0) r2 = shmget(0x2, 0x1000, 0x54000480, &(0x7f0000ffd000/0x1000)=nil) fstat(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000140), &(0x7f0000000180)=0x0, &(0x7f00000001c0)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@initdev, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@remote}}, &(0x7f0000000240)=0xe8) r6 = getgid() r7 = getpgrp(0x0) r8 = gettid() shmctl$IPC_SET(r2, 0x1, &(0x7f0000000540)={{0x0, r3, r4, r5, r6, 0x21, 0x5}, 0x81, 0x3f, 0x8, 0x8, r7, r8, 0xfffffffffffffffe}) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x5}, 0x2c) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x8, 0x4, 0x100000001, 0x0, r9}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r10, &(0x7f00000002c0)}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x200, &(0x7f0000000180), 0x0, &(0x7f0000000080), &(0x7f0000000180)) mknod(&(0x7f0000f80000)='./file0\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$bt_hidp(0x1f, 0x3, 0x6) syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000002c0)=""/183, &(0x7f00000003c0)=0xb7) ptrace(0x10, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000080)=0x4c000000, 0x10a000d50) 16:19:23 executing program 0: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000002c0)={{0x3}}) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='net/ip_tables_matches\x00') ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r1, 0xc040564a, &(0x7f0000000280)={0x2, 0x0, 0x300f, 0x2, 0xff, 0x0, 0x7}) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x40000, 0x0) ioctl$VT_OPENQRY(r2, 0x5600, &(0x7f0000000080)) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000000140)={0x0, 0x85, "e4d67aaf711e1971de1bba97f027dc08c9f0eefbb801b3319b0a6c610836b149d6735d853e495de3842234de2b29da2042fe10c91492c27f18077777f6afabd7d0c92c4b490b200ab9c9aa05806e246a85243d7b3ac5d480c59fa3770a7ea9038922f9edbce7c7582c9359a67dc0cdc9f8665c4b7ec847acb41ffb11567edeab4c6740f390"}, &(0x7f00000000c0)=0x8d) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r2, 0x84, 0x78, &(0x7f0000000200)=r3, 0x4) 16:19:23 executing program 3: ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, 0x0) clone(0x6102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet(0x2, 0x1, 0x0) ioctl$VIDIOC_ENCODER_CMD(r0, 0xc028564d, &(0x7f0000000000)={0x0, 0x0, [0x6, 0x6, 0x7ff, 0x81, 0x20000000000, 0x995, 0x8, 0x4]}) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x83, &(0x7f0000000080)={'f%lter\x00', 0x0, 0x0, 0x0, [], 0x0, 0x0, 0x0}, &(0x7f0000000140)=0x78) 16:19:23 executing program 4: socketpair$unix(0x1, 0x8000100000000001, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'eql\x00\x00\xdf\xdd\x94D\x8f\x15\xcf!\x00', 0xec38ed91f1c74952}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000080)={'eql\x00\x00\xa1\xa9[\x03\x8c?\x00\x00\x03\xca\x00', @ifru_mtu=0x1}) 16:19:23 executing program 1: r0 = syz_open_dev$sndtimer(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000ac5000), 0x4) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) r2 = memfd_create(&(0x7f0000000080)='dev ', 0x3) write(r2, &(0x7f0000000040)="16", 0x1) sendfile(r1, r2, &(0x7f0000000000), 0xffff) fcntl$addseals(r2, 0x409, 0xd) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) r3 = gettid() dup(0xffffffffffffffff) timer_create(0x0, &(0x7f0000044000), &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1004000000016) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$IMCLEAR_L2(r4, 0x80044946, &(0x7f0000000040)=0x7f) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}}) 16:19:23 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x80, 0x0) r3 = memfd_create(&(0x7f0000000080)='dev ', 0x3) write(r3, &(0x7f0000000040)="16", 0x1) sendfile(r2, r3, &(0x7f0000000000), 0xffff) fcntl$addseals(r3, 0x409, 0xd) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8}) r4 = gettid() dup(r1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r4, 0x1004000000016) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$IMCLEAR_L2(r5, 0x80044946, &(0x7f0000000040)=0x7f) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}}) 16:19:23 executing program 3: ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = dup(0xffffffffffffff9c) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, &(0x7f0000000b00)={'broute\x00', 0x0, 0x4, 0xd7, [], 0x6, &(0x7f0000000980)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000a00)=""/215}, &(0x7f0000000b80)=0x78) r1 = socket$inet(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x83, &(0x7f0000000080)={'f%lter\x00', 0x0, 0x0, 0x0, [], 0x0, 0x0, 0x0}, &(0x7f0000000140)=0x78) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f0000000200)={'filter\x00', 0x0, 0x3, 0x6d, [], 0x7, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f0000000180)=""/109}, &(0x7f0000000100)=0x78) 16:19:23 executing program 0: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x20042, 0x5) write$FUSE_NOTIFY_DELETE(r1, &(0x7f0000000080)={0x38, 0x6, 0x0, {0x2, 0x3, 0xf, 0x0, '/dev/snd/timer\x00'}}, 0x38) 16:19:23 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000500)='cgroup.procs\x00', 0x2, 0x0) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x5}, 0x2c) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x8, 0x4, 0x100000001, 0x0, r2}, 0x2c) bpf$MAP_DELETE_ELEM(0xe, &(0x7f0000000200)={r3, &(0x7f00000002c0)}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x200, &(0x7f0000000180), 0x0, &(0x7f0000000080), &(0x7f0000000180)) mknod(&(0x7f0000f80000)='./file0\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$bt_hidp(0x1f, 0x3, 0x6) syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000002c0)=""/183, &(0x7f00000003c0)=0xb7) ptrace(0x10, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000080)=0x4c000000, 0x10a000d50) 16:19:23 executing program 3: ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x83, &(0x7f0000000080)={'f%lter\x00', 0x0, 0x0, 0xffffffffffffff0e, [], 0x0, 0x0, 0x0}, &(0x7f0000000140)=0x78) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl$BLKIOOPT(r1, 0x1279, &(0x7f0000000040)) 16:19:23 executing program 0: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x3}}) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) ioctl$KDGETLED(r1, 0x4b31, &(0x7f0000000080)) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 16:19:23 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x280000, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x16) syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x20, 0x101040) r1 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x81, 0x2) ioctl$DRM_IOCTL_MODE_SETCRTC(r1, 0xc06864a2, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet(0x2, 0x1, 0x8) getsockopt$EBT_SO_GET_ENTRIES(r2, 0x0, 0x83, &(0x7f0000000080)={'f%lter\x00', 0x0, 0x0, 0x0, [], 0x0, 0x0, 0x0}, &(0x7f0000000140)=0x78) 16:19:23 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./\xe3gro\xa7p.cpu\x00\x8czy`\x9c\x03Dp\xae\x0e\x0e\xbb\x95\xb6\x01\xe0\x1a\xe2\xb0\x94\xe9!\x85hE\xafHV\xd6\x1e\x7f\x9cG\x1e\xf8d\xc9\",\x80W\x1e`', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000500)='cgroup.procs\x00', 0x2, 0x0) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x5, 0x0, 0xffffffffffffffff, 0x8000000000010}, 0x2c) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x8, 0x4, 0x100000001, 0x0, r2}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r3, &(0x7f00000002c0)}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x200, &(0x7f0000000180), 0x0, &(0x7f0000000080), &(0x7f0000000180)) ioctl$SIOCGSTAMP(0xffffffffffffff9c, 0x8906, &(0x7f00000000c0)) mknod(&(0x7f0000f80000)='./file0\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$bt_hidp(0x1f, 0x3, 0x6) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') ioctl$KDSETKEYCODE(r4, 0x4b4d, &(0x7f0000000100)={0x100000000}) getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000002c0)=""/183, &(0x7f00000003c0)=0xb7) ptrace(0x10, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000080)=0x4c000000, 0x10a000d50) 16:19:23 executing program 4: socketpair$unix(0x1, 0x8000100000000001, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'eql\x00\x00\xdf\xdd\x94D\x8f\x15\xcf!\x00', 0xec38ed91f1c74952}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000080)={'eql\x00\x00\xa1\xa9[\x02\x91?\x00\x00\x03\xca\x00', @ifru_mtu=0x1}) 16:19:23 executing program 3: arch_prctl$ARCH_SET_GS(0x1001, 0x6) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet(0x2, 0x1, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x41a200, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, &(0x7f0000000040)=0xab, 0x4) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x83, &(0x7f0000000080)={'f%lter\x00', 0x0, 0x0, 0x0, [], 0x0, 0x0, 0x0}, &(0x7f0000000140)=0x78) 16:19:23 executing program 0: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) r1 = syz_open_dev$adsp(0x0, 0x3ff, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_PRI(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x68, r2, 0x200, 0x70bd2a, 0x25dfdbff, {{}, 0x0, 0x4108, 0x0, {0x4c, 0x18, {0xe3ea, @media='eth\x00'}}}, ["", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x8800}, 0x14) [ 2065.925041] net_ratelimit: 18 callbacks suppressed [ 2065.925049] protocol 88fb is buggy, dev hsr_slave_0 [ 2065.935166] protocol 88fb is buggy, dev hsr_slave_1 16:19:26 executing program 1: r0 = syz_open_dev$sndtimer(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000ac5000), 0x4) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) r2 = memfd_create(&(0x7f0000000080)='dev ', 0x3) write(r2, &(0x7f0000000040)="16", 0x1) sendfile(r1, r2, &(0x7f0000000000), 0xffff) fcntl$addseals(r2, 0x409, 0xd) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) r3 = gettid() dup(0xffffffffffffffff) timer_create(0x0, &(0x7f0000044000), &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1004000000016) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$IMCLEAR_L2(r4, 0x80044946, &(0x7f0000000040)=0x7f) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}}) 16:19:26 executing program 3: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x865, 0x80000) read$FUSE(r0, &(0x7f0000000240), 0x1000) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x40000, 0x0) ioctl$KVM_SET_SIGNAL_MASK(r1, 0x4004ae8b, &(0x7f0000000180)={0x89, "7bc48162f9450eefc73fce59d6a5ff9d6aaf60b0a1e40a9ac3d34cbc7170ac0355de56c126f98628982195942bc0fe7115e46b42232b497fb07c45ea1a88f19b441dd66401bb656ae713b14bb04a4e9fb9ee0db74900860ff5e120083befcd37db4dcc50f869221baba68a8649475a22766d314b8506482ed2dbdf122ab529f5e1c9f1b8bfd52eb385"}) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$EBT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000000080)={'f%lter\x00', 0x0, 0x0, 0x0, [], 0x0, 0x0, 0x0}, &(0x7f0000000140)=0x78) 16:19:26 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000500)='cgroup.procs\x00', 0x2, 0x0) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x5}, 0x2c) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x8, 0x4, 0x100000001, 0x0, r2}, 0x2c) bpf$MAP_DELETE_ELEM(0xe, &(0x7f0000000200)={r3, &(0x7f00000002c0)}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x200, &(0x7f0000000180), 0x0, &(0x7f0000000080), &(0x7f0000000180)) mknod(&(0x7f0000f80000)='./file0\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$bt_hidp(0x1f, 0x3, 0x6) syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000002c0)=""/183, &(0x7f00000003c0)=0xb7) ptrace(0x10, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000080)=0x4c000000, 0x10a000d50) 16:19:26 executing program 0: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x7, 0xfffffffffffffe}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-control\x00', 0x204080, 0x0) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r1, 0x111, 0x5, 0x3f, 0x4) rseq(&(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x6, 0x0, 0x0, 0x1}, 0x4}, 0x20, 0x0, 0x0) openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/attr/current\x00', 0x2, 0x0) fanotify_init(0x3f, 0x141000) 16:19:26 executing program 4: socketpair$unix(0x1, 0x8000100000000001, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'eql\x00\x00\xdf\xdd\x94D\x8f\x15\xcf!\x00', 0xec38ed91f1c74952}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000080)={'eql\x00\x00\xa1\xa9[\x03\x91?\x00\x00\x03\xca\x00', @ifru_mtu=0x1}) 16:19:26 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000500)='cgroup.procs\x00', 0x2, 0x0) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x5}, 0x2c) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x8, 0x4, 0x100000001, 0x0, r2}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r3, &(0x7f00000002c0)}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x200, &(0x7f0000000180), 0x0, &(0x7f0000000080), &(0x7f0000000180)) mknod(&(0x7f0000f80000)='./file0\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$bt_hidp(0x1f, 0x3, 0x6) syz_open_procfs(0x0, &(0x7f0000000100)='net/sockstat6\x00') getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000002c0)=""/183, &(0x7f00000003c0)=0xb7) ptrace(0x10, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000080)=0x4c000000, 0x10a000d50) 16:19:26 executing program 3: ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffff9c) r1 = socket$netlink(0x10, 0x3, 0xf) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) r2 = socket$inet(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r2, 0x0, 0x83, &(0x7f0000000080)={'f%lter\x00', 0x0, 0x0, 0x0, [], 0x0, 0x0, 0x0}, &(0x7f0000000140)=0x78) openat$cgroup_int(r0, &(0x7f0000000000)='hugetlb.2MB.failcnt\x00', 0x2, 0x0) 16:19:26 executing program 0: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) r1 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x4, 0x10000) ioctl$KDGETKEYCODE(r1, 0x4b4c, &(0x7f0000000080)={0x8, 0x47e}) 16:19:26 executing program 3: ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet(0x2, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x4000, 0x0) ioctl$KVM_GET_LAPIC(r1, 0x8400ae8e, &(0x7f0000000180)={"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"}) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x83, &(0x7f0000000080)={'f%lter\x00', 0x0, 0x0, 0x0, [], 0x0, 0x0, 0x0}, &(0x7f0000000140)=0x78) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000580)={0x0, @in={{0x2, 0x4e21, @remote}}, 0x6, 0x800, 0x9, 0x20, 0xfffffffffffffffc}, &(0x7f0000000040)=0x98) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f0000000640)={r2, @in6={{0xa, 0x4e23, 0x80000001, @rand_addr="bb115b96b20cc60f69dd46c709c5dcf8", 0x4}}}, 0x84) 16:19:26 executing program 0: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x3}}) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x58080, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 16:19:26 executing program 3: ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet(0x2, 0x1, 0x0) acct(&(0x7f00000009c0)='./file1\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000740)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000780)={0x0}) ioctl$DRM_IOCTL_DMA(r1, 0xc0406429, &(0x7f00000008c0)={r2, 0x4, &(0x7f00000007c0)=[0x5, 0xfffffffffffffff8, 0x1f, 0x8], &(0x7f0000000800)=[0x7fff, 0x3], 0x14, 0x1, 0x0, &(0x7f0000000840)=[0x9], &(0x7f0000000880)=[0x8]}) syz_open_dev$sndseq(&(0x7f0000043ff3)='/dev/snd/seq\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = accept4(0xffffffffffffff9c, &(0x7f0000000300)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, &(0x7f0000000a00)=0x3, 0x80000) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000003c0)={0x0, 0xf, 0x0, 0x0, 0x0}, 0x0) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000440)={r4}, 0x8) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x1) unshare(0x8000000) r5 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000000)={0x0, 0x1, 0x5}) mq_timedreceive(r5, &(0x7f0000000200)=""/244, 0xfffffff8, 0x0, 0x0) r6 = gettid() sendmsg$kcm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000480)="61acb64c7ab79a8b109250418af30e4e41456d76c464c8cdda9a8eb0ceaf6196e320f68953f7ade44f495216a30ca97347ab7eb3fdda6067a30cdfb062b7ed33640e586f9e088d334a1e4c075d697fb07f8fe6991a944f20c1dc39dca2d5f6bfd07ac87197f42bafe39a329b17ae7439164648027acf8c3253b463524b074677767ecad173"}, {&(0x7f00000001c0)="b024fcac8e"}, {&(0x7f0000000540)="2707aa161e559ae4feb9e257dbf85106a463b31aae3601c3beee4ba92c0b952b95f8256377456435e22818f6051e45d2feb6e98a3daf459b9a7828bd9103d88e1912b894627ae12ab84f54dcf74c3092c2f034e6bee19c60fa172b74226c9230a7b9a18fd418d7e8c80d6689caa1595dd43420addaf422e3d1cfa70e87a46946d38143af89863d78ff06ee128c00d06611148d85432c7afa2b09f239b82a66531e8672f3ffe2c0b9e508bf0c92279af452be52d673b70e95c25d59c23f1edce99dd03658827ddbd03778236d5ba4f083e3"}, {&(0x7f0000000640)="ef6502b48444f5a4e794eb1aa4608a30d91d151da731d16f062560f90f2b2dac4285b1b5ff0de49e32b5833df02cde26993e22ce5210192a182fd386f241b49a2d0959b653464bed9e5d8354fd14d22a1af4df5c9e551be6efd5139c57c33b99cca6748ef98c21782071477da4960f6851d5153d38667ce8846ca95f9bf791107a77bb187b7c324e64d74d4ad433284a72dac5f65fb7f8ab684ae75e4a97aaca18018fb6e06e203ab88691be18e590b75fe6bb324caf156e184d80628e983e80294fff17e24e2275feeb873ab8bcfdf57e136c48bc42bc41d9975793ff4c9cd41bfb3832284957638c3441e6c72c8ca4"}], 0x0, 0x0, 0xff05, 0x4000004}, 0x4805) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) ioctl$VIDIOC_S_MODULATOR(r1, 0x40445637, &(0x7f0000000a40)={0x5, "55aa756ca772f1db9a74472ca1fb0b79b867362b1ac12e7e4a2beca3bcd71b74", 0x400, 0x7fff, 0x9, 0xe0e2c80092c90f91, 0x5}) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r6, 0x1000000000016) mq_timedsend(r5, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x77359400}) openat$ppp(0xffffffffffffff9c, &(0x7f00003dd000)='/dev/ppp\x00', 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000400)='/dev/snd/pcmC#D#p\x00', 0x2cc1, 0x20000) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000000)=""/246) r7 = dup2(0xffffffffffffffff, 0xffffffffffffffff) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x83, &(0x7f0000000080)={'f%lter\x00', 0x0, 0x0, 0x0, [], 0x0, 0x0, 0x0}, &(0x7f0000000140)=0x78) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r7, 0x84, 0x13, &(0x7f0000000900)={r4, 0xe10}, &(0x7f0000000940)=0x8) 16:19:26 executing program 4: socketpair$unix(0x1, 0x8000100000000001, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'eql\x00\x00\xdf\xdd\x94D\x8f\x15\xcf!\x00', 0xec38ed91f1c74952}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000080)={'eql\x00\x00\xa1\xa9[\x01\x98?\x00\x00\x03\xca\x00', @ifru_mtu=0x1}) [ 2067.125738] protocol 88fb is buggy, dev hsr_slave_0 [ 2067.131406] protocol 88fb is buggy, dev hsr_slave_1 [ 2067.136975] protocol 88fb is buggy, dev hsr_slave_0 [ 2067.142418] protocol 88fb is buggy, dev hsr_slave_1 [ 2067.148364] protocol 88fb is buggy, dev hsr_slave_0 [ 2067.154034] protocol 88fb is buggy, dev hsr_slave_1 [ 2067.605034] protocol 88fb is buggy, dev hsr_slave_0 [ 2067.610197] protocol 88fb is buggy, dev hsr_slave_1 16:19:29 executing program 1: r0 = syz_open_dev$sndtimer(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000ac5000), 0x4) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) r2 = memfd_create(&(0x7f0000000080)='dev ', 0x3) write(r2, &(0x7f0000000040)="16", 0x1) sendfile(r1, r2, &(0x7f0000000000), 0xffff) fcntl$addseals(r2, 0x409, 0xd) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) r3 = gettid() dup(0xffffffffffffffff) timer_create(0x0, &(0x7f0000044000), &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1004000000016) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$IMCLEAR_L2(r4, 0x80044946, &(0x7f0000000040)=0x7f) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}}) 16:19:29 executing program 0: r0 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x404fd) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 16:19:29 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000500)='cgroup.procs\x00', 0x2, 0x0) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x5}, 0x2c) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x8, 0x4, 0x100000001, 0x0, r2}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r3, &(0x7f00000002c0)}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x200, &(0x7f0000000180), 0x0, &(0x7f0000000080), &(0x7f0000000180)) mknod(&(0x7f0000000180)='./file0\x00', 0x40, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$bt_hidp(0x1f, 0x3, 0x6) syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000000c0)=""/183, &(0x7f00000003c0)=0xb7) ptrace(0x10, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000080)=0x4c000000, 0x10a000d50) 16:19:29 executing program 5 (fault-call:2 fault-nth:0): r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000180)={0x0, 0x3}) 16:19:29 executing program 3: ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, 0x0) clone(0x40000000, &(0x7f0000000180)="334938b60e77c0da03a6374d9608f3519a46ae32d1044656d69712ceb35ee6414cadeeba9c4955ad8ee9bfe840e86d2605da9c15a5eb66f76551e29638b0b11ba1fc65320986b881a11efb09f6a9e50f0c731a831bc33037c8cb343032ae6087310982afb0c1b559f65f8634634af4c93ff758f55d1e55104c073b1a0ed8d428fa112204a4d9eada95", &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000100)="d67b5f2b3aff352f121be13bbac0cbb0ff1d4b726bc90adc0680b269ca61d13dd9009150f9ca9acd40910ac7c8") clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet(0x2, 0x2, 0xffffffffffffffff) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x83, &(0x7f0000000080)={'f%lter\x00', 0x0, 0x0, 0x0, [], 0x0, 0x0, 0x0}, &(0x7f0000000140)=0x78) 16:19:29 executing program 4: socketpair$unix(0x1, 0x8000100000000001, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'eql\x00\x00\xdf\xdd\x94D\x8f\x15\xcf!\x00', 0xec38ed91f1c74952}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000080)={'eql\x00\x00\xa1\xa9[\x02\x98?\x00\x00\x03\xca\x00', @ifru_mtu=0x1}) 16:19:29 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000180)={0x0, 0x3}) [ 2069.694786] IPVS: ftp: loaded support on port[0] = 21 16:19:29 executing program 0: r0 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x3, 0x2) getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x0, 0x83, &(0x7f0000001140)={'broute\x00', 0x0, 0x4, 0x1000, [], 0x3, &(0x7f0000000080)=[{}, {}, {}], &(0x7f0000000140)=""/4096}, &(0x7f00000000c0)=0x78) r1 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000001200)={{0xffffffffffffffff, 0x0, 0x6}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) openat$cgroup(r0, &(0x7f00000011c0)='syz0\x00', 0x200002, 0x0) 16:19:29 executing program 0: ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet(0x2, 0x1, 0x0) acct(&(0x7f00000009c0)='./file1\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000740)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000780)={0x0}) ioctl$DRM_IOCTL_DMA(r1, 0xc0406429, &(0x7f00000008c0)={r2, 0x4, &(0x7f00000007c0)=[0x5, 0xfffffffffffffff8, 0x1f, 0x8], &(0x7f0000000800)=[0x7fff, 0x3], 0x14, 0x1, 0x0, &(0x7f0000000840)=[0x9], &(0x7f0000000880)=[0x8]}) syz_open_dev$sndseq(&(0x7f0000043ff3)='/dev/snd/seq\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = accept4(0xffffffffffffff9c, &(0x7f0000000300)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, &(0x7f0000000a00)=0x3, 0x80000) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000003c0)={0x0, 0xf, 0x0, 0x0, 0x0}, 0x0) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000440)={r4}, 0x8) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x1) unshare(0x8000000) r5 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000000)={0x0, 0x1, 0x5}) mq_timedreceive(r5, &(0x7f0000000200)=""/244, 0xfffffff8, 0x0, 0x0) r6 = gettid() sendmsg$kcm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000480)="61acb64c7ab79a8b109250418af30e4e41456d76c464c8cdda9a8eb0ceaf6196e320f68953f7ade44f495216a30ca97347ab7eb3fdda6067a30cdfb062b7ed33640e586f9e088d334a1e4c075d697fb07f8fe6991a944f20c1dc39dca2d5f6bfd07ac87197f42bafe39a329b17ae7439164648027acf8c3253b463524b074677767ecad173"}, {&(0x7f00000001c0)="b024fcac8e"}, {&(0x7f0000000540)="2707aa161e559ae4feb9e257dbf85106a463b31aae3601c3beee4ba92c0b952b95f8256377456435e22818f6051e45d2feb6e98a3daf459b9a7828bd9103d88e1912b894627ae12ab84f54dcf74c3092c2f034e6bee19c60fa172b74226c9230a7b9a18fd418d7e8c80d6689caa1595dd43420addaf422e3d1cfa70e87a46946d38143af89863d78ff06ee128c00d06611148d85432c7afa2b09f239b82a66531e8672f3ffe2c0b9e508bf0c92279af452be52d673b70e95c25d59c23f1edce99dd03658827ddbd03778236d5ba4f083e3"}, {&(0x7f0000000640)="ef6502b48444f5a4e794eb1aa4608a30d91d151da731d16f062560f90f2b2dac4285b1b5ff0de49e32b5833df02cde26993e22ce5210192a182fd386f241b49a2d0959b653464bed9e5d8354fd14d22a1af4df5c9e551be6efd5139c57c33b99cca6748ef98c21782071477da4960f6851d5153d38667ce8846ca95f9bf791107a77bb187b7c324e64d74d4ad433284a72dac5f65fb7f8ab684ae75e4a97aaca18018fb6e06e203ab88691be18e590b75fe6bb324caf156e184d80628e983e80294fff17e24e2275feeb873ab8bcfdf57e136c48bc42bc41d9975793ff4c9cd41bfb3832284957638c3441e6c72c8ca4"}], 0x0, 0x0, 0xff05, 0x4000004}, 0x4805) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) ioctl$VIDIOC_S_MODULATOR(r1, 0x40445637, &(0x7f0000000a40)={0x5, "55aa756ca772f1db9a74472ca1fb0b79b867362b1ac12e7e4a2beca3bcd71b74", 0x400, 0x7fff, 0x9, 0xe0e2c80092c90f91, 0x5}) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r6, 0x1000000000016) mq_timedsend(r5, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x77359400}) openat$ppp(0xffffffffffffff9c, &(0x7f00003dd000)='/dev/ppp\x00', 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000400)='/dev/snd/pcmC#D#p\x00', 0x2cc1, 0x20000) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000000)=""/246) r7 = dup2(0xffffffffffffffff, 0xffffffffffffffff) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x83, &(0x7f0000000080)={'f%lter\x00', 0x0, 0x0, 0x0, [], 0x0, 0x0, 0x0}, &(0x7f0000000140)=0x78) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r7, 0x84, 0x13, &(0x7f0000000900)={r4, 0xe10}, &(0x7f0000000940)=0x8) 16:19:29 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x2, &(0x7f0000000180)={0x0, 0x3}) 16:19:29 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x5420, &(0x7f0000000180)={0x0, 0x3}) 16:19:29 executing program 0: ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet(0x2, 0x1, 0x0) acct(&(0x7f00000009c0)='./file1\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000740)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000780)={0x0}) ioctl$DRM_IOCTL_DMA(r1, 0xc0406429, &(0x7f00000008c0)={r2, 0x4, &(0x7f00000007c0)=[0x5, 0xfffffffffffffff8, 0x1f, 0x8], &(0x7f0000000800)=[0x7fff, 0x3], 0x14, 0x1, 0x0, &(0x7f0000000840)=[0x9], &(0x7f0000000880)=[0x8]}) syz_open_dev$sndseq(&(0x7f0000043ff3)='/dev/snd/seq\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = accept4(0xffffffffffffff9c, &(0x7f0000000300)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, &(0x7f0000000a00)=0x3, 0x80000) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000003c0)={0x0, 0xf, 0x0, 0x0, 0x0}, 0x0) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000440)={r4}, 0x8) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x1) unshare(0x8000000) r5 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000000)={0x0, 0x1, 0x5}) mq_timedreceive(r5, &(0x7f0000000200)=""/244, 0xfffffff8, 0x0, 0x0) r6 = gettid() sendmsg$kcm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000480)="61acb64c7ab79a8b109250418af30e4e41456d76c464c8cdda9a8eb0ceaf6196e320f68953f7ade44f495216a30ca97347ab7eb3fdda6067a30cdfb062b7ed33640e586f9e088d334a1e4c075d697fb07f8fe6991a944f20c1dc39dca2d5f6bfd07ac87197f42bafe39a329b17ae7439164648027acf8c3253b463524b074677767ecad173"}, {&(0x7f00000001c0)="b024fcac8e"}, {&(0x7f0000000540)="2707aa161e559ae4feb9e257dbf85106a463b31aae3601c3beee4ba92c0b952b95f8256377456435e22818f6051e45d2feb6e98a3daf459b9a7828bd9103d88e1912b894627ae12ab84f54dcf74c3092c2f034e6bee19c60fa172b74226c9230a7b9a18fd418d7e8c80d6689caa1595dd43420addaf422e3d1cfa70e87a46946d38143af89863d78ff06ee128c00d06611148d85432c7afa2b09f239b82a66531e8672f3ffe2c0b9e508bf0c92279af452be52d673b70e95c25d59c23f1edce99dd03658827ddbd03778236d5ba4f083e3"}, {&(0x7f0000000640)="ef6502b48444f5a4e794eb1aa4608a30d91d151da731d16f062560f90f2b2dac4285b1b5ff0de49e32b5833df02cde26993e22ce5210192a182fd386f241b49a2d0959b653464bed9e5d8354fd14d22a1af4df5c9e551be6efd5139c57c33b99cca6748ef98c21782071477da4960f6851d5153d38667ce8846ca95f9bf791107a77bb187b7c324e64d74d4ad433284a72dac5f65fb7f8ab684ae75e4a97aaca18018fb6e06e203ab88691be18e590b75fe6bb324caf156e184d80628e983e80294fff17e24e2275feeb873ab8bcfdf57e136c48bc42bc41d9975793ff4c9cd41bfb3832284957638c3441e6c72c8ca4"}], 0x0, 0x0, 0xff05, 0x4000004}, 0x4805) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) ioctl$VIDIOC_S_MODULATOR(r1, 0x40445637, &(0x7f0000000a40)={0x5, "55aa756ca772f1db9a74472ca1fb0b79b867362b1ac12e7e4a2beca3bcd71b74", 0x400, 0x7fff, 0x9, 0xe0e2c80092c90f91, 0x5}) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r6, 0x1000000000016) mq_timedsend(r5, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x77359400}) openat$ppp(0xffffffffffffff9c, &(0x7f00003dd000)='/dev/ppp\x00', 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000400)='/dev/snd/pcmC#D#p\x00', 0x2cc1, 0x20000) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000000)=""/246) r7 = dup2(0xffffffffffffffff, 0xffffffffffffffff) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x83, &(0x7f0000000080)={'f%lter\x00', 0x0, 0x0, 0x0, [], 0x0, 0x0, 0x0}, &(0x7f0000000140)=0x78) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r7, 0x84, 0x13, &(0x7f0000000900)={r4, 0xe10}, &(0x7f0000000940)=0x8) [ 2070.416038] IPVS: ftp: loaded support on port[0] = 21 [ 2071.294990] net_ratelimit: 12 callbacks suppressed [ 2071.294999] protocol 88fb is buggy, dev hsr_slave_0 [ 2071.305549] protocol 88fb is buggy, dev hsr_slave_1 [ 2071.310661] protocol 88fb is buggy, dev hsr_slave_0 [ 2071.315773] protocol 88fb is buggy, dev hsr_slave_1 [ 2071.320895] protocol 88fb is buggy, dev hsr_slave_0 [ 2071.326008] protocol 88fb is buggy, dev hsr_slave_1 [ 2071.765018] protocol 88fb is buggy, dev hsr_slave_0 [ 2071.770140] protocol 88fb is buggy, dev hsr_slave_1 [ 2072.174994] protocol 88fb is buggy, dev hsr_slave_0 [ 2072.180155] protocol 88fb is buggy, dev hsr_slave_1 16:19:32 executing program 1: r0 = syz_open_dev$sndtimer(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000ac5000), 0x4) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) r2 = memfd_create(&(0x7f0000000080)='dev ', 0x3) write(r2, &(0x7f0000000040)="16", 0x1) sendfile(r1, r2, &(0x7f0000000000), 0xffff) fcntl$addseals(r2, 0x409, 0xd) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) r3 = gettid() dup(0xffffffffffffffff) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1004000000016) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$IMCLEAR_L2(r4, 0x80044946, &(0x7f0000000040)=0x7f) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}}) 16:19:32 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x5421, &(0x7f0000000180)={0x0, 0x3}) 16:19:32 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000500)='cgroup.procs\x00', 0x2, 0x0) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x5}, 0x2c) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x8, 0x4, 0x100000001, 0x0, r2}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r3, &(0x7f00000002c0)}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x200, &(0x7f0000000180), 0x0, &(0x7f0000000080), &(0x7f0000000180)) mknod(&(0x7f0000f80000)='./file0\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$bt_hidp(0x1f, 0x3, 0x6) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000002c0)=""/183, &(0x7f00000003c0)=0xb7) ptrace(0x10, 0x0) ioctl$KVM_HAS_DEVICE_ATTR(r4, 0x4018aee3, &(0x7f0000000100)={0x0, 0x800, 0xd41a, &(0x7f00000000c0)=0x1}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000080)=0x4c000000, 0x10a000d50) 16:19:32 executing program 4: socketpair$unix(0x1, 0x8000100000000001, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'eql\x00\x00\xdf\xdd\x94D\x8f\x15\xcf!\x00', 0xec38ed91f1c74952}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000080)={'eql\x00\x00\xa1\xa9[\x03\x98?\x00\x00\x03\xca\x00', @ifru_mtu=0x1}) 16:19:32 executing program 0 (fault-call:4 fault-nth:0): r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000500)='cgroup.procs\x00', 0x2, 0x0) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x5}, 0x2c) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x8, 0x4, 0x100000001, 0x0, r1}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r2, &(0x7f00000002c0)}, 0x10) clone(0x200, &(0x7f0000000180), 0x0, &(0x7f0000000080), &(0x7f0000000180)) mknod(&(0x7f0000f80000)='./file0\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$bt_hidp(0x1f, 0x3, 0x6) syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000002c0)=""/183, &(0x7f00000003c0)=0xb7) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) ptrace(0x10, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r0, &(0x7f0000000080)=0x4c000000, 0x10a000d50) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r3, 0x114, 0xa, &(0x7f0000000140)=ANY=[@ANYBLOB="02"], 0x1) 16:19:32 executing program 3: ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x100, 0x11a) syz_open_dev$midi(&(0x7f0000000180)='/dev/midi#\x00', 0x200, 0x20000) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/btrfs-control\x00', 0x8000, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet(0x2, 0x1, 0x0) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x10043, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000040)=r2, 0x4) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x83, &(0x7f0000000080)={'f%lter\x00', 0x0, 0x0, 0x0, [], 0x0, 0x0, 0x0}, &(0x7f0000000140)=0x78) 16:19:32 executing program 3: ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x83, &(0x7f0000000080)={'f%lter\x00', 0x0, 0x0, 0x0, [], 0x0, 0x0, 0x0}, &(0x7f0000000140)=0x78) ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f0000000000)) 16:19:32 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x5422, &(0x7f0000000180)={0x0, 0x3}) 16:19:32 executing program 3: ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = dup(0xffffffffffffffff) ioctl$VIDIOC_S_OUTPUT(r0, 0xc004562f, &(0x7f0000000000)=0x80000001) r1 = socket$inet(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x83, &(0x7f0000000080)={'f%lter\x00', 0x0, 0x0, 0x0, [], 0x0, 0x0, 0x0}, &(0x7f0000000140)=0x78) 16:19:32 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x5423, &(0x7f0000000180)={0x0, 0x3}) 16:19:32 executing program 0: r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000500)='cgroup.procs\x00', 0x2, 0x0) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x5}, 0x2c) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x8, 0x4, 0x100000001, 0x0, r1}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r2, &(0x7f00000002c0)}, 0x10) clone(0x200, &(0x7f0000000180), 0x0, &(0x7f0000000080), &(0x7f0000000180)) mknod(&(0x7f0000f80000)='./file0\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$bt_hidp(0x1f, 0x3, 0x6) syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000002c0)=""/183, &(0x7f00000003c0)=0xb7) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) ptrace(0x10, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r0, &(0x7f0000000080)=0x4c000000, 0x10a000d50) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r3, 0x114, 0xa, &(0x7f0000000140)=ANY=[@ANYBLOB="02"], 0x1) 16:19:32 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x5450, &(0x7f0000000180)={0x0, 0x3}) 16:19:35 executing program 1: r0 = syz_open_dev$sndtimer(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000ac5000), 0x4) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) r2 = memfd_create(&(0x7f0000000080)='dev ', 0x3) write(r2, &(0x7f0000000040)="16", 0x1) sendfile(r1, r2, &(0x7f0000000000), 0xffff) fcntl$addseals(r2, 0x409, 0xd) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) r3 = gettid() dup(0xffffffffffffffff) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1004000000016) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$IMCLEAR_L2(r4, 0x80044946, &(0x7f0000000040)=0x7f) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}}) 16:19:35 executing program 3: ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) dup(0xffffffffffffffff) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x10000, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, &(0x7f0000000000)=@generic={0x0, 0xfffffffffffffffe, 0x8}) getsockopt$EBT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000000080)={'f%lter\x00', 0x0, 0x0, 0x0, [], 0x0, 0x0, 0x0}, &(0x7f0000000140)=0x78) write$FUSE_DIRENT(r0, &(0x7f0000000100)={0x38, 0x0, 0x1, [{0x2, 0x6, 0xa, 0xa3bb, '/dev/full\x00'}]}, 0x38) 16:19:35 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x5451, &(0x7f0000000180)={0x0, 0x3}) 16:19:35 executing program 0: r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000500)='cgroup.procs\x00', 0x2, 0x0) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x5}, 0x2c) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x8, 0x4, 0x100000001, 0x0, r1}, 0x2c) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000200)={r2, &(0x7f00000002c0)}, 0x10) clone(0x200, &(0x7f0000000180), 0x0, &(0x7f0000000080), &(0x7f0000000180)) mknod(&(0x7f0000f80000)='./file0\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$bt_hidp(0x1f, 0x3, 0x6) syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000002c0)=""/183, &(0x7f00000003c0)=0xb7) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) ptrace(0x10, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r0, &(0x7f0000000080)=0x4c000000, 0x10a000d50) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r3, 0x114, 0xa, &(0x7f0000000140)=ANY=[@ANYBLOB="02"], 0x1) 16:19:35 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000500)='cgroup.procs\x00', 0x2, 0x0) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x5}, 0x2c) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x8, 0x4, 0x100000001, 0x0, r2}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r3, &(0x7f00000002c0)}, 0x10) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x20) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x200, &(0x7f0000000180), 0x0, &(0x7f0000000080), &(0x7f0000000180)) mknod(&(0x7f0000f80000)='./file0\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r4, 0xc0105303, &(0x7f0000000100)={0x3, 0x0, 0x6}) syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000002c0)=""/183, &(0x7f00000003c0)=0xb7) ptrace(0x10, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000080)=0x4c000000, 0x10a000d50) 16:19:35 executing program 4: socketpair$unix(0x1, 0x8000100000000001, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'eql\x00\x00\xdf\xdd\x94D\x8f\x15\xcf!\x00', 0xec38ed91f1c74952}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000080)={'eql\x00\x00\xa1\xa9[\x03\x9c?\x00\x00\x03\xca\x00', @ifru_mtu=0x1}) 16:19:35 executing program 3: ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x200280, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffff9c) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x101000, 0x0) syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x0, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vsock\x00', 0x900, 0x0) syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x0, 0x20400) pipe(&(0x7f0000000200)) dup3(0xffffffffffffff9c, 0xffffffffffffffff, 0x80000) syz_open_dev$mice(&(0x7f0000000240)='/dev/input/mice\x00', 0x0, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/cache_bypass\x00', 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_user\x00', 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/dlm-control\x00', 0x400, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000340)='/dev/snd/pcmC#D#p\x00', 0x3, 0x82201) openat$dsp(0xffffffffffffff9c, &(0x7f0000000380)='/dev/dsp\x00', 0x200200, 0x0) r1 = syz_open_dev$midi(&(0x7f00000003c0)='/dev/midi#\x00', 0x7, 0x2000) fcntl$setsig(r0, 0xa, 0x10) ioctl$DRM_IOCTL_MODE_SETCRTC(r1, 0xc06864a2, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r2, 0x0, 0x83, &(0x7f0000000080)={'f%lter\x00', 0x0, 0x0, 0x0, [], 0x0, 0x0, 0x0}, &(0x7f0000000140)=0x78) 16:19:35 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x5452, &(0x7f0000000180)={0x0, 0x3}) 16:19:35 executing program 3: socket$bt_bnep(0x1f, 0x3, 0x4) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r2 = socket(0x11, 0x3, 0x0) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) setsockopt(r2, 0x107, 0xd, &(0x7f0000001000), 0xc5) dup2(r1, r2) syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x40c2, 0x200000) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/pfkey\x00', 0x2100, 0x0) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x17) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, 0x0) clone(0x210a001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket$inet(0x2, 0x1, 0x7) getsockopt$EBT_SO_GET_ENTRIES(r4, 0x0, 0x83, &(0x7f0000000080)={'f%lter\x00', 0x0, 0x0, 0x0, [], 0x0, 0x0, 0x0}, &(0x7f0000000140)=0x78) socket$inet_icmp_raw(0x2, 0x3, 0x1) getresuid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280)) lsetxattr$security_smack_entry(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.SMACK64IPOUT\x00', &(0x7f0000000100)='f%lter\x00', 0x7, 0x2) 16:19:35 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x5460, &(0x7f0000000180)={0x0, 0x3}) 16:19:35 executing program 3: ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x83, &(0x7f0000000080)={'f%lter\x00', 0x0, 0x0, 0x0, [], 0x0, 0x0, 0x0}, &(0x7f0000000140)=0x78) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) 16:19:35 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000500)='cgroup.procs\x00', 0x2, 0x0) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x5}, 0x2c) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x8, 0x8, 0x100000001, 0x0, r2}, 0xfffffe95) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r3, &(0x7f00000002c0)}, 0x10) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x200, &(0x7f0000000180), 0x0, &(0x7f0000000080), &(0x7f00000001c0)) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000180)={r3, &(0x7f0000000540)="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"}, 0x10) r5 = fcntl$dupfd(r3, 0x0, r3) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(r5, 0xc040564b, &(0x7f00000000c0)={0x0, 0x0, 0x3033, 0x8, 0x3, {0x6}, 0x1}) mknod(&(0x7f0000f80000)='./file0\x00', 0x0, 0x0) r6 = fcntl$dupfd(r4, 0x0, r1) getsockopt$inet6_int(r6, 0x29, 0x18, &(0x7f0000000100), &(0x7f0000000140)=0x4) socket$inet6_tcp(0xa, 0x1, 0x0) socket$bt_hidp(0x1f, 0x3, 0x6) syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000002c0)=""/183, &(0x7f00000003c0)=0xb7) ptrace(0x10, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000080), 0xd2dc) [ 2076.325015] net_ratelimit: 18 callbacks suppressed [ 2076.325024] protocol 88fb is buggy, dev hsr_slave_0 [ 2076.335182] protocol 88fb is buggy, dev hsr_slave_1 [ 2077.525059] protocol 88fb is buggy, dev hsr_slave_0 [ 2077.530229] protocol 88fb is buggy, dev hsr_slave_1 [ 2077.535423] protocol 88fb is buggy, dev hsr_slave_0 [ 2077.540522] protocol 88fb is buggy, dev hsr_slave_1 [ 2077.545731] protocol 88fb is buggy, dev hsr_slave_0 [ 2077.550789] protocol 88fb is buggy, dev hsr_slave_1 [ 2078.005035] protocol 88fb is buggy, dev hsr_slave_0 [ 2078.010132] protocol 88fb is buggy, dev hsr_slave_1 16:19:38 executing program 1: r0 = syz_open_dev$sndtimer(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000ac5000), 0x4) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) r2 = memfd_create(&(0x7f0000000080)='dev ', 0x3) write(r2, &(0x7f0000000040)="16", 0x1) sendfile(r1, r2, &(0x7f0000000000), 0xffff) fcntl$addseals(r2, 0x409, 0xd) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) r3 = gettid() dup(0xffffffffffffffff) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1004000000016) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$IMCLEAR_L2(r4, 0x80044946, &(0x7f0000000040)=0x7f) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}}) 16:19:38 executing program 0: r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000500)='cgroup.procs\x00', 0x2, 0x0) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x5}, 0x2c) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x8, 0x4, 0x100000001, 0x0, r1}, 0x2c) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000000200)={r2, &(0x7f00000002c0)}, 0x10) clone(0x200, &(0x7f0000000180), 0x0, &(0x7f0000000080), &(0x7f0000000180)) mknod(&(0x7f0000f80000)='./file0\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$bt_hidp(0x1f, 0x3, 0x6) syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000002c0)=""/183, &(0x7f00000003c0)=0xb7) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) ptrace(0x10, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r0, &(0x7f0000000080)=0x4c000000, 0x10a000d50) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r3, 0x114, 0xa, &(0x7f0000000140)=ANY=[@ANYBLOB="02"], 0x1) 16:19:38 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x54a0, &(0x7f0000000180)={0x0, 0x3}) 16:19:38 executing program 4: socketpair$unix(0x1, 0x8000100000000001, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'eql\x00\x00\xdf\xdd\x94D\x8f\x15\xcf!\x00', 0xec38ed91f1c74952}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000080)={'eql\x00\x00\xa1\xa9[\x02\x9d?\x00\x00\x03\xca\x00', @ifru_mtu=0x1}) 16:19:38 executing program 3: ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet(0x2, 0x1, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x7d, 0x800) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000040)={0x2, 0x6, 0x3, 0x3, 0x1, 0xa5, 0x0, 0x436, 0xa8, 0xa00000000}) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x83, &(0x7f0000000080)={'f%lter\x00', 0x0, 0x0, 0x0, [], 0x0, 0x0, 0x0}, &(0x7f0000000140)=0x5f) 16:19:38 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000500)='cgroup.procs\x00', 0x2, 0x0) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x5}, 0x2c) r3 = creat(&(0x7f0000000180)='./file0\x00', 0x8) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000140)='./cgroup.cpu\x00') r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x8, 0x4, 0x100000001, 0x0, r2}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r4, &(0x7f00000002c0)}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x200, &(0x7f0000000180), 0x0, &(0x7f0000000080), &(0x7f0000000180)) mknod(&(0x7f0000f80000)='./file0\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$bt_hidp(0x1f, 0x3, 0x6) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000002c0)=""/183, &(0x7f00000003c0)=0xb7) ptrace(0x10, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setlease(r5, 0x400, 0x0) sendfile(r1, r1, &(0x7f0000000080)=0x4c000000, 0x10a000d50) openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x50d081, 0x0) 16:19:38 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x54a1, &(0x7f0000000180)={0x0, 0x3}) 16:19:38 executing program 0: r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000500)='cgroup.procs\x00', 0x2, 0x0) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x5}, 0x2c) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x8, 0x4, 0x100000001, 0x0, r1}, 0x2c) bpf$MAP_DELETE_ELEM(0x5, &(0x7f0000000200)={r2, &(0x7f00000002c0)}, 0x10) clone(0x200, &(0x7f0000000180), 0x0, &(0x7f0000000080), &(0x7f0000000180)) mknod(&(0x7f0000f80000)='./file0\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$bt_hidp(0x1f, 0x3, 0x6) syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000002c0)=""/183, &(0x7f00000003c0)=0xb7) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) ptrace(0x10, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r0, &(0x7f0000000080)=0x4c000000, 0x10a000d50) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r3, 0x114, 0xa, &(0x7f0000000140)=ANY=[@ANYBLOB="02"], 0x1) 16:19:38 executing program 3: ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x83, &(0x7f0000000080)={'f%lter\x00\x00\x00\xe6\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00', 0x0, 0x0, 0x0, [], 0x0, 0x0, 0x0}, &(0x7f0000000140)=0x3f1) 16:19:38 executing program 0: r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000500)='cgroup.procs\x00', 0x2, 0x0) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x5}, 0x2c) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x8, 0x4, 0x100000001, 0x0, r1}, 0x2c) bpf$MAP_DELETE_ELEM(0x6, &(0x7f0000000200)={r2, &(0x7f00000002c0)}, 0x10) clone(0x200, &(0x7f0000000180), 0x0, &(0x7f0000000080), &(0x7f0000000180)) mknod(&(0x7f0000f80000)='./file0\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$bt_hidp(0x1f, 0x3, 0x6) syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000002c0)=""/183, &(0x7f00000003c0)=0xb7) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) ptrace(0x10, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r0, &(0x7f0000000080)=0x4c000000, 0x10a000d50) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r3, 0x114, 0xa, &(0x7f0000000140)=ANY=[@ANYBLOB="02"], 0x1) 16:19:38 executing program 3: ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, 0x0) clone(0x20000800, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet(0x2, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x400, 0x0) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000180)=0x8, 0x4) accept4$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @local}, &(0x7f0000000100)=0x1c, 0x800) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x83, &(0x7f0000000080)={'f%lter\x00', 0x0, 0x0, 0x0, [], 0x0, 0x0, 0x0}, &(0x7f0000000140)=0xffffffffffffff85) 16:19:38 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x54a2, &(0x7f0000000180)={0x0, 0x3}) [ 2081.685041] net_ratelimit: 12 callbacks suppressed [ 2081.685050] protocol 88fb is buggy, dev hsr_slave_0 [ 2081.695178] protocol 88fb is buggy, dev hsr_slave_1 [ 2081.700324] protocol 88fb is buggy, dev hsr_slave_0 [ 2081.705444] protocol 88fb is buggy, dev hsr_slave_1 [ 2081.710571] protocol 88fb is buggy, dev hsr_slave_0 [ 2081.715683] protocol 88fb is buggy, dev hsr_slave_1 16:19:41 executing program 0: r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000500)='cgroup.procs\x00', 0x2, 0x0) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x5}, 0x2c) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x8, 0x4, 0x100000001, 0x0, r1}, 0x2c) bpf$MAP_DELETE_ELEM(0x7, &(0x7f0000000200)={r2, &(0x7f00000002c0)}, 0x10) clone(0x200, &(0x7f0000000180), 0x0, &(0x7f0000000080), &(0x7f0000000180)) mknod(&(0x7f0000f80000)='./file0\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$bt_hidp(0x1f, 0x3, 0x6) syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000002c0)=""/183, &(0x7f00000003c0)=0xb7) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) ptrace(0x10, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r0, &(0x7f0000000080)=0x4c000000, 0x10a000d50) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r3, 0x114, 0xa, &(0x7f0000000140)=ANY=[@ANYBLOB="02"], 0x1) 16:19:41 executing program 1: r0 = syz_open_dev$sndtimer(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000ac5000), 0x4) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) r2 = memfd_create(&(0x7f0000000080)='dev ', 0x3) write(r2, &(0x7f0000000040)="16", 0x1) sendfile(r1, r2, &(0x7f0000000000), 0xffff) fcntl$addseals(r2, 0x409, 0xd) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) r3 = gettid() dup(0xffffffffffffffff) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(r3, 0x1004000000016) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$IMCLEAR_L2(r4, 0x80044946, &(0x7f0000000040)=0x7f) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}}) 16:19:41 executing program 2: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffff9c, 0x0, 0xd, &(0x7f00000000c0)='./cgroup.cpu\x00', 0xffffffffffffffff}, 0x30) ioprio_get$pid(0x3, r0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000500)='cgroup.procs\x00', 0x2, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x1, 0x0) ioctl$RTC_UIE_ON(r3, 0x7003) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x5}, 0x2c) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x8, 0x4, 0x100000001, 0x0, r4}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r5, &(0x7f00000002c0)}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x200, &(0x7f0000000180), 0x0, &(0x7f0000000080), &(0x7f0000000180)) mknod(&(0x7f0000f80000)='./file0\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$bt_hidp(0x1f, 0x3, 0x6) syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000002c0)=""/183, &(0x7f00000003c0)=0xb7) ptrace(0x10, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r2, &(0x7f0000000080)=0x4c000000, 0x10a000d50) 16:19:41 executing program 3: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x0, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, &(0x7f0000000100)='\x1a\xa86\x8a\x9b\xf8]\x02\x06c\x9a\x11e!\xad?\x9a\xf4e\xe9\xf2c\xceZ%\x9a\x00\xcb\bY\x8f\x9e\xcb\x9a \xe0\x7f\\\x03c\xd8\x8f\t\xe9\xe0\xea\fY6\n\xda\xfe\x86l\xcc\r<\xfc\xf11\x15\x9d:)O{\xbf\xea\xe1\xc6(*$?\xb5}9\x02\xf3E\xb8)bX\x88c\xe5:TE\x9b\xfe\xb7\x00\x00\x00\x00\x00\x00\x00\x00\x82\x00\x00\x00\x00\x00') ioctl$LOOP_GET_STATUS64(0xffffffffffffffff, 0x4c05, &(0x7f0000000340)) pipe(&(0x7f0000000000)={0xffffffffffffffff}) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='cdg\x00', 0x4) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet(0x2, 0xfffffffffffffffd, 0x8000) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x83, &(0x7f0000000080)={'f%lter\x00', 0x0, 0x0, 0x0, [], 0x0, 0x0, 0x0}, &(0x7f0000000140)=0x78) 16:19:41 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x54a3, &(0x7f0000000180)={0x0, 0x3}) 16:19:41 executing program 4: socketpair$unix(0x1, 0x8000100000000001, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'eql\x00\x00\xdf\xdd\x94D\x8f\x15\xcf!\x00', 0xec38ed91f1c74952}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000080)={'eql\x00\x00\xa1\xa9[\x03\x9d?\x00\x00\x03\xca\x00', @ifru_mtu=0x1}) [ 2081.873045] cgroup: cgroup2: unknown option "¨6Š›ø]cše!­?šôeéòcÎZ%š" 16:19:41 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40045402, &(0x7f0000000180)={0x0, 0x3}) 16:19:41 executing program 3: r0 = syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0xaf1b, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x83, &(0x7f0000000080)={'f%lter\x00', 0x0, 0x0, 0x0, [], 0x0, 0x0, 0x0}, &(0x7f0000000140)=0x78) r2 = socket(0x19, 0x4, 0xffffffffffffdffa) getsockopt$bt_BT_SNDMTU(r2, 0x112, 0xc, &(0x7f0000000000)=0x2, &(0x7f0000000040)=0x2) 16:19:41 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40049409, &(0x7f0000000180)={0x0, 0x3}) 16:19:41 executing program 4: socketpair$unix(0x1, 0x8000100000000001, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'eql\x00\x00\xdf\xdd\x94D\x8f\x15\xcf!\x00', 0xec38ed91f1c74952}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000080)={'eql\x00\x00\xa1\xa9[\x02\xa0?\x00\x00\x03\xca\x00', @ifru_mtu=0x1}) 16:19:41 executing program 0: r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000500)='cgroup.procs\x00', 0x2, 0x0) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x5}, 0x2c) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x8, 0x4, 0x100000001, 0x0, r1}, 0x2c) bpf$MAP_DELETE_ELEM(0x8, &(0x7f0000000200)={r2, &(0x7f00000002c0)}, 0x10) clone(0x200, &(0x7f0000000180), 0x0, &(0x7f0000000080), &(0x7f0000000180)) mknod(&(0x7f0000f80000)='./file0\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$bt_hidp(0x1f, 0x3, 0x6) syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000002c0)=""/183, &(0x7f00000003c0)=0xb7) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) ptrace(0x10, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r0, &(0x7f0000000080)=0x4c000000, 0x10a000d50) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r3, 0x114, 0xa, &(0x7f0000000140)=ANY=[@ANYBLOB="02"], 0x1) [ 2082.165741] protocol 88fb is buggy, dev hsr_slave_0 [ 2082.171953] protocol 88fb is buggy, dev hsr_slave_1 16:19:41 executing program 3: ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000180)={'veth1\x00', 0xd200}) r1 = socket$vsock_dgram(0x28, 0x2, 0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x802, 0x0) ioctl$FICLONERANGE(r1, 0x4020940d, &(0x7f0000000040)={r2, 0x0, 0xd9b0, 0x9, 0x57}) r3 = socket$inet(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r3, 0x0, 0x83, &(0x7f0000000080)={'f%lter\x00', 0x0, 0x0, 0x0, [], 0x0, 0x0, 0x0}, &(0x7f0000000140)=0x78) 16:19:41 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x4020940d, &(0x7f0000000180)={0x0, 0x3}) [ 2082.565103] protocol 88fb is buggy, dev hsr_slave_0 [ 2082.571776] protocol 88fb is buggy, dev hsr_slave_1 16:19:44 executing program 1: r0 = syz_open_dev$sndtimer(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000ac5000), 0x4) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) r2 = memfd_create(&(0x7f0000000080)='dev ', 0x3) write(r2, &(0x7f0000000040)="16", 0x1) sendfile(r1, r2, &(0x7f0000000000), 0xffff) fcntl$addseals(r2, 0x409, 0xd) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) r3 = gettid() dup(0xffffffffffffffff) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(r3, 0x1004000000016) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$IMCLEAR_L2(r4, 0x80044946, &(0x7f0000000040)=0x7f) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}}) 16:19:44 executing program 3: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x200, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x83, &(0x7f0000000080)={'f%lter\x00', 0x0, 0x0, 0x0, [], 0x0, 0x0, 0x0}, &(0x7f0000000140)=0x78) 16:19:44 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40345410, &(0x7f0000000180)={0x0, 0x3}) 16:19:44 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000500)='cgroup.procs\x00', 0x2, 0x0) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x5}, 0x2c) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x8, 0x4, 0x100000001, 0x0, r2}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r3, &(0x7f00000002c0)}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x200, &(0x7f0000000180), 0x0, &(0x7f0000000080), &(0x7f0000000180)) mknod(&(0x7f0000f80000)='./file0\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x200000, 0x0) ioctl$DRM_IOCTL_GET_CAP(r4, 0xc010640c, &(0x7f0000000100)={0x100000000}) socket$bt_hidp(0x1f, 0x3, 0x6) syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000002c0)=""/183, &(0x7f00000003c0)=0xb7) ptrace(0x10, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000080)=0x4c000000, 0x10a000d50) 16:19:44 executing program 0: r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000500)='cgroup.procs\x00', 0x2, 0x0) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x5}, 0x2c) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x8, 0x4, 0x100000001, 0x0, r1}, 0x2c) bpf$MAP_DELETE_ELEM(0x9, &(0x7f0000000200)={r2, &(0x7f00000002c0)}, 0x10) clone(0x200, &(0x7f0000000180), 0x0, &(0x7f0000000080), &(0x7f0000000180)) mknod(&(0x7f0000f80000)='./file0\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$bt_hidp(0x1f, 0x3, 0x6) syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000002c0)=""/183, &(0x7f00000003c0)=0xb7) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) ptrace(0x10, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r0, &(0x7f0000000080)=0x4c000000, 0x10a000d50) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r3, 0x114, 0xa, &(0x7f0000000140)=ANY=[@ANYBLOB="02"], 0x1) 16:19:44 executing program 4: socketpair$unix(0x1, 0x8000100000000001, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'eql\x00\x00\xdf\xdd\x94D\x8f\x15\xcf!\x00', 0xec38ed91f1c74952}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000080)={'eql\x00\x00\xa1\xa9[\x03\xa1?\x00\x00\x03\xca\x00', @ifru_mtu=0x1}) 16:19:44 executing program 0: r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000500)='cgroup.procs\x00', 0x2, 0x0) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x5}, 0x2c) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x8, 0x4, 0x100000001, 0x0, r1}, 0x2c) bpf$MAP_DELETE_ELEM(0xa, &(0x7f0000000200)={r2, &(0x7f00000002c0)}, 0x10) clone(0x200, &(0x7f0000000180), 0x0, &(0x7f0000000080), &(0x7f0000000180)) mknod(&(0x7f0000f80000)='./file0\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$bt_hidp(0x1f, 0x3, 0x6) syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000002c0)=""/183, &(0x7f00000003c0)=0xb7) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) ptrace(0x10, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r0, &(0x7f0000000080)=0x4c000000, 0x10a000d50) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r3, 0x114, 0xa, &(0x7f0000000140)=ANY=[@ANYBLOB="02"], 0x1) 16:19:44 executing program 3: ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, 0x0) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x800, 0x0) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffff9c, 0x84, 0x18, &(0x7f0000000040)={0x0, 0xf28}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000180)={r1}, &(0x7f00000001c0)=0x8) clone(0x8fffffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet(0x2, 0x3, 0x2) getsockopt$EBT_SO_GET_ENTRIES(r2, 0x0, 0x83, &(0x7f0000000080)={'f%lter\x00', 0x0, 0x0, 0x0, [], 0x0, 0x0, 0x0}, &(0x7f0000000140)=0x78) 16:19:44 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40485404, &(0x7f0000000180)={0x0, 0x3}) 16:19:44 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000280)='/dev/vcs#\x00', 0x8, 0x200) write$UHID_CREATE2(r1, &(0x7f00000008c0)={0xb, 'syz1\x00', 'syz1\x00', 'syz1\x00', 0x193, 0x2597, 0x3, 0x100, 0x1, 0xffff, "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"}, 0x2ab) r2 = openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) clone(0x2102001ff7, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x5}, 0x2c) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x8, 0x4, 0x100000001, 0x0, r3}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r4, &(0x7f00000002c0)}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x200, &(0x7f0000000180), 0x0, &(0x7f0000000080), &(0x7f0000000180)) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vsock\x00', 0x400, 0x0) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r5, 0x84, 0x74, &(0x7f0000000140)=""/150, &(0x7f0000000240)=0x96) mknod(&(0x7f0000f80000)='./file0\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$bt_hidp(0x1f, 0x3, 0x6) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000002c0)=""/183, &(0x7f00000003c0)=0xb7) ptrace(0x10, 0x0) write$UHID_CREATE2(r6, &(0x7f0000000540)={0xb, 'syz1\x00', 'syz1\x00', 'syz0\x00', 0xcb, 0x20, 0x7ff, 0x9, 0x4, 0xffffffff, "473f9612831fca72d51527a5bfa1a6468fe4e93608f5cc13b03935d0a8052435fc90c57f895803dd0dc02e9c04acb7f624171d4f82c7f5ac9e05162a542872b6896c6968c86f88dffb659d8701ab179ec675170d858cf7e34eb915d78b466510d1b95e6eac6936f988b1a09c150537c590500111c7a63b2d2ba6f48af4b491b5ba65305b26c4ffff23b8a79b9c5faab0641c965413002d821bc70d6fd301a506f3dfd2696684b8cb646f9053f784cb546bef7c781ed183f11fbd61605b4eb3854a44387db8a17bee04cbd7"}, 0x1e3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sendfile(r2, r2, &(0x7f0000000080)=0x4c000000, 0x10a000d50) 16:19:44 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x80045400, &(0x7f0000000180)={0x0, 0x3}) 16:19:45 executing program 0: r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000500)='cgroup.procs\x00', 0x2, 0x0) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x5}, 0x2c) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x8, 0x4, 0x100000001, 0x0, r1}, 0x2c) bpf$MAP_DELETE_ELEM(0xb, &(0x7f0000000200)={r2, &(0x7f00000002c0)}, 0x10) clone(0x200, &(0x7f0000000180), 0x0, &(0x7f0000000080), &(0x7f0000000180)) mknod(&(0x7f0000f80000)='./file0\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$bt_hidp(0x1f, 0x3, 0x6) syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000002c0)=""/183, &(0x7f00000003c0)=0xb7) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) ptrace(0x10, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r0, &(0x7f0000000080)=0x4c000000, 0x10a000d50) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r3, 0x114, 0xa, &(0x7f0000000140)=ANY=[@ANYBLOB="02"], 0x1) [ 2086.725051] net_ratelimit: 18 callbacks suppressed [ 2086.725058] protocol 88fb is buggy, dev hsr_slave_0 [ 2086.735147] protocol 88fb is buggy, dev hsr_slave_1 16:19:47 executing program 1: r0 = syz_open_dev$sndtimer(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000ac5000), 0x4) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) r2 = memfd_create(&(0x7f0000000080)='dev ', 0x3) write(r2, &(0x7f0000000040)="16", 0x1) sendfile(r1, r2, &(0x7f0000000000), 0xffff) fcntl$addseals(r2, 0x409, 0xd) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) r3 = gettid() dup(0xffffffffffffffff) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(r3, 0x1004000000016) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$IMCLEAR_L2(r4, 0x80044946, &(0x7f0000000040)=0x7f) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}}) 16:19:47 executing program 3: ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet(0x2, 0x1, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x42, 0x0) setsockopt$RXRPC_SECURITY_KEYRING(r1, 0x110, 0x2, &(0x7f0000000040)='$\x00', 0x2) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x83, &(0x7f0000000080)={'f%lter\x00', 0x0, 0x0, 0x0, [], 0x0, 0x0, 0x0}, &(0x7f0000000140)=0x78) 16:19:47 executing program 4: socketpair$unix(0x1, 0x8000100000000001, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'eql\x00\x00\xdf\xdd\x94D\x8f\x15\xcf!\x00', 0xec38ed91f1c74952}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000080)={'eql\x00\x00\xa1\xa9[\x02\xa4?\x00\x00\x03\xca\x00', @ifru_mtu=0x1}) 16:19:47 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x80605414, &(0x7f0000000180)={0x0, 0x3}) 16:19:47 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000500)='cgroup.procs\x00', 0x2, 0x0) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x5}, 0x2c) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x8, 0x4, 0x100000001, 0x0, r2}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r3, &(0x7f00000002c0)}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x200, &(0x7f0000000180), 0x0, &(0x7f0000000080), &(0x7f0000000180)) mknod(&(0x7f0000f80000)='./file0\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$bt_hidp(0x1f, 0x3, 0x6) syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000002c0)=""/183, &(0x7f00000003c0)=0xb7) ptrace(0x10, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000080)=0x4c000000, 0x10a000d50) socket$isdn_base(0x22, 0x3, 0x0) 16:19:47 executing program 0: r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000500)='cgroup.procs\x00', 0x2, 0x0) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x5}, 0x2c) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x8, 0x4, 0x100000001, 0x0, r1}, 0x2c) bpf$MAP_DELETE_ELEM(0xc, &(0x7f0000000200)={r2, &(0x7f00000002c0)}, 0x10) clone(0x200, &(0x7f0000000180), 0x0, &(0x7f0000000080), &(0x7f0000000180)) mknod(&(0x7f0000f80000)='./file0\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$bt_hidp(0x1f, 0x3, 0x6) syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000002c0)=""/183, &(0x7f00000003c0)=0xb7) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) ptrace(0x10, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r0, &(0x7f0000000080)=0x4c000000, 0x10a000d50) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r3, 0x114, 0xa, &(0x7f0000000140)=ANY=[@ANYBLOB="02"], 0x1) [ 2087.925114] protocol 88fb is buggy, dev hsr_slave_0 [ 2087.930371] protocol 88fb is buggy, dev hsr_slave_1 [ 2087.935776] protocol 88fb is buggy, dev hsr_slave_0 [ 2087.940932] protocol 88fb is buggy, dev hsr_slave_1 [ 2087.946165] protocol 88fb is buggy, dev hsr_slave_0 [ 2087.951244] protocol 88fb is buggy, dev hsr_slave_1 16:19:47 executing program 3: ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) ioctl$CAPI_GET_FLAGS(r1, 0x80044323, &(0x7f0000000000)) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x83, &(0x7f0000000080)={'f%lter\x00', 0x0, 0x0, 0x0, [], 0x0, 0x0, 0x0}, &(0x7f0000000140)=0x78) 16:19:47 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x80e85411, &(0x7f0000000180)={0x0, 0x3}) 16:19:48 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0xc0045878, &(0x7f0000000180)={0x0, 0x3}) 16:19:48 executing program 0: r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000500)='cgroup.procs\x00', 0x2, 0x0) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x5}, 0x2c) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x8, 0x4, 0x100000001, 0x0, r1}, 0x2c) bpf$MAP_DELETE_ELEM(0xd, &(0x7f0000000200)={r2, &(0x7f00000002c0)}, 0x10) clone(0x200, &(0x7f0000000180), 0x0, &(0x7f0000000080), &(0x7f0000000180)) mknod(&(0x7f0000f80000)='./file0\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$bt_hidp(0x1f, 0x3, 0x6) syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000002c0)=""/183, &(0x7f00000003c0)=0xb7) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) ptrace(0x10, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r0, &(0x7f0000000080)=0x4c000000, 0x10a000d50) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r3, 0x114, 0xa, &(0x7f0000000140)=ANY=[@ANYBLOB="02"], 0x1) 16:19:48 executing program 4: socketpair$unix(0x1, 0x8000100000000001, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'eql\x00\x00\xdf\xdd\x94D\x8f\x15\xcf!\x00', 0xec38ed91f1c74952}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000080)={'eql\x00\x00\xa1\xa9[\x03\xa4?\x00\x00\x03\xca\x00', @ifru_mtu=0x1}) 16:19:48 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0xc0045878, &(0x7f0000000180)={0x0, 0x3}) [ 2088.404950] protocol 88fb is buggy, dev hsr_slave_0 [ 2088.410151] protocol 88fb is buggy, dev hsr_slave_1 [ 2089.225793] device bridge_slave_1 left promiscuous mode [ 2089.231256] bridge0: port 2(bridge_slave_1) entered disabled state [ 2089.238995] device bridge_slave_0 left promiscuous mode [ 2089.244651] bridge0: port 1(bridge_slave_0) entered disabled state [ 2089.303819] device hsr_slave_1 left promiscuous mode [ 2089.316290] device hsr_slave_0 left promiscuous mode [ 2089.327251] team0 (unregistering): Port device team_slave_1 removed [ 2089.343188] team0 (unregistering): Port device team_slave_0 removed [ 2089.357671] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 2089.370101] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 2089.423915] bond0 (unregistering): Released all slaves 16:19:50 executing program 1: r0 = syz_open_dev$sndtimer(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000ac5000), 0x4) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) r2 = memfd_create(&(0x7f0000000080)='dev ', 0x3) write(r2, &(0x7f0000000040)="16", 0x1) sendfile(r1, r2, &(0x7f0000000000), 0xffff) fcntl$addseals(r2, 0x409, 0xd) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) gettid() dup(0xffffffffffffffff) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(0x0, 0x1004000000016) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$IMCLEAR_L2(r3, 0x80044946, &(0x7f0000000040)=0x7f) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}}) 16:19:50 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000500)='cgroup.procs\x00', 0x2, 0x0) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x5}, 0x2c) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x8, 0x4, 0x100000001, 0x0, r2}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r3, &(0x7f00000002c0)}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x200, &(0x7f0000000140), 0x0, &(0x7f0000000080), &(0x7f0000000180)) mknod(&(0x7f0000f80000)='./file0\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$bt_hidp(0x1f, 0x3, 0x6) syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000002c0)=""/183, &(0x7f00000003c0)=0xb7) ptrace(0x10, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000080)=0x4c000000, 0x10a000d50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f00000000c0)="c66c", &(0x7f0000000540)="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", 0x3}, 0x20) 16:19:50 executing program 0: r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000500)='cgroup.procs\x00', 0x2, 0x0) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x5}, 0x2c) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x8, 0x4, 0x100000001, 0x0, r1}, 0x2c) bpf$MAP_DELETE_ELEM(0xe, &(0x7f0000000200)={r2, &(0x7f00000002c0)}, 0x10) clone(0x200, &(0x7f0000000180), 0x0, &(0x7f0000000080), &(0x7f0000000180)) mknod(&(0x7f0000f80000)='./file0\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$bt_hidp(0x1f, 0x3, 0x6) syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000002c0)=""/183, &(0x7f00000003c0)=0xb7) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) ptrace(0x10, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r0, &(0x7f0000000080)=0x4c000000, 0x10a000d50) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r3, 0x114, 0xa, &(0x7f0000000140)=ANY=[@ANYBLOB="02"], 0x1) 16:19:50 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0xc0145401, &(0x7f0000000180)={0x0, 0x3}) 16:19:50 executing program 4: socketpair$unix(0x1, 0x8000100000000001, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'eql\x00\x00\xdf\xdd\x94D\x8f\x15\xcf!\x00', 0xec38ed91f1c74952}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000080)={'eql\x00\x00\xa1\xa9[\x02\xa5?\x00\x00\x03\xca\x00', @ifru_mtu=0x1}) 16:19:50 executing program 3: ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x100, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20002000}, 0xc, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="07000030bee1790eeeeeb9a63961d7f8f70fd409b67b86022cb746d6ea33a0cce36cbf84c3a09ab8d743557f968b2a30370f6d20c08e50a0e005c891f7767dc179f43ed47bcf264192f904655a62278c4fb5b4f3fee2a02c55412ad3a9eaa6c4b5a64dab4a1b9523ca111ca3120465963b7b5246168d7f2e4cd67fa90ff4e6fe1f6c890b3fcf284b9c6d1ff4efbf21599c4a4209fab2da8f", @ANYRES16=r1, @ANYBLOB="040029bd7000fddbdf2503000000180002000800010005000000080001000100000004000400b80004000c00010073797a30000000001400010062726f6164636173742d6c696e6b0000540007000800010017000000080002008f000000080002000100000008000100000000000800030001000000080002000100000008000100000000000800030007000000080004000100000008000200000100001c000700080002000800000008000300010000000800020016000000240007000800040002000000080003000600000008000300090000000800040000800000"], 0xe4}, 0x1, 0x0, 0x0, 0x4000}, 0x44) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet(0x2, 0x1, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000300)={0x0}, &(0x7f0000000340)=0xc) ptrace$getenv(0x4201, r3, 0x6, &(0x7f0000000380)) getsockopt$EBT_SO_GET_ENTRIES(r2, 0x0, 0x83, &(0x7f0000000080)={'f%lter\x00', 0x0, 0x0, 0x0, [], 0x0, 0x0, 0x0}, &(0x7f0000000140)=0x78) 16:19:50 executing program 0: r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000500)='cgroup.procs\x00', 0x2, 0x0) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x5}, 0x2c) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x8, 0x4, 0x100000001, 0x0, r1}, 0x2c) bpf$MAP_DELETE_ELEM(0xf, &(0x7f0000000200)={r2, &(0x7f00000002c0)}, 0x10) clone(0x200, &(0x7f0000000180), 0x0, &(0x7f0000000080), &(0x7f0000000180)) mknod(&(0x7f0000f80000)='./file0\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$bt_hidp(0x1f, 0x3, 0x6) syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000002c0)=""/183, &(0x7f00000003c0)=0xb7) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) ptrace(0x10, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r0, &(0x7f0000000080)=0x4c000000, 0x10a000d50) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r3, 0x114, 0xa, &(0x7f0000000140)=ANY=[@ANYBLOB="02"], 0x1) 16:19:50 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0xc0189436, &(0x7f0000000180)={0x0, 0x3}) 16:19:51 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0xc020660b, &(0x7f0000000180)={0x0, 0x3}) 16:19:51 executing program 0: r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000500)='cgroup.procs\x00', 0x2, 0x0) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x5}, 0x2c) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x8, 0x4, 0x100000001, 0x0, r1}, 0x2c) bpf$MAP_DELETE_ELEM(0x10, &(0x7f0000000200)={r2, &(0x7f00000002c0)}, 0x10) clone(0x200, &(0x7f0000000180), 0x0, &(0x7f0000000080), &(0x7f0000000180)) mknod(&(0x7f0000f80000)='./file0\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$bt_hidp(0x1f, 0x3, 0x6) syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000002c0)=""/183, &(0x7f00000003c0)=0xb7) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) ptrace(0x10, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r0, &(0x7f0000000080)=0x4c000000, 0x10a000d50) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r3, 0x114, 0xa, &(0x7f0000000140)=ANY=[@ANYBLOB="02"], 0x1) [ 2091.418114] IPVS: ftp: loaded support on port[0] = 21 16:19:51 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0xc0505405, &(0x7f0000000180)={0x0, 0x3}) 16:19:51 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000500)='cgroup.procs\x00', 0x2, 0x0) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x5}, 0x2c) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x8, 0x4, 0x100000001, 0x0, r2}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r3, &(0x7f00000002c0)}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x200, &(0x7f0000000180), 0x0, &(0x7f0000000080), &(0x7f0000000180)) mknod(&(0x7f0000f80000)='./file0\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$bt_hidp(0x1f, 0x3, 0x6) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000002c0)=""/183, &(0x7f00000003c0)=0xb7) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x66, &(0x7f00000000c0)={0x0, 0x80000001}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000140)={0x7ff, 0xbbadc32829b7eb60, 0x7478, 0x800, r5}, 0x10) ptrace(0x10, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000080)=0x4c000000, 0x10a000d50) 16:19:51 executing program 1: r0 = syz_open_dev$sndtimer(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000ac5000), 0x4) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) r2 = memfd_create(&(0x7f0000000080)='dev ', 0x3) write(r2, &(0x7f0000000040)="16", 0x1) sendfile(r1, r2, &(0x7f0000000000), 0xffff) fcntl$addseals(r2, 0x409, 0xd) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) r3 = gettid() dup(0xffffffffffffffff) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r3, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$IMCLEAR_L2(r4, 0x80044946, &(0x7f0000000040)=0x7f) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}}) 16:19:51 executing program 0: r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000500)='cgroup.procs\x00', 0x2, 0x0) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x5}, 0x2c) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x8, 0x4, 0x100000001, 0x0, r1}, 0x2c) bpf$MAP_DELETE_ELEM(0x11, &(0x7f0000000200)={r2, &(0x7f00000002c0)}, 0x10) clone(0x200, &(0x7f0000000180), 0x0, &(0x7f0000000080), &(0x7f0000000180)) mknod(&(0x7f0000f80000)='./file0\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$bt_hidp(0x1f, 0x3, 0x6) syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000002c0)=""/183, &(0x7f00000003c0)=0xb7) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) ptrace(0x10, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r0, &(0x7f0000000080)=0x4c000000, 0x10a000d50) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r3, 0x114, 0xa, &(0x7f0000000140)=ANY=[@ANYBLOB="02"], 0x1) 16:19:51 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0xc0f85403, &(0x7f0000000180)={0x0, 0x3}) 16:19:51 executing program 4: socketpair$unix(0x1, 0x8000100000000001, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'eql\x00\x00\xdf\xdd\x94D\x8f\x15\xcf!\x00', 0xec38ed91f1c74952}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000080)={'eql\x00\x00\xa1\xa9[\x03\xa6?\x00\x00\x03\xca\x00', @ifru_mtu=0x1}) 16:19:51 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000500)='cgroup.procs\x00', 0x2, 0x0) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x5}, 0x2c) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x8, 0x4, 0x100000001, 0x4, r2}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r3, &(0x7f00000002c0)}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x200, &(0x7f0000000180), 0x0, &(0x7f0000000080), &(0x7f0000000180)) mknod(&(0x7f0000f80000)='./file0\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x3, 0x2) ioctl$TIOCSSOFTCAR(r4, 0x541a, &(0x7f0000000140)=0x7) socket$bt_hidp(0x1f, 0x3, 0x6) syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000002c0)=""/183, &(0x7f00000003c0)=0xb7) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r0, 0x4010ae74, &(0x7f00000000c0)={0x674, 0x8, 0x9}) ptrace(0x10, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000080)=0x4c000000, 0x10a000d50) prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000180)) [ 2091.963607] chnl_net:caif_netlink_parms(): no params data found [ 2092.085003] net_ratelimit: 10 callbacks suppressed [ 2092.085011] protocol 88fb is buggy, dev hsr_slave_0 [ 2092.095165] protocol 88fb is buggy, dev hsr_slave_1 [ 2092.100357] protocol 88fb is buggy, dev hsr_slave_0 [ 2092.105511] protocol 88fb is buggy, dev hsr_slave_1 [ 2092.110698] protocol 88fb is buggy, dev hsr_slave_0 [ 2092.115846] protocol 88fb is buggy, dev hsr_slave_1 [ 2092.264428] bridge0: port 1(bridge_slave_0) entered blocking state [ 2092.271007] bridge0: port 1(bridge_slave_0) entered disabled state [ 2092.279296] device bridge_slave_0 entered promiscuous mode [ 2092.287284] bridge0: port 2(bridge_slave_1) entered blocking state [ 2092.305080] bridge0: port 2(bridge_slave_1) entered disabled state [ 2092.312270] device bridge_slave_1 entered promiscuous mode [ 2092.337914] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 2092.347864] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 2092.365026] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 2092.373497] team0: Port device team_slave_0 added [ 2092.379626] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 2092.387386] team0: Port device team_slave_1 added [ 2092.393200] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 2092.400983] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 2092.423917] device hsr_slave_0 entered promiscuous mode [ 2092.429959] device hsr_slave_1 entered promiscuous mode [ 2092.435972] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 2092.442984] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 2092.460792] bridge0: port 2(bridge_slave_1) entered blocking state [ 2092.467240] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2092.473833] bridge0: port 1(bridge_slave_0) entered blocking state [ 2092.480283] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2092.522152] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2092.531868] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 2092.542272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2092.550160] bridge0: port 1(bridge_slave_0) entered disabled state [ 2092.557997] bridge0: port 2(bridge_slave_1) entered disabled state [ 2092.572115] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 2092.578712] 8021q: adding VLAN 0 to HW filter on device team0 [ 2092.589390] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2092.597109] bridge0: port 1(bridge_slave_0) entered blocking state [ 2092.603618] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2092.613762] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2092.622111] bridge0: port 2(bridge_slave_1) entered blocking state [ 2092.628561] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2092.651453] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2092.659380] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2092.668319] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2092.681142] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2092.693705] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2092.705209] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 2092.711502] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2092.719562] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2092.734738] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 2092.748846] 8021q: adding VLAN 0 to HW filter on device batadv0 16:19:52 executing program 1: r0 = syz_open_dev$sndtimer(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000ac5000), 0x4) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) r2 = memfd_create(&(0x7f0000000080)='dev ', 0x3) write(r2, &(0x7f0000000040)="16", 0x1) sendfile(r1, r2, &(0x7f0000000000), 0xffff) fcntl$addseals(r2, 0x409, 0xd) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) r3 = gettid() dup(0xffffffffffffffff) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1004000000016) pipe2(0x0, 0x80000) ioctl$IMCLEAR_L2(0xffffffffffffffff, 0x80044946, &(0x7f0000000040)=0x7f) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}}) 16:19:52 executing program 4: socketpair$unix(0x1, 0x8000100000000001, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'eql\x00\x00\xdf\xdd\x94D\x8f\x15\xcf!\x00', 0xec38ed91f1c74952}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000080)={'eql\x00\x00\xa1\xa9[\x01\xa7?\x00\x00\x03\xca\x00', @ifru_mtu=0x1}) 16:19:52 executing program 3: ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet(0x2, 0x1, 0x0) ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000000)) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x83, &(0x7f0000000080)={'f%lter\x00', 0x0, 0x0, 0x0, [], 0x0, 0x0, 0x0}, &(0x7f0000000140)=0x78) 16:19:52 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000180)={0xfdfdffff, 0x3}) 16:19:52 executing program 0: r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000500)='cgroup.procs\x00', 0x2, 0x0) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x5}, 0x2c) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x8, 0x4, 0x100000001, 0x0, r1}, 0x2c) bpf$MAP_DELETE_ELEM(0x12, &(0x7f0000000200)={r2, &(0x7f00000002c0)}, 0x10) clone(0x200, &(0x7f0000000180), 0x0, &(0x7f0000000080), &(0x7f0000000180)) mknod(&(0x7f0000f80000)='./file0\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$bt_hidp(0x1f, 0x3, 0x6) syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000002c0)=""/183, &(0x7f00000003c0)=0xb7) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) ptrace(0x10, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r0, &(0x7f0000000080)=0x4c000000, 0x10a000d50) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r3, 0x114, 0xa, &(0x7f0000000140)=ANY=[@ANYBLOB="02"], 0x1) 16:19:52 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000500)='cgroup.procs\x00', 0x2, 0x0) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x5}, 0x2c) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x8, 0x4, 0x100000001, 0x0, r2}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r3, &(0x7f00000002c0)}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x200, &(0x7f0000000180), 0x0, &(0x7f0000000080), &(0x7f0000000180)) mknod(&(0x7f0000f80000)='./file0\x00', 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r4, 0x6, 0x1, &(0x7f00000000c0), 0x4) socket$bt_hidp(0x1f, 0x3, 0x6) r5 = gettid() syz_open_procfs(r5, &(0x7f0000000080)='pagemap\x00') getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000002c0)=""/183, &(0x7f00000003c0)=0xb7) ptrace(0x10, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000080)=0x4c000000, 0x10a000d50) [ 2092.825025] protocol 88fb is buggy, dev hsr_slave_0 [ 2092.830155] protocol 88fb is buggy, dev hsr_slave_1 16:19:52 executing program 0: r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000500)='cgroup.procs\x00', 0x2, 0x0) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x5}, 0x2c) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x8, 0x4, 0x100000001, 0x0, r1}, 0x2c) bpf$MAP_DELETE_ELEM(0x13, &(0x7f0000000200)={r2, &(0x7f00000002c0)}, 0x10) clone(0x200, &(0x7f0000000180), 0x0, &(0x7f0000000080), &(0x7f0000000180)) mknod(&(0x7f0000f80000)='./file0\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$bt_hidp(0x1f, 0x3, 0x6) syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000002c0)=""/183, &(0x7f00000003c0)=0xb7) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) ptrace(0x10, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r0, &(0x7f0000000080)=0x4c000000, 0x10a000d50) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r3, 0x114, 0xa, &(0x7f0000000140)=ANY=[@ANYBLOB="02"], 0x1) 16:19:52 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000180)={0xfffffdfd, 0x3}) [ 2092.945065] protocol 88fb is buggy, dev hsr_slave_0 [ 2092.950212] protocol 88fb is buggy, dev hsr_slave_1 16:19:52 executing program 3: ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x4, 0x1) ioctl$SG_GET_KEEP_ORPHAN(r0, 0x2288, &(0x7f0000000040)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xffff, 0x249, 0xe, 0x0, 0x25}, &(0x7f0000000100)=0x98) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={r1, 0x2}, &(0x7f0000000280)=0xc) r2 = socket$inet(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r2, 0x0, 0x83, &(0x7f0000000080)={'f%lter\x00', 0x0, 0x0, 0x0, [], 0x0, 0x0, 0x0}, &(0x7f0000000140)=0x78) 16:19:52 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000180)={0xfdfdffff00000000, 0x3}) 16:19:52 executing program 3: ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x83, &(0x7f0000000080)={'f%lter\x00', 0x0, 0x0, 0x0, [], 0x0, 0x0, 0x0}, &(0x7f0000000140)=0x78) 16:19:53 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000180)={0x0, 0x3, 0xfdfdffff}) 16:19:53 executing program 1: r0 = syz_open_dev$sndtimer(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000ac5000), 0x4) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) r2 = memfd_create(&(0x7f0000000080)='dev ', 0x3) write(r2, &(0x7f0000000040)="16", 0x1) sendfile(r1, r2, &(0x7f0000000000), 0xffff) fcntl$addseals(r2, 0x409, 0xd) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) r3 = gettid() dup(0xffffffffffffffff) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1004000000016) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$IMCLEAR_L2(r4, 0x80044946, &(0x7f0000000040)=0x7f) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}}) 16:19:53 executing program 4: socketpair$unix(0x1, 0x8000100000000001, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'eql\x00\x00\xdf\xdd\x94D\x8f\x15\xcf!\x00', 0xec38ed91f1c74952}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000080)={'eql\x00\x00\xa1\xa9[\x03\xa8?\x00\x00\x03\xca\x00', @ifru_mtu=0x1}) 16:19:53 executing program 3: ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x200801, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r0, 0x50, &(0x7f0000000180)}, 0x10) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x83, &(0x7f0000000080)={'f%lter\x00', 0x0, 0x0, 0x0, [], 0x0, 0x0, 0x0}, &(0x7f0000000140)=0x78) 16:19:53 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000500)='cgroup.procs\x00', 0x2, 0x0) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x5}, 0x2c) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x8, 0x4, 0x100000001, 0x0, r2}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r3, &(0x7f00000002c0)}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x200, &(0x7f0000000180), 0x0, &(0x7f0000000080), &(0x7f0000000180)) mknod(&(0x7f0000f80000)='./file0\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_CAPBSET_DROP(0x18, 0x1f) socket$bt_hidp(0x1f, 0x3, 0x6) syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000002c0)=""/183, &(0x7f00000003c0)=0xb7) ptrace(0x10, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000080)=0x4c000000, 0x10a000d50) 16:19:53 executing program 0: r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000500)='cgroup.procs\x00', 0x2, 0x0) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x5}, 0x2c) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x8, 0x4, 0x100000001, 0x0, r1}, 0x2c) bpf$MAP_DELETE_ELEM(0x14, &(0x7f0000000200)={r2, &(0x7f00000002c0)}, 0x10) clone(0x200, &(0x7f0000000180), 0x0, &(0x7f0000000080), &(0x7f0000000180)) mknod(&(0x7f0000f80000)='./file0\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$bt_hidp(0x1f, 0x3, 0x6) syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000002c0)=""/183, &(0x7f00000003c0)=0xb7) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) ptrace(0x10, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r0, &(0x7f0000000080)=0x4c000000, 0x10a000d50) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r3, 0x114, 0xa, &(0x7f0000000140)=ANY=[@ANYBLOB="02"], 0x1) 16:19:53 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000180)={0x0, 0x3, 0xfffffdfd}) 16:19:53 executing program 0: r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000500)='cgroup.procs\x00', 0x2, 0x0) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x5}, 0x2c) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x8, 0x4, 0x100000001, 0x0, r1}, 0x2c) bpf$MAP_DELETE_ELEM(0x15, &(0x7f0000000200)={r2, &(0x7f00000002c0)}, 0x10) clone(0x200, &(0x7f0000000180), 0x0, &(0x7f0000000080), &(0x7f0000000180)) mknod(&(0x7f0000f80000)='./file0\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$bt_hidp(0x1f, 0x3, 0x6) syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000002c0)=""/183, &(0x7f00000003c0)=0xb7) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) ptrace(0x10, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r0, &(0x7f0000000080)=0x4c000000, 0x10a000d50) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r3, 0x114, 0xa, &(0x7f0000000140)=ANY=[@ANYBLOB="02"], 0x1) 16:19:53 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000180)={0x0, 0x3, 0xfdfdffff00000000}) 16:19:53 executing program 3: r0 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x1, 0x8200) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x83, &(0x7f0000000080)={'f%lter\x00', 0x0, 0x0, 0x0, [], 0x0, 0x0, 0x0}, &(0x7f0000000140)=0x78) 16:19:53 executing program 3: ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) r0 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r0, 0xc0bc5310, &(0x7f0000000180)) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$LOOP_SET_FD(r0, 0x4c00, r0) getresgid(&(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000140)) vmsplice(r0, &(0x7f0000001580)=[{&(0x7f0000000040)="e9af4515e82a1bcc6e596f15cc4dd441c3f1b98fd318", 0x16}, {&(0x7f0000000100)="e4d66565197f217d3f7aec6d23372eb4efdcbc1ffcd28070a8913c91f79e27ae2a21d3d1da", 0x25}, {&(0x7f0000000240)="8098ffa8afa108acb72c829f44a83320fa5fca71889a5beb708bea6ea934834ef8ca891b41b382f1aa396b58edc3bc40625c0a0e7fac0afee83774c20575e351759dfb74675b92399748c1a1db8c7b3d69773dd17527f185ab985812e27c665e727e5a57d95b1f8ff381706aec8aef790abc135331f99ea7f311aeeeac8295d4eb1727653793ca4f721e134a24c9fc6e029d3cb0a1c3c36b1386181b6577ca4e14cc4b853df38d771cf8b8197d6fcc8e0d5c89d5f9f91554ed7ad7bce4d9569abbf1d97ebf19e157b67606d7c9fe83e3cd1b0599abcab684459cc59462d9fe71fb0026af94a6ef3505", 0xe9}, {&(0x7f0000000340)="5c90fce3f634b8c1e9f35d7047e8e121795ff90cbf5e453090d93f54036c4ca67bc4d2f99e27e5aaf3ca372c76c94925b2480dc95b76b11088151a8a38460b937d9e1a816d6553945a10dcce8d18595f47ade415dcad9e130832869a66eff10f9a3d1c111e45b45390dc4d7f97c6f1ae63988a619111af9de22b524afd05a7e4911c7fda4073c8c896c05e3050b27de1f9d48599aa187214c8f3a43e278d17bc4ee10db1f344c9a981d9502b4c1a3bca6a3ec424cb4b04ee5602dcf71db616e2d9c648386bd075f41af95073994e493f6c3c21374d0ea500cb08434e1c7acff10974e10a8333ea4550475116c41f12d40c9bb02517a8a3", 0xf7}, {&(0x7f0000000440)="f00790b4866dd48dcda431d90efd1243ebc6efc0ecd352bd75ea38f46ed05d30f2ea8e5d9359a11c24db113467e38ae463fd13044b178891ad823eb4100f", 0x3e}, {&(0x7f0000000480)="909c8b9597f9f30cfe82ea4acab01c3bff609eab25139f1b59fc5ad377cc89c5cbaa4a375632c81d8da6183e95b130e0b1bb3ac1cb3bd0269d", 0x39}, {&(0x7f00000004c0)="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", 0x1000}, {&(0x7f00000014c0)="94d73022657cefe2b97b3c2c1c631e97fadacc545c8295e925318af544783ccd08e94608f382c91a7e7de1cccc33713ca71ed37ebccc837c19ca08d638cdd5b9d4be71cd35915d1b17735d8c4308114a7eca72094a5872fcbc69c2784ecf4ece70815f7b0a66fd3e33f3adf971e3f9bcd50f9f51b69873bfba101a76b94f2b4f6707239955b4fa937281f06e415ee88f0006b490250b0f840e9080c71649b82ada5cd7de41abbd75e6daa5d17ae5197a7951b77d0148c323", 0xb8}], 0x8, 0x4) socket$inet(0x2, 0x1, 0x0) 16:19:53 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000180)={0x0, 0x3, 0x0, 0xfdfdffff}) 16:19:53 executing program 4: socketpair$unix(0x1, 0x8000100000000001, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'eql\x00\x00\xdf\xdd\x94D\x8f\x15\xcf!\x00', 0xec38ed91f1c74952}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000080)={'eql\x00\x00\xa1\xa9[\x02\xa9?\x00\x00\x03\xca\x00', @ifru_mtu=0x1}) 16:19:54 executing program 1: r0 = syz_open_dev$sndtimer(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000ac5000), 0x4) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) r2 = memfd_create(&(0x7f0000000080)='dev ', 0x3) write(r2, &(0x7f0000000040)="16", 0x1) sendfile(r1, r2, &(0x7f0000000000), 0xffff) fcntl$addseals(r2, 0x409, 0xd) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) r3 = gettid() dup(0xffffffffffffffff) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1004000000016) pipe2(&(0x7f0000000000), 0x0) ioctl$IMCLEAR_L2(0xffffffffffffffff, 0x80044946, &(0x7f0000000040)=0x7f) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}}) 16:19:54 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000500)='cgroup.procs\x00', 0x2, 0x0) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x5}, 0x2c) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x8, 0x4, 0x100000001, 0x0, r2}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r3, &(0x7f00000002c0)}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x200, &(0x7f0000000180), 0x0, &(0x7f0000000080), &(0x7f0000000180)) mknod(&(0x7f0000f80000)='./file0\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$bt_hidp(0x1f, 0x3, 0x6) syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000002c0)=""/183, &(0x7f00000003c0)=0xb7) ptrace(0x10, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000080)=0x4c000000, 0x10a000d50) socket$inet_sctp(0x2, 0x5, 0x84) 16:19:54 executing program 0: r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000500)='cgroup.procs\x00', 0x2, 0x0) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x5}, 0x2c) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x8, 0x4, 0x100000001, 0x0, r1}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r2, &(0x7f00000002c0)}, 0x70) clone(0x200, &(0x7f0000000180), 0x0, &(0x7f0000000080), &(0x7f0000000180)) mknod(&(0x7f0000f80000)='./file0\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$bt_hidp(0x1f, 0x3, 0x6) syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000002c0)=""/183, &(0x7f00000003c0)=0xb7) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) ptrace(0x10, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r0, &(0x7f0000000080)=0x4c000000, 0x10a000d50) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r3, 0x114, 0xa, &(0x7f0000000140)=ANY=[@ANYBLOB="02"], 0x1) 16:19:54 executing program 3: ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000000)='./file0\x00', 0x80080, 0x8) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ff8000/0x1000)=nil, 0x1000}, &(0x7f0000000100)=0x10) r1 = socket$inet(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x83, &(0x7f0000000080)={'f%lter\x00', 0x0, 0x0, 0x0, [], 0x0, 0x0, 0x0}, &(0x7f0000000140)=0x78) r2 = accept4(r0, &(0x7f0000000200)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000000280)=0x80, 0x80800) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f00000002c0)={@mcast2, 0x5, r3}) link(&(0x7f0000000400)='./file1\x00', &(0x7f0000000440)='./file0\x00') getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000300)={0x0, 0x8}, &(0x7f0000000340)=0x8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000380)={r4, 0xd7}, &(0x7f00000003c0)=0x8) getsockopt$inet6_buf(r0, 0x29, 0xd7, &(0x7f0000000180)=""/40, &(0x7f00000001c0)=0x28) 16:19:54 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000180)={0x0, 0x3, 0x0, 0xfffffdfd}) 16:19:54 executing program 4: socketpair$unix(0x1, 0x8000100000000001, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'eql\x00\x00\xdf\xdd\x94D\x8f\x15\xcf!\x00', 0xec38ed91f1c74952}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000080)={'eql\x00\x00\xa1\xa9[\x03\xa9?\x00\x00\x03\xca\x00', @ifru_mtu=0x1}) 16:19:54 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000180)={0x0, 0x3, 0x0, 0xfdfdffff00000000}) 16:19:54 executing program 0: r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000500)='cgroup.procs\x00', 0x2, 0x0) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x5}, 0x2c) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x8, 0x4, 0x100000001, 0x0, r1}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r2, &(0x7f00000002c0)}, 0x20000210) clone(0x200, &(0x7f0000000180), 0x0, &(0x7f0000000080), &(0x7f0000000180)) mknod(&(0x7f0000f80000)='./file0\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$bt_hidp(0x1f, 0x3, 0x6) syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000002c0)=""/183, &(0x7f00000003c0)=0xb7) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) ptrace(0x10, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r0, &(0x7f0000000080)=0x4c000000, 0x10a000d50) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r3, 0x114, 0xa, &(0x7f0000000140)=ANY=[@ANYBLOB="02"], 0x1) 16:19:54 executing program 3: ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, 0x0) clone(0x408, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet(0x2, 0x1, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r1, &(0x7f0000000040)={0x28, 0x3, 0x0, {0x2, 0x7, 0x0, 'f%lter\x00'}}, 0x28) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x83, &(0x7f0000000080)={'f%lter\x00', 0x0, 0x0, 0x0, [], 0x0, 0x0, 0x0}, &(0x7f0000000140)=0x78) 16:19:54 executing program 0: r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000500)='cgroup.procs\x00', 0x2, 0x0) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x5}, 0x2c) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x8, 0x4, 0x100000001, 0x0, r1}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r2, &(0x7f00000002c0)}, 0x10) clone(0x200, &(0x7f0000000180), 0x0, &(0x7f0000000080), &(0x7f0000000180)) mknod(&(0x7f0000f80000)='./file0\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$bt_hidp(0x1f, 0x3, 0x6) syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000002c0)=""/183, &(0x7f00000003c0)=0xb7) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) ptrace(0x10, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r0, &(0x7f0000000080)=0x4c000000, 0x10a000d50) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r3, 0x114, 0xa, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00'], 0x1) 16:19:54 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x0, 0xfdfdffff}) 16:19:54 executing program 3: ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x83, &(0x7f0000000080)={'f%lter\x00', 0x0, 0x0, 0x0, [], 0x0, 0x0, 0x0}, &(0x7f0000000140)=0x78) clone(0x80102000, &(0x7f0000000180)="de4ceb7288e318508aa87101d9651ae55a254a66b5d9f74c21414e381824b05b2ecd648fec3a5e852b672f04152302b97ca1c3924064210f6236b9c8acdbfd87922620156337ff2ee70d2a07e29ebd9cf5cd669e89a69d2d06064ce2f14f7c2813140e07bf0b5d7e48a463f5b62cb3406581c688862e4badc39122ad75d8b5d670a8282f5dc496d2bc7e0c1c", &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000240)="7fed71adf5d3e8887049c0b9032198548ad2b4cf7e1774cf6d66f33bf41016b200a6c139098ddff0c3e1619af2fef9eaa9d8c6b69d93987cf6140f252ece2bba2d529be448780e081d0c6ded883d326183dacb10f7a2b51afc5dfefd4dea53f0a9ec025b865bb78553934f9617d2dd9a364d17f81f622f1649b21f15b2e90d4c985c06e8413344a0f1af949b2f191578cc") 16:19:55 executing program 1: r0 = syz_open_dev$sndtimer(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000ac5000), 0x4) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) r2 = memfd_create(&(0x7f0000000080)='dev ', 0x3) write(r2, &(0x7f0000000040)="16", 0x1) sendfile(r1, r2, &(0x7f0000000000), 0xffff) fcntl$addseals(r2, 0x409, 0xd) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) r3 = gettid() dup(0xffffffffffffffff) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1004000000016) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$IMCLEAR_L2(r4, 0x80044946, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}}) 16:19:55 executing program 4: socketpair$unix(0x1, 0x8000100000000001, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'eql\x00\x00\xdf\xdd\x94D\x8f\x15\xcf!\x00', 0xec38ed91f1c74952}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000080)={'eql\x00\x00\xa1\xa9[\x02\xaa?\x00\x00\x03\xca\x00', @ifru_mtu=0x1}) 16:19:55 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000500)='cgroup.procs\x00', 0x2, 0x0) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x5}, 0x2c) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x8, 0x4, 0x100000001, 0x0, r2}, 0x2c) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f00000000c0)=0x0) ptrace$setopts(0x4206, r4, 0x2, 0x22) fcntl$F_GET_FILE_RW_HINT(r2, 0x40d, &(0x7f0000000100)) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r3, &(0x7f00000002c0)}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x200, &(0x7f0000000180), 0x0, &(0x7f0000000080), &(0x7f0000000180)) mknod(&(0x7f0000f80000)='./file0\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$bt_hidp(0x1f, 0x3, 0x6) syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000002c0)=""/183, &(0x7f00000003c0)=0xb7) ptrace(0x1000010, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000080)=0x4c000000, 0x10a000d50) 16:19:55 executing program 3: ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, 0x0) r0 = add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key$user(&(0x7f0000000180)='user\x00', &(0x7f00000001c0)={'syz', 0x1}, &(0x7f0000000200)="79ee7689e19f56bb88cbd33b090c5fe30b47ee28", 0x14, r0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x80000, 0x0) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f0000000040)={0x5000, 0xf000, 0xff, 0x9, 0x20}) ioctl$RTC_VL_READ(r1, 0x80047013, &(0x7f0000000100)) r2 = socket$inet(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r2, 0x0, 0x83, &(0x7f0000000080)={'f%lter\x00', 0x0, 0x0, 0x0, [], 0x0, 0x0, 0x0}, &(0x7f0000000140)=0x78) syz_open_dev$dri(&(0x7f00000004c0)='/dev/dri/card#\x00', 0x4, 0x200000) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e20, 0x1f, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0xa1f}}, 0x6, 0x9, 0x3e0000000000, 0x5, 0xff}, &(0x7f0000000380)=0x98) timer_create(0x7, &(0x7f0000000440)={0x0, 0x1e}, &(0x7f0000000480)=0x0) timer_delete(r4) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f00000003c0)={r3}, &(0x7f0000000400)=0x8) 16:19:55 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x0, 0xfffffdfd}) 16:19:55 executing program 0: r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000500)='cgroup.procs\x00', 0x2, 0x0) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x5}, 0x2c) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x8, 0x4, 0x100000001, 0x0, r1}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r2, &(0x7f00000002c0)}, 0x10) clone(0x200, &(0x7f0000000180), 0x0, &(0x7f0000000080), &(0x7f0000000180)) mknod(&(0x7f0000f80000)='./file0\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$bt_hidp(0x1f, 0x3, 0x6) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000002c0)=""/183, &(0x7f00000003c0)=0xb7) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) ptrace(0x10, 0x0) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f00000000c0)=0x0) fcntl$getownex(r3, 0x10, &(0x7f0000000100)={0x0, 0x0}) kcmp(r5, r6, 0x0, r1, r2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r0, &(0x7f0000000080)=0x4c000000, 0x10a000d50) r7 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r7, 0x114, 0xa, &(0x7f0000000140)=ANY=[@ANYBLOB="02"], 0x1) 16:19:55 executing program 0: r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000500)='cgroup.procs\x00', 0x2, 0x0) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x5}, 0x2c) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x8, 0x4, 0x100000001, 0x0, r1}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r2, &(0x7f00000002c0)}, 0x10) clone(0x200, &(0x7f0000000180), 0x0, &(0x7f0000000080), &(0x7f0000000180)) mknod(&(0x7f0000f80000)='./file0\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$bt_hidp(0x1f, 0x3, 0x6) syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000002c0)=""/183, &(0x7f00000003c0)=0xb7) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) ptrace(0x4207, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r0, &(0x7f0000000080)=0x4c000000, 0x10a000d50) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r3, 0x114, 0xa, &(0x7f0000000140)=ANY=[@ANYBLOB="02"], 0x1) 16:19:55 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x0, 0xfdfdffff00000000}) 16:19:55 executing program 3: ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet(0x2, 0x3, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x83, &(0x7f0000000080)={'f%lter\x00', 0x0, 0x0, 0x0, [], 0x0, 0x0, 0x0}, &(0x7f0000000140)=0x78) 16:19:55 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x0, 0x0, [0xfdfdffff]}) 16:19:55 executing program 0: r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000500)='cgroup.procs\x00', 0x2, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x5}, 0x2c) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x8, 0x4, 0x100000001, 0x0, r1}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r2, &(0x7f00000002c0)}, 0x10) clone(0x200, &(0x7f0000000180), 0x0, &(0x7f0000000080), &(0x7f0000000180)) r3 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x200080, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000140)={0x3, &(0x7f0000000100)=[{}, {0x0}, {}]}) ioctl$SCSI_IOCTL_DOORUNLOCK(r3, 0x5381) ioctl$DRM_IOCTL_RM_CTX(r3, 0xc0086421, &(0x7f0000000180)={r4, 0x2}) mknod(&(0x7f0000f80000)='./file0\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$bt_hidp(0x1f, 0x3, 0x6) syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000002c0)=""/183, &(0x7f00000003c0)=0xb7) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) ptrace(0x10, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r0, &(0x7f0000000080)=0x4c000000, 0x10a000d50) r5 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r5, 0x114, 0xa, &(0x7f0000000000)=ANY=[@ANYBLOB="2015"], 0x1) 16:19:55 executing program 3: syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x9, 0x140) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x1, 0x0) syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x1, 0x2) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer\x00', 0x2, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rfkill\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x83, &(0x7f0000000080)={'f%lter\x00', 0x0, 0x0, 0x0, [], 0x0, 0x0, 0x0}, &(0x7f0000000140)=0x78) 16:19:55 executing program 1: r0 = syz_open_dev$sndtimer(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000ac5000), 0x4) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) r2 = memfd_create(&(0x7f0000000080)='dev ', 0x3) write(r2, &(0x7f0000000040)="16", 0x1) sendfile(r1, r2, &(0x7f0000000000), 0xffff) fcntl$addseals(r2, 0x409, 0xd) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) r3 = gettid() dup(0xffffffffffffffff) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1004000000016) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$IMCLEAR_L2(r4, 0x80044946, &(0x7f0000000040)) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}}) 16:19:55 executing program 3: ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, 0x0) r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x9, 0x80000) setsockopt$inet_int(r0, 0x0, 0x8, &(0x7f0000000040)=0x3, 0x4) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x83, &(0x7f0000000080)={'f%lter\x00', 0x0, 0x0, 0x0, [], 0x0, 0x0, 0x0}, &(0x7f0000000140)=0x78) 16:19:55 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x0, 0x0, [0xfffffdfd]}) 16:19:55 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000500)='cgroup.procs\x00', 0x2, 0x0) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x5}, 0x2c) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x8, 0x4, 0x100000001, 0x0, r2}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r3, &(0x7f00000002c0)}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x200, &(0x7f0000000180), 0x0, &(0x7f0000000080), &(0x7f0000000180)) mknod(&(0x7f0000f80000)='./file0\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$bt_hidp(0x1f, 0x3, 0x6) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000002c0)=""/183, &(0x7f00000003c0)=0xb7) ptrace(0x10, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000080)=0x4c000000, 0x10a000d50) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000400)={0x0, @in6={{0xa, 0x4e22, 0x8, @mcast2, 0x7}}}, &(0x7f0000000180)=0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f00000001c0)={0xa4c, 0x8, 0x8, 0x8, 0xfffffffffffffff8, 0x3, 0x100, 0x1, r5}, &(0x7f0000000240)=0x20) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value={0x0, 0x6b}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f0000000140)={r6, 0x200, 0x40}, 0x8) 16:19:55 executing program 4: socketpair$unix(0x1, 0x8000100000000001, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'eql\x00\x00\xdf\xdd\x94D\x8f\x15\xcf!\x00', 0xec38ed91f1c74952}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000080)={'eql\x00\x00\xa1\xa9[\x01\xac?\x00\x00\x03\xca\x00', @ifru_mtu=0x1}) 16:19:55 executing program 0: r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000500)='cgroup.procs\x00', 0x2, 0x0) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x5}, 0x2c) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x8, 0x4, 0x100000001, 0x0, r1}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r2, &(0x7f00000002c0)}, 0x10) clone(0x200, &(0x7f0000000180), 0x0, &(0x7f0000000080), &(0x7f0000000180)) mknod(&(0x7f0000f80000)='./file0\x00', 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$bt_hidp(0x1f, 0x3, 0x6) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000002c0)=""/183, &(0x7f00000003c0)=0xb7) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) ptrace(0x10, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r0, &(0x7f0000000080)=0x4c000000, 0x10a000d50) getresuid(&(0x7f0000000000)=0x0, &(0x7f00000000c0), &(0x7f0000000100)) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@dev, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@initdev}}, &(0x7f0000000180)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000000540)={{{@in=@initdev, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@initdev}}, &(0x7f00000001c0)=0xe8) ioctl$VHOST_GET_FEATURES(r4, 0x8008af00, &(0x7f0000000240)) setresuid(r5, r6, r7) r8 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r8, 0x114, 0xa, &(0x7f0000000140)=ANY=[@ANYBLOB="02"], 0x1) 16:19:56 executing program 3: ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/softnet_stat\x00') r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x200000, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x83, &(0x7f0000000080)={'f%lter\x00', 0x0, 0x0, 0x0, [], 0x0, 0x0, 0x0}, &(0x7f0000000140)=0x78) 16:19:56 executing program 0: r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000500)='cgroup.procs\x00', 0x2, 0x0) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x5}, 0x2c) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x8, 0x4, 0x100000001, 0x0, r1}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r2, &(0x7f00000002c0)}, 0x10) clone(0x200, &(0x7f0000000180), 0x0, &(0x7f0000000080), &(0x7f0000000180)) mknod(&(0x7f0000f80000)='./file0\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$bt_hidp(0x1f, 0x3, 0x6) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000002c0)=""/183, &(0x7f00000003c0)=0xb7) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) ptrace(0x10, 0x0) setsockopt$inet6_MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f00000000c0)={{0xa, 0x4e21, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x957}, {0xa, 0x4e24, 0x7, @empty, 0x5}, 0x401, [0x6, 0x7fffffff, 0x7fff, 0x1f, 0x1, 0x4, 0x1000, 0x8]}, 0x5c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r0, &(0x7f0000000080)=0x4c000000, 0x10a000d50) r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r4, 0x114, 0xa, &(0x7f0000000140)=ANY=[@ANYBLOB="02"], 0x1) 16:19:56 executing program 3: ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet(0x2, 0x1, 0x0) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x802, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0x80045500, &(0x7f0000000040)) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x83, &(0x7f0000000080)={'f%lter\x00', 0x0, 0x0, 0x0, [], 0x0, 0x0, 0x0}, &(0x7f0000000140)=0x78) 16:19:56 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x0, 0x0, [0xfdfdffff00000000]}) 16:19:56 executing program 0: r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000500)='cgroup.procs\x00', 0x2, 0x0) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x8, 0x20080) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x5}, 0x2c) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x8, 0x4, 0x100000001, 0x0, r1}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r2, &(0x7f00000002c0)}, 0x10) clone(0x200, &(0x7f0000000180), 0x0, &(0x7f0000000080), &(0x7f0000000180)) mknod(&(0x7f0000f80000)='./file0\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$bt_hidp(0x1f, 0x3, 0x6) syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000002c0)=""/183, &(0x7f00000003c0)=0xb7) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) ptrace(0x10, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r0, &(0x7f0000000080)=0x4c000000, 0x10a000d50) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r3, 0x114, 0xa, &(0x7f0000000140)=ANY=[@ANYBLOB="02"], 0x1) 16:19:56 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000500)='cgroup.procs\x00', 0x2, 0x0) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x5}, 0x2c) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x8, 0x4, 0x100000001, 0x0, r2}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r3, &(0x7f00000002c0)}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x200, &(0x7f0000000180), 0x0, &(0x7f0000000080), &(0x7f0000000180)) mknod(&(0x7f0000f80000)='./file0\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$bt_hidp(0x1f, 0x3, 0x6) syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000002c0)=""/183, &(0x7f00000003c0)=0xb7) ptrace(0x10, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000080)=0x4c000000, 0x10a000d50) 16:19:56 executing program 1: syz_open_dev$sndtimer(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000ac5000), 0x4) sendmmsg$unix(r0, &(0x7f00000bd000), 0x80, 0x0) r1 = memfd_create(&(0x7f0000000080)='dev ', 0x3) write(r1, &(0x7f0000000040)="16", 0x1) sendfile(r0, r1, &(0x7f0000000000), 0xffff) fcntl$addseals(r1, 0x409, 0xd) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) r2 = gettid() dup(0xffffffffffffffff) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1004000000016) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$IMCLEAR_L2(r3, 0x80044946, &(0x7f0000000040)=0x7f) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}}) 16:19:56 executing program 3: ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21, 0x2, 'dh\x00', 0x2, 0x2, 0x4c}, 0x2c) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast1, @broadcast, @local}, 0xc) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x83, &(0x7f0000000080)={'f%lter\x00', 0x0, 0x0, 0x0, [], 0x0, 0x0, 0x0}, &(0x7f0000000140)=0x78) 16:19:56 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x0, 0x0, [0x0, 0xfdfdffff]}) 16:19:56 executing program 4: socketpair$unix(0x1, 0x8000100000000001, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'eql\x00\x00\xdf\xdd\x94D\x8f\x15\xcf!\x00', 0xec38ed91f1c74952}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000080)={'eql\x00\x00\xa1\xa9[\x03\xac?\x00\x00\x03\xca\x00', @ifru_mtu=0x1}) 16:19:56 executing program 0: r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000500)='cgroup.procs\x00', 0x2, 0x0) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x5}, 0x2c) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x8, 0x4, 0x100000001, 0x0, r1}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r2, &(0x7f00000002c0)}, 0x10) clone(0x200, &(0x7f0000000180), 0x0, &(0x7f0000000080), &(0x7f0000000180)) mknod(&(0x7f0000f80000)='./file0\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$bt_hidp(0x1f, 0x3, 0x6) write(r0, &(0x7f0000000400)="f85f1c064fa26f38d05e160371621e6296467b9b080bf805297f910f19fec2ea4baa0b4f2f2b3057d64e2eee471e8c89934612fa3d32110a794a6689214e90b1fb3dd1b998b3aa575b7b0b306a7320176566599bce15e0efe9bd74877dd9dfcb608cbbad52980c852ce8460814c51fed0f0e8ec9a517cf7129d8b33e11034ef97a5503ac22835f588d4a2795f32abf", 0x8f) syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000002c0)=""/183, &(0x7f00000003c0)=0xb7) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) ptrace(0x10, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r0, &(0x7f0000000080)=0x4c000000, 0x10a000d50) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r3, 0x114, 0xa, &(0x7f0000000140)=ANY=[@ANYBLOB="02"], 0x1) 16:19:56 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000500)='cgroup.procs\x00', 0x2, 0x0) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x5}, 0x2c) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x8, 0x4, 0x100000001, 0x0, r2}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r3, &(0x7f00000002c0)}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x200, &(0x7f0000000180), 0x0, &(0x7f0000000080), &(0x7f0000000180)) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mknod(&(0x7f0000f80000)='./file0\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$bt_hidp(0x1f, 0x3, 0x6) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f0000000400)=""/183, &(0x7f00000003c0)=0xffffffa0) ptrace(0x10, 0x0) ioctl$SCSI_IOCTL_DOORUNLOCK(r4, 0x5381) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000080)=0x4c000000, 0x10a000d50) bind$rds(r0, &(0x7f00000000c0)={0x2, 0x4e23, @rand_addr=0x7}, 0x10) 16:19:56 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) dup2(r0, r0) r1 = openat$cgroup_procs(r0, &(0x7f0000000500)='cgroup.procs\x00', 0x2, 0x0) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x5}, 0x2c) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x8, 0x4, 0x100000001, 0x0, r2}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r3, &(0x7f00000002c0)}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x200, &(0x7f0000000180), 0x0, &(0x7f0000000080), &(0x7f0000000180)) mknod(&(0x7f0000f80000)='./file0\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$bt_hidp(0x1f, 0x3, 0x6) syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000002c0)=""/183, &(0x7f00000003c0)=0xb7) ptrace(0x10, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000080)=0x4c000000, 0x10a000d50) [ 2097.124997] net_ratelimit: 22 callbacks suppressed [ 2097.125006] protocol 88fb is buggy, dev hsr_slave_0 [ 2097.135095] protocol 88fb is buggy, dev hsr_slave_1 [ 2097.148661] IPVS: ip_vs_svc_hash(): request for already hashed, called from do_ip_vs_set_ctl+0x1b5d/0x1da0 16:19:56 executing program 3: r0 = syz_open_dev$radio(&(0x7f00000001c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0xffffffffffffffff) syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x5, 0x200) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x2, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) r1 = syz_open_dev$amidi(&(0x7f0000000180)='/dev/amidi#\x00', 0x1ff, 0x1) ioctl$DRM_IOCTL_MODE_SETCRTC(r1, 0xc06864a2, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x8000000000080) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r2, 0x40505331, &(0x7f0000000140)={{}, {0x4}}) r3 = socket$inet(0x2, 0x80800, 0x40) getsockopt$EBT_SO_GET_ENTRIES(r3, 0x0, 0x83, &(0x7f0000000080)={'f%lter\x00', 0x0, 0x0, 0x0, [], 0x0, 0x0, 0x0}, &(0x7f0000000140)=0x78) 16:19:56 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x0, 0x0, [0x0, 0xfffffdfd]}) [ 2097.208133] IPVS: ip_vs_svc_hash(): request for already hashed, called from do_ip_vs_set_ctl+0x1b5d/0x1da0 [ 2097.296036] protocol 88fb is buggy, dev hsr_slave_0 [ 2097.301806] protocol 88fb is buggy, dev hsr_slave_1 16:19:57 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x0, 0x0, [0x0, 0xfdfdffff00000000]}) 16:19:57 executing program 0: r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000500)='cgroup.procs\x00', 0x2, 0x0) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/qat_adf_ctl\x00', 0x200000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000440)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r1, &(0x7f00000004c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0xb737, @local, 0xfffffffffffffff9}, r2}}, 0x30) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x5}, 0x2c) r4 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x1f, 0xf18a0a9583a14e02) getsockopt$inet_sctp6_SCTP_NODELAY(r4, 0x84, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x8, 0x4, 0x100000001, 0x0, r3}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r5, &(0x7f00000002c0)}, 0x10) clone(0x200, &(0x7f0000000000), 0x0, &(0x7f0000000080), &(0x7f0000000180)="000000000000007b6a4abaec081a34b721490e28e973eb558f22dc07711cf791b53f73d321689b300cfbe3c0f2cc1beafcec514ce1e17e93e6db72cd80cfb6020a6a5e0b7a1a74556e5857ebedf0640c3c3e47e1ed9d7423d7898d93f133a9e27969d285737a43b38447204f50") mknod(&(0x7f0000f80000)='./file0\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$bt_hidp(0x1f, 0x3, 0x6) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000002c0)=""/183, &(0x7f00000003c0)=0xb7) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) ptrace(0x10, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r0, &(0x7f0000000080)=0x4c000000, 0x10a000d50) r7 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r7, 0x114, 0xa, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00'], 0x1) ioctl$VIDIOC_G_FBUF(r6, 0x8030560a, &(0x7f0000000380)={0x1, 0xe, &(0x7f0000000240)="dbc52d8c77d098bd33736ae39602a2d44cf5d82d4d894dc5fe793878eec6deaa61dce9232259a670aaff5d8ea539453170a4bb6919403b9145896c88b762288b1888d6c1d68d52a075aa1394bfe833", {0x5, 0xffffffff, 0x7b757779, 0x0, 0x1, 0x1, 0x0, 0xffffffffe28a3c0d}}) 16:19:57 executing program 3: ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x420000, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r0, 0x4010641a, &(0x7f0000000100)={0x1, &(0x7f0000000040)=[0x7]}) r1 = socket$inet(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x83, &(0x7f0000000080)={'f%lter\x00', 0x0, 0x0, 0x0, [], 0x0, 0x0, 0x0}, &(0x7f0000000140)=0x78) 16:19:57 executing program 1: r0 = syz_open_dev$sndtimer(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000ac5000), 0x4) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) r2 = memfd_create(&(0x7f0000000080)='dev ', 0x3) write(r2, &(0x7f0000000040)="16", 0x1) sendfile(r1, r2, &(0x7f0000000000), 0xffff) fcntl$addseals(r2, 0x409, 0xd) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) r3 = gettid() dup(0xffffffffffffffff) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1004000000016) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$IMCLEAR_L2(r4, 0x80044946, &(0x7f0000000040)=0x7f) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, 0x0) 16:19:57 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x0, 0x0, [0x0, 0x0, 0xfdfdffff]}) 16:19:57 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000500)='cgroup.procs\x00', 0x2, 0x0) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x5}, 0x2c) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x8, 0x4, 0x100000001, 0x0, r2}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r3, &(0x7f00000002c0)}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x200, &(0x7f0000000180), 0x0, &(0x7f0000000080), &(0x7f0000000180)) mknod(&(0x7f0000f80000)='./file0\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$bt_hidp(0x1f, 0x3, 0x6) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000002c0)=""/183, &(0x7f00000003c0)=0xb7) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f00000000c0)={0x4, 0x0, [{0xf7f, 0x0, 0xff}, {0x0, 0x0, 0x800}, {0x99f, 0x0, 0x5}, {0x400007f7, 0x0, 0x7}]}) ptrace(0x10, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000080)=0x4c000000, 0x10a000d50) 16:19:57 executing program 3: ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet(0x2, 0x1, 0x0) r1 = semget(0x2, 0x3, 0xa) semctl$IPC_STAT(r1, 0x0, 0x2, &(0x7f0000000180)=""/4096) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x83, &(0x7f0000000080)={'f%lter\x00', 0x0, 0x0, 0x0, [], 0x0, 0x0, 0x0}, &(0x7f0000000140)=0x78) 16:19:57 executing program 0: r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000500)='cgroup.procs\x00', 0x2, 0x0) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x5}, 0x2c) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x8, 0x4, 0x100000001, 0x0, r1}, 0x2c) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x41, 0x0) write$UHID_CREATE(r3, &(0x7f0000001540)={0x0, 'syz1\x00', 'syz1\x00', 'syz1\x00', &(0x7f0000000540)=""/4096, 0x1000, 0x4, 0x6, 0x1, 0x42865e60, 0x3ff}, 0x120) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r2, &(0x7f00000002c0)}, 0x10) clone(0x200, &(0x7f0000000180), 0x0, &(0x7f0000000080), &(0x7f0000000180)) mknod(&(0x7f0000f80000)='./file0\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$bt_hidp(0x1f, 0x3, 0x6) syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000002c0)=""/183, &(0x7f00000003c0)=0xb7) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) ptrace(0x10, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r0, &(0x7f0000000080)=0x4c000000, 0x10a000d50) r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r4, 0x114, 0xa, &(0x7f0000000140)=ANY=[@ANYBLOB="02"], 0x1) 16:19:57 executing program 4: socketpair$unix(0x1, 0x8000100000000001, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'eql\x00\x00\xdf\xdd\x94D\x8f\x15\xcf!\x00', 0xec38ed91f1c74952}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000080)={'eql\x00\x00\xa1\xa9[\x03\xad?\x00\x00\x03\xca\x00', @ifru_mtu=0x1}) 16:19:57 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x0, 0x0, [0x0, 0x0, 0xfffffdfd]}) 16:19:57 executing program 3: ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) fstat(0xffffffffffffff9c, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000540)='/dev/dsp\x00', 0x40, 0x0) signalfd4(r3, &(0x7f0000000580)={0x80d}, 0x8, 0x80000) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = getgid() ioctl$UI_SET_LEDBIT(r3, 0x40045569, 0x4) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000480)={0x0, 0x0, 0x0}, &(0x7f00000004c0)=0xc) ioctl$VIDIOC_S_CROP(r3, 0x4014563c, &(0x7f00000005c0)={0x3, {0x1, 0xffffffff00000001, 0xfff}}) setgroups(0x7, &(0x7f0000000500)=[r0, r1, r2, r4, r5, r6, r7]) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, 0x0) r8 = socket$inet(0x2, 0xfffffffffffffffe, 0x101) getsockopt$EBT_SO_GET_ENTRIES(r8, 0x0, 0x83, &(0x7f0000000080)={'f%lter\x00', 0x0, 0x0, 0x0, [], 0xffffffffffffff51, 0x0, 0x0}, &(0x7f0000000000)=0xfe60) openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x20000, 0x0) 16:19:58 executing program 0: r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000500)='cgroup.procs\x00', 0x2, 0x0) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x5}, 0x2c) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x8, 0x4, 0x100000001, 0x0, r1}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r2, &(0x7f00000002c0)}, 0x10) clone(0x200, &(0x7f0000000180), 0x0, &(0x7f0000000080), &(0x7f0000000180)) mknod(&(0x7f0000f80000)='./file0\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$bt_hidp(0x1f, 0x3, 0x6) syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000002c0)=""/183, &(0x7f00000003c0)=0xb7) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) ptrace(0x10, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r0, &(0x7f0000000080)=0x4c000000, 0x10a000d50) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r3, 0x114, 0xa, &(0x7f0000000000)=ANY=[@ANYBLOB="00ca19003bf27dad05b768bf2c787de9d0046c91489902"], 0x1) 16:19:58 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x0, 0x0, [0x0, 0x0, 0xfdfdffff00000000]}) 16:19:58 executing program 3: ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, 0x0) clone(0x4000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x83, &(0x7f0000000080)={'f%lter\x00', 0x0, 0x0, 0x0, [], 0x0, 0x0, 0x0}, &(0x7f0000000140)=0x78) [ 2098.325023] protocol 88fb is buggy, dev hsr_slave_0 [ 2098.330217] protocol 88fb is buggy, dev hsr_slave_1 [ 2098.335412] protocol 88fb is buggy, dev hsr_slave_0 [ 2098.340498] protocol 88fb is buggy, dev hsr_slave_1 [ 2098.345699] protocol 88fb is buggy, dev hsr_slave_0 [ 2098.350798] protocol 88fb is buggy, dev hsr_slave_1 16:19:58 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000500)='cgroup.procs\x00', 0x2, 0x0) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x5}, 0x2c) r3 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vfio/vfio\x00', 0x400, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r3, 0x0, 0x41, &(0x7f0000000140)={'filter\x00', 0x3, [{}, {}, {}]}, 0x58) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x8, 0x4, 0x100000001, 0x0, r2}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r4, &(0x7f00000002c0)}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x200, &(0x7f0000000180), 0x0, &(0x7f0000000080), &(0x7f0000000180)) mknod(&(0x7f0000f80000)='./file0\x00', 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$bt_hidp(0x1f, 0x3, 0x6) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') ioctl$EXT4_IOC_ALLOC_DA_BLKS(r6, 0x660c) getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000002c0)=""/183, &(0x7f00000003c0)=0xb7) ptrace(0x10, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_int(r6, 0x0, 0x3f, &(0x7f00000000c0), 0x4) dup3(r5, r0, 0x80000) sendfile(r1, r1, &(0x7f0000000080)=0x4c000000, 0x10a000d50) 16:19:58 executing program 1: r0 = syz_open_dev$sndtimer(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000ac5000), 0x4) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) r2 = memfd_create(&(0x7f0000000080)='dev ', 0x3) write(r2, &(0x7f0000000040)="16", 0x1) sendfile(r1, r2, &(0x7f0000000000), 0xffff) fcntl$addseals(r2, 0x409, 0xd) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) r3 = gettid() dup(0xffffffffffffffff) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1004000000016) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$IMCLEAR_L2(r4, 0x80044946, &(0x7f0000000040)=0x7f) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x0, 0x0, 0xffefffffffffffff}}) 16:19:58 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xfdfdffff]}) 16:19:58 executing program 0: r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000500)='cgroup.procs\x00', 0x2, 0x0) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x5}, 0x2c) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x11, 0x8, 0x401, 0x100000001, 0x0, r1, 0xfffffffffffffffd}, 0x2c) r3 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x5, 0x4000) ioctl$RTC_WKALM_SET(r3, 0x4028700f, &(0x7f00000000c0)={0x0, 0x0, {0x2a, 0x33, 0x7, 0xb, 0x7, 0x3ff, 0x6, 0x169}}) fcntl$addseals(r0, 0x409, 0x4) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r2, &(0x7f00000002c0)}, 0x10) clone(0x200, &(0x7f0000000180), 0x0, &(0x7f0000000080), &(0x7f0000000180)) mknod(&(0x7f0000f80000)='./file0\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$bt_hidp(0x1f, 0x3, 0x6) syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000002c0)=""/183, &(0x7f00000003c0)=0xb7) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) ptrace(0x10, 0x0) sendfile(r0, r0, &(0x7f0000000080)=0x4c000000, 0x10a000d50) r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r4, 0x114, 0xa, &(0x7f0000000140)=ANY=[@ANYBLOB="02"], 0x1) 16:19:58 executing program 4: socketpair$unix(0x1, 0x8000100000000001, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'eql\x00\x00\xdf\xdd\x94D\x8f\x15\xcf!\x00', 0xec38ed91f1c74952}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000080)={'eql\x00\x00\xa1\xa9[\x02\xb0?\x00\x00\x03\xca\x00', @ifru_mtu=0x1}) 16:19:58 executing program 3: ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x3) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) ioctl$int_out(r0, 0x0, &(0x7f0000000000)) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet(0x2, 0x1, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r0, 0x40206417, &(0x7f0000000040)={0x5, 0x80000000, 0x1, 0xffffffffffffffff, 0x10, 0xfffffffffffffff8}) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x83, &(0x7f0000000080)={'f%lter\x00', 0x0, 0x0, 0x0, [], 0x0, 0x0, 0x0}, &(0x7f0000000140)=0x78) 16:19:58 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000500)='cgroup.procs\x00', 0x2, 0x0) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x5}, 0x2c) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x8, 0x4, 0x100000001, 0x0, r2}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r3, &(0x7f00000002c0)}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x14, 0x1d, 0xfffffffffffffffd, 0x0, 0x0, {0x15}}, 0x14}}, 0x0) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x200, &(0x7f0000000180), 0x0, &(0x7f0000000080), &(0x7f0000000180)) mknod(&(0x7f0000f80000)='./file0\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, &(0x7f00000000c0)='\x00') socket$bt_hidp(0x1f, 0x3, 0x6) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000002c0)=""/183, &(0x7f00000003c0)=0xb7) ptrace(0x10, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r6, 0xc1205531, &(0x7f0000000540)={0xfffffffffffffff8, 0x38000000000000, 0x229b, 0x4, [], [], [], 0xc2e, 0x3, 0x1ff, 0x40, "e976e0ce82cadf8bdc679605bbb1e80b"}) sendfile(r1, r1, &(0x7f0000000080)=0x4c000000, 0x10a000d50) 16:19:58 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xfffffdfd]}) 16:19:58 executing program 3: ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet(0x2, 0x805, 0xffffffffffff7ff5) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f0000000180)={0x0, 0xe8, "ea14ff45313083a72cdf0c073c5cd0d06ce1cb8c778dfdfce2b28fd2c3875a06be9b983fdb2405d1e00ce659dc338bd5373a93a65b57efedbba9172ddc7372adb182154af2a265b4f00be4ec6254f82ace5e168d4c42b0dda35dd27feeab9635cd637c8ae775ba301474eeaf9e3a57b99355e5495dafd79009dc98c669d7247c0fe43774be3f0020f9a34eebee054f63f5d0390425dbf4e2c4890b065ba1f996dddb6b39dedbf213988d573792559a1321e7db168c566832a165d8cbf58f2e5f80c357623e0f599cdb940a604f57b76993eaad45d26518b67627990dbe954f30bc8b40d4d905b83f"}) r1 = socket$inet(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x83, &(0x7f0000000080)={'f%lter\x00', 0x0, 0x0, 0x0, [], 0x0, 0x0, 0x0}, &(0x7f0000000140)=0x78) 16:19:58 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xfdfdffff00000000]}) 16:19:58 executing program 0: r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000500)='cgroup.procs\x00', 0x2, 0x0) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x5}, 0x2c) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x8, 0x4, 0x100000001, 0x0, r1}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r2, &(0x7f00000002c0)}, 0x10) clone(0x200, &(0x7f0000000180), 0x0, &(0x7f0000000080), &(0x7f0000000180)) mknod(&(0x7f0000f80000)='./file0\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$bt_hidp(0x1f, 0x3, 0x6) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffff9c, 0x0, 0x8, &(0x7f0000000240)='pagemap\x00', 0xffffffffffffffff}, 0x30) fcntl$getownex(r0, 0x10, &(0x7f0000000380)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000440)='\xe9\x00'}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0x9, &(0x7f00000004c0)='\\vmnet0,\x00', 0xffffffffffffffff}, 0x30) r4 = syz_open_procfs(r3, &(0x7f0000000580)='smaps\x00') getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000002c0)=""/183, &(0x7f00000003c0)=0xb7) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) ptrace(0x10, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$FUSE_INIT(r4, &(0x7f00000000c0)={0x50, 0xffffffffffffffda, 0x7, {0x7, 0x1c, 0x80, 0x100400, 0x4, 0x2, 0x4, 0x400}}, 0x50) sendfile(r0, r0, &(0x7f0000000080)=0x4c000000, 0x10a000d50) r5 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r5, 0x114, 0xa, &(0x7f0000000140)=ANY=[@ANYBLOB="02"], 0x1) write$P9_ROPEN(r5, &(0x7f0000000000)={0x18, 0x71, 0x1, {{0x40, 0x0, 0x3ffc}, 0x5941}}, 0x18) 16:19:59 executing program 3: ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) r0 = syz_open_dev$midi(&(0x7f0000000100)='/dev/midi#\x00', 0x4, 0x662042) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vsock\x00', 0xb50d7cf4cb7c5d01, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r1, 0xc06864a2, 0x0) r2 = semget$private(0x0, 0x6, 0x46) semctl$IPC_STAT(r2, 0x0, 0x2, &(0x7f00000001c0)=""/207) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x80000, 0x0) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f00000002c0)={0x9, 0x3ff, 0xffffffff80000000}) setxattr$security_smack_transmute(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000400)='TRUE', 0x4, 0x3) write$FUSE_WRITE(r1, &(0x7f0000000340)={0x18, 0xfffffffffffffffe, 0x2, {0x5}}, 0x18) ioctl$sock_inet6_udp_SIOCINQ(r1, 0x541b, &(0x7f00000004c0)) ioctl$UFFDIO_UNREGISTER(r3, 0x8010aa01, &(0x7f0000000300)={&(0x7f0000ff9000/0x4000)=nil, 0x4000}) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000440)=0x1000) clone(0x1014003, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$int_in(r1, 0x5452, &(0x7f0000000040)=0x401) r4 = socket$inet(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r4, 0x0, 0x83, &(0x7f0000000080)={'f%lter\x00', 0x0, 0x0, 0x0, [], 0x0, 0x0, 0x0}, &(0x7f0000000140)=0x78) 16:19:59 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0xfdfdffff]}) 16:19:59 executing program 1: r0 = syz_open_dev$sndtimer(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000ac5000), 0x4) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) r2 = memfd_create(&(0x7f0000000080)='dev ', 0x3) write(r2, &(0x7f0000000040)="16", 0x1) sendfile(r1, r2, &(0x7f0000000000), 0xffff) fcntl$addseals(r2, 0x409, 0xd) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) r3 = gettid() dup(0xffffffffffffffff) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1004000000016) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$IMCLEAR_L2(r4, 0x80044946, &(0x7f0000000040)=0x7f) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)) 16:19:59 executing program 0: r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000500)='cgroup.procs\x00', 0x2, 0x0) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x5}, 0x2c) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x8, 0x4, 0x100000001, 0x0, r1}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r2, &(0x7f00000002c0)}, 0x10) clone(0x200, &(0x7f0000000180), 0x0, &(0x7f0000000080), &(0x7f0000000180)) mknod(&(0x7f0000000100)='./file0\x00', 0x8, 0x3) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$bt_hidp(0x1f, 0x3, 0x6) syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000002c0)=""/183, &(0x7f00000003c0)=0xb7) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) ptrace(0x10, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r0, &(0x7f0000000080)=0x4c000000, 0x10a000d50) r4 = dup3(r3, r3, 0xfffffffffffffffc) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r4, 0x114, 0xa, &(0x7f0000000400)=ANY=[@ANYBLOB="03c77b42e709b7a34ecb71a2e4f122cd8f8cfb44335cb52fd4021cba3e1d3e253bc421206321f239dd2791a7696e87cc5a889d9d628da831bf46cbf409760c640800000061d1dcba7a292372530911b4b6f37601bd86e2f0cab7b6f23d2637b869e9951a828bec4b1c27bbe693189cc0d1ce41a903a4f30458e24ce1a0538653c945974f80ca9f15e9f813d6a11f868ac5640f76"], 0x1) 16:19:59 executing program 3: ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000500)={0x48, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x34, 0x18, [@generic="93f7e147cdcfa5b33bb43ee685d5ac892aae39ee4fdf087c1ecfc987e7a656c32d2336622f8cee227d8bbfedc7"]}]}, 0x48}}, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, 0x0) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) clone(0x1, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet(0x2, 0x1, 0x61dae15e) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x83, &(0x7f0000000080)={'f%lter\x00', 0x0, 0x0, 0x0, [], 0x0, 0x0, 0x0}, &(0x7f0000000140)=0x78) 16:19:59 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0xfffffdfd]}) 16:19:59 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000500)='cgroup.procs\x00', 0x2, 0x0) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x5}, 0x2c) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x8, 0x4, 0x100000001, 0x0, r2}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r3, &(0x7f00000002c0)}, 0x10) lsetxattr$security_evm(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='security.evm\x00', &(0x7f0000000180)=ANY=[@ANYBLOB="0201451292e8b9093f000000a8b53db73e4f2f6fd63f08b1d75212938ca3"], 0x14, 0x3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x200, &(0x7f0000000180), 0x0, &(0x7f0000000080), &(0x7f0000000180)) mknod(&(0x7f0000f80000)='./file0\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$bt_hidp(0x1f, 0x3, 0x6) syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000002c0)=""/183, &(0x7f00000003c0)=0xb7) ptrace(0x10, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000080)=0x4c000000, 0x10a000d50) 16:19:59 executing program 4: socketpair$unix(0x1, 0x8000100000000001, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'eql\x00\x00\xdf\xdd\x94D\x8f\x15\xcf!\x00', 0xec38ed91f1c74952}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000080)={'eql\x00\x00\xa1\xa9[\x03\xb0?\x00\x00\x03\xca\x00', @ifru_mtu=0x1}) 16:19:59 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]}) 16:19:59 executing program 0: r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000500)='cgroup.procs\x00', 0x2, 0x0) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x5}, 0x2c) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x8, 0x4, 0x100000001, 0x0, r1}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r2, &(0x7f00000002c0)}, 0x10) clone(0x200, &(0x7f0000000180), 0x0, &(0x7f0000000080), &(0x7f0000000180)) mknod(&(0x7f0000f80000)='./file0\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$bt_hidp(0x1f, 0x3, 0x6) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') r4 = geteuid() r5 = getgid() mount$fuseblk(&(0x7f0000000000)='/dev/loop0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='fuseblk\x00', 0x40, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB="2c726f6f746d6f64653d30303030303030303030303030301030303132303030302c757365725f69643d", @ANYRESDEC=r4, @ANYBLOB=',group_id=', @ANYRESDEC=r5, @ANYBLOB=',allow_other,allow_other,blksize=0x0000000000000600,dont_appraise,\x00']) getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f0000000300)=""/183, &(0x7f0000000180)=0xb7) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) ptrace(0x10, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r0, &(0x7f0000000080)=0x4c000000, 0x10a000d50) r6 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r6, 0x114, 0xa, &(0x7f0000000140)=ANY=[@ANYBLOB="02"], 0x1) 16:19:59 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff]}) 16:19:59 executing program 3: ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x83, &(0x7f0000000080)={'f%lter\x00', 0x0, 0x0, 0x0, [], 0x0, 0x0, 0x0}, &(0x7f0000000140)=0x78) 16:19:59 executing program 0: r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000500)='cgroup.procs\x00', 0x2, 0x0) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x5}, 0x2c) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x8, 0x4, 0x100000001, 0x0, r1}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r2, &(0x7f00000002c0)}, 0x10) clone(0x200, &(0x7f0000000180), 0x0, &(0x7f0000000080), &(0x7f0000000180)) mknod(&(0x7f0000f80000)='./file0\x00', 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$bt_hidp(0x1f, 0x3, 0x6) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000002c0)=""/183, &(0x7f00000003c0)=0xb7) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) getpeername(r3, &(0x7f00000000c0)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000000180)=0x80) sendmsg$nl_route(r4, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x18000e00}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x600, 0x70bd2c, 0x25dfdbfe, {0xa, 0x1f, 0x120, 0xff, r5}, [@IFA_CACHEINFO={0x14, 0x6, {0x8, 0xe77a, 0x5, 0x8}}, @IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x4040) ptrace(0x10, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r0, &(0x7f0000000080)=0x4c000000, 0x10a000d50) r6 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup(r2) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r6, 0x114, 0xa, &(0x7f0000000140)=ANY=[@ANYBLOB="02"], 0x1) 16:19:59 executing program 4: socketpair$unix(0x1, 0x8000100000000001, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'eql\x00\x00\xdf\xdd\x94D\x8f\x15\xcf!\x00', 0xec38ed91f1c74952}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000080)={'eql\x00\x00\xa1\xa9[\x01\xb1?\x00\x00\x03\xca\x00', @ifru_mtu=0x1}) 16:20:00 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd]}) 16:20:00 executing program 3: ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x80000) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x82000, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r1, 0xc06864a2, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r2, 0x0, 0x83, &(0x7f0000000080)={'f%lter\x00', 0x0, 0x0, 0x0, [], 0x0, 0x0, 0x0}, &(0x7f0000000140)=0x78) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000100)=0x10000, &(0x7f0000000180)=0x2) 16:20:00 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000500)='cgroup.procs\x00', 0x2, 0x0) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x5}, 0x2c) r3 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x2000, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r3, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2200010}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r4, 0x100, 0x70bd2a, 0x25dfdbff, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004014}, 0x4000) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x8, 0x4, 0x100000001, 0x0, r2}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r5, &(0x7f00000002c0)}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x200, &(0x7f0000000180), 0x0, &(0x7f0000000080), &(0x7f0000000180)) mknod(&(0x7f0000f80000)='./file0\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$bt_hidp(0x1f, 0x3, 0x6) syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000002c0)=""/183, &(0x7f00000003c0)=0xb7) ptrace(0x10, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000080)=0x4c000000, 0x10a000d50) 16:20:00 executing program 0: r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000500)='cgroup.procs\x00', 0x2, 0x0) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x5}, 0x2c) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x8, 0x4, 0x100000001, 0x0, r1}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r2, &(0x7f00000002c0)}, 0x10) clone(0x200, &(0x7f0000000180), 0x0, &(0x7f0000000080), &(0x7f0000000180)) mknod(&(0x7f0000f80000)='./file0\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$bt_hidp(0x1f, 0x3, 0x6) syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000002c0)=""/183, &(0x7f00000003c0)=0xb7) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) ptrace(0x10, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r0, &(0x7f0000000080)=0x4c000003, 0x10a000d50) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r3, 0x114, 0xa, &(0x7f0000000140)=ANY=[@ANYBLOB="02"], 0x1) 16:20:00 executing program 4: socketpair$unix(0x1, 0x8000100000000001, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'eql\x00\x00\xdf\xdd\x94D\x8f\x15\xcf!\x00', 0xec38ed91f1c74952}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000080)={'eql\x00\x00\xa1\xa9[\x02\xb5?\x00\x00\x03\xca\x00', @ifru_mtu=0x1}) 16:20:00 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000500)='cgroup.procs\x00', 0x2, 0x0) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x5}, 0x2c) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x8, 0x4, 0x100000001, 0x0, r2}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r3, &(0x7f00000002c0)}, 0x10) lsetxattr$security_evm(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='security.evm\x00', &(0x7f0000000180)=ANY=[@ANYBLOB="0201451292e8b9093f000000a8b53db73e4f2f6fd63f08b1d75212938ca3"], 0x14, 0x3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x200, &(0x7f0000000180), 0x0, &(0x7f0000000080), &(0x7f0000000180)) mknod(&(0x7f0000f80000)='./file0\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$bt_hidp(0x1f, 0x3, 0x6) syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000002c0)=""/183, &(0x7f00000003c0)=0xb7) ptrace(0x10, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000080)=0x4c000000, 0x10a000d50) [ 2100.679052] QAT: Invalid ioctl 16:20:00 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]}) [ 2100.813635] QAT: Invalid ioctl 16:20:00 executing program 3: ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) r0 = request_key(&(0x7f00000002c0)='pkcs7_test\x00', &(0x7f0000000300)={'syz', 0x3}, &(0x7f0000000340)='/dev/uinput\x00', 0xfffffffffffffffb) r1 = add_key$user(&(0x7f0000000380)='user\x00', &(0x7f00000003c0)={'syz', 0x0}, &(0x7f0000000400)="b1dcfdf983ebb6038b183f1ff595db2414b6f2692924e865bd0b2cda3e0d6c6337ce51790c941e73307f9cb90a74a19d7b6e2b9f920c22dc4e6e44f7cc34448aafc6e2b414dd1cc82e3293b2d0c94dc8bada89af", 0x54, 0xfffffffffffffffd) r2 = add_key$user(&(0x7f0000000480)='user\x00', &(0x7f00000004c0)={'syz', 0x3}, &(0x7f0000000500)="4a5ee0a60c84b666123e604471bfa97579d1cae5c49ff5bbf46f3f810469d86128e6cec8da830ae6d792528f12b116556a4e2994162dcbc20171d4ca234d62e43d38551f25241cc9c59fb9eefd4fd913fdb00755cc525d715241b85cac806d2d0742816b508d55459aca6da4a69b30f78778ef834856964a223e2d6c265503e073d98e1688e0", 0x86, 0xfffffffffffffff9) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x0, 0x0) accept4$alg(r3, 0x0, 0x0, 0x0) keyctl$dh_compute(0x17, &(0x7f00000005c0)={r0, r1, r2}, &(0x7f0000000600)=""/236, 0xec, &(0x7f0000000800)={&(0x7f0000000700)={'wp256\x00'}, &(0x7f0000000740)="edf1098513514c801b9ceef5c06d629bcc607b72acd3c6a4ba9cf1c828616411b02c504ff4dcfdbafe123c2a31b784c378650182d6585764fa03b3f87f806f4672dff979d16ab7558c741e7662f5688afd9bc40504ba84e0d83d92a027f44d1040cb1cdcfcbdcd88b40617ce5ccc51619e1df520a33f709291e17b0bc708436b4da2a0e47b7968c1c19e07314c491941425008db", 0x94}) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000840)='/dev/snapshot\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r4, 0xc0a85320, &(0x7f0000000200)={{0x342, 0xfaa1}, 'port0\x00', 0x8, 0xa0830, 0x0, 0x4, 0x4d1, 0x200, 0x80000000, 0x0, 0x7, 0x3}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='f%lter\x00', 0x0}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)=r5, 0x4) r6 = socket$inet(0x2, 0x1, 0x0) getrusage(0x1, &(0x7f0000000880)) getsockopt$EBT_SO_GET_ENTRIES(r6, 0x0, 0x83, &(0x7f0000000080)={'f%lter\x00', 0x0, 0x0, 0x0, [], 0x0, 0x0, 0x0}, &(0x7f0000000140)=0x78) openat$uinput(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uinput\x00', 0x802, 0x0) 16:20:00 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff]}) 16:20:00 executing program 3: ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x1, 0x42002) write$uinput_user_dev(r0, &(0x7f0000000180)={'syz1\x00', {0xffffffffffffff01, 0x1, 0xffffffffffffffff, 0x5}, 0x14, [0x6, 0x1, 0x4, 0x401, 0x0, 0x9, 0xa7d, 0x80, 0x0, 0x200, 0x7fff, 0x7, 0x7f, 0x8001, 0xffffffffffff8000, 0x5ccd8315, 0x0, 0x5, 0x200, 0x1, 0x80, 0x5, 0x0, 0x1f, 0xfffffffffffffffd, 0x0, 0x2fa29162, 0xfffffffffffffff9, 0x3, 0x3489, 0xffff, 0x3, 0x4, 0xd825, 0x7, 0x6, 0x1, 0xc4c, 0x6, 0x9, 0x0, 0x4, 0x9, 0x814f, 0x9a, 0x7fffffff, 0x4000000000000000, 0x0, 0xfffffffffffffff7, 0x1, 0x80000001, 0xa94, 0x0, 0x940, 0x6, 0xfffffffffffffc01, 0x9ec2, 0x1421, 0x3, 0x2, 0xfffffffffffffe00, 0x2, 0x1], [0xfff, 0x100000001, 0x7f, 0x6, 0x7, 0x0, 0x3ff, 0xffffffff, 0x4, 0x100, 0x25e, 0x6, 0x3, 0x7, 0xab9, 0xffffffffffffffc1, 0x800, 0x2, 0x7, 0x100000001, 0x1, 0x9, 0x7f4, 0x8001, 0x5, 0xffffffffffffff00, 0x68d92a6, 0x5, 0xdd, 0x4, 0x9, 0x0, 0x1000, 0xb095, 0xab4e, 0x6, 0xc5e7, 0x0, 0x4, 0x200, 0x9, 0xfffffffffffffffb, 0x6, 0xff, 0x7fff, 0x2, 0x9, 0x6, 0x2, 0x1, 0x1, 0x1, 0x8001, 0x5, 0x4, 0xbd, 0x7, 0xa, 0x7, 0xb47, 0x4, 0x8, 0x7, 0x100000001], [0x7, 0x800, 0x40, 0x9, 0x200, 0x4, 0xfffffffffffffffa, 0x8, 0x0, 0x4, 0xd, 0x80000001, 0x8, 0x80000001, 0x4, 0x5, 0xca, 0x7, 0xf4, 0x5, 0x100, 0xffffffffffff03b4, 0x3, 0x100000000, 0x5, 0x6, 0xffffffffffffffc0, 0x80000001, 0x3f, 0x9, 0xffffffffffffffe0, 0x2, 0x3, 0x5, 0x6, 0x100, 0x5, 0x6, 0xffff, 0x800000000000000, 0x1, 0x23, 0x200, 0x101, 0x7, 0x1, 0xda4, 0x401, 0x6, 0x7, 0x8001, 0x4, 0xdfbf, 0x4, 0x2, 0x8, 0x11f, 0x400, 0x1000, 0x8, 0x80000001, 0xffff, 0xdc7, 0x7], [0x2, 0xce8, 0x8, 0x6, 0x1, 0x8e, 0x6, 0x9, 0x4, 0xfffffffffffffffb, 0x1f, 0x68, 0x1, 0x2, 0x4, 0x0, 0x8, 0x4, 0xe2, 0x30c, 0xc2, 0x3, 0x0, 0x100, 0x760b4d16, 0x9a7, 0x837, 0xffffffffffffff01, 0x86d, 0x5, 0x83, 0x3, 0x1a, 0x2, 0x9, 0xffffffff80000001, 0xe3a, 0x8, 0x0, 0xec, 0x7b, 0x800, 0x2, 0x1, 0x6f, 0x3, 0x8, 0x16f9, 0x59, 0xffffffff, 0x9, 0x7, 0x81, 0x12f0, 0x800, 0x4, 0x2, 0x1f, 0x5e, 0xf372, 0x9e, 0x9, 0x10000, 0x8]}, 0x45c) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, 0x0) write$vnet(r0, &(0x7f0000000740)={0x1, {&(0x7f0000000600)=""/173, 0xad, &(0x7f00000006c0)=""/87, 0x2, 0x1}}, 0x68) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$uinput_user_dev(r0, &(0x7f00000007c0)={'syz0\x00', {0x80, 0xffff, 0x9, 0x7f}, 0x3d, [0x400000000, 0xab, 0xffff, 0x8, 0x40, 0x8, 0xfdb0, 0x401, 0x100000000, 0x5, 0x8, 0x8e, 0x47, 0x400, 0x4, 0x3, 0x80000000, 0x10001, 0x81, 0x26, 0x79b, 0x7fff, 0xfff, 0x7, 0x7d68, 0x20, 0x25, 0x8, 0x2a3, 0x1, 0x1, 0x8000, 0x1800000000000000, 0xffffffffffff0000, 0xf82, 0x6, 0x1, 0x1ff, 0x79d, 0x3, 0x8b, 0x30000000000, 0x4, 0xd0e, 0x3f18b67, 0x800, 0x10000000200, 0x3, 0x8, 0xfffffffffffffc00, 0xfffffffffffffffb, 0x4, 0x3, 0xad2, 0x5, 0x831, 0x8, 0x1, 0xfffffffffffffc03, 0x4, 0x4, 0x3, 0xfffffffffffffffa, 0x7], [0x5, 0x3, 0x3, 0x2, 0x4, 0x800, 0x1ff, 0x2, 0x8000, 0x400, 0x2, 0xe7, 0x45f, 0x6, 0x5, 0xb3, 0x400, 0x0, 0x40, 0x2, 0x9, 0x1000, 0xfffffffffffff001, 0xdc, 0x3, 0x71, 0x3e3d, 0x8, 0x7fff, 0xfff, 0x3ff, 0x2, 0x3, 0x400, 0x6, 0x6, 0x0, 0xffffffff, 0x3f, 0x4, 0x401, 0x2f, 0x4, 0x361a, 0x3, 0x3ef, 0x7, 0x1ff, 0x253, 0x8, 0x200, 0xd, 0x88, 0x9, 0xc1, 0x3, 0x20, 0xffff, 0x1, 0x0, 0x8, 0xfffffffffffffff8, 0x2, 0x81], [0x8001, 0xfffffffffffeffff, 0x595f8826, 0x9, 0x5, 0x0, 0x0, 0x0, 0x5, 0x5, 0x71b, 0x1, 0x96, 0xfff, 0xfffffffffffffffe, 0x1, 0x1160, 0x9, 0x67a0, 0x5, 0xbb6, 0x2e56, 0x6, 0x101, 0x1, 0xffffffffffffffff, 0x80000001, 0xc8, 0xfffffffffffffffb, 0x0, 0x4, 0x0, 0x101, 0x4, 0xffffffff, 0x2, 0x6, 0x8, 0x7, 0x2, 0x1, 0x8, 0x10001, 0xfffffffffffffff8, 0xfffffffffffffffb, 0x7fffffff, 0x7b, 0x1, 0x4, 0x3, 0x3, 0x401, 0x1, 0x6, 0x6, 0x5, 0x0, 0x4e9, 0x5, 0x1f, 0xfffffffffffffffe, 0xed19, 0x1, 0x8], [0x6, 0x3ff, 0x2, 0x7f, 0x7, 0xffff, 0x9, 0xc513, 0x7, 0x7573, 0xfffffffffffffffb, 0xff, 0x9, 0x73291fc1, 0x8000, 0x100, 0xfff, 0x400, 0xff, 0x1, 0xb7f, 0x8000, 0x57f, 0x7, 0x1, 0x7c, 0x401, 0x0, 0x8000, 0x83, 0x7fff, 0x5, 0x1ff, 0x800, 0x1f, 0x7, 0x5, 0xfffffffffffffffd, 0x9, 0x8000, 0x9, 0x4, 0x3, 0x3, 0x41aa, 0x5, 0xde6, 0x1, 0x20, 0x6, 0x6, 0x216, 0x1ff, 0x5ec651c2, 0x9, 0x0, 0x2, 0x8, 0x3, 0x6, 0x0, 0x1, 0x0, 0x5]}, 0x45c) r1 = socket$inet(0x2, 0x200000000000007, 0x4) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x83, &(0x7f0000000080)={'f%lter\x00', 0x0, 0x0, 0x0, [], 0x0, 0x0, 0x0}, &(0x7f0000000140)=0x78) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0x40045542, &(0x7f0000000000)=0x1) ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, &(0x7f0000000c40)={{0x0, 0x0, 0x2, 0x2, 0x7ff}, 0xb7, 0x7, 'id1\x00', 'timer1\x00', 0x0, 0xf20, 0x7, 0x80000000, 0x989}) 16:20:00 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd]}) 16:20:00 executing program 0: r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000500)='cgroup.procs\x00', 0x2, 0x0) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x5}, 0x2c) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x8, 0x4, 0x100000001, 0x0, r1}, 0x2c) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x400, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000400)={{{@in6=@mcast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@initdev}}, &(0x7f00000000c0)=0xe8) setsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000100)={r4, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x1a}}, 0xc) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r2, &(0x7f00000002c0)}, 0x10) clone(0x200, &(0x7f0000000180), 0x0, &(0x7f0000000080), &(0x7f0000000180)) mknod(&(0x7f0000f80000)='./file0\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$bt_hidp(0x1f, 0x3, 0x6) syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f0000000540)=""/183, &(0x7f00000003c0)=0xb7) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) ptrace(0x10, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r0, &(0x7f0000000080)=0x4c000000, 0x10a000d50) r5 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r5, 0x114, 0xa, &(0x7f0000000140)=ANY=[@ANYBLOB="02"], 0x1) 16:20:00 executing program 4: socketpair$unix(0x1, 0x8000100000000001, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'eql\x00\x00\xdf\xdd\x94D\x8f\x15\xcf!\x00', 0xec38ed91f1c74952}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000080)={'eql\x00\x00\xa1\xa9[\x03\xb5?\x00\x00\x03\xca\x00', @ifru_mtu=0x1}) 16:20:00 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) dup2(r0, r0) r1 = openat$cgroup_procs(r0, &(0x7f0000000500)='cgroup.procs\x00', 0x2, 0x0) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x5}, 0x2c) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x8, 0x4, 0x100000001, 0x0, r2}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r3, &(0x7f00000002c0)}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x200, &(0x7f0000000180), 0x0, &(0x7f0000000080), &(0x7f0000000180)) mknod(&(0x7f0000f80000)='./file0\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$bt_hidp(0x1f, 0x3, 0x6) syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000002c0)=""/183, &(0x7f00000003c0)=0xb7) ptrace(0x10, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000080)=0x4c000000, 0x10a000d50) 16:20:01 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000500)='cgroup.procs\x00', 0x2, 0x0) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x5}, 0x2c) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x8, 0x4, 0x100000001, 0x0, r2}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r3, &(0x7f00000002c0)}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x200, &(0x7f0000000180), 0x0, &(0x7f0000000080), &(0x7f0000000180)) mknod(&(0x7f0000f80000)='./file0\x00', 0xfffffffffffffffd, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$bt_hidp(0x1f, 0x3, 0x6) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000002c0)=""/183, &(0x7f00000003c0)=0xb7) rt_sigsuspend(&(0x7f0000000100)={0xfffffffffffffffd}, 0x8) ioctl$CAPI_NCCI_OPENCOUNT(r4, 0x80044326, &(0x7f00000000c0)=0x1e2b480a) ptrace(0x10, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000080)=0x4c000000, 0x10a000d50) 16:20:01 executing program 3: ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = dup(0xffffffffffffff9c) ioctl$SCSI_IOCTL_DOORUNLOCK(r0, 0x5381) r1 = socket$inet(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x83, &(0x7f0000000080)={'f%lter\x00', 0x0, 0x0, 0x0, [], 0x0, 0x0, 0x0}, &(0x7f0000000140)=0x78) 16:20:01 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]}) 16:20:01 executing program 0: r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000500)='cgroup.procs\x00', 0x2, 0x0) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x5}, 0x2c) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x8, 0x4, 0x100000001, 0x0, r1}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r2, &(0x7f00000002c0)}, 0x10) clone(0x200, &(0x7f0000000180), 0x0, &(0x7f0000000080), &(0x7f0000000180)) mknod(&(0x7f0000f80000)='./file0\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$bt_hidp(0x1f, 0x3, 0x6) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000002c0)=""/183, &(0x7f00000003c0)=0xb7) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) ptrace(0x10, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_PREPARE_BUF(r3, 0xc058565d, &(0x7f00000000c0)={0x5, 0x7, 0x4, 0x40000, {}, {0x5, 0x0, 0x400, 0x800, 0x0, 0xffffffff, "b3466fe1"}, 0x1, 0x4, @userptr=0x1, 0x4}) sendfile(r0, r0, &(0x7f0000000080)=0x4c000000, 0x10a000d50) r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r4, 0x114, 0xa, &(0x7f0000000140)=ANY=[@ANYBLOB="02"], 0x1) 16:20:01 executing program 3: pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x3ffc) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet(0x2, 0x1, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4008af14, &(0x7f0000000180)={0x2, 0x8}) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000200)='\xe1\x9e`/pro\x1e\xacvs/sync_t\x96resho7\xd54\xab5c6\xd6Q[\xcb*\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xd4=1\x00\x00\x00\x00\xe5\xd7\x0f\x8b\"\x97\x8b]\x00\xbe\x89\x00|\an\xcd\x88\xa1hA\x85j|`\xefP~Y\xdfm\xad,\x1a\xca\xec:\x1ec\xd6\xa4db$\x18}k\xdc\xb7\x02n\xbc-s\xea\x1f\xd6\x05W\xa3=\xadg\xa9\xa6\x91\xe9I\x1e\n\x04V\xe4\x18i\xab\xd5\xeb\xdc..\xf8\xe3\xc9(\x11k\xa3', 0x2, 0x0) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000040)={0x8000, 0xff}, 0x2) getsockopt$EBT_SO_GET_ENTRIES(r2, 0x0, 0x83, &(0x7f0000000080)={'f%lter\x00', 0x0, 0x0, 0x0, [], 0x0, 0x0, 0x0}, &(0x7f0000000140)=0x78) 16:20:01 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) dup2(r0, r0) r1 = openat$cgroup_procs(r0, &(0x7f0000000500)='cgroup.procs\x00', 0x2, 0x0) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x5}, 0x2c) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x8, 0x4, 0x100000001, 0x0, r2}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r3, &(0x7f00000002c0)}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x200, &(0x7f0000000180), 0x0, &(0x7f0000000080), &(0x7f0000000180)) mknod(&(0x7f0000f80000)='./file0\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$bt_hidp(0x1f, 0x3, 0x6) syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000002c0)=""/183, &(0x7f00000003c0)=0xb7) ptrace(0x10, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000080)=0x4c000000, 0x10a000d50) 16:20:01 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff]}) 16:20:01 executing program 3: r0 = socket$inet(0x2, 0x2, 0x2) lsetxattr$security_smack_entry(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.SMACK64EXEC\x00', &(0x7f0000000100)='f%lter\x00', 0x7, 0x1) ioctl$int_in(r0, 0x5473, &(0x7f00000002c0)=0x80000000) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, 0x0) r1 = socket$inet(0x2, 0xfffffffffffffffd, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f00000001c0)="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") getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x83, &(0x7f0000000080)={'f%lter\x00', 0x0, 0x0, 0x0, [], 0x0, 0x0, 0x0}, &(0x7f0000000140)=0x78) 16:20:01 executing program 0: r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000500)='cgroup.procs\x00', 0x2, 0x0) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1b3, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r1, 0xc018643a, &(0x7f00000000c0)={0x40000000, 0xffff, 0xb}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x5}, 0x2c) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x8, 0x4, 0x100000001, 0x0, r2}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r3, &(0x7f00000002c0)}, 0x10) clone(0x200, &(0x7f0000000180), 0x0, &(0x7f0000000080), &(0x7f0000000180)) mknod(&(0x7f0000f80000)='./file0\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$bt_hidp(0x1f, 0x3, 0x6) syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000002c0)=""/183, &(0x7f00000003c0)=0xb7) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) ptrace(0x10, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r0, &(0x7f0000000080)=0x4c000000, 0x10a000d50) r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r4, 0x114, 0xa, &(0x7f0000000400)=ANY=[@ANYBLOB="025281cc2acdabb6d97990361f0e56db996d13fc5df2d3e7525af66b2a5553fd41f840ed061a079b06d61f00000000000000393df050b76f69c930463c285a561a72895373e2d379268b0b5864b1c6676f56e3e1cdd32f81e93aaf97d464f0606eee170514fa68a2e3274d5e8ebf4efef6cd3005bb75a46fb85aeee8759b4dda1fbeecf769ed2aca7f83b35c6a2f415e1b7e52c19497b0ee355c63705c203756"], 0x1) 16:20:01 executing program 4: socketpair$unix(0x1, 0x8000100000000001, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'eql\x00\x00\xdf\xdd\x94D\x8f\x15\xcf!\x00', 0xec38ed91f1c74952}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000080)={'eql\x00\x00\xa1\xa9[\x01\xb8?\x00\x00\x03\xca\x00', @ifru_mtu=0x1}) 16:20:01 executing program 3: openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x82001, 0x0) syz_open_dev$vcsa(&(0x7f0000000200)='/dev/vcsa#\x00', 0x0, 0x4080) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x220000, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x383feb40, 0x800) r2 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x80, 0x1) ioctl$DRM_IOCTL_MODE_SETCRTC(r2, 0xc06864a2, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet(0x2, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x83, &(0x7f0000000080)={'f%lter\x00', 0x0, 0x0, 0x0, [], 0x0, 0x0, 0x0}, &(0x7f0000000140)=0x362) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180)='nbd\x00') r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280)='/dev/zero\x00', 0x1111c0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r5, @ANYBLOB="200027bd7000fedbdf25020000004c00070008000100", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r2, @ANYBLOB="0c00060001000000000000000c80050100000000000000000c00080004000000000000000c000800f70e000000000000"], 0x90}, 0x1, 0x0, 0x0, 0x4041}, 0x4000000) ioctl$IMGETDEVINFO(r2, 0x80044944, &(0x7f0000000400)={0x40}) 16:20:01 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000a00)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001000)="a23364fd", 0x4) sendmmsg$alg(r1, &(0x7f0000009680)=[{0x0, 0x0, &(0x7f0000000440), 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) io_setup(0x800, &(0x7f00002eeff8)=0x0) io_submit(r2, 0x1, &(0x7f00001f5ff8)=[&(0x7f000011e000)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f00002e9ff7)="b2", 0x1}]) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000500)='cgroup.procs\x00', 0x2, 0x0) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x5}, 0x2c) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x8, 0x4, 0x100000001, 0x0, r5}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r6, &(0x7f00000002c0)}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x200, &(0x7f0000000180), 0x0, &(0x7f0000000080), &(0x7f0000000180)) mknod(&(0x7f0000f80000)='./file0\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$bt_hidp(0x1f, 0x3, 0x6) syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000002c0)=""/183, &(0x7f00000003c0)=0xb7) ptrace(0x10, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r4, r4, &(0x7f0000000080)=0x4c000000, 0x10a000d50) 16:20:01 executing program 0: r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000500)='cgroup.procs\x00', 0x2, 0x0) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x5}, 0x2c) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x8, 0x4, 0x100000001, 0x0, r1}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r2, &(0x7f00000002c0)}, 0x10) clone(0x200, &(0x7f0000000180), 0x0, &(0x7f0000000080), &(0x7f0000000180)) mknod(&(0x7f0000f80000)='./file0\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$bt_hidp(0x1f, 0x3, 0x6) syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000002c0)=""/183, &(0x7f00000003c0)=0xb7) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) ptrace(0x10, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r0, &(0x7f0000000080)=0x4c000000, 0x10a000d50) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r3, 0x114, 0xa, &(0x7f00000000c0)=ANY=[@ANYBLOB="021f8404611a3b07682f5defc615fecd572b82695c074565656ea57f1ba86d9b2feca8fbc0239fe2369fe984211765b4b5ae81460a0c3d7a1a347f91dc358e37f48faef338835be8eb022ce9a770cf54"], 0x1) 16:20:01 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd]}) 16:20:01 executing program 3: ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x83, &(0x7f0000000000)={'f%lter\x00', 0x0, 0x0, 0xfffffdf0, [], 0x0, 0x0, 0x0}, &(0x7f0000000140)=0x78) 16:20:01 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) dup2(r0, r0) r1 = openat$cgroup_procs(r0, &(0x7f0000000500)='cgroup.procs\x00', 0x2, 0x0) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x5}, 0x2c) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x8, 0x4, 0x100000001, 0x0, r2}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r3, &(0x7f00000002c0)}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x200, &(0x7f0000000180), 0x0, &(0x7f0000000080), &(0x7f0000000180)) mknod(&(0x7f0000f80000)='./file0\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$bt_hidp(0x1f, 0x3, 0x6) syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000002c0)=""/183, &(0x7f00000003c0)=0xb7) ptrace(0x10, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000080)=0x4c000000, 0x10a000d50) 16:20:01 executing program 0: r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000500)='cgroup.procs\x00', 0x2, 0x0) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x5}, 0x2c) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x8, 0x4, 0x100000001, 0x0, r1}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r2, &(0x7f00000002c0)}, 0x10) r3 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0xf4, 0x8000) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x200000, 0x0) renameat(r3, &(0x7f00000000c0)='./file0\x00', r4, &(0x7f0000000180)='./file0\x00') clone(0x200, &(0x7f0000000180), 0x0, &(0x7f0000000080), &(0x7f0000000180)) mknod(&(0x7f0000f80000)='./file0\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$DRM_IOCTL_SET_UNIQUE(r4, 0x40106410, &(0x7f0000000280)={0xb0, &(0x7f0000000400)="29f86195c986e2e711ea74da9140de684b9eede1f4798738f103464073a3b555af3113a03288f64429e99189a1f43b09f15ae1ba8cfe64d3a99e1f83ad19581ee5a2f4a6de87f696eaa6188d0d96c4198d8a5b278c571cbefeeabeeff59e9d32dc66fa7dd869c734ed219cb17ae6f43ea591de888a630634c0816c229a2d8d21896efdb9dddae851ece2e8330dff6c34d92578cb2820fcf65508172c020c184e37ec80003426389fd214f6e80a1e8372"}) socket$bt_hidp(0x1f, 0x3, 0x6) syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000002c0)=""/183, &(0x7f00000003c0)=0xb7) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) ptrace(0x10, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r0, &(0x7f0000000080)=0x4c000000, 0x10a000d50) ioctl$IOC_PR_PREEMPT(r4, 0x401870cb, &(0x7f0000000240)={0x10001, 0x1f, 0x4, 0x8}) r5 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f00000001c0)={'eql\x00', @broadcast}) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r5, 0x114, 0xa, &(0x7f0000000140)=ANY=[@ANYBLOB="02"], 0x1) 16:20:01 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]}) 16:20:01 executing program 3: ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x400001, 0x0) ioctl$VIDIOC_S_CROP(r0, 0x4014563c, &(0x7f0000000240)={0x4, {0x7fffffff, 0xec, 0x1f, 0x9}}) r1 = socket$inet(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x83, &(0x7f0000000080)={'f%lter\x00', 0x0, 0x0, 0x0, [], 0x0, 0x0, 0x0}, &(0x7f0000000140)=0x78) setxattr$security_evm(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.evm\x00', &(0x7f0000000180)=@v2={0x5, 0x2, 0x7, 0x0, 0x81, "d0a6e303c07b772a52f8e5b1f5a77145abf405907d85aa831884b88b103e09d08e88003e02e0bb2360b37b23102a2aecd349ead1b2c7e9f132ca42e83073858b961204c3e66283546947b89d5425d75c46c6d5a6bdad97d0be2a6f84942e46f507aa80b631ea73de960a3fd979739dabc7cf5b4350aaa82c95e8d70c116479e1d8"}, 0x8b, 0x1) fcntl$getflags(r1, 0x1) 16:20:01 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff]}) 16:20:02 executing program 3: syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x1000, 0x4000) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffff9c, 0xc00c642e, &(0x7f0000000040)={0x0, 0x80000, 0xffffffffffffff9c}) openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x90000, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000180)='/dev/usbmon#\x00', 0x6, 0x80) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x83, &(0x7f0000000080)={'f%lter\x00', 0x0, 0x0, 0x0, [], 0x0, 0x0, 0x0}, &(0x7f0000000140)=0x78) ioctl$TCSBRK(r0, 0x5409, 0x232) [ 2102.484986] net_ratelimit: 14 callbacks suppressed [ 2102.484994] protocol 88fb is buggy, dev hsr_slave_0 [ 2102.495092] protocol 88fb is buggy, dev hsr_slave_1 [ 2102.500232] protocol 88fb is buggy, dev hsr_slave_0 [ 2102.505376] protocol 88fb is buggy, dev hsr_slave_1 [ 2102.510548] protocol 88fb is buggy, dev hsr_slave_0 [ 2102.515675] protocol 88fb is buggy, dev hsr_slave_1 16:20:02 executing program 0: r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000500)='cgroup.procs\x00', 0x2, 0x0) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x5, 0x5, 0x101000, 0x5}, 0x2c) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x8, 0x4, 0x100000001, 0x0, r1}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r2, &(0x7f00000002c0)}, 0x10) clone(0x200, &(0x7f0000000180), 0x0, &(0x7f0000000080), &(0x7f0000000180)) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x0, 0x0) mknod(&(0x7f0000f80000)='./file0\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$bt_hidp(0x1f, 0x3, 0x6) syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000002c0)=""/183, &(0x7f00000003c0)=0xb7) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) ptrace(0x10, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r0, &(0x7f0000000080)=0x4c000000, 0x10a000d50) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r3, 0x114, 0xa, &(0x7f0000000140)=ANY=[@ANYBLOB="02"], 0x1) 16:20:02 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000500)='cgroup.procs\x00', 0x2, 0x0) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x5}, 0x2c) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x8, 0x4, 0x100000001, 0x0, r2}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r3, &(0x7f00000002c0)}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x200, &(0x7f0000000180), 0x0, &(0x7f0000000080), &(0x7f0000000180)) r4 = dup(r0) ioctl$TIOCPKT(r4, 0x5420, &(0x7f00000000c0)=0x7ff) mknod(&(0x7f0000f80000)='./file0\x00', 0x0, 0x0) ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f0000000100)="ff16ffcdae64581216f2e5c65d1c167326e35ed633dfa33ba3de1dde8d45dbb62b94df5d71940eac689b577e4b74a786a511d17026da56f2776e456e455157e5ec9ac9d8ca82c1d21afdc16e75efef8eb719c0d0f6a85dcf743ffdbe929b79b9cebf861fb4ace3f57401cff80abb0babe9f6377252f0478f1d88765af7723f3a7b1d89e7c9ff1d2de2f504d66b802d845c34f47b8354869971228c37c2a2c58f2ddf9d98162379d85f") socket$inet6_tcp(0xa, 0x1, 0x0) socket$bt_hidp(0x1f, 0x3, 0x6) syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000002c0)=""/183, &(0x7f00000003c0)=0xb7) ptrace(0x10, 0x0) socket$inet6(0xa, 0x80804, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000080)=0x4c000000, 0x10a000d50) 16:20:02 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd]}) 16:20:02 executing program 3: ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet(0x2, 0x1, 0x0) ioctl(r0, 0xffffffffffffff81, &(0x7f0000000000)="e1af3aab7736e4fc3bb14053162eb16dbd1d39565f58499cd0e13b10d51649f359a98fa39990ae9247da82ce03ef86948a638e06bda9e591f9300498711c30d6e0b396bc8f045c799df8") getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x83, &(0x7f0000000080)={'f%lter\x00', 0x0, 0x0, 0x0, [], 0x0, 0x0, 0x0}, &(0x7f0000000140)=0x78) 16:20:02 executing program 4: socketpair$unix(0x1, 0x8000100000000001, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'eql\x00\x00\xdf\xdd\x94D\x8f\x15\xcf!\x00', 0xec38ed91f1c74952}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000080)={'eql\x00\x00\xa1\xa9[\x02\xbc?\x00\x00\x03\xca\x00', @ifru_mtu=0x1}) 16:20:02 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000500)='cgroup.procs\x00', 0x2, 0x0) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x5}, 0x2c) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x8, 0x4, 0x100000001, 0x0, r2}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r3, &(0x7f00000002c0)}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x200, &(0x7f0000000180), 0x0, &(0x7f0000000080), &(0x7f0000000180)) mknod(&(0x7f0000f80000)='./file0\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_CAPBSET_DROP(0x18, 0x1f) socket$bt_hidp(0x1f, 0x3, 0x6) syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000002c0)=""/183, &(0x7f00000003c0)=0xb7) ptrace(0x10, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000080)=0x4c000000, 0x10a000d50) 16:20:02 executing program 3: ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{0x100000000, 0x256, 0x0, 0x2}, 'syz1\x00'}) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x83, &(0x7f0000000080)={'f%lter\x00', 0x0, 0x4, 0x0, [], 0x59, 0x0, 0x0}, &(0x7f0000000140)=0x78) 16:20:02 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]}) 16:20:02 executing program 0: clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x5}, 0x2c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x8, 0x4, 0x100000001, 0x0, r0}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r1, &(0x7f00000002c0)}, 0x10) clone(0x200, &(0x7f0000000180), 0x0, &(0x7f0000000080), &(0x7f0000000180)) mknod(&(0x7f0000f80000)='./file0\x00', 0x0, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)={&(0x7f0000000000)='./file0\x00', 0x0, 0x18}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socket$bt_hidp(0x1f, 0x3, 0x6) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000002c0)=""/183, &(0x7f00000003c0)=0xb7) mmap(&(0x7f0000cc2000/0x4000)=nil, 0x4000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) ptrace(0x10, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000080)=0x4c000000, 0x10a000d50) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e24, @local}}}, &(0x7f0000000100)=0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000180)={0x0, 0xfffffffffffffffd, 0x20f, 0x2, 0x80000002, 0x100000001, 0x31, 0x3b5, r4}, &(0x7f0000000380)=0x1) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000240)=0xa41, 0x4) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r3, 0x114, 0xa, &(0x7f0000000140)=ANY=[@ANYBLOB="02"], 0x1) 16:20:02 executing program 3: ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0x0, 0x0) syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4, 0x2013, r0, 0x0) syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x4, 0x200) pipe2(&(0x7f00000001c0), 0x80800) openat$zero(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/zero\x00', 0x141000, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x2, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_SETCRTC(r1, 0xc06864a2, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r2, 0x0, 0x83, &(0x7f0000000080)={'f%lter\x00', 0x0, 0x0, 0x0, [], 0x0, 0x0, 0x0}, &(0x7f0000000140)=0x78) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f0000000000)={0x6, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_SG_FREE(r2, 0x40106439, &(0x7f0000000040)={0x2, r3}) 16:20:02 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff]}) 16:20:02 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd]}) 16:20:02 executing program 1: socketpair$unix(0x1, 0x8000100000000001, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'eql\x00\x00\xdf\xdd\x94D\x8f\x15\xcf!\x00', 0xec38ed91f1c74952}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000080)={'eql\x00\x00\xa1\xa9[\x02\xa5?\x00\x00\x03\xca\x00', @ifru_mtu=0x1}) 16:20:03 executing program 0: r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000500)='cgroup.procs\x00', 0x2, 0x0) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x5}, 0x2c) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x8, 0x4, 0x100000001, 0x0, r1}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r2, &(0x7f00000002c0)}, 0x10) clone(0x200, &(0x7f0000000180), 0x0, &(0x7f0000000080), &(0x7f0000000180)) mknod(&(0x7f0000f80000)='./file0\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$bt_hidp(0x1f, 0x3, 0x6) syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000002c0)=""/183, &(0x7f00000003c0)=0xb7) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) ptrace(0x10, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r0, &(0x7f0000000080)=0x4c000000, 0x10a000d50) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r3, 0x114, 0xa, &(0x7f0000000400)=ANY=[@ANYBLOB="024afb0000009bd8dcb0ad24e3e4e90100f8fcaad8990fb7ab27f9218a77b31a936b71a4f5b5f4612b067ca83850e453a905100286723c84fd73ed401bfa74dda1dd6c40f52398007feb7799c29ed6de3c2d9f7133978c5a47097a776b48259fc4468b3b0d4e77cf88ce21016d408c4ffabef0ac419956f6bb216c86f7e08ee44019df3741ddba6488d73a7768d4e7801d5b65ad2d06f2ebe9b6c1ba96187173"], 0x1) 16:20:03 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]}) 16:20:03 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000500)='cgroup.procs\x00', 0x2, 0x0) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x500, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r2, 0xc0845657, &(0x7f0000000100)={0x0, @reserved}) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x5}, 0x2c) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x8, 0x4, 0x100000001, 0x0, r3}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r4, &(0x7f00000002c0)}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x200, &(0x7f0000000180), 0x0, &(0x7f0000000080), &(0x7f0000000180)) mknod(&(0x7f0000f80000)='./file0\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$bt_hidp(0x1f, 0x3, 0x6) syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000002c0)=""/183, &(0x7f00000003c0)=0xb7) ptrace(0x10, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000080)=0x4c000000, 0x10a000d50) [ 2103.364998] protocol 88fb is buggy, dev hsr_slave_0 [ 2103.370129] protocol 88fb is buggy, dev hsr_slave_1 [ 2103.389604] QAT: Invalid ioctl [ 2103.525132] protocol 88fb is buggy, dev hsr_slave_0 [ 2103.530254] protocol 88fb is buggy, dev hsr_slave_1 [ 2103.759422] QAT: Invalid ioctl 16:20:03 executing program 4: socketpair$unix(0x1, 0x8000100000000001, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'eql\x00\x00\xdf\xdd\x94D\x8f\x15\xcf!\x00', 0xec38ed91f1c74952}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000080)={'eql\x00\x00\xa1\xa9[\x03\xbc?\x00\x00\x03\xca\x00', @ifru_mtu=0x1}) 16:20:03 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff]}) 16:20:03 executing program 0: r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000500)='cgroup.procs\x00', 0x2, 0x0) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x5}, 0x2c) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x8, 0x4, 0x100000001, 0x0, r1}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r2, &(0x7f00000002c0)}, 0x10) clone(0x200, &(0x7f0000000180), 0x0, &(0x7f0000000080), &(0x7f0000000180)) mknod(&(0x7f0000f80000)='./file0\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$bt_hidp(0x1f, 0x3, 0x6) syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000002c0)=""/183, &(0x7f00000003c0)=0xb7) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x3) ptrace(0x10, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r0, &(0x7f0000000080)=0x4c000000, 0x10a000d50) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r3, 0x114, 0xa, &(0x7f0000000140)=ANY=[@ANYBLOB="02"], 0x1) 16:20:03 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000500)='cgroup.procs\x00', 0x2, 0x0) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x5}, 0x2c) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x8, 0x4, 0x100000001, 0x0, r2}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r3, &(0x7f00000002c0)}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x200, &(0x7f0000000180), 0x0, &(0x7f0000000080), &(0x7f0000000180)) mknod(&(0x7f0000f80000)='./file0\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$bt_hidp(0x1f, 0x3, 0x6) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000002c0)=""/183, &(0x7f00000003c0)=0xb7) ptrace(0x10, 0x0) write$P9_RSETATTR(r4, &(0x7f00000000c0)={0x7, 0x1b, 0x1}, 0x7) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000080)=0x4c000000, 0x10a000d50) 16:20:03 executing program 0: r0 = open(&(0x7f0000000240)='./file0\x00', 0x200, 0x10) ioctl$KVM_SET_IRQCHIP(r0, 0x8208ae63, &(0x7f0000000400)={0x0, 0x0, @ioapic={0x105000, 0x6, 0x89, 0x9, 0x0, [{0x7, 0x1a95, 0x7}, {0x5, 0x1, 0x3ff, [], 0x5}, {0x97a, 0x4, 0x7fffffff, [], 0xfffffffffffffffa}, {0x2, 0xfffffffffffffffd, 0x4, [], 0x5}, {0xf8a3, 0x8, 0x10001, [], 0x80000001}, {0x2, 0x3, 0x8001, [], 0x8}, {0xffffffff, 0x7fff, 0x78de0251, [], 0x8}, {0x2, 0x10001, 0x7fff, [], 0x401}, {0x1, 0x2, 0x6, [], 0x8}, {0x2, 0x800, 0x3, [], 0x7fffffff}, {0x7, 0x6, 0x7, [], 0x4}, {0x20, 0xc94, 0x401, [], 0x6}, {0xfff, 0x1, 0x1, [], 0x7}, {0x3, 0xffffffffffffffff, 0x81, [], 0x7fff}, {0x7, 0x2, 0x756ff56c, [], 0x5}, {0x6, 0x401, 0x8000, [], 0x1f}, {0x7, 0x7, 0xffffffff, [], 0x7}, {0x80, 0x4, 0x20, [], 0x50100}, {0x5, 0x8, 0x2f7f, [], 0x1}, {0x100000001, 0x8, 0xffffffffffff8001, [], 0x1ff}, {0xfffffffffffffbff, 0x3, 0x5, [], 0x2c}, {0x20, 0x6, 0x8, [], 0xd155}, {0x8001, 0x2, 0x4, [], 0x7ff}, {0x4, 0x5, 0x40, [], 0x9}]}}) r1 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000500)='cgroup.procs\x00', 0x2, 0x0) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x5}, 0x2c) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x8, 0x4, 0x100000001, 0x0, r2}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r3, &(0x7f00000002c0)}, 0x10) clone(0x200, &(0x7f0000000180), 0x0, &(0x7f0000000080), &(0x7f0000000180)) mknod(&(0x7f0000f80000)='./file0\x00', 0x0, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r4, 0x84, 0x21, &(0x7f0000000180)=0x1, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) socket$bt_hidp(0x1f, 0x3, 0x6) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000002c0)=""/183, &(0x7f00000003c0)=0xb7) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) ptrace(0x10, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r4, 0x10f, 0x80, &(0x7f00000001c0)=0x1, 0x4) sendfile(r1, r1, &(0x7f0000000080)=0x4c000000, 0x10a000d50) r6 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r6, 0x114, 0xa, &(0x7f0000000140)=ANY=[@ANYBLOB='\t'], 0x1) ioctl$TIOCGSID(r6, 0x5429, &(0x7f0000000000)=0x0) ioctl$TIOCSPGRP(r5, 0x5410, &(0x7f00000000c0)=r7) 16:20:04 executing program 0: r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x5}, 0x2c) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x8, 0x4, 0x100000001, 0x0, r1}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r2, &(0x7f00000002c0)}, 0x10) clone(0x200, &(0x7f0000000180), 0x0, &(0x7f0000000080), &(0x7f0000000180)) mknod(&(0x7f0000f80000)='./file0\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$bt_hidp(0x1f, 0x3, 0x6) syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000002c0)=""/183, &(0x7f00000003c0)=0xb7) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) ptrace(0x10, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r0, &(0x7f0000000080)=0x4c000000, 0x10a000d50) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r3, 0x114, 0xa, &(0x7f0000000000)=ANY=[@ANYBLOB="3060a23e9b"], 0x1) 16:20:04 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd]}) 16:20:04 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000500)='cgroup.procs\x00', 0x2, 0x0) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x8, 0x5}, 0x2c) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x8, 0x4, 0x100000001, 0x0, r2}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r3, &(0x7f00000002c0)}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x200, &(0x7f0000000180), 0x0, &(0x7f0000000080), &(0x7f0000000180)) mknod(&(0x7f0000f80000)='./file0\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$bt_hidp(0x1f, 0x3, 0x6) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000002c0)=""/183, &(0x7f00000003c0)=0xb7) ptrace(0x10, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_LINK_STATS(r4, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r5, 0x0, 0x70bd26, 0x25dfdbff, {{}, 0x0, 0xb, 0x0, {0xc, 0x14, 'syz0\x00'}}, ["", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendfile(r1, r1, &(0x7f0000000080)=0x4c000000, 0x10a000d50) 16:20:04 executing program 3: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x400000, 0x0) openat$vfio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vfio/vfio\x00', 0xc00, 0x0) syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) dup(0xffffffffffffff9c) creat(&(0x7f0000000180)='./file0\x00', 0x10) syz_open_dev$amidi(&(0x7f00000001c0)='/dev/amidi#\x00', 0x8, 0x8040) openat$full(0xffffffffffffff9c, &(0x7f0000000200)='/dev/full\x00', 0x80000, 0x0) dup(0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000240)='/dev/bus/usb/00#/00#\x00', 0x8000, 0x400) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x83, &(0x7f0000000080)={'f%lter\x00', 0x0, 0x0, 0x0, [], 0x0, 0x0, 0x0}, &(0x7f0000000140)=0x78) 16:20:04 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000500)='cgroup.procs\x00', 0x2, 0x0) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x5}, 0x2c) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x8, 0x4, 0x100000001, 0x0, r2}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r3, &(0x7f00000002c0)}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x200, &(0x7f0000000180), 0x0, &(0x7f0000000080), &(0x7f0000000180)) r4 = dup(r0) ioctl$TIOCPKT(r4, 0x5420, &(0x7f00000000c0)=0x7ff) mknod(&(0x7f0000f80000)='./file0\x00', 0x0, 0x0) ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f0000000100)="ff16ffcdae64581216f2e5c65d1c167326e35ed633dfa33ba3de1dde8d45dbb62b94df5d71940eac689b577e4b74a786a511d17026da56f2776e456e455157e5ec9ac9d8ca82c1d21afdc16e75efef8eb719c0d0f6a85dcf743ffdbe929b79b9cebf861fb4ace3f57401cff80abb0babe9f6377252f0478f1d88765af7723f3a7b1d89e7c9ff1d2de2f504d66b802d845c34f47b8354869971228c37c2a2c58f2ddf9d98162379d85f") socket$inet6_tcp(0xa, 0x1, 0x0) socket$bt_hidp(0x1f, 0x3, 0x6) syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000002c0)=""/183, &(0x7f00000003c0)=0xb7) ptrace(0x10, 0x0) socket$inet6(0xa, 0x80804, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000080)=0x4c000000, 0x10a000d50) 16:20:04 executing program 0: r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000500)='cgroup.procs\x00', 0x2, 0x0) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x5}, 0x2c) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x400b00, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r2, 0x114, 0xa, &(0x7f00000000c0)={0x2, "8f85"}, 0x3) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x8, 0x4, 0x100000001, 0x0, r1}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r3, &(0x7f00000002c0)}, 0x10) clone(0x200, &(0x7f0000000180), 0x0, &(0x7f0000000080), &(0x7f0000000180)) mknod(&(0x7f0000f80000)='./file0\x00', 0x0, 0x0) socket$bt_hidp(0x1f, 0x3, 0x6) syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000002c0)=""/183, &(0x7f00000003c0)=0xb7) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) ptrace(0x10, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r0, &(0x7f0000000080)=0x4c000000, 0x10a000d50) r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r4, 0x114, 0xa, &(0x7f0000000140)=ANY=[@ANYBLOB="02"], 0x1) 16:20:04 executing program 4: socketpair$unix(0x1, 0x8000100000000001, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'eql\x00\x00\xdf\xdd\x94D\x8f\x15\xcf!\x00', 0xec38ed91f1c74952}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000080)={'eql\x00\x00\xa1\xa9[\x01\xbd?\x00\x00\x03\xca\x00', @ifru_mtu=0x1}) 16:20:04 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]}) 16:20:04 executing program 0: r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000500)='cgroup.procs\x00', 0x2, 0x0) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x141000) ioctl$RNDGETENTCNT(r1, 0x80045200, &(0x7f0000000100)) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x5}, 0x2c) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x8, 0x4, 0x100000001, 0x0, r2}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r3, &(0x7f00000002c0)}, 0x10) clone(0x200, &(0x7f0000000180), 0x0, &(0x7f0000000080), &(0x7f0000000180)) mknod(&(0x7f0000f80000)='./file0\x00', 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000000), 0x4) socket$bt_hidp(0x1f, 0x3, 0x6) syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000002c0)=""/183, &(0x7f00000003c0)=0xb7) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) ptrace(0x10, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r0, &(0x7f0000000080)=0x4c000000, 0x10a000d50) r5 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r5, 0x114, 0xa, &(0x7f0000000140)=ANY=[@ANYBLOB="02"], 0x1) 16:20:04 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff]}) [ 2105.256507] IPVS: ftp: loaded support on port[0] = 21 16:20:05 executing program 0: r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000500)='cgroup.procs\x00', 0x2, 0x0) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x5}, 0x2c) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x8, 0x4, 0x100000001, 0x0, r1}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r2, &(0x7f00000002c0)}, 0x10) clone(0x200, &(0x7f0000000180), 0x0, &(0x7f0000000080), &(0x7f0000000180)) mknod(&(0x7f0000f80000)='./file0\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$bt_hidp(0x1f, 0x3, 0x6) syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000002c0)=""/183, &(0x7f00000003c0)=0xb7) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) ptrace(0x10, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r0, &(0x7f0000000080)=0x4c000000, 0x10a000d50) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r3, 0x114, 0xa, &(0x7f0000000100)=ANY=[@ANYBLOB="2d4b9cfc8454bcb85b3a1e960a30745c8063940b3340e24c24613c02965d3a69ecdf4134bbb91c2af2bb75a4420a950ab209b4b9b43fece42f68e0699cf6c8bcce0d7c7a4c508f96360334a4310186da4cef8c7b558ac5a587e33b9d7e0123eaced44555feea81b40071f40ad7aa8b3ca06cdeb24f5ce58583b4de285ca3415738660e436190f421e3e98add299abbfd5eb057ffccc6945446d1a0b6a8e4d3c5fed389418639e73a901ae7db62a460a495db7928a8180b553ea91c9c8d352909b329a3d6ebe4f2d9c2ea0035f9ed3470d1e8cc9cefb29e97"], 0x1) 16:20:05 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd]}) 16:20:05 executing program 1: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffff9c, 0x0, 0xd, &(0x7f00000000c0)='./cgroup.cpu\x00', 0xffffffffffffffff}, 0x30) ioprio_get$pid(0x3, r0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000500)='cgroup.procs\x00', 0x2, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x1, 0x0) ioctl$RTC_UIE_ON(r3, 0x7003) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x5}, 0x2c) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x8, 0x4, 0x100000001, 0x0, r4}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r5, &(0x7f00000002c0)}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x200, &(0x7f0000000180), 0x0, &(0x7f0000000080), &(0x7f0000000180)) mknod(&(0x7f0000f80000)='./file0\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$bt_hidp(0x1f, 0x3, 0x6) syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000002c0)=""/183, &(0x7f00000003c0)=0xb7) ptrace(0x10, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r2, &(0x7f0000000080)=0x4c000000, 0x10a000d50) 16:20:05 executing program 0: r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000500)='cgroup.procs\x00', 0x2, 0x0) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x5}, 0x2c) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x8, 0x4, 0x100000001, 0x0, r1}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r2, &(0x7f00000002c0)}, 0x10) clone(0x200, &(0x7f0000000180), 0x0, &(0x7f0000000080), &(0x7f0000000180)) mknod(&(0x7f0000f80000)='./file0\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$bt_hidp(0x1f, 0x3, 0x6) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000002c0)=""/183, &(0x7f00000003c0)=0xb7) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) ptrace(0x10, 0x0) r5 = semget(0x1, 0x7, 0x4) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f00000000c0)=0xc) stat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0xc) lstat(&(0x7f0000000380)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) semctl$IPC_SET(r5, 0x0, 0x1, &(0x7f0000000480)={{0x0, r6, r7, r8, r9, 0x0, 0x2}, 0x1c48, 0x5, 0x5}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r0, &(0x7f0000000080)=0x4c000000, 0x10a000d50) r10 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r10, 0x114, 0xa, &(0x7f0000000140)=ANY=[@ANYBLOB="02"], 0x1) 16:20:05 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fstatfs(r1, &(0x7f00000000c0)) keyctl$session_to_parent(0x12) r2 = openat$cgroup_procs(r0, &(0x7f0000000500)='cgroup.procs\x00', 0x2, 0x0) socket$pppoe(0x18, 0x1, 0x0) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x5}, 0x2c) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x8, 0x4, 0x100000001, 0x0, r3}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r4, &(0x7f00000002c0)}, 0x10) setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f00000000c0)={0x7}, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x200, &(0x7f0000000180), 0x0, &(0x7f0000000080), &(0x7f0000000180)) mknod(&(0x7f0000f80000)='./file0\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$bt_hidp(0x1f, 0x3, 0x6) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000002c0)=""/183, &(0x7f00000003c0)=0xb7) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f0000000540)={"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"}) ptrace(0x10, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r2, &(0x7f0000000080)=0x4c000000, 0x10a000d50) [ 2105.909197] device bridge_slave_1 left promiscuous mode [ 2105.915404] bridge0: port 2(bridge_slave_1) entered disabled state [ 2105.952622] device bridge_slave_0 left promiscuous mode [ 2105.974179] bridge0: port 1(bridge_slave_0) entered disabled state [ 2106.089392] device hsr_slave_1 left promiscuous mode [ 2106.098817] device hsr_slave_0 left promiscuous mode [ 2106.116724] team0 (unregistering): Port device team_slave_1 removed [ 2106.128221] team0 (unregistering): Port device team_slave_0 removed [ 2106.143363] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 2106.156391] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 2106.207678] bond0 (unregistering): Released all slaves [ 2106.317809] chnl_net:caif_netlink_parms(): no params data found [ 2106.359456] bridge0: port 1(bridge_slave_0) entered blocking state [ 2106.366000] bridge0: port 1(bridge_slave_0) entered disabled state [ 2106.373004] device bridge_slave_0 entered promiscuous mode [ 2106.380312] bridge0: port 2(bridge_slave_1) entered blocking state [ 2106.386831] bridge0: port 2(bridge_slave_1) entered disabled state [ 2106.393840] device bridge_slave_1 entered promiscuous mode [ 2106.414026] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 2106.428126] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 2106.450471] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 2106.457816] team0: Port device team_slave_0 added [ 2106.463213] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 2106.470659] team0: Port device team_slave_1 added [ 2106.476180] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 2106.483462] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 2106.504980] device hsr_slave_0 entered promiscuous mode [ 2106.510919] device hsr_slave_1 entered promiscuous mode [ 2106.517287] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 2106.524394] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 2106.551565] bridge0: port 2(bridge_slave_1) entered blocking state [ 2106.558001] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2106.564670] bridge0: port 1(bridge_slave_0) entered blocking state [ 2106.571103] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2106.662780] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2106.682599] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 2106.693425] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2106.701843] bridge0: port 1(bridge_slave_0) entered disabled state [ 2106.709727] bridge0: port 2(bridge_slave_1) entered disabled state [ 2106.731384] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 2106.737968] 8021q: adding VLAN 0 to HW filter on device team0 [ 2106.759949] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2106.775853] bridge0: port 1(bridge_slave_0) entered blocking state [ 2106.782319] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2106.821278] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2106.830053] bridge0: port 2(bridge_slave_1) entered blocking state [ 2106.836481] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2106.844707] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2106.863637] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2106.874236] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2106.886542] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 2106.893862] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2106.902403] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2106.910569] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2106.928149] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2106.951520] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 2106.964733] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2106.990745] 8021q: adding VLAN 0 to HW filter on device batadv0 16:20:06 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x42) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000040)) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x83, &(0x7f0000000080)={'f%lter\x00', 0x0, 0x0, 0x0, [], 0x0, 0x0, 0x0}, &(0x7f0000000140)=0x78) 16:20:06 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]}) 16:20:06 executing program 1: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffff9c, 0x0, 0xd, &(0x7f00000000c0)='./cgroup.cpu\x00', 0xffffffffffffffff}, 0x30) ioprio_get$pid(0x3, r0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000500)='cgroup.procs\x00', 0x2, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x1, 0x0) ioctl$RTC_UIE_ON(r3, 0x7003) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x5}, 0x2c) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x8, 0x4, 0x100000001, 0x0, r4}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r5, &(0x7f00000002c0)}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x200, &(0x7f0000000180), 0x0, &(0x7f0000000080), &(0x7f0000000180)) mknod(&(0x7f0000f80000)='./file0\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$bt_hidp(0x1f, 0x3, 0x6) syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000002c0)=""/183, &(0x7f00000003c0)=0xb7) ptrace(0x10, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r2, &(0x7f0000000080)=0x4c000000, 0x10a000d50) 16:20:06 executing program 4: socketpair$unix(0x1, 0x8000100000000001, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'eql\x00\x00\xdf\xdd\x94D\x8f\x15\xcf!\x00', 0xec38ed91f1c74952}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000080)={'eql\x00\x00\xa1\xa9[\x02\xc1?\x00\x00\x03\xca\x00', @ifru_mtu=0x1}) 16:20:06 executing program 0: r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000500)='cgroup.procs\x00', 0x2, 0x0) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x5}, 0x2c) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x8, 0x4, 0x100000001, 0x0, r1}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r2, &(0x7f00000002c0)}, 0x10) clone(0x200, &(0x7f0000000180), 0x0, &(0x7f0000000080), &(0x7f0000000180)) mknod(&(0x7f0000f80000)='./file0\x00', 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$bt_hidp(0x1f, 0x3, 0x6) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000002c0)=""/183, &(0x7f00000003c0)=0xb7) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) ptrace(0x10, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000000c0)=0x14, 0x80800) setsockopt$inet6_mreq(r3, 0x29, 0x1f, &(0x7f0000000100)={@dev={0xfe, 0x80, [], 0x29}, r5}, 0x14) sendfile(r0, r0, &(0x7f0000000080)=0x4c000000, 0x10a000d50) r6 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r6, 0x114, 0xa, &(0x7f0000000140)=ANY=[@ANYBLOB="02"], 0x1) 16:20:06 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000500)='cgroup.procs\x00', 0x2, 0x0) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x5}, 0x2c) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x8, 0x4, 0x100000001, 0x0, r2}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r3, &(0x7f00000002c0)}, 0x10) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x200, &(0x7f0000000180), 0x0, &(0x7f0000000080), &(0x7f0000000180)) mknod(&(0x7f0000f80000)='./file0\x00', 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$bt_hidp(0x1f, 0x3, 0x6) syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000002c0)=""/183, &(0x7f00000003c0)=0xb7) ptrace(0x10, 0x0) getsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f00000000c0)={@mcast1, 0x0}, &(0x7f0000000100)=0x14) setsockopt$inet6_IPV6_PKTINFO(r4, 0x29, 0x32, &(0x7f0000000140)={@ipv4={[], [], @multicast2}, r6}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000080)=0x4c000000, 0x10a000d50) 16:20:06 executing program 3: ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x83, &(0x7f0000000080)={'f%lter\x00', 0x0, 0x0, 0x0, [], 0x0, 0x0, 0x0}, &(0x7f0000000140)=0x78) 16:20:07 executing program 0: r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000500)='cgroup.procs\x00', 0x2, 0x0) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x5}, 0x2c) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x8, 0x4, 0x100000001, 0x0, r1}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r2, &(0x7f00000002c0)}, 0x10) clone(0x200, &(0x7f0000000180), 0x0, &(0x7f0000000080), &(0x7f0000000180)) mknod(&(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffc, 0x10000) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$bt_hidp(0x1f, 0x3, 0x6) syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') getsockopt$IP_VS_SO_GET_DESTS(r3, 0x0, 0x484, &(0x7f00000002c0)=""/183, &(0x7f00000003c0)=0xb7) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) ptrace(0x10, 0x0) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r5, r4, &(0x7f0000000000), 0x3) sendfile(r0, r0, &(0x7f0000000080)=0x4c000000, 0x10a000d50) r6 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r6, 0x114, 0xa, &(0x7f0000000140)=ANY=[@ANYBLOB="02"], 0x1) 16:20:07 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff]}) 16:20:07 executing program 3: ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x83, &(0x7f0000000080)={'f%lter\x00', 0x0, 0x0, 0x0, [], 0x0, 0x0, 0x0}, &(0x7f0000000140)=0x78) r1 = dup(r0) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000000)=@assoc_value={0x0, 0x4}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000180)={r2, @in={{0x2, 0x4e24, @multicast2}}, 0x7fff, 0x100, 0x8, 0x3, 0xe4}, &(0x7f0000000100)=0x98) 16:20:07 executing program 1: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffff9c, 0x0, 0xd, &(0x7f00000000c0)='./cgroup.cpu\x00', 0xffffffffffffffff}, 0x30) ioprio_get$pid(0x3, r0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000500)='cgroup.procs\x00', 0x2, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x1, 0x0) ioctl$RTC_UIE_ON(r3, 0x7003) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x5}, 0x2c) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x8, 0x4, 0x100000001, 0x0, r4}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r5, &(0x7f00000002c0)}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x200, &(0x7f0000000180), 0x0, &(0x7f0000000080), &(0x7f0000000180)) mknod(&(0x7f0000f80000)='./file0\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$bt_hidp(0x1f, 0x3, 0x6) syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000002c0)=""/183, &(0x7f00000003c0)=0xb7) ptrace(0x10, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r2, &(0x7f0000000080)=0x4c000000, 0x10a000d50) 16:20:07 executing program 3: ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, 0x0) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x400, 0x0) ioctl$SG_GET_COMMAND_Q(r0, 0x2270, &(0x7f0000000040)) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x83, &(0x7f0000000080)={'f%lter\x00', 0x0, 0x0, 0x0, [], 0x0, 0x0, 0x0}, &(0x7f0000000140)=0x78) [ 2107.526744] net_ratelimit: 24 callbacks suppressed [ 2107.526773] protocol 88fb is buggy, dev hsr_slave_0 [ 2107.537000] protocol 88fb is buggy, dev hsr_slave_1 [ 2107.572031] IPVS: length: 183 != 24 16:20:07 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd]}) 16:20:07 executing program 3: ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet(0x2, 0x1, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet6_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000040)) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x83, &(0x7f0000000080)={'f%lter\x00', 0x0, 0x0, 0x0, [], 0x0, 0x0, 0x0}, &(0x7f0000000140)=0x78) 16:20:07 executing program 3: ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x10edf3537089e8b5, 0x0) syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x7ff, 0x440000) syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x7, 0x400002) syz_open_dev$cec(&(0x7f00000001c0)='/dev/cec#\x00', 0x3, 0x2) openat$mixer(0xffffffffffffff9c, &(0x7f0000000200)='/dev/mixer\x00', 0x600003, 0x0) dup2(0xffffffffffffff9c, 0xffffffffffffffff) open(&(0x7f0000000240)='./file0\x00', 0x254001, 0x82) openat$zero(0xffffffffffffff9c, &(0x7f0000000280)='/dev/zero\x00', 0x40, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/dsp\x00', 0x10000, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000300)='/dev/dlm-monitor\x00', 0x20000, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000340)='/dev/snd/pcmC#D#c\x00', 0x2, 0x200400) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000380)='/dev/cachefiles\x00', 0x2000, 0x0) r0 = syz_open_dev$usb(&(0x7f00000003c0)='/dev/bus/usb/00#/00#\x00', 0xe9bf, 0x8400) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x83, &(0x7f0000000080)={'f%lter\x00', 0x0, 0x0, 0x0, [], 0x0, 0x0, 0x0}, &(0x7f0000000140)=0x78) 16:20:07 executing program 4: socketpair$unix(0x1, 0x8000100000000001, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'eql\x00\x00\xdf\xdd\x94D\x8f\x15\xcf!\x00', 0xec38ed91f1c74952}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000080)={'eql\x00\x00\xa1\xa9[\x03\xc1?\x00\x00\x03\xca\x00', @ifru_mtu=0x1}) 16:20:07 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]}) 16:20:07 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000500)='cgroup.procs\x00', 0x2, 0x0) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x5}, 0x2c) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x8, 0x4, 0x100000001, 0x0, r2}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r3, &(0x7f00000002c0)}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x200, &(0x7f0000000180), 0x0, &(0x7f0000000080), &(0x7f0000000180)) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rfkill\x00', 0x0, 0x0) ioctl$CAPI_REGISTER(r4, 0x400c4301, &(0x7f00000001c0)={0x2, 0x4, 0x496dcdda}) r5 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r5, 0xc0305616, &(0x7f0000000140)={0x0, {0xffffffffffff0001, 0x100}}) ioctl$VIDIOC_EXPBUF(r5, 0xc0405610, &(0x7f0000000240)={0x6, 0x7, 0x6, 0x80000, r4}) mknod(&(0x7f0000f80000)='./file0\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$bt_hidp(0x1f, 0x3, 0x6) syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') syz_open_dev$sndmidi(&(0x7f00000000c0)='/dev/snd/midiC#D#\x00', 0x7f, 0x200040) getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000002c0)=""/183, &(0x7f00000003c0)=0xb7) ptrace(0x10, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000080)=0x4c000000, 0x10a000d50) 16:20:07 executing program 0: r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000500)='cgroup.procs\x00', 0x2, 0x0) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x5}, 0x2c) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x8, 0x4, 0x100000001, 0x0, r1}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r2, &(0x7f00000002c0)}, 0x10) clone(0x200, &(0x7f0000000180), 0x0, &(0x7f0000000080), &(0x7f0000000180)) mknod(&(0x7f0000f80000)='./file0\x00', 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$bt_hidp(0x1f, 0x3, 0x6) r4 = gettid() r5 = syz_open_procfs(r4, &(0x7f00000001c0)='pagemap\x00') getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000002c0)=""/183, &(0x7f00000003c0)=0xb7) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) fcntl$getownex(r3, 0x10, &(0x7f0000000000)) ioctl$TIOCGSID(r5, 0x5429, &(0x7f00000000c0)=0x0) ptrace(0x4219, r6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r0, &(0x7f0000000080)=0x4c000000, 0x10a000d50) r7 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r7, 0x114, 0xa, &(0x7f0000000140)=ANY=[@ANYBLOB="02"], 0x1) 16:20:07 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fstatfs(r1, &(0x7f00000000c0)) keyctl$session_to_parent(0x12) r2 = openat$cgroup_procs(r0, &(0x7f0000000500)='cgroup.procs\x00', 0x2, 0x0) socket$pppoe(0x18, 0x1, 0x0) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x5}, 0x2c) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x8, 0x4, 0x100000001, 0x0, r3}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r4, &(0x7f00000002c0)}, 0x10) setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f00000000c0)={0x7}, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x200, &(0x7f0000000180), 0x0, &(0x7f0000000080), &(0x7f0000000180)) mknod(&(0x7f0000f80000)='./file0\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$bt_hidp(0x1f, 0x3, 0x6) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000002c0)=""/183, &(0x7f00000003c0)=0xb7) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f0000000540)={"e0dd113f4904db70d572490f511f3e0d8277b6f1eb06c1dba3c8435b198a9fef80f31979bbe8b6240b3082d6d817fc986e70ba458eb122175c75229d6ab5795ec22dd93bb6cf8625ea884496de7fcf681661d816873d4a102742d9806d71c3a8307348cd19bf3c0de51fc45be1cfd49377a2ee89676af152f3a5f5cb839cf75471c457c4758a45df7902a5dbeef9f0d8d7d82ad301e72aef0acb6857302456167cd596d88a1443c5f6b027ee48f0174048ddf0adf89327a6daf79303b8a60c474e4d56a7e6e3db010dbfe68c70ba0ec664f7812ee7a7d4d0f781c30c1d1ccdb26e41951c40abdea19e3e2cd40b3e9223c46dd97a336caedb6bb510b5eac0c1b4c5f2c7ab3fb4441eec3f7e4ff351d6542dd66aa261d52885f9b32976fa468ed0c0114401522c00d0134a01c3af17806f0f58e0b34393b238e5de4a8097478cec87fc27d4065fa8cb752cea629a284815d87cfb99c1d5833208e0fc4566d78a8b73c14ace4efa8f3b58b75f62f7c76836e76aef655601883c2a1301b95fb73b54c0fcfe237de2ee46d88c171857bb5f9a1a01f136620ea068585161aa5eef96561b86cec911e650b9d7b631210e91dfc10c68db98ef95b0f7e0d2289e4b314a356a38752520a32fe13c6fce4362308bbff368cf7eede185673fa9e0e563932f453d140003753432386eb7f5422a376a8097ce7e78e42623a7809a64afff29a571cd94350991784cef132ad06800c3ebc7870d1d2ceccdfaab8a8a03a3f5c4cfa4dff0d81c194fbf1dd69dd440c656658efec9cfb94c9786c535bf819ca667ca4339738c7fb4baa65532a8e343e330f60a8e4fdd05e645a8aca6e5025dabaa7a6754e6fe734fb2c08af4e483c588c1f0142a634206a744b7e8c5ad20099d157fdb2901e4aa4d0c25946cade9dad05c50a9c55b428dd49fd8fbbbfb2a81ced11922c7f43ca705e8338af19ce840292e57acb7f49d56075bf677fcb0379f92d23910355535f4572ca29516a52d0afa07c4c1d859c1dc8f11f52387323a52e05a85fd834a2d450833c0fe69e484cfde546b071d68e802eba0233d03d60f2566804ee6562ea6098c27312526bf0031a01769ed4fbd422d9db91e26e7a72d890e0c0a3915ddb5030fc7ce076b7017735d048b339c601fbfc3ee20b79f9aa9f25d9409d3d0946710642a39240461938ddb388a8eb123edc0eb6395120b435dcd03a5e5bbfc55fa1dba2b6394eb2435f5ae82ffa83ebe8860497738ba3e1d5b7e0c1792b1266f659533a815cb32c771cf211d858f3309b5273d00450b72b62d81215d48d7a6ec5048ec7c6b6f77a65dc5aa16e7f29ec38dfd7d891a3c6aeee20000000100000000eb5097974f2e5c132e66fb08217a24baff5ee069cca8185e8dc2365b85bdd67c3fbe7e57ceb09e4b920d3ff59fff758100"}) ptrace(0x10, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r2, &(0x7f0000000080)=0x4c000000, 0x10a000d50) 16:20:07 executing program 3: ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$EBT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000000080)={'f%lter\x00', 0x0, 0x0, 0x0, [], 0x0, 0x0, 0x0}, &(0x7f0000000140)=0x78) 16:20:07 executing program 3: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x115000, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc004ae02, &(0x7f0000000040)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet(0x2, 0xfffffffffffffffd, 0xfffffffffbfffff8) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x83, &(0x7f0000000080)={'f%lter\x00', 0x0, 0x0, 0x0, [], 0x0, 0x0, 0x0}, &(0x7f0000000140)=0x78) 16:20:07 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff]}) 16:20:07 executing program 3: ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_int(r0, 0x0, 0x3f, &(0x7f0000000000)=0x4, 0x4) r1 = socket$inet(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x83, &(0x7f0000000080)={'f%lter\x00', 0x0, 0x0, 0x0, [], 0x0, 0x0, 0x0}, &(0x7f0000000140)=0x78) 16:20:07 executing program 0: r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000500)='cgroup.procs\x00', 0x2, 0x0) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x5}, 0x2c) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x8, 0x4, 0x100000001, 0x0, r1}, 0x2c) setsockopt$RDS_FREE_MR(r1, 0x114, 0x3, &(0x7f0000000240)={{0x4, 0x3}, 0x51}, 0x10) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r2, &(0x7f00000002c0)}, 0x10) clone(0x200, &(0x7f0000000180), 0x0, &(0x7f0000000080), &(0x7f0000000180)) mknod(&(0x7f0000f80000)='./file0\x00', 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$bt_hidp(0x1f, 0x3, 0x6) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000002c0)=""/183, &(0x7f00000003c0)=0xb7) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) ptrace(0x10, 0x0) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r0, &(0x7f0000000080)=0x4c000000, 0x10a000d50) setgid(0x0) r6 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r6, 0x114, 0xa, &(0x7f0000000380)=ANY=[@ANYRES16=r5], 0x1) sendfile(r3, r0, &(0x7f0000000140), 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000400)={{{@in=@multicast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@local}}, &(0x7f0000000000)=0xe8) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000100)=0xc) fchown(r5, r7, r8) 16:20:07 executing program 4: socketpair$unix(0x1, 0x8000100000000001, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'eql\x00\x00\xdf\xdd\x94D\x8f\x15\xcf!\x00', 0xec38ed91f1c74952}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000080)={'eql\x00\x00\xa1\xa9[\x01\xc4?\x00\x00\x03\xca\x00', @ifru_mtu=0x1}) 16:20:08 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd]}) 16:20:08 executing program 3: ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) getsockopt$sock_int(r0, 0x1, 0xa, &(0x7f0000000040), &(0x7f0000000100)=0x4) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet(0x2, 0x1, 0x0) dup3(r1, r1, 0x80000) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x83, &(0x7f0000000080)={'f%lter\x00', 0x0, 0x0, 0x0, [], 0x0, 0x0, 0x0}, &(0x7f0000000140)=0x78) write(r1, &(0x7f0000000180)="8e78a8e752cc9270eec3cd3ee715badf23095ede7a313b1fbd75cc90f1659a75f574cdd187c68fd8acdbca3a22911c69c50414641df41ac7ed7652aa0c9782fe02b950e97e08e58c11b1a32eb7688971c97b81c10891d16581773794a3714b5cd9d2ac2cb0dee97b169f8733eef2ecbe2b29b597ee57612884b0b2b528989458d592370a7e6d6b75522e4023e4828acb717fb3af20090fa1883812f6fb2ab7989df47f7563142b3e334c1a7c3992af6ec18c", 0xb2) 16:20:08 executing program 0: r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000500)='cgroup.procs\x00', 0x2, 0x0) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x5}, 0x2c) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x8, 0x4, 0x100000001, 0x0, r1}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r2, &(0x7f00000002c0)}, 0x10) clone(0x200, &(0x7f0000000180), 0x0, &(0x7f0000000080), &(0x7f0000000180)) mknod(&(0x7f0000f80000)='./file0\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$bt_hidp(0x1f, 0x3, 0x6) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') getsockname$unix(r3, &(0x7f00000000c0)=@abs, &(0x7f0000000000)=0x6e) getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000002c0)=""/183, &(0x7f00000003c0)=0xb7) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) ptrace(0x10, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r0, &(0x7f0000000080)=0x4c000000, 0x10a000d50) r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r4, 0x114, 0xa, &(0x7f0000000140)=ANY=[@ANYBLOB="02"], 0x1) prctl$PR_SET_UNALIGN(0x6, 0x0) 16:20:08 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000500)='cgroup.procs\x00', 0x2, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x5}, 0x2c) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f00000000c0)) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x8, 0x4, 0x100000001, 0x0, r2}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r3, &(0x7f00000002c0)}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x200, &(0x7f0000000180), 0x0, &(0x7f0000000080), &(0x7f0000000180)) mknod(&(0x7f0000f80000)='./file0\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$bt_hidp(0x1f, 0x3, 0x6) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000002c0)=""/183, &(0x7f00000003c0)=0xb7) ptrace(0x10, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000080)=0x4c000000, 0x10a000d50) r5 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffa) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000440)={0x8, &(0x7f0000000400)=[{0x2c0d, 0x3ff, 0x3, 0x6}, {0xffff, 0x100000000, 0x0, 0xba71}, {0x8, 0x7, 0x9, 0xfffffffffffffffe}, {0x5, 0x8000, 0x8001, 0x4e95}, {0x800, 0xd68f000000000, 0x1, 0x6}, {0x101, 0xffffffffffff0001, 0x10001, 0xffffffff7fffffff}, {0x4, 0xfffffffffffffff8, 0x41, 0x81}, {0xffffffffffffffff, 0xffff, 0xfffffffffffffff9, 0x9}]}) r6 = request_key(&(0x7f0000000180)='big_key\x00', &(0x7f00000001c0)={'syz', 0x2}, &(0x7f0000000240)='wlan1nodev{\x00', 0xfffffffffffffff9) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000280), 0x0, 0x7}}, 0x20) keyctl$reject(0x13, r5, 0x80000000, 0x10001, r6) 16:20:08 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]}) 16:20:08 executing program 1: socket$bt_bnep(0x1f, 0x3, 0x4) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r2 = socket(0x11, 0x3, 0x0) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) setsockopt(r2, 0x107, 0xd, &(0x7f0000001000), 0xc5) dup2(r1, r2) syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x40c2, 0x200000) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/pfkey\x00', 0x2100, 0x0) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x17) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, 0x0) clone(0x210a001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket$inet(0x2, 0x1, 0x7) getsockopt$EBT_SO_GET_ENTRIES(r4, 0x0, 0x83, &(0x7f0000000080)={'f%lter\x00', 0x0, 0x0, 0x0, [], 0x0, 0x0, 0x0}, &(0x7f0000000140)=0x78) socket$inet_icmp_raw(0x2, 0x3, 0x1) getresuid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280)) lsetxattr$security_smack_entry(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.SMACK64IPOUT\x00', &(0x7f0000000100)='f%lter\x00', 0x7, 0x2) 16:20:08 executing program 3: ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) r0 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x8000, 0x30200) write$P9_RMKNOD(r0, &(0x7f0000000040)={0x14, 0x13, 0x1, {0x11, 0x0, 0x3}}, 0x14) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x83, &(0x7f0000000080)={'f%lter\x00', 0x0, 0x0, 0x0, [], 0x0, 0x0, 0x0}, &(0x7f0000000140)=0x78) ioctl$sock_inet_SIOCGIFBRDADDR(r1, 0x8919, 0xfffffffffffffffd) [ 2108.725622] protocol 88fb is buggy, dev hsr_slave_0 [ 2108.731447] protocol 88fb is buggy, dev hsr_slave_1 [ 2108.737316] protocol 88fb is buggy, dev hsr_slave_0 [ 2108.743134] protocol 88fb is buggy, dev hsr_slave_1 [ 2108.749244] protocol 88fb is buggy, dev hsr_slave_0 [ 2108.754739] protocol 88fb is buggy, dev hsr_slave_1 16:20:08 executing program 0: r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000240)='cgroup.%\r\x00\x00\x00\x00\x00\x00\x11u\x90\x17v\xce\xfd6\xe0\n\xed\xda\xd1\x82\xc3!Y\xeb\xff\x9a\xd8y\xd5\'\xf2\xa9\x83', 0x2, 0x0) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$binder(&(0x7f0000000240)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40406301, {{0x0, 0xfdfdffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x5}, 0x2c) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000280)=0x2, 0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x8, 0x4, 0x100000001, 0x0, r3}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r4, &(0x7f00000002c0)}, 0x10) clone(0x200, &(0x7f0000000180), 0x0, &(0x7f0000000080), &(0x7f0000000180)) mknod(&(0x7f0000f80000)='./file0\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$bt_hidp(0x1f, 0x3, 0x6) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000002c0)=""/183, &(0x7f00000003c0)=0xb7) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) ptrace(0x10, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r0, &(0x7f0000000080)=0x4c000000, 0x10a000d50) r6 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_fanout_data(r5, 0x107, 0x16, &(0x7f00000001c0)={0x5, &(0x7f0000000180)=[{0x6, 0x9, 0x3ff, 0x7}, {0xe0, 0xfffffffffffffffc, 0x96dd, 0x3}, {0xe94, 0x81, 0x8, 0x4}, {0x1ff, 0x8, 0x9, 0x7}, {0x4, 0x200, 0x800, 0x8000}]}, 0x10) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r6, 0x114, 0xa, &(0x7f0000000140)=ANY=[@ANYBLOB="02"], 0x1) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f00000000c0)=0xc) write$FUSE_LK(r6, &(0x7f0000000100)={0x28, 0xfffffffffffffffe, 0x3, {{0x9, 0x9, 0x2, r7}}}, 0x28) 16:20:08 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff]}) 16:20:08 executing program 3: ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x1, 0x10800) accept$inet(r0, &(0x7f0000000100)={0x2, 0x0, @local}, &(0x7f0000000140)=0x10) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x83, &(0x7f0000000080)={'f%lter\x00', 0x0, 0x3, 0x6e, [], 0xfffffffffffffee4, 0x0, 0x0}, &(0x7f0000000000)=0x78) 16:20:08 executing program 1: socket$bt_bnep(0x1f, 0x3, 0x4) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r2 = socket(0x11, 0x3, 0x0) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) setsockopt(r2, 0x107, 0xd, &(0x7f0000001000), 0xc5) dup2(r1, r2) syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x40c2, 0x200000) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/pfkey\x00', 0x2100, 0x0) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x17) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, 0x0) clone(0x210a001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket$inet(0x2, 0x1, 0x7) getsockopt$EBT_SO_GET_ENTRIES(r4, 0x0, 0x83, &(0x7f0000000080)={'f%lter\x00', 0x0, 0x0, 0x0, [], 0x0, 0x0, 0x0}, &(0x7f0000000140)=0x78) socket$inet_icmp_raw(0x2, 0x3, 0x1) getresuid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280)) lsetxattr$security_smack_entry(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.SMACK64IPOUT\x00', &(0x7f0000000100)='f%lter\x00', 0x7, 0x2) [ 2108.995108] binder: 19583:19584 got reply transaction with bad transaction stack, transaction 57 has target 19583:0 [ 2109.037354] binder: 19583:19584 transaction failed 29201/-71, size 0-0 line 2816 [ 2109.136456] binder_alloc: binder_alloc_mmap_handler: 19583 20001000-20004000 already mapped failed -16 16:20:08 executing program 4: socketpair$unix(0x1, 0x8000100000000001, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'eql\x00\x00\xdf\xdd\x94D\x8f\x15\xcf!\x00', 0xec38ed91f1c74952}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000080)={'eql\x00\x00\xa1\xa9[\x02\xc8?\x00\x00\x03\xca\x00', @ifru_mtu=0x1}) 16:20:08 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd]}) 16:20:08 executing program 3: ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x10040, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, 0x0) r1 = socket(0x1, 0x1, 0x8000) getsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f00000025c0)=0x9, &(0x7f0000002600)=0x4) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r2, 0x0, 0x83, &(0x7f0000000080)={'f%lter\x00', 0x0, 0x0, 0x0, [], 0x0, 0x0, 0x0}, &(0x7f0000000140)=0x78) 16:20:08 executing program 1: socket$bt_bnep(0x1f, 0x3, 0x4) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r2 = socket(0x11, 0x3, 0x0) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) setsockopt(r2, 0x107, 0xd, &(0x7f0000001000), 0xc5) dup2(r1, r2) syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x40c2, 0x200000) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/pfkey\x00', 0x2100, 0x0) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x17) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, 0x0) clone(0x210a001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket$inet(0x2, 0x1, 0x7) getsockopt$EBT_SO_GET_ENTRIES(r4, 0x0, 0x83, &(0x7f0000000080)={'f%lter\x00', 0x0, 0x0, 0x0, [], 0x0, 0x0, 0x0}, &(0x7f0000000140)=0x78) socket$inet_icmp_raw(0x2, 0x3, 0x1) getresuid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280)) lsetxattr$security_smack_entry(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.SMACK64IPOUT\x00', &(0x7f0000000100)='f%lter\x00', 0x7, 0x2) [ 2109.205475] binder: BINDER_SET_CONTEXT_MGR already set [ 2109.274850] binder: 19583:19585 ioctl 40046207 0 returned -16 [ 2109.290276] binder: 19583:19584 ioctl c0306201 200002c0 returned -14 [ 2109.366207] binder: 19583:19597 ioctl c0306201 20000440 returned -14 [ 2109.388148] binder: 19583:19585 ioctl c0306201 200002c0 returned -14 [ 2109.444993] protocol 88fb is buggy, dev hsr_slave_0 [ 2109.450140] protocol 88fb is buggy, dev hsr_slave_1 [ 2109.590180] binder: send failed reply for transaction 57 to 19583:19584 [ 2109.608680] binder: undelivered TRANSACTION_COMPLETE [ 2109.626478] binder: undelivered TRANSACTION_ERROR: 29201 [ 2109.646516] binder: undelivered TRANSACTION_ERROR: 29189 16:20:09 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000500)='cgroup.procs\x00', 0x2, 0x0) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x5}, 0x2c) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vsock\x00', 0x0, 0x0) ioctl$BLKPG(r3, 0x1269, &(0x7f0000000380)={0x1, 0xffff, 0x55, &(0x7f0000000240)="742f9879cbc54169f15e56db3d86b8c42cf409110b0089d5e5f55b7cbabd310feeae86f19db7feead924a1e58c3002972c34af0f406ea8479b50492b31186f9d215c2b33306b73aa357302880d4145912dfab6ae69"}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x8, 0x4, 0x100000001, 0x0, r2}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r4, &(0x7f00000002c0)}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x200, &(0x7f0000000180), 0x0, &(0x7f0000000080), &(0x7f0000000180)) mknod(&(0x7f0000f80000)='./file0\x00', 0x0, 0x0) r5 = creat(&(0x7f00000000c0)='./file0\x00', 0x27) connect$pppoe(r5, &(0x7f0000000100)={0x18, 0x0, {0x4, @remote, 'lo\x00'}}, 0x1e) socket$inet6_tcp(0xa, 0x1, 0x0) socket$bt_hidp(0x1f, 0x3, 0x6) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000002c0)=""/183, &(0x7f00000003c0)=0xb7) ptrace(0x10, 0x0) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000440)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r5, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0x78, r7, 0x500, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}]}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x9}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_bond\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}]}, 0x78}, 0x1, 0x0, 0x0, 0x24000000}, 0xc000) getsockopt$inet_sctp_SCTP_EVENTS(r6, 0x84, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0xb) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000080)=0x4c000000, 0x10a000d50) 16:20:09 executing program 4: socketpair$unix(0x1, 0x8000100000000001, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'eql\x00\x00\xdf\xdd\x94D\x8f\x15\xcf!\x00', 0xec38ed91f1c74952}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000080)={'eql\x00\x00\xa1\xa9[\x03\xc8?\x00\x00\x03\xca\x00', @ifru_mtu=0x1}) 16:20:09 executing program 3: ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x90000, 0x10) ioctl$SCSI_IOCTL_GET_PCI(r0, 0x5387, &(0x7f0000000040)) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x83, &(0x7f0000000080)={'f%lter\x00', 0x0, 0x0, 0x0, [], 0x0, 0x0, 0x0}, &(0x7f0000000140)=0x78) 16:20:09 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]}) 16:20:09 executing program 1: socket$bt_bnep(0x1f, 0x3, 0x4) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r2 = socket(0x11, 0x3, 0x0) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) setsockopt(r2, 0x107, 0xd, &(0x7f0000001000), 0xc5) dup2(r1, r2) syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x40c2, 0x200000) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/pfkey\x00', 0x2100, 0x0) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x17) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, 0x0) clone(0x210a001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket$inet(0x2, 0x1, 0x7) getsockopt$EBT_SO_GET_ENTRIES(r4, 0x0, 0x83, &(0x7f0000000080)={'f%lter\x00', 0x0, 0x0, 0x0, [], 0x0, 0x0, 0x0}, &(0x7f0000000140)=0x78) socket$inet_icmp_raw(0x2, 0x3, 0x1) getresuid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280)) 16:20:09 executing program 0: r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000500)='cgroup.procs\x00', 0x2, 0x0) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x5}, 0x2c) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x8, 0x4, 0x100000001, 0x0, r1}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r2, &(0x7f00000002c0)}, 0x10) clone(0x200, &(0x7f0000000180), 0x0, &(0x7f0000000080), &(0x7f0000000180)) mknod(&(0x7f0000f80000)='./file0\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$bt_hidp(0x1f, 0x3, 0x6) syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000002c0)=""/183, &(0x7f00000003c0)=0xb7) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) ptrace(0x10, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='trusted.overlay.opaque\x00', &(0x7f0000000100)='y\x00', 0x2, 0x1) sendfile(r0, r0, &(0x7f0000000080)=0x4c000000, 0x10a000d50) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r3, 0x114, 0xa, &(0x7f0000000140)=ANY=[@ANYBLOB="02"], 0x1) 16:20:09 executing program 3: ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x10000, 0x80) r0 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x1, 0x801) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000100)={r0, &(0x7f0000000180)="ac2e0fd79d6dc2532db71ffdc42ad649027deac6d7e6c6187b1fcf4e7ad31bb1fcf6381ffb179b8d8c25394431adee2b7a1dc67d2787344edb5dbd0cd3c091a5493aa1dc218299fa06db8c4607fe6694fa0c5c3c97e6bd14e15595f2ae9c220f795af962803b37d17cc910018fb7aae0bdcafda07643158a5c538cc8fea8df7796d5e68c09c39df2956530ab58bcb953508aaff3319cd8ca5e1dcbf218150f4344784d06326d"}, 0x10) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_procfs(0x0, 0x0) ioctl$KDSKBLED(r1, 0x4b65, 0x1a6) r2 = socket$inet(0x2, 0x7, 0x8898) fadvise64(r1, 0x0, 0x1ff, 0x2) getsockopt$EBT_SO_GET_ENTRIES(r2, 0x0, 0x83, &(0x7f0000000080)={'f%lter\x00', 0x0, 0x0, 0x0, [], 0x0, 0x0, 0x0}, &(0x7f0000000140)=0x78) 16:20:09 executing program 0: r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000500)='cgroup.procs\x00', 0x2, 0x0) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x5}, 0x2c) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x8, 0x4, 0x100000001, 0x0, r1}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r2, &(0x7f00000002c0)}, 0x10) clone(0x200, &(0x7f0000000180), 0x0, &(0x7f0000000080), &(0x7f0000000180)) mknod(&(0x7f0000f80000)='./file0\x00', 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$bt_hidp(0x1f, 0x3, 0x6) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000002c0)=""/183, &(0x7f00000003c0)=0xb7) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) ptrace(0x10, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_DEL(r4, 0x2, r3) sendfile(r0, r0, &(0x7f0000000080)=0x4c000000, 0x10a000d50) r5 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r5, 0x114, 0xa, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x1) [ 2109.867020] Unknown ioctl 4713 16:20:09 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff]}) 16:20:09 executing program 3: personality(0x400000d) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x83, &(0x7f0000000080)={'f%lter\x00', 0x0, 0x0, 0x0, [], 0x0, 0x0, 0x0}, &(0x7f0000000140)=0x78) time(&(0x7f0000000000)) 16:20:09 executing program 1: socket$bt_bnep(0x1f, 0x3, 0x4) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r2 = socket(0x11, 0x3, 0x0) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) setsockopt(r2, 0x107, 0xd, &(0x7f0000001000), 0xc5) dup2(r1, r2) syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x40c2, 0x200000) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/pfkey\x00', 0x2100, 0x0) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x17) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, 0x0) clone(0x210a001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket$inet(0x2, 0x1, 0x7) getsockopt$EBT_SO_GET_ENTRIES(r4, 0x0, 0x83, &(0x7f0000000080)={'f%lter\x00', 0x0, 0x0, 0x0, [], 0x0, 0x0, 0x0}, &(0x7f0000000140)=0x78) socket$inet_icmp_raw(0x2, 0x3, 0x1) 16:20:09 executing program 3: ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet(0x2, 0x1, 0x0) r2 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0xfffffffffffffffc, 0x80) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000100)={0x8, 0x6, 0xa000}, 0x4) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x83, &(0x7f0000000080)={'f%lter\x00', 0x0, 0x0, 0x0, [], 0x0, 0x0, 0x0}, &(0x7f0000000140)=0x78) [ 2110.223473] Unknown ioctl 4713 16:20:10 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000500)='cgroup.procs\x00', 0x2, 0x0) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x5}, 0x2c) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x8, 0x4, 0x100000001, 0x0, r2}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r3, &(0x7f00000002c0)}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) clone(0x200, &(0x7f0000000180), 0x0, &(0x7f0000000080), &(0x7f0000000180)) mknod(&(0x7f0000f80000)='./file0\x00', 0x0, 0x0) umount2(&(0x7f0000000100)='./file1\x00', 0x9) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$bt_hidp(0x1f, 0x3, 0x6) syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000002c0)=""/183, &(0x7f00000003c0)=0xb7) ptrace(0x10, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000080)=0x4c000000, 0x10a000d50) bind$inet(r4, &(0x7f00000000c0)={0x2, 0x4e22, @multicast1}, 0x10) 16:20:10 executing program 1: socket$bt_bnep(0x1f, 0x3, 0x4) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r2 = socket(0x11, 0x3, 0x0) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) setsockopt(r2, 0x107, 0xd, &(0x7f0000001000), 0xc5) dup2(r1, r2) syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x40c2, 0x200000) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/pfkey\x00', 0x2100, 0x0) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x17) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, 0x0) clone(0x210a001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket$inet(0x2, 0x1, 0x7) getsockopt$EBT_SO_GET_ENTRIES(r4, 0x0, 0x83, &(0x7f0000000080)={'f%lter\x00', 0x0, 0x0, 0x0, [], 0x0, 0x0, 0x0}, &(0x7f0000000140)=0x78) 16:20:10 executing program 4: socketpair$unix(0x1, 0x8000100000000001, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'eql\x00\x00\xdf\xdd\x94D\x8f\x15\xcf!\x00', 0xec38ed91f1c74952}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000080)={'eql\x00\x00\xa1\xa9[\x02\xcd?\x00\x00\x03\xca\x00', @ifru_mtu=0x1}) 16:20:10 executing program 0: r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000500)='cgroup.procs\x00', 0x2, 0x0) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x5}, 0x2c) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x8, 0x4, 0x100000001, 0x0, r1}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r2, &(0x7f00000002c0)}, 0x10) clone(0x200, &(0x7f0000000180), 0x0, &(0x7f0000000080), &(0x7f0000000180)) mknod(&(0x7f0000f80000)='./file0\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$bt_hidp(0x1f, 0x3, 0x6) syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000002c0)=""/183, &(0x7f00000003c0)=0xb7) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) ptrace(0x10, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r0, &(0x7f0000000080)=0x4c000000, 0x10a000d50) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r3, 0x114, 0xa, &(0x7f0000000000)=ANY=[@ANYBLOB="02"], 0x1) 16:20:10 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd]}) 16:20:10 executing program 3: ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet(0x2, 0x1, 0x0) ioctl$int_out(r0, 0x2, &(0x7f0000000000)) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x83, &(0x7f0000000080)={'f%lter\x00', 0x0, 0x0, 0x0, [], 0x0, 0x0, 0x0}, &(0x7f0000000140)=0x78) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000000040)={r0}) setsockopt$inet6_tcp_int(r1, 0x6, 0x1f, &(0x7f0000000100)=0x1, 0x4) 16:20:10 executing program 3: ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, 0x0) clone(0x7fe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet(0x2, 0x1, 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x400400, 0x0) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000340)={{{@in6=@ipv4={[], [], @initdev}, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@remote}}, &(0x7f0000000040)=0xe8) connect$can_bcm(r1, &(0x7f0000000180)={0x1d, r2}, 0x10) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000200)={{{@in6=@loopback, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@loopback}}, &(0x7f0000000100)=0xe8) connect$can_bcm(r1, &(0x7f0000000300)={0x1d, r3}, 0x10) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x83, &(0x7f0000000080)={'f%lter\x00', 0x0, 0x0, 0x0, [], 0x0, 0x0, 0x0}, &(0x7f0000000140)=0x78) 16:20:10 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]}) 16:20:10 executing program 3: ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet(0x2, 0x1, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x800, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r1, 0x4010ae74, &(0x7f0000000040)={0x4, 0xfffffffffffffffe, 0x10001}) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x83, &(0x7f0000000080)={'f%lter\x00', 0x0, 0x0, 0x0, [], 0x0, 0x0, 0x0}, &(0x7f0000000140)=0x78) 16:20:10 executing program 1: socket$bt_bnep(0x1f, 0x3, 0x4) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r2 = socket(0x11, 0x3, 0x0) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) setsockopt(r2, 0x107, 0xd, &(0x7f0000001000), 0xc5) dup2(r1, r2) syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x40c2, 0x200000) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/pfkey\x00', 0x2100, 0x0) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x17) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, 0x0) clone(0x210a001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet(0x2, 0x1, 0x7) 16:20:10 executing program 3: ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) alarm(0x1) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x83, &(0x7f0000000080)={'f%lter\x00', 0x0, 0x0, 0x0, [], 0x0, 0x0, 0x0}, &(0x7f0000000140)=0x78) 16:20:10 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff]}) 16:20:11 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000500)='cgroup.procs\x00', 0x2, 0x0) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = syz_open_dev$cec(&(0x7f00000001c0)='/dev/cec#\x00', 0x0, 0x2) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r2, 0xc0305302, &(0x7f0000000100)={0x80000000, 0x6, 0x0, 0x0, 0x3, 0x5}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x5}, 0x2c) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x8, 0x4, 0x100000001, 0x0, r3}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r4, &(0x7f00000002c0)}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x200, &(0x7f0000000180), 0x0, &(0x7f0000000080), &(0x7f0000000180)) mknod(&(0x7f0000f80000)='./file0\x00', 0x80000000003, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$bt_hidp(0x1f, 0x3, 0x6) syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000002c0)=""/183, &(0x7f00000003c0)=0xb7) ptrace(0x10, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000080)=0x4c000000, 0x10a000d50) 16:20:11 executing program 3: ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet(0x2, 0x2000000001, 0x3) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x83, &(0x7f0000000080)={'f%lter\x00', 0x0, 0x0, 0x0, [], 0x0, 0x0, 0x0}, &(0x7f0000000140)=0x78) [ 2112.885018] net_ratelimit: 12 callbacks suppressed [ 2112.885027] protocol 88fb is buggy, dev hsr_slave_0 [ 2112.895183] protocol 88fb is buggy, dev hsr_slave_1 [ 2112.900359] protocol 88fb is buggy, dev hsr_slave_0 [ 2112.905516] protocol 88fb is buggy, dev hsr_slave_1 [ 2112.910654] protocol 88fb is buggy, dev hsr_slave_0 [ 2112.915813] protocol 88fb is buggy, dev hsr_slave_1 16:20:12 executing program 4: socketpair$unix(0x1, 0x8000100000000001, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'eql\x00\x00\xdf\xdd\x94D\x8f\x15\xcf!\x00', 0xec38ed91f1c74952}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000080)={'eql\x00\x00\xa1\xa9[\x03\xcd?\x00\x00\x03\xca\x00', @ifru_mtu=0x1}) [ 2113.605050] protocol 88fb is buggy, dev hsr_slave_0 [ 2113.610222] protocol 88fb is buggy, dev hsr_slave_1 [ 2113.765672] protocol 88fb is buggy, dev hsr_slave_0 [ 2113.771388] protocol 88fb is buggy, dev hsr_slave_1 [ 2117.607995] IPVS: ftp: loaded support on port[0] = 21 [ 2117.871517] chnl_net:caif_netlink_parms(): no params data found [ 2117.925023] net_ratelimit: 18 callbacks suppressed [ 2117.925031] protocol 88fb is buggy, dev hsr_slave_0 [ 2117.935205] protocol 88fb is buggy, dev hsr_slave_1 [ 2118.085891] bridge0: port 1(bridge_slave_0) entered blocking state [ 2118.092332] bridge0: port 1(bridge_slave_0) entered disabled state [ 2118.101158] device bridge_slave_0 entered promiscuous mode [ 2118.109052] bridge0: port 2(bridge_slave_1) entered blocking state [ 2118.115688] bridge0: port 2(bridge_slave_1) entered disabled state [ 2118.122724] device bridge_slave_1 entered promiscuous mode [ 2118.314295] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 2118.324116] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 2118.337066] IPVS: stopping master sync thread 10949 ... [ 2118.350744] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 2118.358408] team0: Port device team_slave_0 added [ 2118.370376] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 2118.377996] team0: Port device team_slave_1 added [ 2118.383277] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 2118.391040] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 2118.410782] device hsr_slave_0 entered promiscuous mode [ 2118.416742] device hsr_slave_1 entered promiscuous mode [ 2118.422650] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 2118.429785] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 2118.451983] bridge0: port 2(bridge_slave_1) entered blocking state [ 2118.458391] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2118.465101] bridge0: port 1(bridge_slave_0) entered blocking state [ 2118.471479] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2118.519199] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 2118.525718] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2118.534069] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 2118.545814] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2118.553326] bridge0: port 1(bridge_slave_0) entered disabled state [ 2118.560921] bridge0: port 2(bridge_slave_1) entered disabled state [ 2118.570540] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 2118.584244] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 2118.590975] 8021q: adding VLAN 0 to HW filter on device team0 [ 2118.605623] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2118.613315] bridge0: port 1(bridge_slave_0) entered blocking state [ 2118.619729] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2118.658205] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2118.665972] bridge0: port 2(bridge_slave_1) entered blocking state [ 2118.672303] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2118.680294] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2118.690546] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2118.698734] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2118.708967] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 2118.721560] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2118.729453] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2118.739048] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 2118.747294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2118.755643] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2118.767969] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 2118.774483] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2118.787583] device bridge_slave_1 left promiscuous mode [ 2118.793077] bridge0: port 2(bridge_slave_1) entered disabled state [ 2118.803104] device bridge_slave_0 left promiscuous mode [ 2118.809133] bridge0: port 1(bridge_slave_0) entered disabled state [ 2118.895103] protocol 88fb is buggy, dev hsr_slave_0 [ 2118.900317] protocol 88fb is buggy, dev hsr_slave_1 [ 2119.024985] protocol 88fb is buggy, dev hsr_slave_0 [ 2119.030077] protocol 88fb is buggy, dev hsr_slave_1 [ 2119.134993] protocol 88fb is buggy, dev hsr_slave_0 [ 2119.140113] protocol 88fb is buggy, dev hsr_slave_1 [ 2119.145324] protocol 88fb is buggy, dev hsr_slave_0 [ 2119.150390] protocol 88fb is buggy, dev hsr_slave_1 [ 2123.285019] net_ratelimit: 18 callbacks suppressed [ 2123.285028] protocol 88fb is buggy, dev hsr_slave_0 [ 2123.295167] protocol 88fb is buggy, dev hsr_slave_1 [ 2123.300884] protocol 88fb is buggy, dev hsr_slave_0 [ 2123.305995] protocol 88fb is buggy, dev hsr_slave_1 [ 2123.365014] protocol 88fb is buggy, dev hsr_slave_0 [ 2123.370171] protocol 88fb is buggy, dev hsr_slave_1 [ 2123.719311] bond2 (unregistering): Released all slaves [ 2123.731351] bond1 (unregistering): Released all slaves [ 2123.757998] device hsr_slave_1 left promiscuous mode [ 2123.769137] device hsr_slave_0 left promiscuous mode [ 2123.779602] team0 (unregistering): Port device team_slave_1 removed [ 2123.791883] team0 (unregistering): Port device team_slave_0 removed [ 2123.804474] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 2123.819209] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 2123.873270] bond0 (unregistering): Released all slaves [ 2123.944343] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 2123.964804] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2124.005030] protocol 88fb is buggy, dev hsr_slave_0 [ 2124.010174] protocol 88fb is buggy, dev hsr_slave_1 16:20:23 executing program 0: r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000500)='cgroup.procs\x00', 0x2, 0x0) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x5}, 0x2c) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x8, 0x4, 0x100000001, 0x0, r1}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r2, &(0x7f00000002c0)}, 0x10) clone(0x200, &(0x7f0000000180), 0x0, &(0x7f0000000080), &(0x7f0000000180)) mknod(&(0x7f0000f80000)='./file0\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$bt_hidp(0x1f, 0x3, 0x6) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000002c0)=""/183, &(0x7f00000003c0)=0xb7) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) ptrace(0x10, 0x0) write(r3, &(0x7f0000000540)="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", 0x1000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r0, &(0x7f0000000080)=0x4c000000, 0x10a000d50) r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r4, 0x114, 0xa, &(0x7f0000000140)=ANY=[@ANYBLOB="02"], 0x1) 16:20:23 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd]}) 16:20:23 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000500)='cgroup.procs\x00', 0x2, 0x0) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x5}, 0x2c) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x8, 0x4, 0x100000001, 0x0, r2}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r3, &(0x7f00000002c0)}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x200, &(0x7f0000000180), 0x0, &(0x7f0000000080), &(0x7f0000000180)) mknod(&(0x7f0000f80000)='./file0\x00', 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$bt_hidp(0x1f, 0x3, 0x6) syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') getsockopt$IP_VS_SO_GET_DESTS(r4, 0x0, 0x484, &(0x7f0000000400)=""/183, &(0x7f0000000280)=0xfffffffffffffda0) ptrace(0x10, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000080)=0x4c000000, 0x10a000d50) 16:20:23 executing program 3: r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000240)='cgroup.%\r\x00\x00\x00\x00\x00\x00\x11u\x90\x17v\xce\xfd6\xe0\n\xed\xda\xd1\x82\xc3!Y\xeb\xff\x9a\xd8y\xd5\'\xf2\xa9\x83', 0x2, 0x0) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$binder(&(0x7f0000000240)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40406301, {{0x0, 0xfdfdffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x5}, 0x2c) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000280)=0x2, 0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x8, 0x4, 0x100000001, 0x0, r3}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r4, &(0x7f00000002c0)}, 0x10) clone(0x200, &(0x7f0000000180), 0x0, &(0x7f0000000080), &(0x7f0000000180)) mknod(&(0x7f0000f80000)='./file0\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$bt_hidp(0x1f, 0x3, 0x6) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000002c0)=""/183, &(0x7f00000003c0)=0xb7) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) ptrace(0x10, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r0, &(0x7f0000000080)=0x4c000000, 0x10a000d50) r6 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_fanout_data(r5, 0x107, 0x16, &(0x7f00000001c0)={0x5, &(0x7f0000000180)=[{0x6, 0x9, 0x3ff, 0x7}, {0xe0, 0xfffffffffffffffc, 0x96dd, 0x3}, {0xe94, 0x81, 0x8, 0x4}, {0x1ff, 0x8, 0x9, 0x7}, {0x4, 0x200, 0x800, 0x8000}]}, 0x10) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r6, 0x114, 0xa, &(0x7f0000000140)=ANY=[@ANYBLOB="02"], 0x1) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f00000000c0)=0xc) write$FUSE_LK(r6, &(0x7f0000000100)={0x28, 0xfffffffffffffffe, 0x3, {{0x9, 0x9, 0x2, r7}}}, 0x28) 16:20:23 executing program 1: socket$bt_bnep(0x1f, 0x3, 0x4) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r2 = socket(0x11, 0x3, 0x0) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) setsockopt(r2, 0x107, 0xd, &(0x7f0000001000), 0xc5) dup2(r1, r2) syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x40c2, 0x200000) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/pfkey\x00', 0x2100, 0x0) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x17) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, 0x0) clone(0x210a001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet(0x2, 0x1, 0x7) 16:20:23 executing program 4: socketpair$unix(0x1, 0x8000100000000001, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'eql\x00\x00\xdf\xdd\x94D\x8f\x15\xcf!\x00', 0xec38ed91f1c74952}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000080)={'eql\x00\x00\xa1\xa9[\x02\xd4?\x00\x00\x03\xca\x00', @ifru_mtu=0x1}) [ 2124.133445] binder: 19790:19793 got reply transaction with bad transaction stack, transaction 60 has target 19790:0 [ 2124.165427] binder: 19790:19793 transaction failed 29201/-71, size 0-0 line 2816 [ 2124.175091] protocol 88fb is buggy, dev hsr_slave_0 [ 2124.180215] protocol 88fb is buggy, dev hsr_slave_1 16:20:23 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]}) 16:20:24 executing program 0: r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000500)='cgroup.procs\x00', 0x2, 0x0) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x5}, 0x2c) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x8, 0x4, 0x100000001, 0x0, r1}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r2, &(0x7f00000002c0)}, 0x10) r3 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x7, 0x8040) write$input_event(r3, &(0x7f00000000c0)={{}, 0x1, 0x1, 0x80000001}, 0x18) clone(0x200, &(0x7f0000000180), 0x0, &(0x7f0000000080), &(0x7f0000000180)) mknod(&(0x7f0000f80000)='./file0\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$bt_hidp(0x1f, 0x3, 0x6) syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000002c0)=""/183, &(0x7f00000003c0)=0xb7) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) ptrace(0x10, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r0, &(0x7f0000000080)=0x4c000000, 0x10a000d50) r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r4, 0x114, 0xa, &(0x7f0000000140)=ANY=[@ANYBLOB="02"], 0x1) 16:20:24 executing program 1: socket$bt_bnep(0x1f, 0x3, 0x4) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r2 = socket(0x11, 0x3, 0x0) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) setsockopt(r2, 0x107, 0xd, &(0x7f0000001000), 0xc5) dup2(r1, r2) syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x40c2, 0x200000) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/pfkey\x00', 0x2100, 0x0) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x17) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, 0x0) clone(0x210a001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 16:20:24 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000500)='cgroup.procs\x00', 0x2, 0x0) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x5}, 0x2c) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x8, 0x4, 0x100000001, 0x0, r2}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r3, &(0x7f00000002c0)}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x200, 0x0) ioctl$PPPIOCATTACH(r4, 0x4004743d, &(0x7f0000000100)=0x4) syz_open_dev$amidi(&(0x7f0000000140)='/dev/amidi#\x00', 0x9, 0x1) clone(0x200, &(0x7f0000000180), 0x0, &(0x7f0000000080), &(0x7f0000000180)) mknod(&(0x7f0000f80000)='./file0\x00', 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) fadvise64(r5, 0x37, 0x48a9, 0x4) socket$bt_hidp(0x1f, 0x3, 0x6) syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000002c0)=""/183, &(0x7f00000003c0)=0xb7) ptrace(0x10, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000080)=0x4c000000, 0x10a000d50) 16:20:24 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff]}) 16:20:24 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000500)='cgroup.procs\x00', 0x2, 0x0) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x5}, 0x2c) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x8, 0x4, 0x100000001, 0x0, r2}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r3, &(0x7f00000000c0)}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x200, &(0x7f0000000180), 0x0, &(0x7f0000000080), &(0x7f0000000180)) mknod(&(0x7f0000f80000)='./file0\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$bt_hidp(0x1f, 0x3, 0x6) syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000002c0)=""/183, &(0x7f00000003c0)=0xb7) ptrace(0x10, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000140)=0x51, 0x10a000d50) 16:20:24 executing program 0: r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000500)='cgroup.procs\x00', 0x2, 0x0) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x5}, 0x2c) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x8, 0x4, 0x100000001, 0x0, r1}, 0x2c) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x48c0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r2, &(0x7f00000002c0)}, 0x10) clone(0x200, &(0x7f0000000180), 0x0, &(0x7f0000000080), &(0x7f0000000180)) mknod(&(0x7f0000f80000)='./file0\x00', 0x0, 0x0) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x80, 0x0) bind$vsock_dgram(r3, &(0x7f0000000100)={0x28, 0x0, 0x0, @my=0x0}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socket$bt_hidp(0x1f, 0x3, 0x6) syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000002c0)=""/183, &(0x7f00000003c0)=0xb7) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) ptrace(0x10, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r0, &(0x7f0000000080)=0x4c000000, 0x10a000d50) r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r4, 0x114, 0xa, &(0x7f0000000000)=ANY=[@ANYBLOB="00c33ecc"], 0x1) 16:20:24 executing program 1: socket$bt_bnep(0x1f, 0x3, 0x4) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r2 = socket(0x11, 0x3, 0x0) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) setsockopt(r2, 0x107, 0xd, &(0x7f0000001000), 0xc5) dup2(r1, r2) syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x40c2, 0x200000) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/pfkey\x00', 0x2100, 0x0) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x17) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, 0x0) [ 2124.615814] binder: release 19790:19793 transaction 60 out, still active [ 2124.622878] binder: undelivered TRANSACTION_COMPLETE 16:20:24 executing program 4: socketpair$unix(0x1, 0x8000100000000001, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'eql\x00\x00\xdf\xdd\x94D\x8f\x15\xcf!\x00', 0xec38ed91f1c74952}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000080)={'eql\x00\x00\xa1\xa9[\x03\xd4?\x00\x00\x03\xca\x00', @ifru_mtu=0x1}) 16:20:24 executing program 3: r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000240)='cgroup.%\r\x00\x00\x00\x00\x00\x00\x11u\x90\x17v\xce\xfd6\xe0\n\xed\xda\xd1\x82\xc3!Y\xeb\xff\x9a\xd8y\xd5\'\xf2\xa9\x83', 0x2, 0x0) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$binder(&(0x7f0000000240)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40406301, {{0x0, 0xfdfdffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x5}, 0x2c) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000280)=0x2, 0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x8, 0x4, 0x100000001, 0x0, r3}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r4, &(0x7f00000002c0)}, 0x10) clone(0x200, &(0x7f0000000180), 0x0, &(0x7f0000000080), &(0x7f0000000180)) mknod(&(0x7f0000f80000)='./file0\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$bt_hidp(0x1f, 0x3, 0x6) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000002c0)=""/183, &(0x7f00000003c0)=0xb7) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) ptrace(0x10, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r0, &(0x7f0000000080)=0x4c000000, 0x10a000d50) r6 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_fanout_data(r5, 0x107, 0x16, &(0x7f00000001c0)={0x5, &(0x7f0000000180)=[{0x6, 0x9, 0x3ff, 0x7}, {0xe0, 0xfffffffffffffffc, 0x96dd, 0x3}, {0xe94, 0x81, 0x8, 0x4}, {0x1ff, 0x8, 0x9, 0x7}, {0x4, 0x200, 0x800, 0x8000}]}, 0x10) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r6, 0x114, 0xa, &(0x7f0000000140)=ANY=[@ANYBLOB="02"], 0x1) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f00000000c0)=0xc) write$FUSE_LK(r6, &(0x7f0000000100)={0x28, 0xfffffffffffffffe, 0x3, {{0x9, 0x9, 0x2, r7}}}, 0x28) 16:20:24 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd]}) [ 2124.670680] binder: undelivered TRANSACTION_ERROR: 29201 [ 2124.705185] binder: send failed reply for transaction 60, target dead 16:20:24 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]}) [ 2124.856519] binder: 19850:19851 got reply transaction with bad transaction stack, transaction 63 has target 19850:0 16:20:24 executing program 1: socket$bt_bnep(0x1f, 0x3, 0x4) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r2 = socket(0x11, 0x3, 0x0) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) setsockopt(r2, 0x107, 0xd, &(0x7f0000001000), 0xc5) dup2(r1, r2) syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x40c2, 0x200000) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/pfkey\x00', 0x2100, 0x0) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x17) 16:20:24 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000500)='cgroup.procs\x00', 0x2, 0x0) clone(0x4200000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x5}, 0x2c) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x8, 0x4, 0x100000001, 0x0, r2}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r3, &(0x7f00000002c0)}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x200, &(0x7f0000000180), 0x0, &(0x7f0000000080), &(0x7f0000000180)) mknod(&(0x7f0000f80000)='./file0\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x1, 0x0) ioctl$CAPI_GET_ERRCODE(r0, 0x80024321, &(0x7f0000000100)) ioctl$UI_SET_KEYBIT(r4, 0x40045565, 0x296) socket$bt_hidp(0x1f, 0x3, 0x6) syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000002c0)=""/183, &(0x7f00000003c0)=0xb7) ptrace(0x10, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000080)=0x4c000000, 0x10a000d50) [ 2124.951838] binder: 19850:19851 transaction failed 29201/-71, size 0-0 line 2816 16:20:24 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff]}) 16:20:24 executing program 1: socket$bt_bnep(0x1f, 0x3, 0x4) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r2 = socket(0x11, 0x3, 0x0) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) setsockopt(r2, 0x107, 0xd, &(0x7f0000001000), 0xc5) dup2(r1, r2) syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x40c2, 0x200000) openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/pfkey\x00', 0x2100, 0x0) 16:20:25 executing program 0: r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000500)='cgroup.procs\x00', 0x2, 0x0) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x5}, 0x2c) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x8, 0x4, 0x100000001, 0x0, r1}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r2, &(0x7f00000002c0)}, 0x10) clone(0x200, &(0x7f0000000180), 0x0, &(0x7f0000000080), &(0x7f0000000180)) mknod(&(0x7f0000f80000)='./file0\x00', 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$bt_hidp(0x1f, 0x3, 0x6) getpid() fcntl$getownex(r1, 0x10, &(0x7f00000000c0)) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000100)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x27, &(0x7f00000001c0)='eth1.eth1}cgroupsystemposix_acl_access\x00'}, 0x30) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000280)) getpgrp(0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000400)=0x0) syz_open_procfs(r4, &(0x7f0000000380)='pagemap\x00\x06\x06.\x7f\xa6\xab\x94\xf1\x15\xb9\x14\xca\x95\xed\xda\x97ka\x1f\x1cK!\x13\x06!r\xe8\x1eGi\bm\xc0^\xd6\x84\xd7u{2') getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000002c0)=""/183, &(0x7f00000003c0)=0xb7) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) ptrace(0x10, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r0, &(0x7f0000000080)=0x4c000000, 0x10a000d50) r5 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r5, 0x114, 0xa, &(0x7f0000000140)=ANY=[@ANYBLOB="02"], 0x1) 16:20:25 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd]}) [ 2125.378165] binder: send failed reply for transaction 63 to 19850:19851 [ 2125.424477] binder: undelivered TRANSACTION_COMPLETE 16:20:25 executing program 3: r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000240)='cgroup.%\r\x00\x00\x00\x00\x00\x00\x11u\x90\x17v\xce\xfd6\xe0\n\xed\xda\xd1\x82\xc3!Y\xeb\xff\x9a\xd8y\xd5\'\xf2\xa9\x83', 0x2, 0x0) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$binder(&(0x7f0000000240)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40406301, {{0x0, 0xfdfdffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x5}, 0x2c) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000280)=0x2, 0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x8, 0x4, 0x100000001, 0x0, r3}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r4, &(0x7f00000002c0)}, 0x10) clone(0x200, &(0x7f0000000180), 0x0, &(0x7f0000000080), &(0x7f0000000180)) mknod(&(0x7f0000f80000)='./file0\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$bt_hidp(0x1f, 0x3, 0x6) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000002c0)=""/183, &(0x7f00000003c0)=0xb7) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) ptrace(0x10, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r0, &(0x7f0000000080)=0x4c000000, 0x10a000d50) r6 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_fanout_data(r5, 0x107, 0x16, &(0x7f00000001c0)={0x5, &(0x7f0000000180)=[{0x6, 0x9, 0x3ff, 0x7}, {0xe0, 0xfffffffffffffffc, 0x96dd, 0x3}, {0xe94, 0x81, 0x8, 0x4}, {0x1ff, 0x8, 0x9, 0x7}, {0x4, 0x200, 0x800, 0x8000}]}, 0x10) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r6, 0x114, 0xa, &(0x7f0000000140)=ANY=[@ANYBLOB="02"], 0x1) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f00000000c0)=0xc) write$FUSE_LK(r6, &(0x7f0000000100)={0x28, 0xfffffffffffffffe, 0x3, {{0x9, 0x9, 0x2, r7}}}, 0x28) [ 2125.458339] binder: undelivered TRANSACTION_ERROR: 29201 [ 2125.490983] binder: undelivered TRANSACTION_ERROR: 29189 16:20:25 executing program 1: socket$bt_bnep(0x1f, 0x3, 0x4) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r2 = socket(0x11, 0x3, 0x0) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) setsockopt(r2, 0x107, 0xd, &(0x7f0000001000), 0xc5) dup2(r1, r2) syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x40c2, 0x200000) 16:20:25 executing program 4: socketpair$unix(0x1, 0x8000100000000001, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'eql\x00\x00\xdf\xdd\x94D\x8f\x15\xcf!\x00', 0xec38ed91f1c74952}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000080)={'eql\x00\x00\xa1\xa9[\x01\xd6?\x00\x00\x03\xca\x00', @ifru_mtu=0x1}) [ 2125.560559] binder: 19889:19890 got reply transaction with bad transaction stack, transaction 66 has target 19889:0 16:20:25 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]}) [ 2125.655246] binder: 19889:19890 transaction failed 29201/-71, size 0-0 line 2816 16:20:25 executing program 0: r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000500)='cgroup.procs\x00', 0x2, 0x0) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x5}, 0x2c) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x8, 0x4, 0x100000001, 0x0, r1}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r2, &(0x7f00000002c0)}, 0x10) clone(0x200, &(0x7f0000000180), 0x0, &(0x7f0000000080), &(0x7f0000000180)) mknod(&(0x7f0000f80000)='./file0\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$bt_hidp(0x1f, 0x3, 0x6) syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000002c0)=""/183, &(0x7f00000003c0)=0xb7) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) ptrace(0x10, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r0, &(0x7f0000000080)=0x4c000000, 0x10a000d50) mq_unlink(&(0x7f0000000000)='\xf0\x00') r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) readahead(r3, 0x9, 0x54ffc6a1) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r4, 0x114, 0xa, &(0x7f0000000140)=ANY=[@ANYBLOB="02"], 0x1) 16:20:25 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff]}) 16:20:25 executing program 1: socket$bt_bnep(0x1f, 0x3, 0x4) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r2 = socket(0x11, 0x3, 0x0) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) setsockopt(r2, 0x107, 0xd, &(0x7f0000001000), 0xc5) dup2(r1, r2) [ 2126.173207] binder: release 19889:19890 transaction 66 out, still active [ 2126.182714] binder: undelivered TRANSACTION_COMPLETE [ 2126.219918] binder: undelivered TRANSACTION_ERROR: 29201 [ 2126.253047] binder: send failed reply for transaction 66, target dead 16:20:26 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000500)='cgroup.procs\x00', 0x2, 0x0) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x5}, 0x2c) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x8, 0x4, 0x100000001, 0x0, r2}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r3, &(0x7f00000002c0)}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x200, &(0x7f0000000180), 0x0, &(0x7f0000000080), &(0x7f0000000180)) mknod(&(0x7f0000f80000)='./file0\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$bt_hidp(0x1f, 0x3, 0x6) syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') getsockopt$IP_VS_SO_GET_DESTS(r4, 0x0, 0x484, &(0x7f00000002c0)=""/183, &(0x7f00000003c0)=0xb7) ptrace(0x10, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000080)=0x4c000000, 0x10a000d50) 16:20:26 executing program 1: socket$bt_bnep(0x1f, 0x3, 0x4) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r2 = socket(0x11, 0x3, 0x0) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) dup2(r1, r2) 16:20:26 executing program 0: r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000500)='cgroup.procs\x00', 0x2, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x0, 0x151040) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB="a800000009f25532738f018fed5fe223434101800000000000008a350adb7a77abbbe2daf7a681f5c553ee411fe48df66e69d1bdeda88099df2531194aa23af002e3dc769991573734d6038d18ecef9631e483a651ae29e5ec7e4d6c336119b5285e3fee58f95b8be2a61a18645c9c12b80fdefa38160e332d1f164b89dc7312e314214c", @ANYRES16=r2, @ANYBLOB="000029bd7000fedbdf25140000009400040014000700080003000002000008000100120000000c00010073797a30000000000c00010073797a31000000000c00070008000300290b00004400070008000200050000000800020000010000080004000300000008000200ec000000080004000000000008000300ffffffff08000200ff0700000800030002000000140007000800020000c700000800030009000000"], 0xa8}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000240)='/dev/hwrng\x00', 0x0, 0x0) clone(0x100000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x3, 0x7, 0x5}, 0x2c) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x8, 0x4, 0x100000001, 0x0, r4}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r5, &(0x7f00000002c0)}, 0x10) clone(0x200, &(0x7f0000000180), 0x0, &(0x7f0000000080), &(0x7f0000000180)) mknod(&(0x7f0000f80000)='./file0\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$bt_hidp(0x1f, 0x3, 0x6) syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000002c0)=""/183, &(0x7f00000003c0)=0xb7) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) ptrace(0x10, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r3, 0x2) sendfile(r0, r0, &(0x7f0000000080)=0x4c000000, 0x10a000d50) r6 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r6, 0x114, 0xa, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x1) 16:20:26 executing program 4: socketpair$unix(0x1, 0x8000100000000001, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'eql\x00\x00\xdf\xdd\x94D\x8f\x15\xcf!\x00', 0xec38ed91f1c74952}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000080)={'eql\x00\x00\xa1\xa9[\x02\xd9?\x00\x00\x03\xca\x00', @ifru_mtu=0x1}) 16:20:26 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd]}) 16:20:26 executing program 3: r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000240)='cgroup.%\r\x00\x00\x00\x00\x00\x00\x11u\x90\x17v\xce\xfd6\xe0\n\xed\xda\xd1\x82\xc3!Y\xeb\xff\x9a\xd8y\xd5\'\xf2\xa9\x83', 0x2, 0x0) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$binder(&(0x7f0000000240)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40406301, {{0x0, 0xfdfdffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x5}, 0x2c) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000280)=0x2, 0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x8, 0x4, 0x100000001, 0x0, r3}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r4, &(0x7f00000002c0)}, 0x10) clone(0x200, &(0x7f0000000180), 0x0, &(0x7f0000000080), &(0x7f0000000180)) mknod(&(0x7f0000f80000)='./file0\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$bt_hidp(0x1f, 0x3, 0x6) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000002c0)=""/183, &(0x7f00000003c0)=0xb7) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) ptrace(0x10, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r0, &(0x7f0000000080)=0x4c000000, 0x10a000d50) r6 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_fanout_data(r5, 0x107, 0x16, &(0x7f00000001c0)={0x5, &(0x7f0000000180)=[{0x6, 0x9, 0x3ff, 0x7}, {0xe0, 0xfffffffffffffffc, 0x96dd, 0x3}, {0xe94, 0x81, 0x8, 0x4}, {0x1ff, 0x8, 0x9, 0x7}, {0x4, 0x200, 0x800, 0x8000}]}, 0x10) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r6, 0x114, 0xa, &(0x7f0000000140)=ANY=[@ANYBLOB="02"], 0x1) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000000), &(0x7f00000000c0)=0xc) [ 2126.570456] binder: 19926:19933 got reply transaction with bad transaction stack, transaction 69 has target 19926:0 16:20:26 executing program 1: socket$bt_bnep(0x1f, 0x3, 0x4) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r2 = socket(0x11, 0x3, 0x0) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) dup2(r1, r2) [ 2126.658391] binder: 19926:19933 transaction failed 29201/-71, size 0-0 line 2816 16:20:26 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]}) 16:20:26 executing program 1: socket$bt_bnep(0x1f, 0x3, 0x4) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r2 = socket(0x11, 0x3, 0x0) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) dup2(r1, r2) 16:20:26 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff]}) 16:20:26 executing program 3: r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000240)='cgroup.%\r\x00\x00\x00\x00\x00\x00\x11u\x90\x17v\xce\xfd6\xe0\n\xed\xda\xd1\x82\xc3!Y\xeb\xff\x9a\xd8y\xd5\'\xf2\xa9\x83', 0x2, 0x0) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$binder(&(0x7f0000000240)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40406301, {{0x0, 0xfdfdffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x5}, 0x2c) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000280)=0x2, 0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x8, 0x4, 0x100000001, 0x0, r3}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r4, &(0x7f00000002c0)}, 0x10) clone(0x200, &(0x7f0000000180), 0x0, &(0x7f0000000080), &(0x7f0000000180)) mknod(&(0x7f0000f80000)='./file0\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$bt_hidp(0x1f, 0x3, 0x6) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000002c0)=""/183, &(0x7f00000003c0)=0xb7) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) ptrace(0x10, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r0, &(0x7f0000000080)=0x4c000000, 0x10a000d50) r6 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_fanout_data(r5, 0x107, 0x16, &(0x7f00000001c0)={0x5, &(0x7f0000000180)=[{0x6, 0x9, 0x3ff, 0x7}, {0xe0, 0xfffffffffffffffc, 0x96dd, 0x3}, {0xe94, 0x81, 0x8, 0x4}, {0x1ff, 0x8, 0x9, 0x7}, {0x4, 0x200, 0x800, 0x8000}]}, 0x10) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r6, 0x114, 0xa, &(0x7f0000000140)=ANY=[@ANYBLOB="02"], 0x1) 16:20:26 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd]}) [ 2127.165789] binder: BINDER_SET_CONTEXT_MGR already set [ 2127.183805] binder: 19966:19967 ioctl 40046207 0 returned -16 [ 2127.186163] binder: release 19926:19933 transaction 69 out, still active [ 2127.253892] binder: undelivered TRANSACTION_COMPLETE [ 2127.254716] binder_alloc: 19926: binder_alloc_buf, no vma [ 2127.286500] binder: 19966:19971 transaction failed 29189/-3, size 0-0 line 3035 [ 2127.291448] binder: undelivered TRANSACTION_ERROR: 29201 16:20:27 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) uselib(&(0x7f00000000c0)='./file0\x00') r1 = openat$cgroup_procs(r0, &(0x7f0000000500)='cgroup.procs\x00', 0x2, 0x0) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x8, 0x4, 0x100000001}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r2, &(0x7f00000002c0)}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x200, &(0x7f0000000180), 0x0, &(0x7f0000000080), &(0x7f0000000180)) mknod(&(0x7f0000f80000)='./file0\x00', 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$bt_hidp(0x1f, 0x3, 0x6) syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') getsockopt$IP_VS_SO_GET_DESTS(r3, 0x0, 0x484, &(0x7f00000002c0)=""/183, &(0x7f0000000100)=0xb7) ptrace(0x10, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000080)=0x4c000000, 0x10a000d50) 16:20:27 executing program 0: r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000500)='cgroup.procs\x00', 0x2, 0x0) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x5}, 0x2c) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x8, 0x4, 0x100000001, 0x0, r1}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r2, &(0x7f00000002c0)}, 0x10) clone(0x200, &(0x7f0000000180), 0x0, &(0x7f0000000080), &(0x7f0000000180)) mknod(&(0x7f0000f80000)='./file0\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$bt_hidp(0x1f, 0x3, 0x6) syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000002c0)=""/183, &(0x7f00000003c0)=0xb7) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) ptrace(0x10, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r0, &(0x7f0000000080)=0x4c000000, 0x10a000d50) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r3, 0x114, 0xa, &(0x7f00000000c0)=ANY=[@ANYBLOB="0238653ad59014dab9cd65403f59641ebcf3add0e70a79c93bfef4b68ea4506ba73f7dccc2efea5dfb2b77e7ab72018a8f8e6bdb7a27828f1d75baa0692f7b3f522a0736402a27dd5b38e569cce4615941fc92333528edfd04a78e9840516b53d61532"], 0x1) [ 2127.324533] binder: 19966:19967 got reply transaction with no transaction stack [ 2127.340915] binder: send failed reply for transaction 69, target dead 16:20:27 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]}) [ 2127.387283] binder: 19966:19967 transaction failed 29201/-71, size 0-0 line 2801 [ 2127.487503] binder: 19966:19967 ioctl c0306201 200002c0 returned -14 [ 2127.502838] IPVS: length: 183 != 24 16:20:27 executing program 4: socketpair$unix(0x1, 0x8000100000000001, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'eql\x00\x00\xdf\xdd\x94D\x8f\x15\xcf!\x00', 0xec38ed91f1c74952}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000080)={'eql\x00\x00\xa1\xa9[\x03\xd9?\x00\x00\x03\xca\x00', @ifru_mtu=0x1}) 16:20:27 executing program 1: socket$bt_bnep(0x1f, 0x3, 0x4) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r2 = socket(0x11, 0x3, 0x0) setsockopt(r2, 0x107, 0xd, &(0x7f0000001000), 0xc5) dup2(r1, r2) 16:20:27 executing program 0: r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x5}, 0x2c) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x8, 0x4, 0x100000001, 0x0, r1}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r2, &(0x7f00000002c0)}, 0x10) clone(0x200, &(0x7f0000000180), 0x0, &(0x7f0000000080), &(0x7f0000000180)) mknod(&(0x7f0000f80000)='./file0\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$bt_hidp(0x1f, 0x3, 0x6) syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000002c0)=""/183, &(0x7f00000003c0)=0xb7) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) ptrace(0x10, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r0, &(0x7f0000000080)=0x4c000000, 0x10a000d50) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r3, 0x114, 0xa, &(0x7f0000000140)=ANY=[@ANYBLOB="02"], 0x1) 16:20:27 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff]}) [ 2127.612817] binder: undelivered TRANSACTION_ERROR: 29201 [ 2127.619774] binder: undelivered TRANSACTION_ERROR: 29189 16:20:27 executing program 3: r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000240)='cgroup.%\r\x00\x00\x00\x00\x00\x00\x11u\x90\x17v\xce\xfd6\xe0\n\xed\xda\xd1\x82\xc3!Y\xeb\xff\x9a\xd8y\xd5\'\xf2\xa9\x83', 0x2, 0x0) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$binder(&(0x7f0000000240)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40406301, {{0x0, 0xfdfdffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x5}, 0x2c) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000280)=0x2, 0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x8, 0x4, 0x100000001, 0x0, r3}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r4, &(0x7f00000002c0)}, 0x10) clone(0x200, &(0x7f0000000180), 0x0, &(0x7f0000000080), &(0x7f0000000180)) mknod(&(0x7f0000f80000)='./file0\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$bt_hidp(0x1f, 0x3, 0x6) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000002c0)=""/183, &(0x7f00000003c0)=0xb7) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) ptrace(0x10, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r0, &(0x7f0000000080)=0x4c000000, 0x10a000d50) r6 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_fanout_data(r5, 0x107, 0x16, &(0x7f00000001c0)={0x5, &(0x7f0000000180)=[{0x6, 0x9, 0x3ff, 0x7}, {0xe0, 0xfffffffffffffffc, 0x96dd, 0x3}, {0xe94, 0x81, 0x8, 0x4}, {0x1ff, 0x8, 0x9, 0x7}, {0x4, 0x200, 0x800, 0x8000}]}, 0x10) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000000), &(0x7f00000000c0)=0xc) 16:20:27 executing program 1: socket$bt_bnep(0x1f, 0x3, 0x4) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) setsockopt(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000001000), 0xc5) dup2(r1, 0xffffffffffffffff) 16:20:27 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd]}) [ 2127.798684] binder: 20008:20009 got reply transaction with bad transaction stack, transaction 74 has target 20008:0 [ 2127.904277] binder: 20008:20009 transaction failed 29201/-71, size 0-0 line 2816 16:20:27 executing program 3: r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000240)='cgroup.%\r\x00\x00\x00\x00\x00\x00\x11u\x90\x17v\xce\xfd6\xe0\n\xed\xda\xd1\x82\xc3!Y\xeb\xff\x9a\xd8y\xd5\'\xf2\xa9\x83', 0x2, 0x0) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$binder(&(0x7f0000000240)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40406301, {{0x0, 0xfdfdffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x5}, 0x2c) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000280)=0x2, 0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x8, 0x4, 0x100000001, 0x0, r3}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r4, &(0x7f00000002c0)}, 0x10) clone(0x200, &(0x7f0000000180), 0x0, &(0x7f0000000080), &(0x7f0000000180)) mknod(&(0x7f0000f80000)='./file0\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$bt_hidp(0x1f, 0x3, 0x6) syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000002c0)=""/183, &(0x7f00000003c0)=0xb7) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) ptrace(0x10, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r0, &(0x7f0000000080)=0x4c000000, 0x10a000d50) r5 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000000), &(0x7f00000000c0)=0xc) 16:20:27 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]}) [ 2128.061550] binder: BINDER_SET_CONTEXT_MGR already set [ 2128.115241] binder: 20024:20026 ioctl 40046207 0 returned -16 [ 2128.115466] binder: 20024:20029 got reply transaction with bad transaction stack, transaction 76 has target 20008:0 [ 2128.171648] IPVS: length: 183 != 24 16:20:27 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000500)='cgroup.procs\x00', 0x2, 0x0) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x5}, 0x2c) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x8, 0x4, 0x100000001, 0x0, r2}, 0x2c) r4 = syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x0, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000540)=@mangle={'mangle\x00', 0x1f, 0x6, 0x6f8, 0x0, 0x350, 0x490, 0x490, 0x490, 0x628, 0x628, 0x628, 0x628, 0x628, 0x6, &(0x7f0000000100), {[{{@uncond, 0x0, 0xf0, 0x130, 0x0, {}, [@common=@ipv6header={0x28, 'ipv6header\x00', 0x0, {0x6, 0x94, 0x1}}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0xe47, 0x401, 0xffffffff, 0x7000000000, 0xf9, 0xfff, 0x10000, 0x1]}}}, {{@ipv6={@local, @loopback, [0x0, 0x0, 0xffffffff, 0xffffff00], [0xffffff00, 0xffffffff], 'veth0_to_bond\x00', 'ip6tnl0\x00', {}, {0xff}, 0x3c, 0xffffffff, 0x0, 0x8}, 0x0, 0xc8, 0x110}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x24, 0x1e, 0x58}}}, {{@ipv6={@loopback, @rand_addr="bcf8bc03ae8b7a7e675c005199f024fa", [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffff00], 'lo\x00', 'erspan0\x00', {}, {0xff}, 0x7f, 0x5, 0x4, 0x40}, 0x0, 0xc8, 0x110}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@remote, @ipv6=@rand_addr="4cb619fe1febad437fdf8c30ebe87a5a", 0x12, 0x20, 0x3}}}, {{@ipv6={@local, @dev={0xfe, 0x80, [], 0x19}, [0x0, 0xff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff], 'lapb0\x00', 'batadv0\x00', {0xff}, {}, 0x3a, 0xd1bd, 0x6, 0x4}, 0x0, 0x118, 0x140, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0xe}}, @common=@icmp6={0x28, 'icmp6\x00', 0x0, {0x12, 0x6fb1, 0x5}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x16, 0x50b9, 0x7}}}, {{@uncond, 0x0, 0x158, 0x198, 0x0, {}, [@common=@srh1={0x90, 'srh\x00', 0x1, {0x7c, 0x0, 0xdfb, 0x4, 0x2d9a, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, @mcast2, @ipv4={[], [], @multicast2}, [0x0, 0xffffffff], [0xff000000, 0xffffff00, 0x0, 0xffffffff], [0x0, 0xff000000, 0xffffffff, 0xff000000], 0x1, 0x2000}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x6, 0x9, @ipv4=@loopback, 0x4e23}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x758) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r3, &(0x7f00000002c0)}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x200, &(0x7f0000000180), 0x0, &(0x7f0000000080), &(0x7f0000000180)) mknod(&(0x7f0000f80000)='./file0\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$bt_hidp(0x1f, 0x3, 0x6) syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000002c0)=""/183, &(0x7f00000003c0)=0xb7) ptrace(0x10, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000080)=0x4c000000, 0x10a000d50) 16:20:27 executing program 1: socket$bt_bnep(0x1f, 0x3, 0x4) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket(0x11, 0x3, 0x0) setsockopt(r2, 0x107, 0xd, &(0x7f0000001000), 0xc5) dup2(r1, r2) 16:20:27 executing program 0: r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000500)='cgroup.procs\x00', 0x2, 0x0) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x5}, 0x2c) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x8, 0x4, 0x100000001, 0x0, r1}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r2, &(0x7f00000002c0)}, 0x10) clone(0x200, &(0x7f0000000180), 0x0, &(0x7f0000000080), &(0x7f0000000180)) mknod(&(0x7f0000f80000)='./file0\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$bt_hidp(0x1f, 0x3, 0x6) syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000002c0)=""/183, &(0x7f00000003c0)=0xb7) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) ptrace(0x10, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r0, &(0x7f0000000080)=0x4c000000, 0x10a000d50) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r3, 0x114, 0xa, &(0x7f0000000140)=ANY=[@ANYBLOB='7'], 0x1) [ 2128.324996] net_ratelimit: 18 callbacks suppressed [ 2128.325005] protocol 88fb is buggy, dev hsr_slave_0 [ 2128.325522] binder: 20024:20029 transaction failed 29201/-71, size 0-0 line 2816 [ 2128.330098] protocol 88fb is buggy, dev hsr_slave_1 [ 2128.482643] binder: release 20024:20029 transaction 76 out, still active [ 2128.500314] binder: undelivered TRANSACTION_COMPLETE [ 2128.513202] binder: undelivered TRANSACTION_ERROR: 29201 16:20:28 executing program 1: socket$bt_bnep(0x1f, 0x3, 0x4) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket(0x11, 0x3, 0x0) setsockopt(r2, 0x107, 0xd, &(0x7f0000001000), 0xc5) dup2(r1, r2) 16:20:28 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff]}) 16:20:28 executing program 3: r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000240)='cgroup.%\r\x00\x00\x00\x00\x00\x00\x11u\x90\x17v\xce\xfd6\xe0\n\xed\xda\xd1\x82\xc3!Y\xeb\xff\x9a\xd8y\xd5\'\xf2\xa9\x83', 0x2, 0x0) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$binder(&(0x7f0000000240)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40406301, {{0x0, 0xfdfdffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x5}, 0x2c) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000280)=0x2, 0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x8, 0x4, 0x100000001, 0x0, r3}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r4, &(0x7f00000002c0)}, 0x10) clone(0x200, &(0x7f0000000180), 0x0, &(0x7f0000000080), &(0x7f0000000180)) mknod(&(0x7f0000f80000)='./file0\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$bt_hidp(0x1f, 0x3, 0x6) syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000002c0)=""/183, &(0x7f00000003c0)=0xb7) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) ptrace(0x10, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r0, &(0x7f0000000080)=0x4c000000, 0x10a000d50) r5 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000000), &(0x7f00000000c0)=0xc) 16:20:28 executing program 0: r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000500)='cgroup.procs\x00', 0x2, 0x0) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x5}, 0x2c) ioctl$KVM_GET_SREGS(r0, 0x8138ae83, &(0x7f0000000540)) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x8, 0x4, 0x100000001, 0x0, r1}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r2, &(0x7f00000002c0)}, 0x10) clone(0x200, &(0x7f0000000180), 0x0, &(0x7f0000000080), &(0x7f0000000180)) mknod(&(0x7f0000f80000)='./file0\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$bt_hidp(0x1f, 0x3, 0x6) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000002c0)=""/183, &(0x7f00000003c0)=0xb7) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e21, @loopback}]}, &(0x7f0000000100)=0x10) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r3, 0x84, 0x6c, &(0x7f0000000180)={r4, 0x40, "8d9e10d1d5dbfabb81e8db61e9dc0f468a0af9d10a052cfdee6c6c29a9b432b381fd6685cbe04df789e4d2206554ef7765e5051201b32d417401024b6b159d47"}, &(0x7f0000000240)=0x48) ptrace(0x10, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r0, &(0x7f0000000080)=0x4c000000, 0x10a000d50) r5 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r5, 0x114, 0xa, &(0x7f0000000140)=ANY=[@ANYBLOB="02"], 0x1) 16:20:28 executing program 4: socketpair$unix(0x1, 0x8000100000000001, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'eql\x00\x00\xdf\xdd\x94D\x8f\x15\xcf!\x00', 0xec38ed91f1c74952}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000080)={'eql\x00\x00\xa1\xa9[\x02\xe0?\x00\x00\x03\xca\x00', @ifru_mtu=0x1}) [ 2128.655107] binder: BINDER_SET_CONTEXT_MGR already set [ 2128.685044] binder: 20059:20060 ioctl 40046207 0 returned -16 [ 2128.701380] binder: 20059:20060 got reply transaction with bad transaction stack, transaction 78 has target 20008:0 16:20:28 executing program 1: socket$bt_bnep(0x1f, 0x3, 0x4) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket(0x11, 0x3, 0x0) setsockopt(r2, 0x107, 0xd, &(0x7f0000001000), 0xc5) dup2(r1, r2) 16:20:28 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd]}) 16:20:28 executing program 0: r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000500)='cgroup.procs\x00', 0x2, 0x0) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x5}, 0x2c) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x8, 0x4, 0x100000001, 0x0, r1}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r2, &(0x7f00000002c0)}, 0x10) r3 = pkey_alloc(0x0, 0x2) pkey_free(r3) clone(0x200, &(0x7f0000000180), 0x0, &(0x7f0000000080), &(0x7f0000000180)) mknod(&(0x7f0000f80000)='./file0\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$bt_hidp(0x1f, 0x3, 0x6) syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000002c0)=""/183, &(0x7f00000003c0)=0xb7) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) ptrace(0x10, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r0, &(0x7f0000000080)=0x4c000000, 0x10a000d50) r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r4, 0x114, 0xa, &(0x7f0000000140)=ANY=[@ANYBLOB="02"], 0x1) [ 2128.783329] binder: 20059:20060 transaction failed 29201/-71, size 0-0 line 2816 16:20:28 executing program 3: r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000240)='cgroup.%\r\x00\x00\x00\x00\x00\x00\x11u\x90\x17v\xce\xfd6\xe0\n\xed\xda\xd1\x82\xc3!Y\xeb\xff\x9a\xd8y\xd5\'\xf2\xa9\x83', 0x2, 0x0) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$binder(&(0x7f0000000240)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40406301, {{0x0, 0xfdfdffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x5}, 0x2c) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000280)=0x2, 0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x8, 0x4, 0x100000001, 0x0, r3}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r4, &(0x7f00000002c0)}, 0x10) clone(0x200, &(0x7f0000000180), 0x0, &(0x7f0000000080), &(0x7f0000000180)) mknod(&(0x7f0000f80000)='./file0\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$bt_hidp(0x1f, 0x3, 0x6) syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000002c0)=""/183, &(0x7f00000003c0)=0xb7) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) ptrace(0x10, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r0, &(0x7f0000000080)=0x4c000000, 0x10a000d50) r5 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000000), &(0x7f00000000c0)=0xc) [ 2129.045675] binder: release 20059:20060 transaction 78 out, still active [ 2129.052673] binder: undelivered TRANSACTION_COMPLETE [ 2129.088954] binder: undelivered TRANSACTION_ERROR: 29201 [ 2129.154077] binder: BINDER_SET_CONTEXT_MGR already set [ 2129.170526] binder: 20094:20098 got reply transaction with bad transaction stack, transaction 80 has target 20008:0 [ 2129.196488] binder: 20094:20097 ioctl 40046207 0 returned -16 [ 2129.222717] binder: 20094:20098 transaction failed 29201/-71, size 0-0 line 2816 16:20:29 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x5}, 0x2c) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x8, 0x4, 0x100000001, 0x0, r2}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r3, &(0x7f00000002c0)}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x200, &(0x7f0000000180), 0x0, &(0x7f0000000080), &(0x7f0000000180)) mknod(&(0x7f0000f80000)='./file0\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$bt_hidp(0x1f, 0x3, 0x6) syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000002c0)=""/183, &(0x7f00000003c0)=0xb7) ptrace(0x10, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000080)=0x4c000000, 0x10a000d50) 16:20:29 executing program 1: socket$bt_bnep(0x1f, 0x3, 0x4) openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r0 = socket(0x11, 0x3, 0x0) setsockopt(r0, 0x107, 0xd, &(0x7f0000001000), 0xc5) dup2(0xffffffffffffffff, r0) 16:20:29 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]}) 16:20:29 executing program 0: r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000500)='cgroup.procs\x00', 0x2, 0x0) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x5}, 0x2c) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x8, 0x4, 0x100000001, 0x0, r1}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r2, &(0x7f00000002c0)}, 0x10) clone(0x200, &(0x7f0000000180), 0x0, &(0x7f0000000080), &(0x7f0000000180)) mknod(&(0x7f0000f80000)='./file0\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$bt_hidp(0x1f, 0x3, 0x6) syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000002c0)=""/183, &(0x7f00000003c0)=0xb7) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) ptrace(0x10, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r0, &(0x7f0000000080)=0x4c000000, 0x10a000d50) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r3, 0x114, 0xa, &(0x7f0000000400)=ANY=[@ANYBLOB="02ef3e4d31835426bc711402ec9b69e3fb416db0a2a63da84e56812d82a101f9b5828b87331e4e35c4a378b00f8c70c3784ea7e2e91a53715aee4f306155a32d5aa38c259db5956c2a02c8abd4159f1dc9c0cb1c4e8df1a6ad4dc63f3ee3b14b717bc9851c071e38a549f5ef0d54c078ab840c35e8cdd174e6c5edebb2449da7ecaed26772288778a57bcfcbfcb8abfc933d2eb24019eb2900000000000000"], 0x1) 16:20:29 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff]}) 16:20:29 executing program 4: socketpair$unix(0x1, 0x8000100000000001, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'eql\x00\x00\xdf\xdd\x94D\x8f\x15\xcf!\x00', 0xec38ed91f1c74952}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000080)={'eql\x00\x00\xa1\xa9[\x03\xe0?\x00\x00\x03\xca\x00', @ifru_mtu=0x1}) 16:20:29 executing program 3: r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000240)='cgroup.%\r\x00\x00\x00\x00\x00\x00\x11u\x90\x17v\xce\xfd6\xe0\n\xed\xda\xd1\x82\xc3!Y\xeb\xff\x9a\xd8y\xd5\'\xf2\xa9\x83', 0x2, 0x0) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$binder(&(0x7f0000000240)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40406301, {{0x0, 0xfdfdffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x5}, 0x2c) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000280)=0x2, 0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x8, 0x4, 0x100000001, 0x0, r3}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r4, &(0x7f00000002c0)}, 0x10) clone(0x200, &(0x7f0000000180), 0x0, &(0x7f0000000080), &(0x7f0000000180)) mknod(&(0x7f0000f80000)='./file0\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$bt_hidp(0x1f, 0x3, 0x6) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000002c0)=""/183, &(0x7f00000003c0)=0xb7) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) ptrace(0x10, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r0, &(0x7f0000000080)=0x4c000000, 0x10a000d50) setsockopt$packet_fanout_data(r5, 0x107, 0x16, &(0x7f00000001c0)={0x5, &(0x7f0000000180)=[{0x6, 0x9, 0x3ff, 0x7}, {0xe0, 0xfffffffffffffffc, 0x96dd, 0x3}, {0xe94, 0x81, 0x8, 0x4}, {0x1ff, 0x8, 0x9, 0x7}, {0x4, 0x200, 0x800, 0x8000}]}, 0x10) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f00000000c0)=0xc) 16:20:29 executing program 1: socket$bt_bnep(0x1f, 0x3, 0x4) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r1 = socket(0x11, 0x3, 0x0) setsockopt(r1, 0x107, 0xd, &(0x7f0000001000), 0xc5) dup2(r0, r1) 16:20:29 executing program 0: r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000500)='cgroup.procs\x00', 0x2, 0x0) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x5}, 0x2c) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x8, 0x4, 0x100000001, 0x0, r1}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r2, &(0x7f00000002c0)}, 0x10) clone(0x201, &(0x7f0000000180)="bae6512c71f3869fd7854b4be8b360fb7a5030f803aa6221002a276a8357ca829e75", 0x0, &(0x7f0000000080), &(0x7f0000000100)="d8818903c8edb2c55ac8856c13c5dd3e85b28501c15ec17d745ebb5da0dc") mknod(&(0x7f0000f80000)='./file0\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$bt_hidp(0x1f, 0x3, 0x6) syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000002c0)=""/183, &(0x7f00000003c0)=0xb7) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) ptrace(0x10, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r0, &(0x7f0000000080)=0x4c000000, 0x10a000d50) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r3, 0x114, 0xa, &(0x7f0000000140)=ANY=[@ANYBLOB="02"], 0x1) [ 2129.437624] binder: release 20094:20098 transaction 80 out, still active [ 2129.444578] binder: undelivered TRANSACTION_COMPLETE [ 2129.486430] binder: undelivered TRANSACTION_ERROR: 29201 [ 2129.525023] protocol 88fb is buggy, dev hsr_slave_0 [ 2129.530190] protocol 88fb is buggy, dev hsr_slave_1 [ 2129.535424] protocol 88fb is buggy, dev hsr_slave_0 [ 2129.540525] protocol 88fb is buggy, dev hsr_slave_1 [ 2129.579183] binder: BINDER_SET_CONTEXT_MGR already set 16:20:29 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r2 = socket(0x11, 0x3, 0x0) setsockopt(r2, 0x107, 0xd, &(0x7f0000001000), 0xc5) dup2(r1, r2) 16:20:29 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd]}) [ 2129.605424] protocol 88fb is buggy, dev hsr_slave_0 [ 2129.610771] protocol 88fb is buggy, dev hsr_slave_1 [ 2129.620396] binder: 20123:20124 ioctl 40046207 0 returned -16 [ 2129.670661] binder: 20123:20124 got reply transaction with no transaction stack [ 2129.746349] binder: 20123:20124 transaction failed 29201/-71, size 0-0 line 2801 16:20:29 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r2 = socket(0x11, 0x3, 0x0) setsockopt(r2, 0x107, 0xd, &(0x7f0000001000), 0xc5) dup2(r1, r2) [ 2129.813265] syz-executor2 invoked oom-killer: gfp_mask=0x7080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 2129.936507] CPU: 1 PID: 20138 Comm: syz-executor2 Not tainted 5.0.0-rc2 #24 [ 2129.943669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2129.953034] Call Trace: [ 2129.955643] dump_stack+0x1db/0x2d0 [ 2129.959294] ? dump_stack_print_info.cold+0x20/0x20 [ 2129.964325] ? check_preemption_disabled+0x48/0x290 [ 2129.969370] dump_header+0x1e6/0x116c [ 2129.973183] ? add_lock_to_list.isra.0+0x450/0x450 [ 2129.978126] ? perf_trace_lock+0x750/0x750 [ 2129.982380] ? print_usage_bug+0xd0/0xd0 [ 2129.986457] ? pagefault_out_of_memory+0x1a1/0x1a1 [ 2129.991395] ? ___ratelimit+0x37c/0x686 [ 2129.995380] ? mark_held_locks+0xb1/0x100 [ 2129.999534] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 2130.004659] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 2130.009777] ? lockdep_hardirqs_on+0x415/0x5d0 [ 2130.012513] binder: undelivered TRANSACTION_ERROR: 29201 [ 2130.014365] ? trace_hardirqs_on+0xbd/0x310 [ 2130.019990] binder: release 20123:20133 transaction 82 out, still active [ 2130.024127] ? kasan_check_read+0x11/0x20 [ 2130.024149] ? ___ratelimit+0x37c/0x686 [ 2130.031653] binder: undelivered TRANSACTION_COMPLETE [ 2130.035099] ? trace_hardirqs_off_caller+0x300/0x300 [ 2130.035114] ? do_raw_spin_trylock+0x270/0x270 [ 2130.035135] ? trace_hardirqs_on_caller+0x310/0x310 [ 2130.058862] ? lock_acquire+0x1db/0x570 [ 2130.062901] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 2130.068086] ? ___ratelimit+0xac/0x686 [ 2130.071970] ? idr_get_free+0xee0/0xee0 [ 2130.075938] ? lockdep_hardirqs_on+0x415/0x5d0 [ 2130.080515] oom_kill_process.cold+0x10/0x9d4 [ 2130.085000] ? cgroup_procs_next+0x70/0x70 [ 2130.089223] ? _raw_spin_unlock_irq+0x5e/0x90 [ 2130.093706] ? oom_badness+0xa50/0xa50 [ 2130.097585] ? oom_evaluate_task+0x540/0x540 [ 2130.101979] ? mem_cgroup_iter_break+0x30/0x30 [ 2130.106549] ? mutex_trylock+0x2d0/0x2d0 [ 2130.110595] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2130.116161] ? rcu_read_unlock_special+0x380/0x380 [ 2130.121085] out_of_memory+0x885/0x1420 [ 2130.125055] ? oom_killer_disable+0x340/0x340 [ 2130.129538] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 2130.134636] ? lock_acquire+0x1db/0x570 [ 2130.138606] mem_cgroup_out_of_memory+0x160/0x210 [ 2130.143442] ? do_raw_spin_unlock+0xa0/0x330 [ 2130.147838] ? memcg_memory_event+0x40/0x40 [ 2130.152241] ? do_raw_spin_trylock+0x270/0x270 [ 2130.156817] ? _raw_spin_unlock+0x2d/0x50 [ 2130.160956] try_charge+0x12a9/0x19b0 [ 2130.164741] ? lock_downgrade+0x910/0x910 [ 2130.168889] ? kasan_check_read+0x11/0x20 [ 2130.173030] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 2130.177859] ? get_mem_cgroup_from_mm+0x1cd/0x420 [ 2130.182698] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2130.188237] ? lock_downgrade+0x910/0x910 [ 2130.192374] ? kasan_check_read+0x11/0x20 [ 2130.196511] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 2130.201775] ? rcu_read_unlock_special+0x380/0x380 [ 2130.206697] ? get_mem_cgroup_from_mm+0x1ea/0x420 [ 2130.211532] memcg_kmem_charge_memcg+0x7c/0x130 [ 2130.216187] ? memcg_kmem_put_cache+0xb0/0xb0 [ 2130.220666] ? lock_release+0xc40/0xc40 [ 2130.224638] memcg_kmem_charge+0x13b/0x340 [ 2130.228864] __alloc_pages_nodemask+0x7b8/0xdc0 [ 2130.233541] ? __alloc_pages_slowpath+0x2cc0/0x2cc0 [ 2130.238545] ? __lock_acquire+0x572/0x4a30 [ 2130.242771] ? add_lock_to_list.isra.0+0x450/0x450 [ 2130.247707] ? mark_held_locks+0x100/0x100 [ 2130.251928] ? mark_held_locks+0x100/0x100 [ 2130.256149] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 2130.261691] alloc_pages_current+0x107/0x210 [ 2130.266098] pte_alloc_one+0x1b/0x1a0 [ 2130.269908] __handle_mm_fault+0x437d/0x55a0 [ 2130.274312] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 2130.279158] ? check_preemption_disabled+0x48/0x290 [ 2130.284164] ? handle_mm_fault+0x3cc/0xc80 [ 2130.288396] ? lock_downgrade+0x910/0x910 [ 2130.292528] ? kasan_check_read+0x11/0x20 [ 2130.296663] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 2130.301927] ? rcu_read_unlock_special+0x380/0x380 [ 2130.306842] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2130.312367] ? check_preemption_disabled+0x48/0x290 [ 2130.317373] handle_mm_fault+0x4ec/0xc80 [ 2130.321441] ? __handle_mm_fault+0x55a0/0x55a0 [ 2130.326011] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2130.331536] ? vmacache_update+0x114/0x140 [ 2130.335762] __do_page_fault+0x5da/0xd60 [ 2130.339827] do_page_fault+0xe6/0x7d8 [ 2130.343624] ? trace_hardirqs_on_caller+0xc0/0x310 [ 2130.348543] ? vmalloc_sync_all+0x30/0x30 [ 2130.352676] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 2130.358119] ? syscall_return_slowpath+0x3b0/0x5f0 [ 2130.363057] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 2130.368061] ? page_fault+0x8/0x30 [ 2130.371588] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2130.376424] ? page_fault+0x8/0x30 [ 2130.379950] page_fault+0x1e/0x30 [ 2130.383386] RIP: 0033:0x457ec9 [ 2130.386571] Code: Bad RIP value. [ 2130.389916] RSP: 002b:0000000020000180 EFLAGS: 00010246 [ 2130.395273] RAX: 0000000000000000 RBX: 0000000000000005 RCX: 0000000000457ec9 [ 2130.402528] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000200 [ 2130.409781] RBP: 000000000073bf00 R08: 0000000020000180 R09: 0000000000000000 [ 2130.417040] R10: 0000000020000080 R11: 0000000000000246 R12: 00007f56c9e156d4 [ 2130.424298] R13: 00000000004be2a0 R14: 00000000004ce600 R15: 00000000ffffffff [ 2130.435185] protocol 88fb is buggy, dev hsr_slave_0 [ 2130.440295] protocol 88fb is buggy, dev hsr_slave_1 [ 2130.449028] memory: usage 307200kB, limit 307200kB, failcnt 33 [ 2130.459030] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2130.466810] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2130.473359] Memory cgroup stats for /syz2: cache:156KB rss:240448KB rss_huge:184320KB shmem:24KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:240372KB inactive_file:104KB active_file:32KB unevictable:8KB [ 2130.508111] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor2,pid=15189,uid=0 [ 2130.531782] Memory cgroup out of memory: Kill process 15189 (syz-executor2) score 1120 or sacrifice child [ 2130.544520] Killed process 15189 (syz-executor2) total-vm:70796kB, anon-rss:6324kB, file-rss:33744kB, shmem-rss:0kB [ 2130.604199] syz-executor2 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2130.667206] CPU: 1 PID: 20109 Comm: syz-executor2 Not tainted 5.0.0-rc2 #24 [ 2130.674345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2130.683696] Call Trace: [ 2130.686287] dump_stack+0x1db/0x2d0 [ 2130.689936] ? dump_stack_print_info.cold+0x20/0x20 [ 2130.694963] ? check_preemption_disabled+0x48/0x290 [ 2130.700000] dump_header+0x1e6/0x116c [ 2130.703804] ? add_lock_to_list.isra.0+0x450/0x450 [ 2130.708718] ? perf_trace_lock+0x750/0x750 [ 2130.712947] ? print_usage_bug+0xd0/0xd0 [ 2130.716997] ? pagefault_out_of_memory+0x1a1/0x1a1 [ 2130.721926] ? ___ratelimit+0x37c/0x686 [ 2130.725892] ? mark_held_locks+0xb1/0x100 [ 2130.730032] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 2130.735119] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 2130.740209] ? lockdep_hardirqs_on+0x415/0x5d0 [ 2130.744789] ? trace_hardirqs_on+0xbd/0x310 [ 2130.749116] ? kasan_check_read+0x11/0x20 [ 2130.753250] ? ___ratelimit+0x37c/0x686 [ 2130.757210] ? trace_hardirqs_off_caller+0x300/0x300 [ 2130.762298] ? do_raw_spin_trylock+0x270/0x270 [ 2130.766865] ? trace_hardirqs_on_caller+0x310/0x310 [ 2130.771867] ? lock_acquire+0x1db/0x570 [ 2130.775830] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 2130.780921] ? ___ratelimit+0xac/0x686 [ 2130.784795] ? idr_get_free+0xee0/0xee0 [ 2130.788753] ? lockdep_hardirqs_on+0x415/0x5d0 [ 2130.793327] oom_kill_process.cold+0x10/0x9d4 [ 2130.797827] ? cgroup_procs_next+0x70/0x70 [ 2130.802051] ? _raw_spin_unlock_irq+0x5e/0x90 [ 2130.806548] ? oom_badness+0xa50/0xa50 [ 2130.810433] ? oom_evaluate_task+0x540/0x540 [ 2130.814831] ? mem_cgroup_iter_break+0x30/0x30 [ 2130.819399] ? mutex_trylock+0x2d0/0x2d0 [ 2130.823446] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2130.828978] ? rcu_read_unlock_special+0x380/0x380 [ 2130.833898] out_of_memory+0x885/0x1420 [ 2130.837865] ? oom_killer_disable+0x340/0x340 [ 2130.842345] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 2130.847451] ? lock_acquire+0x1db/0x570 [ 2130.851427] mem_cgroup_out_of_memory+0x160/0x210 [ 2130.856270] ? do_raw_spin_unlock+0xa0/0x330 [ 2130.860669] ? memcg_memory_event+0x40/0x40 [ 2130.864974] ? do_raw_spin_trylock+0x270/0x270 [ 2130.869548] ? _raw_spin_unlock+0x2d/0x50 [ 2130.873688] try_charge+0xd44/0x19b0 [ 2130.877388] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2130.882912] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 2130.887765] ? rcu_read_unlock_special+0x380/0x380 [ 2130.892689] ? get_mem_cgroup_from_mm+0x1ea/0x420 [ 2130.897523] ? get_mem_cgroup_from_page+0x190/0x190 [ 2130.902530] ? rcu_read_lock_sched_held+0x110/0x130 [ 2130.907537] mem_cgroup_try_charge+0x43a/0xdb0 [ 2130.912120] ? mem_cgroup_protected+0xa10/0xa10 [ 2130.916785] ? swap_duplicate+0x80/0x80 [ 2130.920748] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 2130.926269] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 2130.931812] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 2130.936740] do_huge_pmd_wp_page_fallback+0x267/0x1a90 [ 2130.942001] ? __alloc_pages_nodemask+0xaca/0xdc0 [ 2130.946852] ? remap_page+0x200/0x200 [ 2130.950647] ? do_raw_spin_unlock+0xa0/0x330 [ 2130.955043] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 2130.960570] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 2130.966097] ? alloc_pages_vma+0x142/0x540 [ 2130.970322] do_huge_pmd_wp_page+0x960/0x2430 [ 2130.974813] ? __split_huge_pmd+0xc10/0xc10 [ 2130.979123] ? __lock_acquire+0x572/0x4a30 [ 2130.983367] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2130.988894] ? mark_held_locks+0x100/0x100 [ 2130.993120] ? mark_held_locks+0x100/0x100 [ 2130.997346] ? do_futex+0x1b0/0x2910 [ 2131.001057] ? perf_trace_lock_acquire+0x138/0x7d0 [ 2131.005974] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2131.011507] ? pmd_val+0x85/0x100 [ 2131.014963] ? add_mm_counter_fast.part.0+0x40/0x40 [ 2131.019977] ? debug_smp_processor_id+0x1c/0x20 [ 2131.024642] __handle_mm_fault+0x1afc/0x55a0 [ 2131.029043] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 2131.033874] ? check_preemption_disabled+0x48/0x290 [ 2131.038889] ? handle_mm_fault+0x3cc/0xc80 [ 2131.043134] ? lock_downgrade+0x910/0x910 [ 2131.047266] ? kasan_check_read+0x11/0x20 [ 2131.051400] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 2131.056661] ? rcu_read_unlock_special+0x380/0x380 [ 2131.061584] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2131.067119] ? check_preemption_disabled+0x48/0x290 [ 2131.072126] handle_mm_fault+0x4ec/0xc80 [ 2131.076176] ? __handle_mm_fault+0x55a0/0x55a0 [ 2131.080743] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2131.086264] ? vmacache_update+0x114/0x140 [ 2131.090493] __do_page_fault+0x5da/0xd60 [ 2131.094541] ? do_futex+0x2910/0x2910 [ 2131.098342] do_page_fault+0xe6/0x7d8 [ 2131.102135] ? trace_hardirqs_on_caller+0xc0/0x310 [ 2131.107052] ? vmalloc_sync_all+0x30/0x30 [ 2131.111185] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 2131.116622] ? syscall_return_slowpath+0x5f0/0x5f0 [ 2131.121534] ? prepare_exit_to_usermode+0x232/0x3b0 [ 2131.126543] ? page_fault+0x8/0x30 [ 2131.130093] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2131.134939] ? page_fault+0x8/0x30 [ 2131.138474] page_fault+0x1e/0x30 [ 2131.141913] RIP: 0033:0x43f1f9 [ 2131.145092] Code: b7 0e 66 89 0f 48 83 c6 02 48 83 c7 02 0f 1f 40 00 f6 c2 04 74 0c 8b 0e 89 0f 48 83 c6 04 48 83 c7 04 f6 c2 08 74 0e 48 8b 0e <48> 89 0f 48 83 c6 08 48 83 c7 08 81 e2 f0 00 00 00 74 1f 0f 1f 40 [ 2131.163976] RSP: 002b:0000000000a4fbf8 EFLAGS: 00010202 [ 2131.169427] RAX: 0000000020000080 RBX: 000000000073c900 RCX: 0070616d65676170 [ 2131.176682] RDX: 0000000000000008 RSI: 0000000000741548 RDI: 0000000020000080 [ 2131.183936] RBP: 000000000073c900 R08: 00000000ac1f3228 R09: 00000000ac1f322c [ 2131.191190] R10: 0000000000a4fcc0 R11: 0000000000000246 R12: 00000000000003e8 [ 2131.198442] R13: fffffffffffffffe R14: 0000000000207f2e R15: 000000000073bfac [ 2131.216475] memory: usage 300492kB, limit 307200kB, failcnt 33 [ 2131.222480] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2131.229321] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2131.235579] Memory cgroup stats for /syz2: cache:156KB rss:234112KB rss_huge:178176KB shmem:24KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:234028KB inactive_file:104KB active_file:32KB unevictable:8KB [ 2131.256986] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor2,pid=19939,uid=0 [ 2131.271677] Memory cgroup out of memory: Kill process 19939 (syz-executor2) score 1120 or sacrifice child [ 2131.281705] Killed process 19939 (syz-executor2) total-vm:70664kB, anon-rss:6316kB, file-rss:33744kB, shmem-rss:0kB [ 2131.388598] syz-executor2 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2131.399928] CPU: 1 PID: 20110 Comm: syz-executor2 Not tainted 5.0.0-rc2 #24 [ 2131.407056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2131.416413] Call Trace: [ 2131.419014] dump_stack+0x1db/0x2d0 [ 2131.422658] ? dump_stack_print_info.cold+0x20/0x20 [ 2131.427680] ? check_preemption_disabled+0x48/0x290 [ 2131.432720] dump_header+0x1e6/0x116c [ 2131.436539] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2131.441310] ? lockdep_hardirqs_on+0x415/0x5d0 [ 2131.445902] ? retint_kernel+0x2d/0x2d [ 2131.449801] ? pagefault_out_of_memory+0x1a1/0x1a1 [ 2131.454738] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 2131.460196] ? ___ratelimit+0x37c/0x686 [ 2131.464194] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2131.469480] ? retint_kernel+0x2d/0x2d [ 2131.473374] ? _raw_spin_unlock_irqrestore+0x95/0xe0 [ 2131.478465] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 2131.483557] ? ___ratelimit+0xac/0x686 [ 2131.487431] ? idr_get_free+0xee0/0xee0 [ 2131.491405] oom_kill_process.cold+0x10/0x9d4 [ 2131.495889] ? cgroup_procs_next+0x70/0x70 [ 2131.500112] ? _raw_spin_unlock_irq+0x5e/0x90 [ 2131.504682] ? oom_badness+0xa50/0xa50 [ 2131.508560] ? oom_evaluate_task+0x540/0x540 [ 2131.512955] ? mem_cgroup_iter_break+0x30/0x30 [ 2131.517529] ? mutex_trylock+0x2d0/0x2d0 [ 2131.521590] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 2131.527038] out_of_memory+0x885/0x1420 [ 2131.531007] ? oom_killer_disable+0x340/0x340 [ 2131.535506] mem_cgroup_out_of_memory+0x160/0x210 [ 2131.540341] ? do_raw_spin_unlock+0xa0/0x330 [ 2131.545432] ? memcg_memory_event+0x40/0x40 [ 2131.549741] ? do_raw_spin_trylock+0x270/0x270 [ 2131.554326] ? _raw_spin_unlock+0x2d/0x50 [ 2131.558464] try_charge+0xd44/0x19b0 [ 2131.562164] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2131.567705] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 2131.572551] ? rcu_read_unlock_special+0x380/0x380 [ 2131.577476] ? get_mem_cgroup_from_mm+0x1ea/0x420 [ 2131.582322] ? get_mem_cgroup_from_page+0x190/0x190 [ 2131.587332] ? rcu_read_lock_sched_held+0x110/0x130 [ 2131.592337] mem_cgroup_try_charge+0x43a/0xdb0 [ 2131.596909] ? mem_cgroup_protected+0xa10/0xa10 [ 2131.601570] ? mark_held_locks+0x100/0x100 [ 2131.605793] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2131.611319] ? check_preemption_disabled+0x48/0x290 [ 2131.616322] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 2131.621840] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 2131.627369] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 2131.632287] wp_page_copy+0x45a/0x1c30 [ 2131.636158] ? swp_swapcount+0x540/0x540 [ 2131.640222] ? pmd_pfn+0x1d0/0x1d0 [ 2131.644181] ? find_held_lock+0x35/0x120 [ 2131.652540] ? do_wp_page+0x70d/0x16b0 [ 2131.656447] ? kasan_check_read+0x11/0x20 [ 2131.660585] ? do_raw_spin_unlock+0xa0/0x330 [ 2131.664999] ? do_raw_spin_trylock+0x270/0x270 [ 2131.669575] ? __lock_acquire+0x572/0x4a30 [ 2131.673802] do_wp_page+0x715/0x16b0 [ 2131.677515] ? finish_mkwrite_fault+0x540/0x540 [ 2131.682189] ? kasan_check_read+0x11/0x20 [ 2131.686441] ? do_raw_spin_lock+0x156/0x360 [ 2131.690750] ? rwlock_bug.part.0+0x90/0x90 [ 2131.694991] ? pmd_devmap_trans_unstable+0x1d0/0x1d0 [ 2131.700092] __handle_mm_fault+0x2c8e/0x55a0 [ 2131.704493] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 2131.709330] ? check_preemption_disabled+0x48/0x290 [ 2131.714334] ? handle_mm_fault+0x3cc/0xc80 [ 2131.718566] ? lock_downgrade+0x910/0x910 [ 2131.722699] ? kasan_check_read+0x11/0x20 [ 2131.726833] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 2131.732095] ? rcu_read_unlock_special+0x380/0x380 [ 2131.737120] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2131.742656] ? check_preemption_disabled+0x48/0x290 [ 2131.747675] handle_mm_fault+0x4ec/0xc80 [ 2131.751821] ? __handle_mm_fault+0x55a0/0x55a0 [ 2131.756396] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2131.761932] ? vmacache_update+0x114/0x140 [ 2131.766164] __do_page_fault+0x5da/0xd60 [ 2131.770317] do_page_fault+0xe6/0x7d8 [ 2131.774299] ? trace_hardirqs_on_caller+0xc0/0x310 [ 2131.779216] ? vmalloc_sync_all+0x30/0x30 [ 2131.783349] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 2131.788790] ? syscall_return_slowpath+0x5f0/0x5f0 [ 2131.793706] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2131.799242] ? prepare_exit_to_usermode+0x232/0x3b0 [ 2131.804266] ? page_fault+0x8/0x30 [ 2131.807797] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2131.812629] ? page_fault+0x8/0x30 [ 2131.816156] page_fault+0x1e/0x30 [ 2131.819596] RIP: 0033:0x4043f8 [ 2131.822777] Code: 85 02 00 00 80 3d 9f c0 64 00 00 c6 85 84 00 00 00 00 74 0f 8b 05 8c c0 64 00 39 45 24 0f 84 e7 01 00 00 44 8b a5 80 00 00 00 43 da ff ff 48 2b 05 0c 3c 33 00 8b 75 00 49 89 d8 45 89 e1 4c [ 2131.841675] RSP: 002b:00007f56c9e14c90 EFLAGS: 00010246 [ 2131.847027] RAX: 00007f56cbc16000 RBX: 0000000000003be3 RCX: 0000000000457ec9 [ 2131.854281] RDX: 000000000003ffff RSI: 0000000020000180 RDI: 0000000000000200 [ 2131.861540] RBP: 000000000073bf00 R08: 0000000020000180 R09: 0000000000000000 [ 2131.868801] R10: 0000000020000080 R11: 0000000000000246 R12: 0000000000000000 [ 2131.876058] R13: 00000000004be2a0 R14: 00000000004ce600 R15: 00000000ffffffff [ 2131.914527] memory: usage 293424kB, limit 307200kB, failcnt 33 [ 2131.920687] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2131.936865] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2131.943247] Memory cgroup stats for /syz2: cache:156KB rss:227796KB rss_huge:169984KB shmem:24KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:227768KB inactive_file:104KB active_file:32KB unevictable:8KB [ 2131.973785] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor2,pid=19839,uid=0 [ 2131.997426] Memory cgroup out of memory: Kill process 19839 (syz-executor2) score 1120 or sacrifice child [ 2132.000508] kasan: CONFIG_KASAN_INLINE enabled [ 2132.012205] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 2132.012922] Killed process 19839 (syz-executor2) total-vm:70532kB, anon-rss:6308kB, file-rss:33740kB, shmem-rss:0kB [ 2132.019655] general protection fault: 0000 [#1] PREEMPT SMP KASAN [ 2132.019668] CPU: 0 PID: 32293 Comm: kworker/u4:7 Not tainted 5.0.0-rc2 #24 [ 2132.019675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2132.019694] Workqueue: netns cleanup_net [ 2132.019712] RIP: 0010:get_work_pool+0x19c/0x260 [ 2132.019724] Code: 48 83 c4 68 5b 41 5c 41 5d 41 5e 5d c3 e8 9c ad 2e 00 48 81 e3 00 fe ff ff 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 <80> 3c 02 00 0f 85 aa 00 00 00 4c 8b 2b eb 9a e8 70 ad 2e 00 e8 db [ 2132.019732] RSP: 0018:ffff888058e57470 EFLAGS: 00010006 [ 2132.019744] RAX: dffffc0000000000 RBX: 0000001ffffffe00 RCX: ffffffff81534948 [ 2132.019753] RDX: 00000003ffffffc0 RSI: ffffffff815349c4 RDI: 0000000000000007 [ 2132.019762] RBP: ffff888058e574f8 R08: ffff8880644b86c0 R09: ffffed1015cc5b90 [ 2132.019778] R10: ffffed1015cc5b8f R11: ffff8880ae62dc7b R12: 1ffff1100b1cae8f [ 2132.057690] oom_reaper: reaped process 19839 (syz-executor2), now anon-rss:0kB, file-rss:32780kB, shmem-rss:0kB [ 2132.061615] R13: 0000000000000004 R14: dffffc0000000000 R15: dffffc0000000000 [ 2132.132389] FS: 0000000000000000(0000) GS:ffff8880ae600000(0000) knlGS:0000000000000000 [ 2132.140622] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2132.146517] CR2: 000000c432a76ec8 CR3: 0000000095464000 CR4: 00000000001426f0 [ 2132.153795] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2132.161070] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600 [ 2132.168352] Call Trace: [ 2132.170950] ? destroy_delayed_work_on_stack+0x30/0x30 [ 2132.176344] ? __might_sleep+0x95/0x190 [ 2132.180330] __flush_work+0x12f/0xa20 [ 2132.184138] ? insert_work+0x620/0x620 [ 2132.188031] ? save_stack+0xa9/0xd0 [ 2132.191661] ? save_stack+0x45/0xd0 [ 2132.195306] ? __kasan_slab_free+0x102/0x150 [ 2132.199713] ? kasan_slab_free+0xe/0x10 [ 2132.203688] ? kfree+0xcf/0x230 [ 2132.206972] ? xfrm_sysctl_fini+0x67/0x80 [ 2132.211119] ? xfrm_net_exit+0x15/0x70 [ 2132.215005] ? ops_exit_list.isra.0+0xb0/0x160 [ 2132.219586] ? cleanup_net+0x51d/0xb10 [ 2132.223486] ? process_one_work+0xd0c/0x1ce0 [ 2132.227897] ? worker_thread+0x143/0x14a0 [ 2132.232052] ? kthread+0x357/0x430 [ 2132.235601] ? ret_from_fork+0x3a/0x50 [ 2132.239511] ? print_usage_bug+0xd0/0xd0 [ 2132.243571] ? do_raw_spin_unlock+0xa0/0x330 [ 2132.247989] ? trace_hardirqs_on_caller+0x310/0x310 [ 2132.253007] ? do_raw_spin_trylock+0x270/0x270 [ 2132.257604] flush_work+0x18/0x20 [ 2132.261061] xfrm_policy_fini+0xa4/0x640 [ 2132.265124] ? lockdep_hardirqs_on+0x415/0x5d0 [ 2132.269710] ? trace_hardirqs_on+0xbd/0x310 [ 2132.274035] ? xfrm_policy_flush+0x460/0x460 [ 2132.278446] ? trace_hardirqs_off_caller+0x300/0x300 [ 2132.283570] ? __kasan_slab_free+0x119/0x150 [ 2132.287986] ? xfrm_sysctl_fini+0x67/0x80 [ 2132.292137] ? xfrm_policy_fini+0x640/0x640 [ 2132.296462] xfrm_net_exit+0x1d/0x70 [ 2132.300659] ops_exit_list.isra.0+0xb0/0x160 [ 2132.305078] cleanup_net+0x51d/0xb10 [ 2132.308798] ? netns_install+0x1d0/0x1d0 [ 2132.312858] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2132.318497] ? check_preemption_disabled+0x48/0x290 [ 2132.323524] ? __lock_is_held+0xb6/0x140 [ 2132.327604] process_one_work+0xd0c/0x1ce0 [ 2132.331942] ? preempt_notifier_register+0x200/0x200 [ 2132.337049] ? __switch_to_asm+0x34/0x70 [ 2132.341120] ? pwq_dec_nr_in_flight+0x4a0/0x4a0 [ 2132.345796] ? pci_mmcfg_check_reserved+0x170/0x170 [ 2132.350818] ? worker_thread+0x3b7/0x14a0 [ 2132.354971] ? find_held_lock+0x35/0x120 [ 2132.359038] ? lock_acquire+0x1db/0x570 [ 2132.363020] ? worker_thread+0x3cd/0x14a0 [ 2132.367174] ? kasan_check_read+0x11/0x20 [ 2132.371429] ? do_raw_spin_lock+0x156/0x360 [ 2132.375748] ? lock_release+0xc40/0xc40 [ 2132.379727] ? rwlock_bug.part.0+0x90/0x90 [ 2132.383960] ? trace_hardirqs_on_caller+0x310/0x310 [ 2132.388990] worker_thread+0x143/0x14a0 [ 2132.392980] ? process_one_work+0x1ce0/0x1ce0 [ 2132.397487] ? __kthread_parkme+0xc3/0x1b0 [ 2132.401723] ? lock_acquire+0x1db/0x570 [ 2132.405700] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 2132.410805] ? lockdep_hardirqs_on+0x415/0x5d0 [ 2132.415386] ? trace_hardirqs_on+0xbd/0x310 [ 2132.419711] ? __kthread_parkme+0xc3/0x1b0 [ 2132.423948] ? trace_hardirqs_off_caller+0x300/0x300 [ 2132.429052] ? do_raw_spin_trylock+0x270/0x270 [ 2132.433643] ? schedule+0x108/0x350 [ 2132.437282] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 2132.442387] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2132.447927] ? __kthread_parkme+0xfb/0x1b0 [ 2132.452168] kthread+0x357/0x430 [ 2132.455549] ? process_one_work+0x1ce0/0x1ce0 [ 2132.460041] ? kthread_stop+0x920/0x920 [ 2132.464022] ret_from_fork+0x3a/0x50 [ 2132.467757] Modules linked in: [ 2132.470960] ---[ end trace a0de8a3bfb669589 ]--- [ 2132.475721] RIP: 0010:get_work_pool+0x19c/0x260 [ 2132.480393] Code: 48 83 c4 68 5b 41 5c 41 5d 41 5e 5d c3 e8 9c ad 2e 00 48 81 e3 00 fe ff ff 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 <80> 3c 02 00 0f 85 aa 00 00 00 4c 8b 2b eb 9a e8 70 ad 2e 00 e8 db [ 2132.499295] RSP: 0018:ffff888058e57470 EFLAGS: 00010006 [ 2132.504680] RAX: dffffc0000000000 RBX: 0000001ffffffe00 RCX: ffffffff81534948 [ 2132.511937] RDX: 00000003ffffffc0 RSI: ffffffff815349c4 RDI: 0000000000000007 [ 2132.519192] RBP: ffff888058e574f8 R08: ffff8880644b86c0 R09: ffffed1015cc5b90 [ 2132.526466] R10: ffffed1015cc5b8f R11: ffff8880ae62dc7b R12: 1ffff1100b1cae8f [ 2132.533735] R13: 0000000000000004 R14: dffffc0000000000 R15: dffffc0000000000 [ 2132.540993] FS: 0000000000000000(0000) GS:ffff8880ae600000(0000) knlGS:0000000000000000 [ 2132.549204] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2132.555069] CR2: 000000c432a76ec8 CR3: 0000000095464000 CR4: 00000000001426f0 [ 2132.562326] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2132.569581] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600 [ 2132.576835] Kernel panic - not syncing: Fatal exception [ 2132.583490] Kernel Offset: disabled [ 2132.587174] Rebooting in 86400 seconds..